Commit Graph

31700 Commits

Author SHA1 Message Date
Hadi Nategh
b0a4ab3b7c Embed attached images of Notification html message as inline image 2017-11-14 17:11:28 +01:00
Hadi Nategh
2abb69f712 Fix couple of styling problems in traditional theme:
- Fix link_to widget style
- Fix Notification popup
2017-11-14 17:09:08 +01:00
nathangray
4aa71a0ff0 Fix action caption 2017-11-14 08:59:22 -07:00
nathangray
b0ed461b71 * Infolog - Add context menu actions to set start & end date 2017-11-14 08:59:13 -07:00
nathangray
5b5c6b28cb German translation from Birgit 2017-11-14 08:53:30 -07:00
nathangray
cad482067d * Calendar - Add preference to set color of events without category color 2017-11-14 08:53:28 -07:00
nathangray
9cf44580f1 Fix nextmatch returned null for getDOMNode() if no sender provided
This caused it to appear hidden to etemplate print()
2017-11-14 08:48:43 -07:00
Ralf Becker
5f23164085 remove hooks from EMailAdmin as it might screw up adding/removing accounts
if EMailAdmin has not been deinstalled, as it should have been by 16.1 update
2017-11-14 15:21:13 +01:00
Ralf Becker
53b9779bf7 * CalDAV/CardDAV: fix encoding of control chars stalling iOS sync
eg. \xb is not allowed in XML and caused iOS sync to stall, as it's XML parser fails
use htmlspecialchars option ENT_XML1|ENT_DISALLOWED (PHP 5.4+) to ensure proper XML encoding
2017-11-10 15:40:49 +01:00
Ralf Becker
22528cba0d allow to migrate accounts from ADS to SQL 2017-11-09 15:25:11 +01:00
Ralf Becker
2778649e68 allow sql fragments in Api\Storage\Base::delete as in other places 2017-11-08 11:46:44 +01:00
Ralf Becker
cdcd82ad49 allow sql fragments in Api\Storage\Base::delete as in other places 2017-11-08 11:46:44 +01:00
Hadi Nategh
6e101adfc7 Disable delete action in context menu based on user rights not based on being anonymous 2017-11-07 13:10:12 +01:00
Ralf Becker
928d98aefb never invalidate session in sharing, as we cant regenerate it (and we dont need to) 2017-11-07 13:04:29 +01:00
Ralf Becker
4a569952fe Changelog for 16.1.20171106 2017-11-06 15:15:29 +00:00
Ralf Becker
fe783719cb deny sharing owner rights (chmod, chgrp, set eACL) and disable eACL tab 2017-11-06 15:30:36 +01:00
Ralf Becker
5454d89dfc remove /usr/bin from open_basedir, as it is no longer necessary 2017-11-05 09:37:04 +01:00
Ralf Becker
d90aea1cb2 remove system call used for PHP < 5.3.1 2017-11-05 09:26:56 +01:00
Ralf Becker
a660bf6d8e change packager 2017-11-05 09:22:25 +01:00
Ralf Becker
80c42dbd7e pending translations from our translation server 2017-11-04 09:54:52 +01:00
Ralf Becker
22ba35ed0b * Filemanager/Sharing: deny rename, move and mkdir on readonly shares 2017-11-04 08:48:51 +01:00
Hadi Nategh
54e5a78817 Override the globalEval to mitigate potential execution of script tag 2017-11-04 08:42:57 +01:00
nathangray
3ae7fc77b6 Calendar - fix some bugs in readonly mode:
- missing participant widget would fail
- read-only end date would cause error
2017-11-03 14:41:48 -06:00
nathangray
3eb609f619 Etemplate - Make sure to not return an empty string, it will fail when queried 2017-11-03 14:41:41 -06:00
nathangray
4651d638d3 Disable mkdir action if no edit permission 2017-11-03 09:58:57 -06:00
nathangray
7339aac6bd Disable copy / paste for readonly shares 2017-11-03 09:24:54 -06:00
nathangray
7baaf538e5 Less restrictions on anonymous user, use permissions instead 2017-11-03 09:24:01 -06:00
nathangray
c392ad6685 Restrict anonymous user, fix noEdit class not set on all rows 2017-11-03 09:23:57 -06:00
Ralf Becker
dce80837da store CalDAV/CardDAV log in user spezific log directories 2017-10-30 15:02:04 +01:00
Ralf Becker
e2df5b5aa1 check cookies for XSS attempts 2017-10-27 16:58:30 +02:00
Ralf Becker
78f1206304 add token to deny access 2017-10-27 16:55:50 +02:00
Ralf Becker
8df69af387 do not allow path traversal and htmlencode displayed path 2017-10-27 16:55:24 +02:00
Ralf Becker
cc0ae860bd always send X-Content-Type-Options: nosniff
It does not harm and stops unpredictable results from browsers changing our content-types
(FF 50+ now also supports nosniff)
2017-10-27 16:54:51 +02:00
nathangray
7d8eb16212 Addressbook - better handling of missing contact type when importing.
If it's missing and there's only the normal type, it'll quietly use that.
2017-10-25 18:27:11 +02:00
nathangray
a067d8ed37 Timestamp widget fixes:
- Remove new line before timestamp
- Fix focus not going to where it should
2017-10-23 15:33:00 +02:00
nathangray
8e92ac387b Resources - change category admin to just user accounts, no groups 2017-10-13 09:52:32 -06:00
Nathan Gray
efe11c5f85 Merge pull request #21 from ballessay/fix-csv-import-spaces
Trim components of multiselect fields
2017-10-13 08:49:12 -06:00
nathangray
a00a8c18ab Calendar - fix missing history log entry when changing status via context menu 2017-10-11 15:19:51 -06:00
Ralf Becker
4b5176204c show a default preference of 0 (was hidden before, but used!) 2017-10-10 18:50:21 +02:00
nathangray
e6fac03320 Etemplate - Ignore all hidden nodes when re-calculating size, fixes nm resizing issue with other hidden nodes after it 2017-10-10 09:46:41 -06:00
Hadi Nategh
bb3a54e6a9 Add timestamper js file into minifying 2017-10-10 13:01:56 +02:00
Ralf Becker
c479ce03bf quiten permanent error_log when updating alarms 2017-10-09 17:00:19 +02:00
Ralf Becker
129f56df5d tel: links use no URL encoding according to rfc3966 section-5.1.4 2017-10-09 11:43:40 +02:00
Hadi Nategh
8dff1a154e Rmove fields for none private cutomfields when name refers to a single custom field 2017-10-09 09:39:34 +02:00
nathangray
8eca71d461 Calendar - fix a few more missed ajax=true that were causing problems loading 2017-10-05 11:22:11 -06:00
nathangray
02a93ddd30 Fix bug preventing etemplates in iframes from being unloaded 2017-10-05 11:19:20 -06:00
nathangray
d9bc278efd * Calendar - fix bug where private events for multiple users in week view only showed for one user 2017-10-05 10:29:42 -06:00
nathangray
6ce1fd8142 Calendar - avoid errors from holidays if no country set 2017-10-04 09:27:46 -06:00
Hadi Nategh
77cd21c46b Check and ask for the notification permission if nothing yet set 2017-10-04 15:57:46 +02:00
Hadi Nategh
77c1d67240 Add a method to egw.notification to check API availability 2017-10-04 15:57:22 +02:00