Ralf Becker
ff3ae9815d
never invalidate session in sharing, as we cant regenerate it (and we dont need to)
2017-11-07 13:02:39 +01:00
Ralf Becker
719b2ff834
also log if _check_script_tag was able to disarm XSS automatic
2017-11-07 12:23:11 +01:00
Hadi Nategh
fe583421df
Fix mime handler for sharing
2017-11-07 10:49:24 +01:00
Ralf Becker
cfe9204f77
allow sql fragments in Api\Storage\Base::delete as in other places
2017-11-06 16:43:23 +01:00
Ralf Becker
790fa8c71d
allow sql fragments in Api\Storage\Base::delete as in other places
2017-11-06 16:24:30 +01:00
Ralf Becker
0d99d129dc
deny sharing owner rights (chmod, chgrp, set eACL) and disable eACL tab
2017-11-06 14:52:12 +01:00
Ralf Becker
f21b13090f
pending translations from our translation server
2017-11-04 09:36:02 +01:00
nathangray
df4f4deb1f
Etemplate - Make sure to not return an empty string, it will fail when queried
2017-11-03 14:37:46 -06:00
nathangray
06e41356bd
Better handling for thumbnail tooltip if not in nextmatch row
2017-11-03 13:07:02 -06:00
nathangray
dda47ca863
Disable extended ACL for readonly shares
2017-11-03 10:28:27 -06:00
Hadi Nategh
873a2a93d8
Allow multiple mime types
2017-11-03 15:05:35 +01:00
Ralf Becker
4ebf79d0e1
* Sharing/Collabora: allow to use Collabora on writable shares (EPL only)
2017-11-03 12:43:09 +01:00
nathangray
ef7956f34b
Make sure lang gets passed on to registration
2017-11-02 11:13:29 -06:00
nathangray
069d49afba
Disable copy / paste for readonly shares
2017-11-02 09:43:08 -06:00
Ralf Becker
3689b3d645
* Filemanager/Sharing: deny rename, move, mkdir and rmdir on readonly share
2017-11-02 13:34:10 +01:00
Ralf Becker
3a24416eb9
suppress notice screwing up thumbmails, if notices are on
2017-11-02 13:23:36 +01:00
Hadi Nategh
3465c40b50
Remove unsafe-eval CSP for CKEditor
2017-11-02 11:02:16 +01:00
A Sigalas
df6898a11c
Add discard image to buttons
2017-11-01 11:59:11 +00:00
Ralf Becker
0813403b5b
* All apps: get sharing working with files attached to application entries
2017-10-31 10:51:59 +01:00
Ralf Becker
b9594ea357
fix typo
2017-10-31 10:49:12 +01:00
Ralf Becker
b5574da397
remove system call used for PHP < 5.3.1
2017-10-31 09:55:23 +01:00
Ralf Becker
a4526c98cb
store CalDAV/CardDAV log in user spezific log directories
2017-10-30 15:00:42 +01:00
A Sigalas
f6b314949d
Add hook option in case user wants link to display another link
2017-10-30 12:52:36 +00:00
nathangray
616c11c1fb
Fix wrong table name
2017-10-27 17:48:42 +02:00
nathangray
0d14155472
Fix minimum fs_id was not returning proper value
2017-10-27 17:43:40 +02:00
nathangray
90ce0cc7b6
Add a function to get the lowest fs_id for a path
2017-10-27 17:43:40 +02:00
Hadi Nategh
f42801236a
Override the globalEval to mitigate potential execution of script tag
2017-10-27 17:42:44 +02:00
Ralf Becker
12dbfca137
check cookies for XSS attempts
2017-10-27 16:52:34 +02:00
nathangray
5750904809
Fix setlocale to be able to find locales on Ubuntu
2017-10-27 10:54:39 +02:00
Ralf Becker
92584a61ad
* Update: fix not finishing update for more then 100 photos in addressbook
...
caused by contact_jpegphoto was not set to NULL, as column no longer exists in tables_current
2017-10-26 21:27:16 +02:00
Ralf Becker
5b573abef7
do not allow path traversal and htmlencode displayed path
2017-10-26 13:16:52 +02:00
nathangray
fdb47ab168
Merge calendar events into user account if there is one over user contact
2017-10-26 09:16:02 +02:00
Ralf Becker
77b42dd9a4
always send X-Content-Type-Options: nosniff
...
It does not harm and stops unpredictable results from browsers changing our content-types
(FF 50+ now also supports nosniff)
2017-10-25 17:35:30 +02:00
Ralf Becker
d11fe532d8
Changelog for 17.1.20171023
2017-10-23 17:27:18 +00:00
Hadi Nategh
fdb3202b6b
Add new config to the admin site configuration in order to be able to upload a custom header logo
2017-10-23 13:23:52 +02:00
nathangray
b381a9aa0c
Timestamp widget fixes:
...
