github.com/nuxsmin/sysPass commits | Ecosyste.ms: OpenCollective

Merge pull request #1856

* fix: Encode XSS related characters and strip tags.

9d0e169d2163897238877fb65130db47fe1ddcfa authored over 2 years ago by RubénD <[email protected]>

Merge pull request #1853

* fix: Encode special characters using regex.

* chore: Bump version number.

c39b60c2a79041c8eae61aea7fd54a640b9c238a authored over 2 years ago by RubénD <[email protected]>

Merge pull request #1588 (#1848)

* [FIX] Fixes issue with LDAP pagination

Co-authored-by: Felix Haase <[email protected]>

244fa4429c1936ce5391dc1042071cfec5b6263e authored over 2 years ago by RubénD <[email protected]>

doc: SECURITY.md file (#1847)

c896d7f2da77486d14dcc9e2e718dc7abfc58ea1 authored over 2 years ago by RubénD <[email protected]>

Merge pull request #1363

* Added backers and sponsors on the README

* Merge branch 'master' into opencollective

e63548f884bd5f646df74efcd45a540a4d0af395 authored over 2 years ago by jess <[email protected]>

Merge pull request #1846

* chore: Set X-Frame options and CSP. Thanks to @lengochoa7112000 !!

* chore: Update dependenci...

1be83de9b20d4ead0bd69e95477c7015441f9471 authored over 2 years ago by RubénD <[email protected]>

fix: Add missing tables to tables list. (#1843)

Thanks to @Jonher937 for the notice!!
Closes #1786.

Signed-off-by: Rubén D <nuxsmin@syspass....

0ea0a1386055dcf74edb910c9f0f0be5ba80f791 authored over 2 years ago by RubénD <[email protected]>

Fix/url regex (#1842)

* fix: Tweak URL's regex to avoid XSS.

Thanks to @rgavilan for the feedback!
Closes #1840.
...

36d0c8861e46287ccbf2c8b22c05551000331b1f authored over 2 years ago by RubénD <[email protected]>

fix: Return safe url for accounts. (#1839)

Signed-off-by: Rubén D <[email protected]>

b1e7edd761edf997a08e4b013395ca09b64bb6ee authored over 2 years ago by RubénD <[email protected]>

Bump guzzlehttp/guzzle from 6.5.6 to 6.5.7 (#1834)

3cebed36dc56cf6965a36ed3de6cc5b50effcd83 authored over 2 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Feat/dependencies (#1833)

* fix: Fix XSS when displaying URL on search account view.

Signed-off-by: Rubén D <nuxsmin@sy...

3c25f9021f7e7949c7484b70b42d94cdf7236b53 authored over 2 years ago by RubénD <[email protected]>

fix: Fix XSS on some URLs (#1832)

* fix: Fix XSS when displaying URL on search account view.

Signed-off-by: Rubén D <nuxsmin@sy...

4da4d031732ecca67519851fd0c34597dbb8ee55 authored over 2 years ago by RubénD <[email protected]>

Merge pull request #1829 from nuxsmin/fix/wrong_syntax

Fix/wrong syntax

Signed-off-by: Rubén D <[email protected]>

7a813d478647c21c83ba7563c9aeb7379122b3ef authored over 2 years ago by RubénD <[email protected]>

chore: Minor code tweaks.

Signed-off-by: Rubén D <[email protected]>

e1f7374378adfacd4db06551d9c603d5147c1a3a authored over 2 years ago by Rubén D <[email protected]>

fix: Wrong variable syntax. Thanks to @riccimatic for the notice!

Signed-off-by: Rubén D <[email protected]>

0fb21d58ad49f124bc757555311b4695fc3a9492 authored over 2 years ago by Rubén D <[email protected]>

Merge pull request #1826 from nuxsmin/fix/xss

Fix/xss

3c026f7964cd0bf2f17f4f6756ec67705ab2c54f authored over 2 years ago by RubénD <[email protected]>

Merge branch 'v3.2' into fix/xss

f3ec58510d93a6044583e4f6226db5c4e7db9b53 authored over 2 years ago by Rubén D <[email protected]>

chore: Bump version.

Signed-off-by: Rubén D <[email protected]>

96eaeacd58ffaf89d11412d022f3180948545f70 authored over 2 years ago by Rubén D <[email protected]>

chore: Update dependencies.

