Commit Graph

83490 Commits

Author SHA1 Message Date
Marc Delisle
be9ec6d008 ChangeLog entries for security fixes 2013-04-24 08:15:36 -04:00
Marc Delisle
1f6bc0b707 Security: block another case of remote execution vulnerability 2013-04-24 08:09:13 -04:00
Marc Delisle
d3fafdfba0 Security: remove dots in template to avoid a remote code execution vulnerability 2013-04-24 07:59:06 -04:00
Marc Delisle
ffa720d90a Prevent null-byte injection in preg_replace() 2013-04-24 07:56:58 -04:00
Michal Čihař
dedd542cda Dropped unsafe usage of preg_replace
It could be tricked by apending /e\x00 to execute arbitrary php code.
The new code does simple string replace, we don't really need any of
regex stuff here.
2013-04-24 07:56:27 -04:00
Filipe Batista
62db904a45 Translated using Weblate (Portuguese)
Currently translated at 53.1% (1361 of 2562)
2013-04-24 03:22:09 +02:00
Marc Delisle
28f74e7c29 Security: block another case of remote execution vulnerability 2013-04-23 16:16:13 -04:00
Marc Delisle
1cba93204b Prevent null-byte injection in preg_replace() 2013-04-23 11:46:53 -04:00
Marc Delisle
500657fd35 - port security commit (unsafe usage of preg_replace()) from the 3.5
branch
- make the feature work (missing globalization of required $_POST params
2013-04-23 11:44:26 -04:00
Michal Čihař
f50ba6a32a Merge remote-tracking branch 'origin/QA_4_0' 2013-04-23 17:34:58 +02:00
Michal Čihař
ba00009682 Merge remote-tracking branch 'origin/QA_3_5' into QA_4_0 2013-04-23 17:34:37 +02:00
Rodrigo Souza
f4208d79d6 Translated using Weblate (Portuguese (Brazil))
Currently translated at 100.0% (2562 of 2562)
2013-04-23 17:34:10 +02:00
Yungu Kim
86076dc89e Translated using Weblate (Korean)
Currently translated at 59.8% (1531 of 2562)
2013-04-23 17:34:08 +02:00
Marc Delisle
156d297606 Merge branch 'QA_4_0' into QA_4_0-security 2013-04-23 11:25:12 -04:00
Weblate
1bf4b88fe3 Merge remote-tracking branch 'origin/master' 2013-04-23 14:27:54 +02:00
Rodrigo Souza
2d9707e20f Translated using Weblate (Portuguese (Brazil))
Currently translated at 100.0% (2605 of 2605)
2013-04-23 14:27:51 +02:00
Yungu Kim
de2d5906bb Translated using Weblate (Korean)
Currently translated at 59.0% (1538 of 2605)
2013-04-23 14:27:45 +02:00
Michal Čihař
6628d1e2c1 Merge remote-tracking branch 'origin/QA_4_0' 2013-04-23 14:27:20 +02:00
Michal Čihař
4d5558f134 Merge commit 'f1543b6b486a5b955d4bac3e02acb3b101f77a79' 2013-04-23 14:27:12 +02:00
Weblate
95e4e8aba1 Merge remote-tracking branch 'origin/QA_4_0' into QA_4_0 2013-04-23 14:26:48 +02:00
Rodrigo Souza
478ecbef7b Translated using Weblate (Portuguese (Brazil))
Currently translated at 100.0% (2605 of 2605)
2013-04-23 14:26:46 +02:00
Yungu Kim
5f92a0a963 Translated using Weblate (Korean)
Currently translated at 59.0% (1538 of 2605)
2013-04-23 14:26:44 +02:00
fliespl
f1543b6b48 cast $pos variable when loading columns by ajax with disableIS = false (badly formatted query fails) 2013-04-23 14:26:18 +02:00
Michal Čihař
c35390d982 Merge remote-tracking branch 'origin/QA_4_0' 2013-04-22 15:15:47 +02:00
Michal Čihař
db021a1053 Merge remote-tracking branch 'origin/QA_3_5' into QA_4_0 2013-04-22 15:15:25 +02:00
Michal Čihař
1f983ff328 Fix backtrace collected on error
Since adding of another level of abstraction (addError), the handleError
method stayed in the backtrace. This lead to non useful backtraces and
explosion of session data size as handleError gets GLOBALS as one of
argument in case of user errors.
