723 Commits

Author SHA1 Message Date
Johannes Meyer
9a4a11861a Fix some reflected XSS bugs
fixes #4979

(cherry picked from commit e542982de06be6b7bcab07be4f3a4423e84b8d7a)
2023-01-12 11:19:52 +01:00
Johannes Meyer
d25854ebce Drop class Icinga\Web\Hook\TicketHook 2022-06-14 14:24:30 +02:00
Florian Strohmaier
c536ddb5d8 menu.phtml: Use ConfigMenu 2022-05-12 11:10:59 +02:00
Johannes Meyer
d63f645bd8 Update requirements for PHP 8.1 2022-03-24 15:46:26 +01:00
Johannes Meyer
01f67a78c6 Increase required version of the icinga-php-library 2022-03-23 11:49:06 +01:00
Johannes Meyer
3c48d693ff about: Fix documentation link and use a version dependent one 2022-02-25 12:27:08 +01:00
Florian Strohmaier
c1d0c132f3 about/index: Adjust markup
refs #4328
2022-02-25 11:06:22 +01:00
Sukhwinder Dhillon
2c01f38dec Add icingadb as OR dependecy
Add only if the given module supports icingadb and has monitoring as a requirement
2021-11-10 09:33:48 +01:00
Florian Strohmaier
80f6ab33a8 Error: Add missing </div> for .content element
fixes #4585
2021-11-08 15:52:36 +01:00
Florian Strohmaier
7be774b71d
Dashboard: Add ability to use IPL Icons (#4429) 2021-07-07 17:29:05 +02:00
Johannes Meyer
5ca7a1acb5 about: Change The Icinga Project to Icinga GmbH 2021-07-07 16:30:06 +02:00
Johannes Meyer
c0a5ca6f84 login: Update documentation link 2021-07-07 15:08:53 +02:00
Johannes Meyer
c23a2c8159 login: Use img helper to avoid hardcoding the base url 2021-06-23 07:39:55 +02:00
Florian Strohmaier
f9a801f1a4 Login: Adjust markup for login view redesign 2021-06-23 07:39:55 +02:00
Florian Strohmaier
35e7e85636 Login: Add orb elements 2021-06-23 07:39:55 +02:00
Florian Strohmaier
464e6a0b43 about/index.phtml: Use default icinga logo 2021-06-23 07:39:55 +02:00
Florian Strohmaier
0f8dc461b2 login.phtml: invert icinga logo 2021-06-23 07:39:55 +02:00
Johannes Meyer
0d6da2d859 error/error: Check web2's deps and enhance lib checks 2021-06-07 09:40:40 +02:00
Johannes Meyer
0a0ae95d6c FormDateTime: Enable datetime-picker widget by default 2021-05-17 13:20:43 +02:00
Johannes Meyer
cc65164a67 Adjust global permissions 2021-02-18 11:11:39 +01:00
Johannes Meyer
bdd0f204f0 Auth: Support single inheritance in roles 2021-02-18 11:11:39 +01:00
Johannes Meyer
39e59422f4 error/error: Show a hint to check dependencies if there are unmet ones 2020-11-18 13:21:34 +01:00
Johannes Meyer
32f9ce8b7c config/module: Show library dependencies and unmet ones 2020-11-18 13:21:34 +01:00
Johannes Meyer
7af8bf351c about: List loaded libraries 2020-11-18 13:21:33 +01:00
Eric Lippmann
63514eeeb7 Add controls to the roles list 2020-05-25 11:09:33 +02:00
Johannes Meyer
cd2ff3d925 announcements/index: Provide a real link to edit an announcement 2020-05-13 12:05:15 +02:00
Philipp Dorschner
aac860b118 update PR based on the feedback 2020-04-09 15:04:10 +02:00
Philipp Dorschner
564fb8c320 Only show edit role link if user has the appropriate permission 2020-04-09 09:52:51 +02:00
Philipp Dorschner
8645035ecc Display the roles of a user 2020-04-09 09:13:44 +02:00
Johannes Meyer
52df0eb399 navigation/dashboard: Fix that an item's properties are not rendered 2019-12-05 15:12:19 +01:00
Johannes Meyer
f98f988aff Remove tristate form element 2019-09-23 08:36:24 +02:00
Johannes Meyer
6e5353fd50 solarized-dark: Let the dashboard settings look less weird 2019-08-12 11:17:12 +02:00
Johannes Meyer
6fbae2d1c0 user/show: Fix wrong class for the limiter and sort control container 2019-07-29 10:19:39 +02:00
Johannes Meyer
ad16fffa94 group/show: Fix wrong class for the limiter and sort control container 2019-07-29 10:19:39 +02:00
Florian Strohmaier
faca0962ef Navigation: Hide search clear button when value is empty
refs #3676
2019-07-29 10:19:39 +02:00
Johannes Meyer
ded84a410a applicationlog: Fix placement of the limiter control 2019-07-29 10:17:59 +02:00
Johannes Meyer
37a972cf75 dashboard: Differentiate between name and title
The former is the original name while title may
be changed by the user. This change is strictly
necessary for the references bug and should also
be introduced when rewriting this mess.

refs #3542
2019-07-18 08:33:35 +02:00
Niko Martini
7abd1b906b Cli: add version command
refs #3763
2019-07-11 08:17:56 +02:00
Johannes Meyer
2b938442c4 announcements/index: Add filter and sort controls
refs #3414
2019-04-16 13:03:54 +02:00
Johannes Meyer
37df008d7f AnnouncementIniRepository: Don't transform retrieved timestamps to DateTime
refs #3414
2019-04-16 13:03:16 +02:00
Markus Frosch
b69c9491ae Remove Google Plus link from About 2019-03-29 10:57:34 +01:00
Andreas Olsson
b504624d4d
Use https:// links on login page
These url changes are all the result of following 301 redirects.
2019-01-26 23:02:25 +01:00
Eric Lippmann
72f2158baa
Merge pull request #3584 from Icinga/fix/usergroups-not-loaded-for-externally-authenticated-users-3583
auth/external: Use a stripped down layout for the logout workaround
2018-11-15 11:29:44 +01:00
Eric Lippmann
1268c16a7f
Merge pull request #3588 from Icinga/fix/problems-the-world-has-and-ever-will
Fix problems the world has and ever will
2018-11-15 11:25:48 +01:00
Michael Friedrich
d1fb3b3674 Update URL to https://icinga.com 2018-10-18 11:02:57 +02:00
Johannes Meyer
7ba0466048 config/module(en|dis)able: Utilize a form instead of a link 2018-10-10 09:44:11 +02:00
Johannes Meyer
4c96da3d56 auth/external: Use a stripped down layout for the logout workaround
We've used the standard layout before which caused a automatic login.
Automatic because the browser saw our js/css <link> tags and accessed
the routes which in turn logged in the user, but only if there's a
enabled module which's configuration.php (or run.php) accesses the
Auth singleton. The stripped down layout provides its own js/css so
there's no need for our full-blown resources.

fixes #3583
2018-10-02 15:24:11 +02:00
Johannes Meyer
84622bf27b Fix some XSS vulnerabilities
Only a real issue with <= IE9 as other browsers properly escape
urls prior transmission.

Signed-off-by: Eric Lippmann <eric.lippmann@icinga.com>
2018-07-16 09:53:30 +02:00
Eric Lippmann
d18d05ccee Introduce ApplicationStateHook
refs #2835
2018-07-09 16:28:25 +02:00
Johannes Meyer
9b76ff5539 servicegrid: Properly handle ?flipped=0
refs #2640
2018-05-07 14:14:34 +02:00