Signed-off-by: Rubén D <[email protected]>

fccaa9d892c9f77594b58680fdbb0ce172b4fa6c authored over 2 years ago by Rubén D <[email protected]>

fix: Prevent XSS on all output variables.

Signed-off-by: Rubén D <[email protected]>

ec686eec5dfdcd1fba99693cc915c03a49ecda9a authored over 2 years ago by Rubén D <[email protected]>

Merge pull request #1585 from sur5r/master

[MOD Log which locale failed to load

ac00338cadec825324ff705730e2772972bd20a8 authored about 3 years ago by RubénD <[email protected]>

Merge remote-tracking branch 'origin/master'

6022ce74c9d75eedbd7a7c71eb0c356197991ef4 authored almost 4 years ago by Rubén D <[email protected]>

Merge pull request #1668 from nuxsmin/v3.2

v3.2.2

5882699f2247d0d582bd053f7b350d555f7bfe70 authored almost 4 years ago by RubénD <[email protected]>

Merge branch 'v3.2'

a1418e627a6c7ba537f4ccdaef5a54ddcac8aedc authored almost 4 years ago by Rubén D <[email protected]>

* [MOD] Bump version number

Signed-off-by: Rubén D <[email protected]>

861ce46e8a8269789ec7ee6e6628ca807bfc9c60 authored almost 4 years ago by Rubén D <[email protected]>

* [FIX] Prevent random password generator to crash when chars are skipped. Thanks to @blabllavita . Closes #1641

Signed-off-by: Rubén D <[email protected]>

6e72067b6b808c4a8e03dee1334d9695d806bc45 authored almost 4 years ago by Rubén D <[email protected]>

* [FIX] HTTP_X_FORWARDED_FOR header wasn't parsed. Thanks to @jlegido for the feedback. Closes #1653

Signed-off-by: Rubén D <[email protected]>

3b189aa5e6eed633e899b0f06ed89a7b7d9fa8b4 authored almost 4 years ago by Rubén D <[email protected]>

Merge pull request #1644 from nuxsmin/v3.2

* [FIX] Fix ADS search behavior by unsseting `ACCOUNTDISABLE` flag fo…

4c3312d3a9c203c6f83093a107e7a3a71cd1645e authored almost 4 years ago by RubénD <[email protected]>

* [FIX] Fix ADS search behavior by unsseting `ACCOUNTDISABLE` flag for `UserAccountControl` property, since it prevents to throw the proper status code when authenticating against LDAP. Thanks to @t0l0 for testing. Closes #1574

* [MOD] Update dependencies
* [MOD] Bump version number

Signed-off-by: Rubén D <nuxsmin@syspass....

728ec832f385a58768ac9fc473fb0c29dee381af authored almost 4 years ago by Rubén D <[email protected]>

Merge pull request #1643 from nuxsmin/v3.2

* [FIX] Fix ADS search behavior by unsseting `ACCOUNTDISABLE` flag fo…

45130f3b79f3dd7691762966e454256b0da62555 authored almost 4 years ago by RubénD <[email protected]>

* [FIX] Fix ADS search behavior by unsseting `ACCOUNTDISABLE` flag for `UserAccountControl` property, since it prevents to throw the proper status code when authenticating against LDAP. Thanks to @t0l0 for testing. Closes #1574

* [MOD] Update dependencies
* [MOD] Bump version number

Signed-off-by: Rubén D <nuxsmin@syspass....

b0050813b005b39c0cfc9eb1e592e70e9bdd95a7 authored almost 4 years ago by Rubén D <[email protected]>

Merge pull request #1631 from nuxsmin/v3.2

Release 3.2

aa5ff5548bfbc80445516c5a129f829f8b7e7205 authored about 4 years ago by RubénD <[email protected]>

* [MOD] Bump version number

Signed-off-by: Rubén D <[email protected]>

f428a8c1d68a75c92ff6b2996d79f822c19dafc5 authored about 4 years ago by Rubén D <[email protected]>

Merge branch 'v3.1'

4e119dee47cfa2ef346acf8f747ad1760a8fded7 authored about 4 years ago by Rubén D <[email protected]>

* [MOD] Improve backup regex

Signed-off-by: Rubén D <[email protected]>

b3137a181a04e9d9c1a6fb923a938de6daa347c7 authored about 4 years ago by Rubén D <[email protected]>

* [FIX] Set coverage mode through env var

Signed-off-by: Rubén D <[email protected]>

5e3281bce83bc1968cd65f5c69f88d5b461b33e1 authored about 4 years ago by Rubén D <[email protected]>

