Jean-Philippe Lang
c9ae44e85b
Fix Non ASCII attachment filename encoding broken (MOJIBAKE) in Microsoft Edge Explorer ( #21656 ).
...
Patch by by Hang Xie.
git-svn-id: http://svn.redmine.org/redmine/trunk@15013 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-01-09 08:37:07 +00:00
Jean-Philippe Lang
4cd22dcc55
Keep track of valid user sessions ( #21058 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@14735 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-10-24 10:15:22 +00:00
Jean-Philippe Lang
4714b31002
Preload issues custom values for bulk operations.
...
git-svn-id: http://svn.redmine.org/redmine/trunk@14730 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-10-23 16:51:46 +00:00
Jean-Philippe Lang
7356e18d36
Include helper instead of patching ( #20508 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@14693 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-10-19 17:30:28 +00:00
Jean-Philippe Lang
032f2c9be6
Open redirect vulnerability ( #19577 ).
...
Patch by Holger Just.
git-svn-id: http://svn.redmine.org/redmine/trunk@14560 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-09-13 14:35:20 +00:00
Jean-Philippe Lang
d6f389658b
Require password re-entry for sensitive actions ( #19851 ).
...
Patch by Jens Krämer.
git-svn-id: http://svn.redmine.org/redmine/trunk@14333 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-06-19 18:41:10 +00:00
Jean-Philippe Lang
51f7060aa8
Add the ability to expire passwords after a configurable number of days ( #19458 ).
...
Patch by Holger Just and Go MAEDA.
git-svn-id: http://svn.redmine.org/redmine/trunk@14264 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-05-10 10:26:55 +00:00
Jean-Philippe Lang
ef2e75f072
Set a back_url when forcing new login after session expiration ( #19655 ).
...
Patch by Holger Just.
git-svn-id: http://svn.redmine.org/redmine/trunk@14245 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-05-09 10:43:09 +00:00
Jean-Philippe Lang
840881c76a
Use named routes.
...
git-svn-id: http://svn.redmine.org/redmine/trunk@14070 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-03-10 18:22:53 +00:00
Jean-Philippe Lang
e429d93945
Fixed that #require_login should respond for other request types ( #19325 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@14069 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-03-10 18:19:51 +00:00
Jean-Philippe Lang
000124f44f
Copyright update.
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13872 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-01-11 09:09:50 +00:00
Jean-Philippe Lang
c0800b330c
Error when adding user to group where he is already assigned ( #18665 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13785 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-12-21 20:15:24 +00:00
Jean-Philippe Lang
6f3ab71f3f
Localisation not set correctly on authenticity token errors ( #18499 ).
...
Patch by Felix Schäfer.
git-svn-id: http://svn.redmine.org/redmine/trunk@13670 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-11-29 15:16:59 +00:00
Jean-Philippe Lang
2d1866d966
Merged rails-4.1 branch ( #14534 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13482 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-10-22 17:37:16 +00:00
Jean-Baptiste Barth
b519aba63e
Expire other sessions on password change ( #17796 ).
...
Contributed by Jan Schulz-Hofen.
git-svn-id: http://svn.redmine.org/redmine/trunk@13412 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-09-16 21:38:54 +00:00
Jean-Philippe Lang
77b0abb79c
Fixed: The error flash message on session expiration is not in the language of the user but of the user of the previous request ( #17023 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13391 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-09-13 10:35:46 +00:00
Jean-Philippe Lang
0125ba14f6
Don't redirect to another suburi ( #16530 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13213 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-07-05 09:02:38 +00:00
Toshi MARUYAMA
709211cb9c
fix non-ascii attachment file name get corrupted in IE11 ( #16711 )
...
Contributed by Go MAEDA.
git-svn-id: http://svn.redmine.org/redmine/trunk@13101 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-04-17 18:21:23 +00:00
Jean-Philippe Lang
4920bb9d4d
Potentiel data leak in "Invalid form authenticity token" error screen ( #16511 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13041 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-04-05 08:19:55 +00:00
Jean-Philippe Lang
380b0515d1
Fixed that back_url=/ param is ignored ( #16467 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13040 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-04-05 08:11:28 +00:00
Jean-Philippe Lang
7567c3d8b2
Fixed back url verification ( #16466 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@13018 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-03-29 14:32:47 +00:00
Jean-Philippe Lang
58ff842d34
Trigger basic HTTP authentication only when Basic authorization header is present ( #16107 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@12915 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-02-22 12:09:58 +00:00
Jean-Philippe Lang
98cbbdf7f1
Reverts r12855.
