##// END OF EJS Templates
Commit Message Age Author Refs
load previous
r1821:a4cc42be
users-admin: moved views into pyramid for editing emails and ips. - added audit-logging - added few additional tests
0
r1820:0c30378e
my-account: use audit logs for email and token actions.
0
r1819:956c5cda
my-account: moved few my account views into pyramid.
0
r1818:1ced1b24
security: make sure the admin of repo can only delete comments which are from the same repo. - fixes IDOR issue - protects against other people comment deletion by repo admins.
0
r1817:7df55c97
security: use 404 instead of 403 code on permission decorator to prevent resource discovery attacks.
0
r1816:7c5e9070
my-account: moved emails config into pyramid views.
0
r1815:7cb6e1ce
security: use new safe escaped user attributes across the application. - will fix all possible XSS attack vectors.
0
r1814:a1111aae
User: use new escaped hybrid properties for usage in code. - Allows introducing the safer method of reading first/last names from users.
0
r1813:07e2beb0
pull-requests: prepare the migration of pull request to pyramid. - this is half the code because of problems found during porting - partially moved the urls, and flipped the logic into pyramid code - needs more work in core for full switch.
0
r1812:7d0f908d
notifications: fixed problem with 500 errors on non-numeric notification id given.
0
r1811:d57dfc88
security: added missing csrf checks in few missing views.
0
r1810:a79ddada
security: fixed self-xss inside file views.
0
r1809:86482ba7
security: fix self-xss inside repo strip view.
0
r1808:e5a0601c
docs: added example how to secure login page from brute force attacks.
dan
0
r1807:83e09901
audit-logs: implemented pull request and comment events.
0
r1806:99a19fa8
audit-logs: use specific web/api calls. - also normalized action_data to specs.
0
r1805:48072a57
audit-logs: added audit logs on user groups admin page.
0
r1804:4a92b08c
action_logger: removed really not required actions of start/stop following a repository. - this information just spams user information, and for product such as rhodecode this doesn't make any sense to be stored.
0
r1803:907f9b5c
audit-logs: moved async tasks from old deprecated action_logger.
0
r1802:eabfaa9c
audit-logs: fill in some default values for the expected action data.
0
load next
< 1 .. 175 176 177 178 179 .. 268 >
showing 20 out of 5342 commits