* [FIX] Set minimum required PHP version to 7.3 because dependency constraints

Signed-off-by: Rubén D <[email protected]>

900008292bcbba0397e19ae51c728f570cd78c5b authored about 4 years ago by Rubén D <[email protected]>

* [MOD] Update dependencies

* [FIX] Fix displaying install page when the app is already installed. Thanks to @kmmndr for the ...

a55548f4c48495c42f57c7c8ca3e553697449fe7 authored about 4 years ago by Rubén D <[email protected]>

Merge remote-tracking branch 'origin/v3.1' into v3.1

de1e4366c6760b6dc10fbb6da19675f57068032b authored about 4 years ago by Rubén D <[email protected]>

Merge pull request #1596 from magcho/v3.1

New Japanese translation

5bc8adf84b27bfe13a1c08661bdcc80dc65e2eea authored about 4 years ago by RubénD <[email protected]>

[update] translate

c82e0e4018ca8aca802bd3642921807b9f445e92 authored about 4 years ago by magcho <[email protected]>

[update] notification translate

3ebbc540d48e6b1e9ce3d4ebb7590c23ab05a1f2 authored about 4 years ago by magcho <[email protected]>

[update] confuguration translate

cbd89815d2482bb73e791030fc8ca5f552655e7d authored about 4 years ago by magcho <[email protected]>

[update] encrypt of configuration translate

c2d3f8c0d374efa43d22ac5d9706203ab755550c authored about 4 years ago by magcho <[email protected]>

[update] mail of configuration translate

50686bc6df369b62748ed827cc202c429900af0d authored about 4 years ago by magcho <[email protected]>

[update] ldap of configuration translate

9e057c49ebe217580bc4126bda2a7441de5da934 authored about 4 years ago by magcho <[email protected]>

[update] wiki of configuration translate

6900ff66e7e64f0fc3686f870d7448f60e27b2f2 authored about 4 years ago by magcho <[email protected]>

[update] general of configuration translate

d1976a4b9e34ee2160f347493bf773c340737ffd authored about 4 years ago by magcho <[email protected]>

[update] translate plugins page

5e3bdf077050b16edc02ee8022af5a3a4f5670d5 authored about 4 years ago by magcho <[email protected]>

[update] セキュリティーと異常検知を翻訳

a664f6b1f3e735e36dfac5cdc38a8808d0b61665 authored about 4 years ago by magcho <[email protected]>

[fix] ユーザーとアクセス管理の翻訳を修正

7b57c066b24f126ddb8c0cc08f536f5f65f1586e authored over 4 years ago by magcho <[email protected]>

[fix] 新規アカウント作成画面の翻訳を修正

8715b735022f393e12d2ffea652959f3fa10454d authored over 4 years ago by magcho <[email protected]>

[updte] source text

b5b1bc0f0c8c4772a0f7d68fd612a70c10fd6fc6 authored over 4 years ago by magcho <[email protected]>

[fix] 翻訳修正

60228041ce88c432b55f2b500aaa943fb08c832e authored over 4 years ago by magcho <[email protected]>

[fix] 新規アカウント作成ページの翻訳を修正

b8d319e4da1c3be7123e0a056d089777658285e8 authored over 4 years ago by magcho <[email protected]>

[fix] 「検索」の翻訳修正

830810de66d339a366b49eecece16f610d0d01bc authored over 4 years ago by magcho <[email protected]>

[update] application translation

af5a283b650cfda1b03118566d273282958378db authored over 4 years ago by magcho <[email protected]>

[WIP] translation sysPass application

87680fb681c9c1f4ddb3ae8abc163a623050e85a authored over 4 years ago by magcho <[email protected]>

[WIP] update sysPass application translate to Japanese

9aeb14916bcd04c875e3d05fb4e33517c14fb379 authored over 4 years ago by magcho <[email protected]>

[init] clear and reset translation file

6d5fdf4cd944782cc9ee5e5fff7014d23d66c6ea authored over 4 years ago by magcho <[email protected]>

[init] translation for Japanese

a802a74cbfa13e9b25c2b954f5ae3398b8ab97c1 authored over 4 years ago by magcho <[email protected]>

Log which locale failed to load

afb81d9fb402ac84936c6ba355d2de67e3cb1391 authored over 4 years ago by Jakob Haufe <[email protected]>

