Commit Graph

31681 Commits

Author SHA1 Message Date
80c42dbd7e pending translations from our translation server 2017-11-04 09:54:52 +01:00
22ba35ed0b * Filemanager/Sharing: deny rename, move and mkdir on readonly shares 2017-11-04 08:48:51 +01:00
54e5a78817 Override the globalEval to mitigate potential execution of script tag 2017-11-04 08:42:57 +01:00
3ae7fc77b6 Calendar - fix some bugs in readonly mode:
- missing participant widget would fail
- read-only end date would cause error
2017-11-03 14:41:48 -06:00
3eb609f619 Etemplate - Make sure to not return an empty string, it will fail when queried 2017-11-03 14:41:41 -06:00
4651d638d3 Disable mkdir action if no edit permission 2017-11-03 09:58:57 -06:00
7339aac6bd Disable copy / paste for readonly shares 2017-11-03 09:24:54 -06:00
7baaf538e5 Less restrictions on anonymous user, use permissions instead 2017-11-03 09:24:01 -06:00
c392ad6685 Restrict anonymous user, fix noEdit class not set on all rows 2017-11-03 09:23:57 -06:00
dce80837da store CalDAV/CardDAV log in user spezific log directories 2017-10-30 15:02:04 +01:00
e2df5b5aa1 check cookies for XSS attempts 2017-10-27 16:58:30 +02:00
78f1206304 add token to deny access 2017-10-27 16:55:50 +02:00
8df69af387 do not allow path traversal and htmlencode displayed path 2017-10-27 16:55:24 +02:00
cc0ae860bd always send X-Content-Type-Options: nosniff
It does not harm and stops unpredictable results from browsers changing our content-types
(FF 50+ now also supports nosniff)
2017-10-27 16:54:51 +02:00
7d8eb16212 Addressbook - better handling of missing contact type when importing.
If it's missing and there's only the normal type, it'll quietly use that.
2017-10-25 18:27:11 +02:00
a067d8ed37 Timestamp widget fixes:
- Remove new line before timestamp
- Fix focus not going to where it should
2017-10-23 15:33:00 +02:00
8e92ac387b Resources - change category admin to just user accounts, no groups 2017-10-13 09:52:32 -06:00
efe11c5f85 Merge pull request #21 from ballessay/fix-csv-import-spaces
Trim components of multiselect fields
2017-10-13 08:49:12 -06:00
a00a8c18ab Calendar - fix missing history log entry when changing status via context menu 2017-10-11 15:19:51 -06:00
4b5176204c show a default preference of 0 (was hidden before, but used!) 2017-10-10 18:50:21 +02:00
e6fac03320 Etemplate - Ignore all hidden nodes when re-calculating size, fixes nm resizing issue with other hidden nodes after it 2017-10-10 09:46:41 -06:00
bb3a54e6a9 Add timestamper js file into minifying 2017-10-10 13:01:56 +02:00
c479ce03bf quiten permanent error_log when updating alarms 2017-10-09 17:00:19 +02:00
129f56df5d tel: links use no URL encoding according to rfc3966 section-5.1.4 2017-10-09 11:43:40 +02:00
8dff1a154e Rmove fields for none private cutomfields when name refers to a single custom field 2017-10-09 09:39:34 +02:00
8eca71d461 Calendar - fix a few more missed ajax=true that were causing problems loading 2017-10-05 11:22:11 -06:00
02a93ddd30 Fix bug preventing etemplates in iframes from being unloaded 2017-10-05 11:19:20 -06:00
d9bc278efd * Calendar - fix bug where private events for multiple users in week view only showed for one user 2017-10-05 10:29:42 -06:00
6ce1fd8142 Calendar - avoid errors from holidays if no country set 2017-10-04 09:27:46 -06:00
77cd21c46b Check and ask for the notification permission if nothing yet set 2017-10-04 15:57:46 +02:00
77c1d67240 Add a method to egw.notification to check API availability 2017-10-04 15:57:22 +02:00
d054aa90f5 Implement browser notification API for notifications 2017-10-04 15:54:31 +02:00
fd1d118d66 use already translated phrase "weekview" 2017-10-04 09:17:56 +02:00
7e0086a54e Addressbook - make sure import target addressbook is valid, if not use personal addressbook. 2017-10-03 08:44:59 -06:00
165dec8334 * Import/Export - Automatically remove import conditions from definition if there is no field selected 2017-10-03 08:44:50 -06:00
db562cbd7e Check if the given options are type of array or object before proceeding of translation. Fix bug "cannot assign to read only property '0' of string" in tracker site configuration. 2017-10-02 16:19:02 +02:00
22a9eac389 * Mail: Fix bug all fields in compose dialog always stay opened (happens in FF ESR) 2017-09-28 18:49:08 +02:00
0468887d6a Fix timestamp button for CKEditor 2017-09-28 10:42:28 -06:00
01438f60eb Add timestamp button widget, use it in infolog 2017-09-28 10:42:04 -06:00
7ccc730fa9 Addressbook - Merging contacts now keeps all distribution lists, and it works now 2017-09-28 10:40:24 -06:00
37f45855a9 * Addressbook - Merging contacts now keeps all distribution lists 2017-09-28 10:40:16 -06:00
5774524360 Calendar - make sure notification links open properly (missing an ajax=true) 2017-09-28 10:39:28 -06:00
d590ad1fc1 Admin - Add a group list 2017-09-27 10:21:25 -06:00
b5bda661a8 adding to changelog: IMPORTANT: repository signing key changed to new build@egroupware.org key to support Debian 9 (you need to import it!) 16.1.20170922 2017-09-22 13:35:12 +00:00
d69fa7a5a7 Fix missing parts of commit 91ecb5defc backport 2017-09-22 12:33:12 +02:00
295c381037 Changelog for 16.1.20170922 2017-09-22 06:56:10 +00:00
82e10b0a66 * CalDAV: alarms on recurring events are lost when snoozing alarm or reloading event after 1. recurrence of alarm 2017-09-21 17:53:42 +02:00
f8fa805419 * Timesheet - Fix bug where user column dissapears if you have custom fields and resize a column 2017-09-21 08:40:44 -06:00
9520863a91 Adjust 'Group' account search keyword so even if someone searches for 'Group', we still respect the 'type' parameter and only return user accounts if that was what was requested. 2017-09-21 08:40:14 -06:00
a6139594ed * CalDAV: fix not parsed recurrence exceptions
caused by newer Horde Icalendar class always importing them as date
2017-09-21 15:20:06 +02:00