Frédéric Guillot 3824e6e9aa Fix potential XSS on the Settings / API page ...

The CSP policy already prevent the execution of inline Javascript.

2023-01-06 12:25:57 -08:00

..

Action

Update TaskAssignDueDateOnMoveColumn.php

2022-09-15 21:08:59 -07:00

Analytic

Add new analytic component "Estimated vs actual time per column"

2021-02-21 20:22:45 -08:00

Api

Position parameter for Subtask Api proc. update

2021-07-17 10:30:47 -07:00

Auth

Allow email to be retrieve by SSO ReverseProxy

2020-08-28 22:59:59 -07:00

Console

Update jQuery to latest stable version

2022-09-04 15:08:20 -07:00

Controller

Fix broken user mentions in popup comment form

2023-01-06 06:03:54 -08:00

Core

Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data

2022-09-17 17:23:41 -07:00

Decorator

Add cache decorator for UserModel

2016-12-17 13:39:03 -05:00

Event

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

EventBuilder

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

Export

Translate subtask status on demand

2022-07-11 20:45:06 -07:00

ExternalLink

Update regex to detect external links with attachments

2020-02-05 18:46:13 -08:00

Filter

Use wildcard operator for tag filter

2023-01-06 11:47:31 -08:00

Formatter

Remove project_id from task URLs

2022-02-04 20:59:33 -08:00

Group

Rename all models

2016-05-28 19:48:22 -04:00

Helper

Fix incorrect placeholder in documentation link

2022-11-12 17:08:02 -08:00

Import

Increase text fields length in several tables

2018-04-11 13:48:13 -07:00

Job

PHP 8 Compatibility

2022-02-05 11:49:03 -08:00

Locale

Update translations.php

2023-01-06 06:05:11 -08:00

Middleware

Check if user role has changed while the session is open

2019-01-30 20:59:25 -08:00

Model

fix(mssql): when updating an object by id, omit the id itself

2022-10-29 18:17:35 -07:00

Notification

Send event author in webhook notification

2018-01-02 11:12:19 -08:00

Pagination

Improve dashboard pagination

2018-05-09 11:21:57 -07:00

Schema

feature: add Microsoft SQL Server database support

2022-10-29 21:11:15 -07:00

ServiceProvider

feature: add Microsoft SQL Server database support

2022-10-29 21:11:15 -07:00

Subscriber

Write RememberMe cookie only after 2FA has been validated

2021-04-04 17:57:47 -07:00

Template

Fix potential XSS on the Settings / API page

2023-01-06 12:25:57 -08:00

User

Fix various compatibility issues with PHP 8

2022-02-08 22:20:20 -08:00

Validator

Invalidate captcha after it is used

2021-06-05 15:30:03 -07:00

.htaccess

.htaccess: Add compatibility for apache 2.4

2015-10-05 22:46:30 +02:00

check_setup.php

feature: add Microsoft SQL Server database support

2022-10-29 21:11:15 -07:00

common.php

fix config overrides in docker

2018-06-06 15:15:02 -07:00

constants.php

Update links to the new documentation website

2022-11-12 11:49:19 -08:00

functions.php

Move version.txt to app folder

2022-09-28 19:42:35 -07:00