* [FIX] Wrong version constraint for doctrine packages

Signed-off-by: Rubén D <[email protected]>

8f78ad5b3541947b07bf0bddaecd01ec7de73837 authored almost 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong version constraint for doctrine packages

Signed-off-by: Rubén D <[email protected]>

97417de1fbb849880c0503c06ea2b5efe376a920 authored almost 5 years ago by Rubén D <[email protected]>

* [MOD] Bump version patch and build number

Signed-off-by: Rubén D <[email protected]>

c03d779894a5a6f9b2b6924a07252b5d6fc1010b authored almost 5 years ago by Rubén D <[email protected]>

* [MOD] Enforce LDAP schema in ldap_connect function. Skip ldap_connect signature using port because it's deprecated

* [ADD] LDAP params tests

Signed-off-by: Rubén D <[email protected]>

f3e01eee9d101d15d07fe99ff5872f701a6549ea authored almost 5 years ago by Rubén D <[email protected]>

* [FIX] Do not allow deleting Plugins from the UI. Thanks to @yawnbros for the feedback.

Signed-off-by: Rubén D <[email protected]>

749a45fd0a9fa5a03a680f95a4ae2cb30eefc1c5 authored about 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong behavior when viewing PDF files. Thanks to @m-shirokov for the notice. Closes #1501

* [MOD] Minor code tweaks

Signed-off-by: Rubén D <[email protected]>

a299760683e7c30e54956f7d6d80a207c0ed9ce2 authored about 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong behavior when displaying account notes tooltip with multiple lines. Thanks to @MagikEh for the feedback. Closes #1432

Signed-off-by: Rubén D <[email protected]>

54e84f17cf996cc0b2976d69926a49a47c6f8e00 authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong behavior when upgrading from v3.0. Thanks to @Envikia for the feedback. Related #1401

* [MOD] Improved error code when an unknown API token is used. Thanks to @matejzero for the feedb...

945ee6d3072242c3af76c7662f6eb2022dd0dfd7 authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong behavior when upgrading from v3.0. Thanks to @Envikia for the feedback. Related #1401

* [MOD] Improved error code when an unknown API token is used. Thanks to @matejzero for the feedb...

5503dd8de52dc505ae03844247afafb1ecd27a15 authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Skip ext-xdebug from composer required extensions

* [MOD] Added PHP 7.3 to composer version matrix

Signed-off-by: Rubén D <[email protected]>

5eaaac46593ec883c574f8b98f54963c548da2fa authored over 5 years ago by Rubén D <[email protected]>

Merge branch 'v3.1'

60595a3d849a6efcb6b317a572935b69c46c65ec authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Update MariaDB version on Travis CI

Signed-off-by: Rubén D <[email protected]>

bb4ee3c7b62e1108399d7370227ac40ffa990e26 authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Travis CI

Signed-off-by: Rubén D <[email protected]>

8a01307d336f9c617b93c3f70bffeed2ce831bf3 authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong CSV MIME type

* [MOD] Added CSV MIME type
* [MOD] Updated composer lock file
* [MOD] Bump to v3.1

Signed-off-b...

ceab42987e6ee37cffe11f8c710923d0b2f0a737 authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Update Readme. Thanks to @andrucha97 for the notice.

Signed-off-by: Rubén D <[email protected]>

6b9637e88198d9970168c2f95aa6568084ad9912 authored over 5 years ago by Rubén D <[email protected]>

Merge pull request #1361 from pakud/patch-1

* [MOD] Update INSTALL. Thanks to @pakud

842f1631a9e1a41692839f4e8fe15edc4cb42fe2 authored over 5 years ago by RubénD <[email protected]>

Merge pull request #1385 from mluchkin/master

* [FIX] russian language in search. Thanks to @mluchkin

535d7abcbf80da5fa5f9c1e38ca8979adfedb52f authored over 5 years ago by RubénD <[email protected]>

* [MOD] Update version & build number

Signed-off-by: Rubén D <[email protected]>

29b56c5e3538c359644bdbefb1a6ffd535d1daba authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong URL when application URL setting is set. Thanks to @kalxasus for the notice. Closes #1395

* [MOD] Update Authenticator version in composer.json

Signed-off-by: Rubén D <[email protected]>

3f79d693360c20c059020d9e3839496034fc15a9 authored over 5 years ago by Rubén D <[email protected]>

