14141 Commits

Author SHA1 Message Date
Johannes Meyer
db851bbe33 Don't mention Twitter anymore, it's gone now for good 2025-03-20 16:36:52 +01:00
Johannes Meyer
d86ede517f
Fix case sensitive authentication with postgres (#5338)
fixes #5223
2025-03-20 16:34:30 +01:00
Johannes Meyer
92dad17a2b DbUserGroupBackend: Match memberships case-insensitive on pgsql 2025-03-20 16:24:21 +01:00
Johannes Meyer
13c9a73842 DbUserBackend: Match usernames case-insensitive on pgsql 2025-03-20 16:24:21 +01:00
Johannes Meyer
acfad5ae52
Fix unescaped error messages (#5329)
In both cases the input, which wasn't escaped before, comes from a form
element that doesn't allow any user to change its content. An ordinary
user would need to access the DOM in order to do that.

Both forms are protected by CSRF, so this mitigates any potential
exploit as well.
2025-03-20 16:20:21 +01:00
Johannes Meyer
14c0748693 Escape resource identifier in monitoring backend form 2025-03-20 14:56:53 +01:00
Johannes Meyer
02dece2a35 Escape invalid module name in error messages 2025-03-20 14:56:53 +01:00
Sukhwinder Dhillon
c6c1e28350 RolesConfig: Add missing column name for quick search 2025-03-20 14:30:45 +01:00
Blerim Sheqa
79971cb1a6 Fix broken links 2025-01-14 11:14:02 +01:00
Johannes Meyer
ca2778eb46 form.js: Ignore buttons again when being asked to render content
This slipped through, as I thought the CSS selector `:input`, which
was used previously, is invalid. Although, it's a jQuery specific
selector -.-, which was also previously used.

fixes #5293
2024-11-28 16:57:19 +01:00
Yoda-BZH
4eadfd0ace
View: Consider letter a legacy icon name 2024-11-28 16:55:59 +01:00
Johannes Meyer
7f9217b052
Release/v2.12.2 (#5289) v2.12.2 2024-11-13 10:03:28 +01:00
Johannes Meyer
b403918cc1 Raise version to 2.12.2 2024-11-13 09:59:05 +01:00
Johannes Meyer
f70d820f3e Update AUTHORS and .mailmap 2024-11-13 09:59:05 +01:00
Johannes Meyer
311ba2eb6f Update CHANGELOG.md 2024-11-13 09:59:05 +01:00
Tobias Bauriedel
4baf630156
Add hint for comments in ini files (#5250)
Adds a small hint about comments in .ini files.

---------

Co-authored-by: Johannes Meyer <johannes.meyer@icinga.com>
2024-11-06 14:08:39 +01:00
Johannes Meyer
9f6450999d
Fix sort roles by name (#5285)
fixes #4789
2024-11-05 09:19:04 +01:00
Johannes Meyer
8551fffd4f roles: Fix default sort rule by name 2024-11-05 09:16:21 +01:00
Johannes Meyer
aba56d8ef1 RoleController: Clean up sort rules
* Removes `permissions` from sort rules
* Adds `parent` to filter and sort rules
2024-11-05 09:16:21 +01:00
Johannes Meyer
1612b78af6 RoleController: Remove todos, the issue is closed 2024-11-05 09:16:21 +01:00
Johannes Meyer
01bcf71e37 ArrayDatasource: Restore order by key column
Broke with 384d9535a990c23fef3abc73657cb15931c2eba5
2024-11-05 09:16:21 +01:00
Johannes Meyer
eea50d7d6b CustomVarTable: Let the user subgroups fully collapse
resolves #5256
2024-11-04 16:50:24 +01:00
Johannes Meyer
8f1eaf0c7b CustomVarRendererHook: Log an exception's message and location
fixes #5258
2024-11-04 16:23:52 +01:00
Johannes Meyer
eef276be93 js: Use a submit event's submitter property to identify the submit button 2024-11-04 16:07:10 +01:00
Florian Strohmaier
48dcb051d1 CSS: Set correct height for input[type=“datetime-local”] 2024-11-04 16:06:54 +01:00
Alexander Aleksandrovič Klimov
11251481dc ApplicationConfigForm: fix typo
Fix a consecutive "to" in a form element description.
2024-11-04 14:20:24 +01:00
Alexander Aleksandrovič Klimov
2221b27371 Don't rpm --import https://packages.icinga.com/icinga.key
for the same security reasons we don't use apt-key add anymore for: https://blog.cloudflare.com/dont-use-apt-key

