11655 Commits

Author SHA1 Message Date
Eric Lippmann
67929064cc
Merge pull request #3526 from Icinga/fix/some-xss-vulnerabilities
Fix some XSS vulnerabilities
2018-07-16 09:58:23 +02:00
Eric Lippmann
11f1a287ab
Merge pull request #3519 from Icinga/fix/mysql-ssl-connection-error-brings-up-no-explanation-3249
Pdo\Abstract: Properly handle incomplete error messages
2018-07-16 09:56:26 +02:00
Eric Lippmann
996532c2f7
Merge pull request #3524 from Icinga/fix/monitoring-application-state-hook-not-working-3523
monitoring: Introduce run.php and provide the new ApplicationStateHook
2018-07-16 09:55:20 +02:00
Johannes Meyer
84622bf27b Fix some XSS vulnerabilities
Only a real issue with <= IE9 as other browsers properly escape
urls prior transmission.

Signed-off-by: Eric Lippmann <eric.lippmann@icinga.com>
2018-07-16 09:53:30 +02:00
Johannes Meyer
6f5edf132c monitoring: Introduce run.php and provide the new ApplicationStateHook
fixes #3523
2018-07-12 13:55:05 +02:00
Johannes Meyer
4f2a6dd9aa i18n/monitoring: Update german translation 2018-07-12 11:09:11 +02:00
Johannes Meyer
d26ac3c5fb i18n/monitoring: Correct german translation 2018-07-12 10:31:58 +02:00
Johannes Meyer
bf5c6a56b3 Revert "Fix some XSS vulnerabilities"
Accidentally pushed. Should re-enter with #3521.
2018-07-11 16:37:39 +02:00
Johannes Meyer
815a050ff8 i18n: Update german translation 2018-07-11 16:34:07 +02:00
Johannes Meyer
a541dddd52 i18n: Correct german translation 2018-07-11 16:30:18 +02:00
Johannes Meyer
b97933a146 Fix some XSS vulnerabilities
Only a real issue with <= IE9 as other browsers properly escape
urls prior transmission.
2018-07-11 13:10:57 +02:00
Johannes Meyer
44bfdd3986 Pdo\Abstract: Properly handle incomplete error messages
fixes #3249
2018-07-10 14:54:28 +02:00
Eric Lippmann
6cddd6beed
Merge pull request #3508 from Icinga/fix/filter-entries-are-deleted-when-pushing-enter-3454
FilterEditor: Add a hidden submit button to the start of the form's m…
2018-07-10 09:28:35 +02:00
Eric Lippmann
ccda44f8b3
Merge pull request #3514 from Icinga/fix/huge-icons-destroy-navigation-dashboard-layout-3442
navigation/dashboard: Limit icons to a size of 3x3em
2018-07-10 09:27:48 +02:00
Eric Lippmann
5f3da9d5e9
Merge pull request #3515 from Icinga/fix/shaky-monitoring-health-layout-3434
monitoring/health: Cleanup layout and make it dashboard compliant
2018-07-10 09:25:25 +02:00
Eric Lippmann
12b17d4b0a Reduce font-weight for badges in monitoring/health
refs #3434
2018-07-10 09:23:38 +02:00
Eric Lippmann
b88c6b0a6e
Merge pull request #3516 from Icinga/feature/application-state-hook
Application state hook
2018-07-10 09:14:26 +02:00
Eric Lippmann
99d348d41f
Merge pull request #3517 from Icinga/fix/cli-list-problems
Fix for CLI list --problems
2018-07-10 09:05:22 +02:00
Eric Lippmann
45468b7a8e Introduce app state for the monitoring module
refs #2835
2018-07-09 16:28:28 +02:00
Eric Lippmann
47405127d0 Add config to hide/show pplication state messages
refs #2835
2018-07-09 16:28:28 +02:00
Eric Lippmann
d18d05ccee Introduce ApplicationStateHook
refs #2835
2018-07-09 16:28:25 +02:00
Eric Lippmann
ea722484b0 Introduce 'problems' columns for CLI usage
refs #3512
2018-07-09 16:10:07 +02:00
Eric Lippmann
b3fcbbee97 Revert "Fix icingacli monitoring list --problems"
This reverts commit 855e7f71208cb6d69b2190a7709182518178d382.
2018-07-09 16:08:02 +02:00
Johannes Meyer
1cb105b52a monitoring/health: Cleanup layout and make it dashboard compliant
fixes #3434
2018-07-09 13:50:17 +02:00
Johannes Meyer
8974e44c68 navigation/dashboard: Limit icons to a size of 3x3em
fixes #3442
2018-07-09 10:46:47 +02:00
Eric Lippmann
303637df3c
Merge pull request #3452 from Icinga/feature/drop-php-lt-56-support
Drop support for PHP < 5.6
2018-07-09 09:18:18 +02:00
Johannes Meyer
6e6251604b FilterEditor: Add a hidden submit button to the start of the form's markup
When pushing enter our JS mimics what a browser would do. And that is
pushing the first submit button found in the form. Without this, that's
a delete button of the first logical junction. (the root condition)