- Remove new line before timestamp
- Fix focus not going to where it should
2017-10-23 12:10:45 +02:00
Hadi Nategh
c88e3b8a69
Disable new button and new action in filemanager when there's no writable right
2017-10-23 12:08:33 +02:00
nathangray
b8f8a014fa
Move all tests under api/src into api/tests
2017-10-23 10:14:14 +02:00
nathangray
24de1dff3b
Move PHPUnit tests from test to tests subdirectory
2017-10-23 09:51:28 +02:00
Ralf Becker
65b02c0246
bump verison to 17.1
2017-10-22 12:56:58 +02:00
Ralf Becker
c88e6e0237
disabling E_DEPRECATED, as contrib apps wont work under PHP 7.1 with having eg. contructors with same name as the class
2017-10-21 12:03:10 +02:00
nathangray
d3c596a443
- Add a parameter to pass in the class of the notification to use so we can pass in a test one
...
- Explicitly tell notification what type of message (plain or html) we're giving it
2017-10-21 11:29:05 +02:00
nathangray
b8f4af5602
Documentation update from the move of tests into app/tests subdirectory (not app/inc/test or app/test)
2017-10-21 11:29:05 +02:00
Hadi Nategh
ff4396030a
Fix CKEditor Browse Server button to open vfsSelect
2017-10-20 18:55:22 +02:00
nathangray
31c007bac7
Give a better message if the test table is missing (Check test app not installed)
2017-10-20 10:20:49 +02:00
nathangray
accd6187e2
Get date widget duration test working again
2017-10-20 09:56:47 +02:00
nathangray
9e6ecce1d0
Move tests into app/tests subdirectory (not app/inc/test or app/test)
2017-10-18 18:30:54 +02:00
nathangray
237d81ce36
Move tests into app/tests subdirectory (not app/inc/test or app/test)
2017-10-18 15:43:35 +02:00
nathangray
865fd6405d
Move sanity check to a pre-condition check
2017-10-18 11:47:28 +02:00
Ralf Becker
3ae16b20e6
added test app in fixtures
2017-10-18 11:42:03 +02:00
Ralf Becker
1d7fb9fe90
improve check $GLOBALS[egw] is correctly initilized
2017-10-18 09:10:39 +02:00
nathangray
cd49f6568d
Replace the lost boolean cast
2017-10-17 16:48:35 +02:00
nathangray
88a3f3b1d4
Run test in UTC, so dates match our expectations
2017-10-17 15:40:05 +02:00
nathangray
6fad74c710
Fix test had no assertions
2017-10-17 13:29:17 +02:00
nathangray
8b1a8d38f5
Revert db10b21fa7
2017-10-17 12:48:46 +02:00
Hadi Nategh
9504bff8ee
Fix wrong dialog title for link-to widget
2017-10-17 11:28:03 +02:00
Hadi Nategh
13635fb5b7
Restrict vfsSelectUI submit only to the field availability
2017-10-16 15:03:16 +02:00
Hadi Nategh
81edd22253
Get the right application base on current window context
2017-10-16 11:23:14 +02:00
Hadi Nategh
f779f5ac7f
Make sure we get the etemplate_exec_id
2017-10-16 09:34:38 +02:00
nathangray
db10b21fa7
Fix child actions under 'More...' did not inherit the inheritable attributes
2017-10-13 11:13:17 -06:00
nathangray
63a3940d68
Addressbook - adjust calendar event participants to match when merging contacts
2017-10-13 09:35:36 -06:00
Hadi Nategh
1460945a03
Add status text for upload button in VfsSelect widget
2017-10-13 14:52:38 +02:00
Hadi Nategh
7922f41499
Fix file widget readonly is being set correctly
2017-10-13 14:51:45 +02:00
Hadi Nategh
052bef84ce
W.I.P vfsSelect Widget:
...
- Fix upload feature not working
2017-10-13 13:22:45 +02:00
Hadi Nategh
08032dd776
W.I.P vfsSelect Widget:
...
- Make the dialog bigger
2017-10-12 18:27:27 +02:00
Hadi Nategh
5b76210218
W.I.P vfsSelect Widget:
...
- Fix mime types not being shown
- Fix name being displayed encoded in save2vfs mail
2017-10-12 17:45:46 +02:00
Hadi Nategh
9154392163
Find the right image
2017-10-12 17:06:17 +02:00
Hadi Nategh
2c721c95b2
W.I.P. VFS Select Widget:
...