2013-04-22 15:13:54 +02:00
Michal Čihař
539646d7c0 Merge remote-tracking branch 'origin/QA_4_0' 2013-04-22 14:07:15 +02:00
Michal Čihař
5b73bf9788 Fix generating links to docs
This makes correct links to docs when run from setup.
See bug #3886 and gh issue #279.
2013-04-22 14:05:40 +02:00
Michal Čihař
bee4a69a7b Merge remote-tracking branch 'origin/QA_4_0' 2013-04-22 14:04:02 +02:00
Michal Čihař
3ce1325525 Merge pull request #279 from kasunchathuranga/Bug3886
Fix bug #3886 Documentation links broken in setup
2013-04-22 05:03:45 -07:00
Michal Čihař
e68d5409de Merge remote-tracking branch 'origin/QA_4_0' 2013-04-22 14:03:25 +02:00
greensea g
5a83ec3125 Translated using Weblate (Simplified Chinese)
Currently translated at 99.8% (2599 of 2605)
2013-04-22 14:03:02 +02:00
Michal Čihař
1030f1b87b Test whether setting each locale and getting some string from that works 2013-04-22 13:19:12 +02:00
Rodrigo Souza
34faa9897e Translated using Weblate (Portuguese (Brazil))
Currently translated at 100.0% (2562 of 2562)
2013-04-22 00:22:04 +02:00
Yungu Kim
de483ef685 Translated using Weblate (Korean)
Currently translated at 58.5% (1499 of 2562)
2013-04-21 18:22:10 +02:00
Filipe Batista
82090c11b1 Translated using Weblate (Portuguese)
Currently translated at 53.0% (1359 of 2562)
2013-04-21 15:22:05 +02:00
Weblate
37aa7b4a88 Merge remote-tracking branch 'origin/master' 2013-04-21 09:42:20 +02:00
greensea g
f624d736e8 Translated using Weblate (Simplified Chinese)
Currently translated at 99.8% (2599 of 2605)
2013-04-21 09:42:14 +02:00
Michal Čihař
8b5021ae22 Merge pull request #280 from ibennetch/testsuite
Remove .jshintrc from distribution file
2013-04-21 00:42:00 -07:00
Isaac Bennetch
55f8d4f38b Remove .jshintrc from distribution 2013-04-20 16:37:27 -04:00
Kasun Chathuranga
9b9772c1fc Fix bug #3886 Documentation links broken in setup 2013-04-21 00:58:21 +05:30
Atul Pratap Singh
d10eb3680d null !== undefined in type safe comparison 2013-04-20 21:47:45 +05:30
Atul Pratap Singh
e32bdd27ec Hide rearrange chart feature for now 2013-04-20 20:18:28 +05:30
Marc Delisle
eae95b4865 Merge branch 'QA_4_0' 2013-04-20 10:04:55 -04:00
Marc Delisle
7f8b733a3f Merge pull request #272 from scnakandala/Bug_3884
Fixed Bug 3884
2013-04-20 07:04:26 -07:00
Weblate
986bfb8f38 Merge remote-tracking branch 'origin/master' 2013-04-20 12:32:55 +02:00
Weblate
034430fe82 Merge remote-tracking branch 'origin/master' 2013-04-20 12:29:44 +02:00
Rodrigo Souza
d6d28f6e89 Translated using Weblate (Portuguese (Brazil))
Currently translated at 100.0% (2605 of 2605)
2013-04-20 12:29:41 +02:00
Filipe Batista
dab2063253 Translated using Weblate (Portuguese)
Currently translated at 50.7% (1321 of 2605)
2013-04-20 12:29:38 +02:00
Yungu Kim
36af79ccfd Translated using Weblate (Korean)
Currently translated at 57.8% (1506 of 2605)
2013-04-20 12:29:33 +02:00