fixes #3454
2018-07-06 10:41:49 +02:00
Eric Lippmann
04913f3699
Merge pull request #3468 from Mikesch-mp/multiline_custom_vars
Render multiline in custom variables correct.
2018-07-05 13:31:47 +02:00
Eric Lippmann
189b519135
Merge pull request #3486 from Icinga/fix/request-parses-json-without-respecting-content-type-3484
Fix that Request parses json without respecting content type
2018-07-05 13:19:27 +02:00
Eric Lippmann
51307d77a9
Merge pull request #3489 from Icinga/bugfix/vagrant-box-broken-parallels-3488
Don't update Parallels Tools automatically
2018-07-04 16:16:32 +02:00
Johannes Meyer
2a48bd0f5e
Merge pull request #3503 from Icinga/fix/let-redirect-http-use-http-for-redirection 2018-07-04 15:57:39 +02:00
Carsten Koebke
55072ac840 Render multiline in custom variables correct
Signed-off-by: Eric Lippmann <eric.lippmann@icinga.com>
2018-07-04 15:28:38 +02:00
Johannes Meyer
1f677e64f6 ActionController: Force HTTP redirects in method redirectHttp()
That's what its name implies, right? The counterpart is redirectXhr(),
which does still its job. redirectNow() on the other hand is for the
lazy people.
2018-07-04 14:44:03 +02:00
Johannes Meyer
990df95f36 loader.js: Allow to force HTTP to be used for JS redirection 2018-07-04 14:44:03 +02:00
Johannes Meyer
8cbff87af1 Request: Parse the POST body only as JSON if it's really JSON
refs #3484
2018-07-04 11:09:11 +02:00
Johannes Meyer
842e5603a1 Request: Introduce method extractMediaType
refs #3484
2018-07-04 11:09:11 +02:00
Eric Lippmann
10fa64b7e3
Merge pull request #3421 from winem/feature/documentation-installation-debian-webserver
Small addition to the Debian installation doc
2018-07-04 11:01:59 +02:00
Marcel Weinberg
874b24cb8e Add small addition to the Debian installation doc
Signed-off-by: Eric Lippmann <eric.lippmann@icinga.com>
2018-07-04 10:59:52 +02:00
Eric Lippmann
1dce62ee49
Merge pull request #3496 from Icinga/bugfix/puppet-http-mitm
Vagrant/Puppet: prevent man-in-the-middle attacks
2018-07-04 09:24:09 +02:00
Eric Lippmann
8990d6f46e Drop support for PHP < 5.6 2018-07-03 13:11:36 +02:00
Eric Lippmann
d6c4df7a5d Use password_hash and password_verify 2018-07-03 13:08:06 +02:00
Eric Lippmann
faaff42096 Revert "Introduce PasswordHelper for safer passwords"
This reverts commit f57277aa96ce91a0e6761b04937447b9a2a9a679.

Since we're dropping PHP support for versions lower than 5.6 this class is no longer necessary.
2018-07-03 13:08:06 +02:00
Alexander A. Klimov
088e907f9e Vagrant/Puppet: prevent man-in-the-middle attacks via the EPEL repo 2018-06-29 11:44:56 +02:00
Alexander A. Klimov
db816d3d0b Vagrant/Puppet: prevent man-in-the-middle attacks 2018-06-29 10:38:23 +02:00
Eric Lippmann
966148e8f0
Merge pull request #3463 from kobmaki/feature/Allow-to-interface-with-sqlite-databases-3381
Support SQLite resources
2018-06-28 11:42:00 +02:00
Eric Lippmann
d19d888d9e
Merge pull request #3458 from Icinga/feature/host-and-service-group-grid-1017
Host- and servicegroup grid
2018-06-28 11:40:52 +02:00
Eric Lippmann
fc2374d7c8
Merge pull request #3485 from Icinga/fix/persistent-acks
Respect persistent when acknowledging over API
2018-06-28 11:39:33 +02:00
Eric Lippmann
b12b905076
Merge pull request #3487 from Icinga/fix/web-bootstrap
Bootstrap modules at last
2018-06-28 11:39:12 +02:00
Eric Lippmann
02630c2607 Add vertical-align to sort-controls 2018-06-28 11:27:46 +02:00
Eric Lippmann
88c2fe44e3 Link from the host and service group lists to their grids and vice versa
refs #1017
2018-06-28 11:27:46 +02:00