- Add name and dialog_title as new attributes
- Fix SaveToVfs, SaveAttachmentToVfs, SaveAllToVfs in mail
- Fix button tile
2017-10-12 13:19:42 +02:00
Ralf Becker
4e9ad744cc
move use strict out of global scope so it does not affect minifying / concatination
2017-10-12 11:32:18 +02:00
Hadi Nategh
88e5524b79
W.I.P. VFS Select Widget:
...
- Remove extra label of File Name
- Fix tooltip messages get overlaid by the dialog
2017-10-12 10:49:20 +02:00
Hadi Nategh
4b90a12551
W.I.P. VFS Select Widget: Fix upload button drops into second line
2017-10-12 10:22:17 +02:00
Hadi Nategh
b17a348c1f
VfsSelect widget is not depending of filemanager anymore, show it always
2017-10-12 10:17:58 +02:00
Hadi Nategh
8b84f56421
Fix uglify js error, complaining about ES6 syntax
2017-10-12 10:05:26 +02:00
Hadi Nategh
448cc8975f
W.I.P of VFS Select widget restructure
2017-10-11 18:27:42 +02:00
Hadi Nategh
f9aec1bf46
Take respective window object into account while building loading_prompt
2017-10-11 15:03:34 +02:00
nathangray
82dd2cbc11
Fix some bugs in printing:
...
- Framework was iterating over all app tabs, not just the current one
- Skip hidden etemplate widgets
2017-10-10 10:16:08 -06:00
Ralf Becker
d78d3834c0
tel: links use no URL encoding according to rfc3966 section-5.1.4
2017-10-09 10:54:32 +02:00
Hadi Nategh
de65d91dc7
Rmove fields for none private cutomfields when name refers to a single custom field
2017-10-06 16:27:37 +02:00
nathangray
a09ab65973
Fix bug preventing etemplates in iframes from being unloaded
2017-10-05 11:18:09 -06:00
nathangray
0183635c02
Add permission check for collabora before setting actions to open in editor
2017-10-05 09:55:06 -06:00
Hadi Nategh
53acbfe3ea
Add some documentation
2017-10-05 17:48:43 +02:00
Nathan Gray
2659ab99ff
Merge pull request #20 from filkaris/allow_single_deselect
...
Allow single deselect for listboxes
2017-10-05 09:28:06 -06:00
Hadi Nategh
eb14b81d51
Handle filemanager links
2017-10-05 17:07:59 +02:00
Hadi Nategh
0e06fe0d64
Implement editor link handler for registered filemanager editors
2017-10-05 15:20:45 +02:00
A Sigalas
58326d07f6
Allow single deselect for listboxes
2017-10-05 10:20:01 +00:00
Ralf Becker
6a3a944828
fix uncaught exception if Collabora is not configured or reachable
2017-10-05 11:00:38 +02:00
nathangray
1868b40359
Set up merge to open editable documents if collabora is there
2017-10-04 14:15:47 -06:00
Hadi Nategh
50697efe55
Check if the given options are type of array or object before proceeding of translation. Fix bug "cannot assign to read only property '0' of string" in tracker site configuration.
2017-10-02 16:15:29 +02:00
nathangray
9f4f62c7aa
Fix timestamp button for CKEditor
2017-09-27 10:16:27 -06:00
nathangray
285eb8494b
Addressbook - Merging contacts now keeps all distribution lists, and it works now
2017-09-27 09:00:46 -06:00
Ralf Becker
1ae0f29f01
return "400 Bad Request" if propfind contains invalid elements or more then one
2017-09-26 19:13:05 +02:00
nathangray
2d57801c6a
* Addressbook - Merging contacts now keeps all distribution lists
2017-09-26 11:05:34 -06:00
Hadi Nategh
a4fdc052ab
Filemanager "New" actions:
...
- Add "New" actions into nm header as drop down list
- Re-arrange actions in contextmenu
- Let Etemplate modifies sel_options if extra changes are available
2017-09-26 18:43:18 +02:00
Hadi Nategh
edf6e16996
* Addressbook: Add searching feature for distribution list filter
2017-09-26 16:57:45 +02:00
Hadi Nategh
772d6605a0
Avoid binding click handler multiple times
2017-09-26 15:27:01 +02:00
Hadi Nategh
4a69b8ddf4
Fix dropdown_button click handler gets called twice
2017-09-26 14:49:45 +02:00
Hadi Nategh
6407379388
Accept localhost as a valid url
2017-09-26 11:37:37 +02:00
nathangray
2078025eea
Allow keyboard shortcuts for toolbar actions
2017-09-25 16:11:22 -06:00
nathangray
17debc8063
Add timestamp button widget, use it in infolog
2017-09-21 14:56:40 -06:00
Ralf Becker
a6ec69169d
document and enhance function signaure for server-side callback of file and vfs-upload widget
...
also make it usable for vfs-upload widget with it's id containing entry's id
2017-09-21 11:33:40 +02:00