dflaven
|
7514927dd3
#943: Fix for supporting drop-down lists/auto-completes based on a parametrized query in the portal.
|
11 years ago |
romainq
|
9f49be2400
#905 The toolkit menu was visible in the portal for Administrators (but it was not usable). It is now hidden in any case.
|
11 years ago |
romainq
|
510409226b
#896 XSS injection on the portal (any search form)
|
11 years ago |
romainq
|
95bc0b3309
#888 Security on the portal incompatible with customizations (regression introduced in 2.0.2), now requires to define PORTAL_USERREQUEST_DISPLAY_QUERY and PORTAL_USERREQUEST_DISPLAY_POWERUSER_QUERY
|
11 years ago |
dflaven
|
10f4af37ad
Security enhancements:
|
11 years ago |
romainq
|
03ac608191
Defensive programming: protected against the Notice "array to string conversion" that appears in PHP 5.4 (thus not on every systems)
|
11 years ago |
dflaven
|
5eb7383cca
Fix for the validation of the forms in the portal. The (lack of) localization was breaking it!
|
11 years ago |
romainq
|
99037986ae
Compiler: added brand management
|
11 years ago |
romainq
|
5f413d8468
Reviewed the portal (look and feel slightly improved)
|
11 years ago |
romainq
|
8d959d0f03
#701 Portal customization : enabled the calendar widget for input of a date+time type of attribute (it was only available for pure DATE attributes)
|
12 years ago |
romainq
|
8d44539e6e
When iTop is in read only mode, then the portal displays a banner and prevent the user from accessing the modification forms
|
12 years ago |
romainq
|
23f61ec764
#647: itop says "ticket updated" but nothing has been changed.
|
12 years ago |
dflaven
|
7a29ea8e01
Make sure that we don't call OnFormCancel during a true submit.
|
12 years ago |
romainq
|
d354d5c131
Integrated the multiple select in the portal (search closed tickets)
|
12 years ago |
romainq
|
eafa11ecfe
Updated copyright (2012) and license (LGPL changed to AGPL)
|
12 years ago |
dflaven
|
f39dda7be1
Ajax file upload is now part of the standard JS includes in the iTop pages.
|
12 years ago |
romainq
|
148be21e4c
Portal: enable adding dependent attributes in the request creation form
|
12 years ago |
romainq
|
71dc1a0c67
Fixed issue in the portal: the list of opened requests and closed request where messed up when pagination was activated on both lists
|
12 years ago |
romainq
|
60da6859a4
#439 Record and display changes in the link sets (ex: Members of a team)
|
12 years ago |
etaloc
|
c3d4161c09
Mahe sure a unique ID is define for DIV
|
12 years ago |
romainq
|
13efd1b287
De-hardcoded against the subdirectory "modules" (excepted the data model sources files)
|
13 years ago |
romainq
|
e44fe13993
Fixed bug in the new portal: the wizard validation was inoperant when several selection lists were proposed
|
13 years ago |
dflaven
|
32a4ceba39
More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes
|
13 years ago |
romainq
|
4943cb5cb9
Portal: activate TriggerOnPortalUpdate
|
13 years ago |
dflaven
|
b82e9b6022
Bug fix: allow modifying an object as if in target state, before applying the stimulus (cf PortalWebpage).
|
13 years ago |
romainq
|
b214c6145d
Internal: improved the API of PortalWebPage
|
14 years ago |
romainq
|
41766b3165
Cosmetic on the portal
|
14 years ago |
romainq
|
5a8c529147
Internal: leverage display block for displaying link sets in the portal
|
14 years ago |
dflaven
|
be8991ed36
#446 continuing: sanitizing parameters...
|
14 years ago |
dflaven
|
253a2ee596
Fixed Trac#446: XSS vulnerabilities... to be tested !
|
14 years ago |