...
git-svn-id: http://svn.redmine.org/redmine/trunk@12856 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-02-07 11:45:25 +00:00
Jean-Philippe Lang
3d64938adc
Adds JS response support to #render_error ( #15760 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@12855 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-02-07 09:26:27 +00:00
Toshi MARUYAMA
35cc911192
update copyright year ( #15977 )
...
Contributed by Daniel Felix.
git-svn-id: http://svn.redmine.org/redmine/trunk@12736 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-01-29 22:45:39 +00:00
Jean-Philippe Lang
a2f869b43e
Redirect to back_url or referer when clicking "Sign in" while already logged-in ( #15926 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@12705 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-01-25 12:35:05 +00:00
Jean-Philippe Lang
e391be4086
Adds settings for disabling browser language detection and language preference ( #2691 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@12691 e93f8b46-1217-0410-a6f0-8f06a7374b81
2014-01-24 10:28:12 +00:00
Jean-Philippe Lang
5c0078c63a
Fixed that non-GET API requests respond with 422 ( #15427 ).
...
git-svn-id: http://svn.redmine.org/redmine/trunk@12311 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-11-22 22:57:30 +00:00
Jean-Philippe Lang
0569005759
Code cleanup: unverified request no longer raises a InvalidAuthenticityToken exception.
...
git-svn-id: http://svn.redmine.org/redmine/trunk@12267 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-11-11 20:59:17 +00:00
Jean-Philippe Lang
b764e39847
Option to force a user to change his password ( #3872 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@12081 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-08-05 17:58:33 +00:00
Jean-Philippe Lang
136cdc765a
Don't redirect XHR requests to /login.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11962 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-06-12 16:49:12 +00:00
Jean-Philippe Lang
3e9aeea75d
Perf: preload a few associations for bulk operations.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11957 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-06-11 17:24:17 +00:00
Jean-Philippe Lang
1269e6c7d3
Display the bulk edit form with error messages when some issues can not be saved ( #13943 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11786 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-05-04 08:52:51 +00:00
Jean-Philippe Lang
a010372458
Fixed that autologin cookie is not deleted when using custom cookie name ( #13335 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11520 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-03-02 20:30:57 +00:00
Jean-Philippe Lang
08ef201cec
Fixed that autologin is broken when using a custom cookie name ( #13335 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11519 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-03-02 20:28:21 +00:00
Jean-Philippe Lang
e396a0eebe
Copyright for 2013 ( #12788 ).
...
Patch by Daniel Felix.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11169 e93f8b46-1217-0410-a6f0-8f06a7374b81
2013-01-12 09:29:31 +00:00
Jean-Philippe Lang
e921d70e53
Moved routes helper methods to an helper.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11075 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-12-23 15:18:39 +00:00
Jean-Philippe Lang
1cf379f370
Replaces the classic_pagination plugin with a simple pagination module.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@11026 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-12-17 18:21:24 +00:00
Jean-Philippe Lang
8ab9215ea8
Use named routes in controllers.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10983 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-12-11 19:39:47 +00:00
Jean-Philippe Lang
ef25210aca
Merged ajax_upload branch ( #3957 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10977 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-12-10 20:09:41 +00:00
Jean-Philippe Lang
e97a3ab97b
Fixed find_issues logic.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10905 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-12-02 10:25:30 +00:00
Jean-Philippe Lang
6e1ff5bba6
Code cleanup.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10904 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-12-02 09:59:22 +00:00
Jean-Philippe Lang
eff874b29a
REST API for creating/updating wiki pages ( #7082 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10717 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-10-25 20:38:29 +00:00
Jean-Philippe Lang
5344a35f72
Adds an optional X-Redmine-Switch-User header to let admin users swicth user in API calls ( #11755 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10608 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-10-11 17:07:24 +00:00
Toshi MARUYAMA
6d6f42c6a9
remove trailing white-spaces from app/controllers/application_controller.rb
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10566 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-10-05 00:30:52 +00:00
Jean-Philippe Lang
5411f93a9a
Passing the format in the template name is deprecated.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10561 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-10-04 18:15:05 +00:00
Jean-Philippe Lang
3b5fd45fae
Log current user on each request.
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10339 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-09-09 14:54:22 +00:00
Jean-Philippe Lang
ebc979e9b1
Do not use escaped back_url param ( #11691 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10239 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-08-26 10:40:09 +00:00
Jean-Philippe Lang
3cc6d5e815
Reverted r10234 and r10235 that broke redirect after login ( #11691 ).
...
Tests in account_controller_test.rb should not have been changed.
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10238 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-08-26 09:29:48 +00:00
Etienne Massip
70226f1833
Use a back_url parameter instead of referrer to refresh the page after user deletion ( #11691 ).
...
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@10234 e93f8b46-1217-0410-a6f0-8f06a7374b81
2012-08-24 21:23:10 +00:00