Our repos already reference https://packages.icinga.com/icinga.key and both RPM distro families properly handle that.
2024-11-04 14:19:03 +01:00
Alexander Aleksandrovič Klimov
605b3568d2 .deb: let user install icinga-archive-keyring package 2024-11-04 14:02:35 +01:00
Johannes Meyer
e12574f328
navigation/dashboard.phtml: Use ipl-web's Icon for fa- icons (#5278)
resolves #5277
2024-11-04 10:29:27 +01:00
Johannes Meyer
e34c174db9 url.php: Add partial support for fontawesome
Partial because the helper method is not the preferred way
anymore to create an icon. So I simplified the detection
to only check whether the given icon is a legacy one, as
those are smaller in number. Though, this leads to some fa
icons being identified as legacy, as the names equal. But,
it's the legacy helper after all... Anyone wanting to make
sure to get fontawesome icons, must add the `fa-` prefix.
2024-11-04 10:26:06 +01:00
Johannes Meyer
526de93c89 navigation/dashboard.phtml: Use ipl-web's Icon for fa- icons 2024-11-04 10:26:06 +01:00
Yoda-BZH
41a2aed0b5 fix(csv): fix #5279 always force subject to be a string
When performing a str_replace, subject should always be a string. If
passing a non-existent column or empty column, subject may be null

This ensure str_replace is called when subject is actually a string (not
NULL)
2024-11-04 10:23:23 +01:00
Sukhwinder Dhillon
9f14c32b71 About Page: Suppress the MigrationManager exception 2024-11-04 09:20:00 +01:00
log1-c
2864e60d78
Corrected kiosk mode config (#5281) 2024-10-30 11:25:54 +01:00
moreamazingnick
bc47867f20
Fix PluginOutputHookImplementation gets called twice #5271 (#5272) 2024-10-08 09:25:02 +02:00
Robert Silén
c4b6e4bdda
add MariaDB to installation doc (#5247)
as discussed in https://github.com/Icinga/icingaweb2/issues/5237
2024-08-15 16:43:58 +02:00
Sukhwinder Dhillon
cc9572d9c5 Flyout menu: Render menu bottom-up if it exceeds the viewport height 2024-08-14 16:29:33 +02:00
Johannes Meyer
4ea3bebe07
Fix duplicate dashlets (#5245)
fixes #5203
2024-08-13 15:39:56 +02:00
Johannes Meyer
81a3be74f3 Dashboard: Don't merge already existing dashlets
fixes #5203
2024-08-13 11:37:12 +02:00
Johannes Meyer
d06ce98d2f IniWriter: Avoid deprecation notice upon write errors 2024-08-13 11:36:31 +02:00
Johannes Meyer
c27b43fb75 css: Increase settings flyout toggle hover area 2024-08-08 15:40:59 +02:00
Markus Opolka
66fb1ea57d
Add Icinga Director to list of components capable of strict CSP (#5226)
Hi, 

I updated the docs for the Content Security Policy (CSP). The Director
was missing from the list.

Was implemented in
https://github.com/Icinga/icingaweb2-module-director/pull/2857

Edit: I also added a hint about how to enable CSP in Icinga Web.

Cheers
Markus
2024-08-08 11:20:54 +02:00
Sukhwinder Dhillon
41a92e9d87 Css: Do not allow :hover to affect the .active list elements 2024-08-07 16:29:40 +02:00
Johannes Meyer
781b97fc41
removed gendered language (#5169) 2024-08-07 14:40:32 +02:00
Johannes Meyer
9ef4c71cec js: Fix error on app startup
jQuery seems to re-cycle event object references oO
2024-08-07 14:35:14 +02:00
Johannes Meyer
97f8767970 js: Only add .impact to a container's content 2024-08-07 14:33:14 +02:00
Sukhwinder Dhillon
62cae50f1e DbResourcePage: Warn the user if Icinga DB is used as configuration database 2024-08-07 14:23:13 +02:00
Sukhwinder Dhillon
c27ca26dad LdapConnection: Access array key only if its set
The key `$controlsReturned[LDAP_CONTROL_PAGEDRESULTS]` can be undefined
when `$controls[LDAP_CONTROL_PAGEDRESULTS]['iscritical']` is set to false.
2024-08-07 14:05:35 +02:00
Johannes Meyer
f8c08dbfec DeleteDowntimesCommandForm: Ignore 404's
fixes #5183
2024-08-07 13:56:08 +02:00
Johannes Meyer
474f918458 navigation/dashboard: Provide fallback for icingadb items without icon
fixes #5177
2024-08-07 13:41:23 +02:00