14175 Commits

Author SHA1 Message Date
Alexander A. Klimov
f8b82d9472 Icinga.Loader#onFailure(): on 401, reload the whole page
instead of rendering 401 responses to all containers.

(cherry picked from commit 83459934807ee72b4a5c2c0336b7909871d875ba)
2025-07-08 16:57:05 +02:00
Sukhwinder Dhillon
d3331dd300 Don't let active .nav-level-2 menu item overlap the config nav flyout
- Set higher z-index than `#sidebar.menu .nav-level-2`

(cherry picked from commit 09df8dcc5a3ef00cea4a94f08a5ed66b4d2d0e65)
2025-07-08 16:50:31 +02:00
Johannes Meyer
d7ec19d829 StyleSheet: Do not rely on config to trigger auth
fixes #5385

(cherry picked from commit 5d71d09e548e048e8b275afc203cfa1bc2707ba8)
2025-07-08 16:47:32 +02:00
Johannes Meyer
6d18f00ed0 php: Try phpunit 9.6 2025-07-08 16:03:45 +02:00
Johannes Meyer
0f7c0284ca php: Still use thirdparty snapshot on php84 2025-07-08 15:54:55 +02:00
Johannes Meyer
3988542ed6 php: Run on support branches and php84, pin lib versions 2025-07-08 15:48:44 +02:00
Florian Strohmaier
3ed613b1d2 menu.less: Make caret appear connected to main viewport
(cherry picked from commit d56757f20f37c2c435476f8e726416930009c647)
2025-07-08 15:36:24 +02:00
Jan Schuppik
8655bffe87 Fix: spacing and text-breaking (#5355)
Fix #5244

(cherry picked from commit 750948a729d4ea5e092dba761f55b2ccc0a43834)
2025-07-08 15:36:01 +02:00
Johannes Meyer
f288ad2a1d css: Center icons in collapsed menu with and without a scrollbar
(cherry picked from commit 9a9113bd2b8825c869684536cb116cc8ef35ceb6)
2025-07-08 15:33:46 +02:00
Johannes Rauh
ad5625ff95 Replace search icon png with fontawesome icon
(cherry picked from commit aa7a60c8933e50d63371e6de4ee82a2adaf30ee8)
2025-07-08 15:32:10 +02:00
Sukhwinder Dhillon
7db0dbd7e5 ServicestatusQuery: Add missing support for relative time filter for (host|service)_last_time_* columns
(cherry picked from commit 0eea5cae51ec377085845914cd4f03729571487c)
2025-07-08 15:32:00 +02:00
Jan Schuppik
cdc60466b1 Fix: split fpm-uri flag in socket and url flag (#5364)
fixes #5249

(cherry picked from commit 85621487e86a400fd650e6797804ebadc6c9ec92)
2025-07-08 15:31:49 +02:00
Alexander Aleksandrovič Klimov
67ff0546c0 Disable deprecation warnings unless ICINGAWEB_ENVIRONMENT is set to "dev" (#5359)
in ApplicationBootstrap#setupErrorHandling(). In webrouter.php disable
them unconditionally (until ApplicationBootstrap#setupErrorHandling())
not to duplicate the check. ApplicationBootstrap#setupErrorHandling())
is called pretty early, so we won't miss much.

fixes #5117

* In addition, this provides #5269 and mitigates #5152 in production
where ICINGAWEB_ENVIRONMENT isn't set.

