 romainq
|
65aaea630b
XSS: Fixed a regression caused by the fix [3994]. Object hyperlinks were escaped twice causing accuented characters displayed as '´'. The API DBObject::MakeHyperLink has been clarified and the original fix moved elsewhere. The XSS injection that was not handled correctly prior to [3994] was in the display of an external key in the details of an object. To reproduce easily, inject some malicious characters in the name of the organization 'Demo' and view any object owned by Demo.
|
9 gadi atpakaļ |
 dflaven
|
16ff8fdf23
Suppress a warning when exporting a case log to HTML... Limitation: be aware that wiki links are not transformed to hyperlinks in this case.
|
9 gadi atpakaļ |
 glajarige
|
db6e084d56
Customer portal : Object search dialog when adding object to a linkedset doesn't show already added elements.
|
9 gadi atpakaļ |
|
glajarige
|
ea63526223
Customer portal : Adding object to linkedset could have result in duplicates. Fixed
|
9 gadi atpakaļ |
|
romainq
|
2aed519d3d
Model factory: _delta = if_exists, not working with <class> nodes
|
9 gadi atpakaļ |
|
dflaven
|
472d95489f
Security: do not show actual encrypted values, display '*****' instead.
|
9 gadi atpakaļ |
|
dflaven
|
53e0da0c73
Support "recusrive placeholders" (i.e. $this->org_id->code$) inside notifications... when using the HTML notation (i.e. -> becomes ->)
|
9 gadi atpakaļ |
|
glajarige
|
6ad1c25a24
Customer portal : Fixed regression in request template that was introduced by #4095
|
9 gadi atpakaļ |
|
glajarige
|
aac389f61c
Customer portal : UX adjustments on LinkedSet (Collapse toggler pictos, check all/none state)
|
9 gadi atpakaļ |
|
glajarige
|
172afc90f6
Customer portal : Form, sticky buttons as pictos only in both plain page and modal layouts. Also, pictos were added to regular bottom buttons
|
9 gadi atpakaļ |
|
dflaven
|
f4382de1bf
Validate date/time fields using their regular expression during an import (or synchro) to avoid passing wrong formats as-is (e.g. 01/02/16 can become 01/02/0016 instead of 01/02/2016 if you use the 4 digits format for years and pass only 2 digits !)
|
9 gadi atpakaļ |
|
romainq
|
0646f900c6
Custom Fields: API to detect forms containing only hidden fields
|
9 gadi atpakaļ |
|
glajarige
|
1b004641f7
Customer portal : Form, sticky buttons only when creating / editing objects
|
9 gadi atpakaļ |
|
glajarige
|
d1918d4b4a
Customer portal : Preview for attachments
|
9 gadi atpakaļ |
|
glajarige
|
c5380e3e6a
Customer portal : Form - Hiding templates when there is none in order to optimize form space (Actually hiding SubForm when there is only HiddenField)
|
9 gadi atpakaļ |
|
dflaven
|
9f3eb737c6
Fix a regression (crash) when displaying deadline attributes.
|
9 gadi atpakaļ |
|
dflaven
|
efeda4cc5d
Validate date/time fields using their regular expression during an import to avoid passing wrong formats as-is (e.g. 01/02/16 can become 01/02/0016 instead of 01/02/2016 if you use the 4 digits format for years and pass only 2 digits !)
|
9 gadi atpakaļ |
|
dflaven
|
077abf4085
Date and time format finalization for the exports:
|
9 gadi atpakaļ |
|
glajarige
|
5e2d175443
Customer portal : LinkedSet widget UX improvements part 2 (Collapsing widget)
|
9 gadi atpakaļ |
|
dflaven
|
ba4f213a48
Display the dates of the synchronization according to the date/time format defined for this language.
|
9 gadi atpakaļ |
|
dflaven
|
6ae7b96076
Regression: properly initialize mandatory date (and time) attributes when using a custom date/time format.
|
9 gadi atpakaļ |
|
dflaven
|
3a23cc3007
Display the dates of the history according to the date/time format defined for this language.
|
9 gadi atpakaļ |
|
glajarige
|
408a68ef6f
Customer portal : LinkedSet widget UX improvements part 1 (Check/Uncheck all)
|
9 gadi atpakaļ |
|
romainq
|
c29c89c716
Breadcrumb: reviewed icon and label for global search and search menus just openin a search form
|
9 gadi atpakaļ |
|
romainq
|
309ef21dd0
Breadcrumb: reworked the disposition (when wrapping onto a second line, the last item could be strangely placed between both lines on Chrome)
|
9 gadi atpakaļ |
|
glajarige
|
d9918b5cb1
Customer portal : Improvements on form sticky buttons
|
9 gadi atpakaļ |
|
glajarige
|
397e15b34b
Customer portal : Added description to bricks. Displayed only in the home tiles.
|
9 gadi atpakaļ |
|
romainq
|
cb93a043c2
Customer portal: the list of service subcategories of a user request must be filtered on 'service request'
|
9 gadi atpakaļ |
|
glajarige
|
475970d9cc
Customer portal : Portal logo source order is : "/images/itop-logo.png" < "/env-xxx/branding/portal-logo.png" < "value of //properties/logo of the portal module_design"
|
9 gadi atpakaļ |
|
glajarige
|
46d99a30f6
Customer portal : Sticky form button when form is to long to be fully displayed in the screen
|
9 gadi atpakaļ |
