Commits · 9.5.10 · med wassim chayeb / glpi

Nov 03, 2022
- Bump version · e0dc8bc8
  Johan Cwiklinski authored Nov 03, 2022
  
  9.5.10
  
  e0dc8bc8
- Update locales · c11f50b5
  Cédric Anne authored Nov 03, 2022
  
  c11f50b5
- Validate users' emails · f6b6ef3a
  Cédric Anne authored Oct 31, 2022
  
  f6b6ef3a
- Prevent XSS through RSS feed links · 6d36fdc2
  Cédric Anne authored Oct 31, 2022
  
  6d36fdc2
- Prevent XSS on formatted user link · 0fb8f1de
  Cédric Anne authored Oct 31, 2022
  
  0fb8f1de
- Prevent XSS on generated links · 35721400
  Cédric Anne authored Oct 31, 2022
  
  35721400
- Add URL sanitizer method · 56c190fa
  Cédric Anne authored Oct 31, 2022
  
  56c190fa
- Check redirect URL safeness in Toolbox::callCurl() · 9f403512
  Cédric Anne authored Oct 31, 2022
  
  9f403512
- Escape user token during API authentication · 165a8f75
  Cédric Anne authored Oct 31, 2022
  
  165a8f75
- Deny usage of form elements in rich-text · 0a5744d3
  Cédric Anne authored Oct 31, 2022
  
  0a5744d3
- Check user is still valid on session validity check · 7d5a26ef
  Cédric Anne authored Oct 31, 2022
  
  7d5a26ef
- Activate debug mode only when update is actually done · c288cb96
  Cédric Anne authored Oct 31, 2022
  
  c288cb96
- Rename CI script to same name as in 10.0/bugfixes branch · 5bec4da9
  Cédric Anne authored Nov 02, 2022
  
  5bec4da9
Nov 02, 2022

Remove element path in tinymce · e148bf6b
Cédric Anne authored Nov 02, 2022

e148bf6b

Upgrade dependencies to get security fixes · 5cefd244

Cédric Anne authored Nov 02, 2022

- codemirror from 5.54.0 to 5.65.9
- file-type from 14.5.0 to 17.1.6
- gettext.js from 1.0.0 to 1.2.0
- jquery-ui from 1.12.1 to 1.13.2
- prismjs from 1.23.0 to 1.29.0
- tinymce from 4.9.11 to 5.10.6
- guzzlehttp/psr7 from 1.6.1 to 1.9.0
- phpmailer/phpmailer from 6.1.6 to 6.6.5

5cefd244

Fix webpack build · 5abd36c4
Cédric Anne authored Oct 31, 2022

5abd36c4

Oct 31, 2022
- Fix webpack build · e46ddcb7
  Johan Cwiklinski authored Oct 31, 2022
  
  e46ddcb7
Sep 14, 2022
- No new locales · e2506e14
  Johan Cwiklinski authored Sep 14, 2022
  
  9.5.9
  
  e2506e14
- Bump version · 9201aa21
  Johan Cwiklinski authored Sep 14, 2022
  
  9201aa21
- Update locales · 2be431c0
  Johan Cwiklinski authored Sep 14, 2022
  
  2be431c0
- Mitigate SSRF exploits · 34f987d2
  adelaunay authored Aug 26, 2022
  
  34f987d2
- Ensure token based authentication only accept strings · f85a5ae0
  Cédric Anne authored Aug 08, 2022
  
  f85a5ae0
- Filter allowed methods in plugin form controller · 4c57c15f
  Cédric Anne authored Aug 08, 2022
  
  4c57c15f
- Drop example, binaries and tests files from vendor · 6c965fa1
  Cédric Anne authored Aug 08, 2022
  
  6c965fa1
- Do not expose CFG_GLPI on anonymous page · 375c7e79
  Cédric Anne authored Aug 08, 2022
  
  375c7e79
- Escape GLPI-Network registration information · 13d78f85
  Cédric Anne authored Aug 08, 2022
  
  13d78f85
Jul 01, 2022
- 9.5.7 migration: Remove duplicated items_os before adding unicity · 5da35e46
  Adrien Clairembault authored Jul 01, 2022
  
  5da35e46
Jun 28, 2022
- Bump version · 78dd4cd1
  Johan Cwiklinski authored Jun 28, 2022
  
  9.5.8
  
  78dd4cd1
- Fix tests on MySQL 8.0 · 2e03672b
  Cédric Anne authored Jun 28, 2022
  
  2e03672b
- Merge pull request from GHSA-w2gc-v2gm-q7wq · 8f746efc
  Johan Cwiklinski authored Jun 28, 2022
  
  8f746efc
- Update locales · 38cac20e
  Cédric Anne authored Jun 28, 2022
  
  38cac20e
Apr 20, 2022
- Merge pull request from GHSA-p94c-8qp5-gfpx · 0fdcecd7
  Cédric Anne authored Apr 20, 2022
  
  v2.0.1
  
  0fdcecd7
- Merge pull request from GHSA-9hg4-fpwv-gx78 · 7c1301bd
  Cédric Anne authored Apr 20, 2022
  
  7c1301bd
Apr 08, 2022
- Fix encoding of completename in logs (#11209) · 0e67a532
  Cédric Anne authored Apr 08, 2022
```
* Fix encoding of completename in logs

* CommonTreeDropdown name is now sanitized
```
  0e67a532
Mar 25, 2022
- Handle empty values in Toolbox::isFloat() · cfa65415
  Cédric Anne authored Mar 25, 2022
  
  cfa65415
Mar 24, 2022
- Prevent usage of SSO systems on CalDAV auth; fixes #11091 · a7c836c0
  Cédric Anne authored Mar 24, 2022
  
  a7c836c0
Mar 23, 2022
- Sanitizing value property for hidden fields · b5b26061
  Leonildo Costa authored Mar 22, 2022
  
  b5b26061
Mar 16, 2022
- Fix transfer of linked tickets · 0db2ad84
  nenes82 authored Mar 16, 2022
  
  0db2ad84
Mar 07, 2022
- Fix satisfaction survey notification; fixes #9931 · 1d79b2b5
  Cédric Anne authored Mar 07, 2022
  
  1d79b2b5
- Remove duplicate actors · 03f230f0
  Curtis Conard authored Mar 07, 2022
  
  03f230f0