* [FIX] LDAP group filter wasn't applied when importing. Thanks to @twindscheif for the notice. Closes #1390

Signed-off-by: Rubén D <[email protected]>

da9dc6f3ab6c1ae41ecfcf0712896448eedff0db authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Client custom fields were not created/saved. Thanks to @ZUNbado and @sf32738 for the notice. Closes #1375

* [MOD] Minor code tweaks

Signed-off-by: Rubén D <[email protected]>

98a68f47c55098eafd75807768d578cb712d7fda authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Skip over initialization when upgrade is needed. Thanks to @Envikia and @alexseys for the notice. Closes #1355

Signed-off-by: Rubén D <[email protected]>

b5559b52eb036e86ce99216cd7235f37fb00eee2 authored over 5 years ago by Rubén D <[email protected]>

fix russian language

5811680c38ec6c03e47c2490e88a344662d3d8bd authored over 5 years ago by Mluchkin <[email protected]>

Update INSTALL

broken link in the document fixed

8ad5a858d47f9325a6e2f3c4622fbe4d61cc3f1b authored over 5 years ago by pQd <[email protected]>

* [FIX] Wrong URL handling when downloading files. Thanks to @fprina for the feedback ans testing. Closes #1354

Signed-off-by: Rubén D <[email protected]>

1adb103f293344f75d7109f27e4485866e6e3cfa authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Improved stacktrace by anonymizing function's arguments data. Thanks to @cRaZy-bisCuiT for the feedback. Closes #1339

+ [MOD] Bump version & build

Signed-off-by: Rubén D <[email protected]>

58dbc3509edbb0f8f744f6dddf40ae06b37d0640 authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Improved stacktrace by anonymizing function's arguments data. Thanks to @cRaZy-bisCuiT for the feedback. Closes #1339

+ [MOD] Bump version & build

Signed-off-by: Rubén D <[email protected]>

6aa36d449c0fb1f2eb74850d9b9c8586a8a2f7d9 authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Improved stacktrace by anonymizing function's arguments data. Thanks to @cRaZy-bisCuiT for the feedback. Closes #1339

+ [MOD] Bump version & build

Signed-off-by: Rubén D <[email protected]>

4f3bb7429638aedefc8851b379e7193ee0f4b62a authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Improved behavior when searching for user permission on accounts. Thanks to @anth69 for the feedback. Closes #1338

* [MOD] Updated translations. Thanks to all contributors.

Signed-off-by: Rubén D <nuxsmin@syspas...

4da57f86fb7f6d9e86dc90337e9df4a367eab80c authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong field definition on PluginData table. Thanks to @drewlsvern for the feedback. Closes 1326

Signed-off-by: Rubén D <[email protected]>

ea9b6ee1fd0a9df5d923673edf261c3f49683a61 authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong PHP version comparison

Signed-off-by: Rubén D <[email protected]>

4f9431e7bc75dd5265cf727141aaee723ad9e4e9 authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong PHP version comparison

Signed-off-by: Rubén D <[email protected]>

81bb182c3d492193b14689cd251782b5d5fea4bd authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Display XML export download icon on demo mode

Signed-off-by: Rubén D <[email protected]>

01a8339f5b0667d25a3db3feb8072210a5d197bc authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Jump to RC1

Signed-off-by: Rubén D <[email protected]>

72c51b037d44a9ccf4ba7bf53fe0750d3616987f authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Missing database upgrade

Signed-off-by: Rubén D <[email protected]>

1e308a94311d472f4586cc07925e9c8211396902 authored over 5 years ago by Rubén D <[email protected]>

* [MOD] Update copyright date

* [MOD] Code cleanup

Signed-off-by: Rubén D <[email protected]>

6197c52af128b1aab48af5f5990c73279495617f authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Fix custom fields migration issue. Thanks to @VexedSyd for the feedback. Closes #1273

Signed-off-by: Rubén D <[email protected]>

cf2becfcfe34b7ee951f5bc3cf83f556894ca3a3 authored over 5 years ago by Rubén D <[email protected]>

* [FIX] Wrong limit for maximum file size. Thanks to @javierlm for the feedback. Closes #1313

* [MOD] Typo in translation. Related #1313

Signed-off-by: Rubén D <[email protected]>

6e1f04ddc5d50875ab3a11946256f6d2f90f3396 authored over 5 years ago by Rubén D <[email protected]>