(cherry picked from commit 5333f2deb71597b2907d77f6eb06ff6636560218)
2025-07-08 15:31:35 +02:00
Johannes Meyer
879211df2e menu: Align badges correctly and ellipsize text again
(cherry picked from commit eafb6c95b7364965cd3e2ff7667c8466b6a802ff)
2025-07-08 15:31:20 +02:00
Johannes Meyer
cc295966f0 Fix menu caret positioning (#5363)
(cherry picked from commit 6c57d3297991297281cddbed701df097a9701910)
2025-07-08 15:28:17 +02:00
Silas
ff04a2ea43
Fix that CSV exports contain empty strings instead of zeros 2025-04-07 13:46:21 +02:00
Johannes Meyer
6c7f1e5466 Dashlet: Properly embed iframe urls
fixes #5346
2025-04-01 11:19:00 +02:00
Johannes Meyer
219b11789b
Release/v2.12.4 (#5345) v2.12.4 2025-03-26 16:42:31 +01:00
Johannes Meyer
41bbf6e35d Update CHANGELOG.md 2025-03-26 16:41:23 +01:00
Johannes Meyer
e98a776509 Raise version to 2.12.4 2025-03-26 16:41:23 +01:00
Johannes Meyer
1ddd04df50 DbUserBackend: Fix broken password hash fetch routine
fixes #5343
2025-03-26 16:40:48 +01:00
Johannes Meyer
15e74ebb0c
Release/v2.12.3 (#5342) v2.12.3 2025-03-26 10:39:37 +01:00
Johannes Meyer
53fa6d57e1 Raise ipl requirement 2025-03-26 10:35:11 +01:00
Johannes Meyer
c07a45096c Update CHANGELOG.md 2025-03-26 10:31:04 +01:00
Johannes Meyer
01fb35dd4a Raise version to 2.12.3 2025-03-26 10:31:04 +01:00
Johannes Meyer
ec40efe157 Only open trusted iframe sources by default
Trusted in this case means, it was Icinga Web that
rendered a link and the user followed it. Whether
a source is trustworthy or not is detected by use
of the user's session id to hash it combined with
the source similar to how CSRF tokens are assembled.
2025-03-26 10:25:31 +01:00
Johannes Meyer
aad020511f js: Only load URLs prefixed by the base URL 2025-03-26 10:25:05 +01:00
Johannes Meyer
484bd26d63 Window: Only accept valid window IDs 2025-03-26 10:24:17 +01:00
Johannes Meyer
2b08d88edf Url: Always compare host and port to identify external urls 2025-03-26 10:23:31 +01:00
Johannes Meyer
191444ccd9 Pdf: Ensure dompdf can create temporary files
This is required since dompdf seems to automatically load
our custom font and complains otherwise.
2025-03-25 13:59:18 +01:00
Johannes Meyer
1a1f96be49 php: Install the same vendor dependencies for all php versions 2025-03-25 13:51:59 +01:00
Sukhwinder Dhillon
f1fe2525bd tabs.less: Don't let icinga-loader element overlap the dropdown nav 2025-03-20 17:48:37 +01:00
Johannes Meyer
d56d10c712 monitoring: Use the (new) icon for the reporting section
The same that the reporting module is using now
2025-03-20 16:58:45 +01:00
Markus Opolka
6c8453062f Fix doc module markdown table rows in light mode
- Replaced the gradient mixin with a simple color
  for odd rows. This fixes and markdown table rows
  in light mode and - since there are very gradients
  in general - it makes the overall look more uniform.

See https://github.com/Icinga/icingaweb2/issues/5320
2025-03-20 16:39:13 +01:00
Johannes Meyer
db851bbe33 Don't mention Twitter anymore, it's gone now for good 2025-03-20 16:36:52 +01:00
Johannes Meyer
d86ede517f
Fix case sensitive authentication with postgres (#5338)
fixes #5223
2025-03-20 16:34:30 +01:00
Johannes Meyer
92dad17a2b DbUserGroupBackend: Match memberships case-insensitive on pgsql 2025-03-20 16:24:21 +01:00
Johannes Meyer
13c9a73842 DbUserBackend: Match usernames case-insensitive on pgsql 2025-03-20 16:24:21 +01:00
Johannes Meyer
acfad5ae52
Fix unescaped error messages (#5329)
In both cases the input, which wasn't escaped before, comes from a form
element that doesn't allow any user to change its content. An ordinary
user would need to access the DOM in order to do that.

Both forms are protected by CSRF, so this mitigates any potential
exploit as well.
2025-03-20 16:20:21 +01:00
Johannes Meyer
14c0748693 Escape resource identifier in monitoring backend form 2025-03-20 14:56:53 +01:00
Johannes Meyer
02dece2a35 Escape invalid module name in error messages 2025-03-20 14:56:53 +01:00
Sukhwinder Dhillon
c6c1e28350 RolesConfig: Add missing column name for quick search 2025-03-20 14:30:45 +01:00
Blerim Sheqa
79971cb1a6 Fix broken links 2025-01-14 11:14:02 +01:00
Johannes Meyer
ca2778eb46 form.js: Ignore buttons again when being asked to render content
This slipped through, as I thought the CSS selector `:input`, which
was used previously, is invalid. Although, it's a jQuery specific
selector -.-, which was also previously used.

fixes #5293
2024-11-28 16:57:19 +01:00
Yoda-BZH
4eadfd0ace
View: Consider letter a legacy icon name 2024-11-28 16:55:59 +01:00
Johannes Meyer
7f9217b052
Release/v2.12.2 (#5289) v2.12.2 2024-11-13 10:03:28 +01:00
Johannes Meyer
b403918cc1 Raise version to 2.12.2 2024-11-13 09:59:05 +01:00
Johannes Meyer
f70d820f3e Update AUTHORS and .mailmap 2024-11-13 09:59:05 +01:00
Johannes Meyer
311ba2eb6f Update CHANGELOG.md 2024-11-13 09:59:05 +01:00
Tobias Bauriedel
4baf630156
Add hint for comments in ini files (#5250)
Adds a small hint about comments in .ini files.

---------

Co-authored-by: Johannes Meyer <johannes.meyer@icinga.com>
2024-11-06 14:08:39 +01:00