Commit Graph

3339 Commits

Author SHA1 Message Date
snipe 97f97e3590 Remove search from docs 2016-03-15 21:14:00 -07:00
snipe 701c16f4e6 Updated name 2016-03-15 21:04:40 -07:00
snipe 59c203b6ae Docs 2016-03-15 20:53:58 -07:00
snipe d84479d9fc Merge remote-tracking branch 'origin/develop' 2016-03-15 20:52:25 -07:00
snipe 480f0ef13b Merge pull request #1851 from mathieuk/fix_some_xss
Fix some XSS issues
2016-03-14 16:04:15 -07:00
Mathieu Kooiman 6020de6321 Fix hard to exploit stored XSS possibility: code wrongly expected people to only be able to submit entries from <select> 2016-03-13 14:25:46 +01:00
Mathieu Kooiman 796866fd54 Fix self-xss possibilities in /admin/licenses/create|edit 2016-03-13 14:08:57 +01:00
Mathieu Kooiman ef58de5e8c Fix self-xss points in /admin/asset_maintenances/create
- title, start_date and completion_date were rendered unescaped
2016-03-13 13:59:25 +01:00
Mathieu Kooiman 7e07c7dee3 Fix reflected XSS: /hardware?status=[injectionpoint] 2016-03-13 13:53:20 +01:00
snipe 2cf566422c Merge remote-tracking branch 'origin/develop' 2016-03-02 19:10:39 -08:00
snipe b85d624f08 Updated issue template 2016-03-02 19:10:14 -08:00
snipe e69eddeef8 Possible build fix (dbal deps) 2016-02-29 11:10:54 -08:00
snipe 061e0d4cdb Possible build error fix, requiring lower version of doctrine packages 2016-02-29 11:04:47 -08:00
snipe 64b1355393 Bumped version 2016-02-18 12:17:16 -08:00
snipe 2cf169a64a Missing strings in other languages 2016-02-18 12:17:08 -08:00
snipe 6d810a9b0d Bumped version 2016-02-18 12:10:05 -08:00
snipe 4a9701af71 Added missing strings 2016-02-18 12:09:59 -08:00
snipe 0890a22bdb Fixed checkboxes 2016-02-17 14:11:55 -08:00
snipe f9c66917bd Issue template 2016-02-17 14:10:06 -08:00
snipe 311cccbb1e Bumped version 2016-02-17 03:05:15 -08:00
snipe ca27ef6741 Check for eol value or return false on eol_date() 2016-02-17 03:05:02 -08:00
snipe 0dfa0d9c45 Merge branch 'develop' of github.com:snipe/snipe-it into develop 2016-02-17 02:32:11 -08:00
snipe 90442c720b Bumped version 2016-02-17 02:31:57 -08:00
snipe e228577936 Removed model uniqueness constraint
Weird regression issue :(
2016-02-17 02:31:48 -08:00
snipe 9a18312ab1 Merge pull request #1588 from mtucker6784/develop
Showing our love to Debian & resolving conflict
2016-02-16 16:53:06 -08:00
snipe fc4863837f Updated language strings 2016-02-16 10:46:43 -08:00
snipe 9bb2ffcf9a Skip escaping on permissons array 2016-02-16 10:36:26 -08:00
snipe a78874d986 Fixes #1768 - XSS vulnerability in user create/display 2016-02-16 10:33:25 -08:00
snipe 458f413c61 Fixed tests 2016-02-12 17:32:40 -08:00
snipe 503f9145a4 Bumped version 2016-02-12 14:13:37 -08:00
snipe 04233336aa Remove signin message if form not submitted 2016-02-12 14:12:58 -08:00
snipe e5b2163ffe Use helper for company selectlist, added missing language strings 2016-02-12 14:08:35 -08:00
snipe 9f899ee878 Bumped version 2016-02-11 12:55:59 -08:00
snipe 03caa85396 Fixes #1752 - header color bug in FF 2016-02-11 12:54:59 -08:00
snipe f1a4608faf Fixes #1757 - pass item_serial to blade 2016-02-11 12:09:40 -08:00
snipe c66fe3d4d2 Bumped version 2016-02-11 12:06:12 -08:00
snipe 855b3809d0 Only import settings if there is a need to 2016-02-11 12:06:06 -08:00
snipe 2d4dee2f72 Added debug to auth filters 2016-02-11 12:05:51 -08:00
snipe 8667964e3c Use DB table prefix 2016-02-11 12:05:39 -08:00
snipe 72a2ee6ea4 Updated badges 2016-02-11 01:41:37 -08:00
snipe 6a638f131f Fixes #1750 - wrong HTML field type 2016-02-11 01:39:35 -08:00
snipe ab5ff0f709 Bumped version 2016-02-10 13:19:14 -08:00
snipe 36fd4ab7c5 Updated language strings 2016-02-10 13:19:04 -08:00
snipe 98db6fe9df Fixes #1741 - adds serial to checkout email 2016-02-09 14:23:45 -08:00
snipe 20fd420690 Fixed typo in asset acceptance email 2016-02-09 12:10:02 -08:00
snipe 771e21d9f7 Fixes #832 - show activated status in user listing 2016-01-27 21:02:18 -08:00
snipe 3fd9df62f4 Redirect back to user listing on save 2016-01-27 20:48:34 -08:00
snipe 1b1a733043 Basic boolean search, defaults to AND, can use OR 2016-01-27 20:43:18 -08:00
snipe e70dab64a2 Fixes #1686 - added notes to model 2016-01-27 20:39:19 -08:00
snipe f121766037 Higher page numbers 2016-01-27 19:51:13 -08:00