unrhodecode/rhodecode
Marcin Lulek e312dff198 repo-settings: ensure deletion on repo settings model validate
the settings id against the initialized model repo.

- prevents from malicious deletions of settings by forgin IDs
2017-10-18 12:16:40 +02:00
..
api pull-requests: trigger merge simulation during PR creation. Fixes #5396 2017-10-12 20:57:02 +02:00
apps pull-requests: security double check permissions on injected forms of source and target repositories. 2017-10-17 20:32:59 +02:00
authentication auth: don't cache settings for auth plugins 2017-10-13 10:54:52 +02:00
config repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
controllers repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
events pyramid: ported pyramid routing for events 2017-08-11 23:54:54 +02:00
forms forms: added RcForm with custom error reporting widget. 2017-04-26 16:39:50 +02:00
i18n i18n: Update compiled message objects and js i18n files 2017-06-28 21:57:54 +02:00
integrations repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
lib pull-requests: trigger merge simulation during PR creation. Fixes #5396 2017-10-12 20:57:02 +02:00
model repo-settings: ensure deletion on repo settings model validate 2017-10-18 12:16:40 +02:00
public select2: always escape .text attributes to prevent XSS via 2017-10-18 11:21:18 +02:00
templates templates: rename base.mako into summary_base.mako. The previous naming 2017-10-18 09:59:28 +02:00
tests repo-settings: ensure deletion on repo settings model validate 2017-10-18 12:16:40 +02:00
__init__.py db: use LONGTEXT for mysql in user_logs. Fixes #5385, problem with mysql rejecting 2017-09-12 13:35:35 +02:00
rcserver.py subprocess: Change all imports from subprocess -> subprocess32 2016-10-14 09:37:44 +02:00
subscribers.py users: ported controllers from pylons into pyramid views. 2017-09-20 22:29:34 +02:00
translation.py pull-requests: trigger merge simulation during PR creation. Fixes #5396 2017-10-12 20:57:02 +02:00
tweens.py pyramid: moved extraction of user into a seperate subscriber. 2017-07-12 18:54:42 +02:00
VERSION release: Bump version 4.9.0 to 4.10.0 2017-08-14 11:58:00 +02:00
websetup.py license: updated copyright year to 2017 2017-01-02 09:30:39 +01:00