Johannes Meyer ec40efe157 Only open trusted iframe sources by default ...

Trusted in this case means, it was Icinga Web that
rendered a link and the user followed it. Whether
a source is trustworthy or not is detected by use
of the user's session id to hash it combined with
the source similar to how CSRF tokens are assembled.

2025-03-26 10:25:31 +01:00

..

Announcement

Fix argument type hints

2023-08-23 10:53:15 +02:00

Controller

ActionController: Always reload window when redirecting to the login

2023-09-28 10:35:18 +02:00

Dom

Ensure Return Type Compatibility with Internal Classes

2022-03-24 12:29:06 +01:00

Form

PhpDoc: Fix incorrect @param and @return type hints

2023-08-23 10:53:15 +02:00

Helper

Remove requiring vendor dependencies

2023-08-09 15:16:16 +02:00

Navigation

Only open trusted iframe sources by default

2025-03-26 10:25:31 +01:00

Paginator

Ensure Return Type Compatibility with Internal Classes

2022-03-24 12:29:06 +01:00

Response

JsonResponse: Fix documentation of sendResponse

2023-09-05 16:19:41 +02:00

Session

Ensure Return Type Compatibility with Internal Classes

2022-03-24 12:29:06 +01:00

View

url.php: Add partial support for fontawesome

2024-11-04 10:26:06 +01:00

Widget

Dashboard: Don't merge already existing dashlets

2024-08-13 11:37:12 +02:00

Announcement.php

Implement announcements

2016-11-29 15:24:34 +01:00

ApplicationStateCookie.php

Introduce ApplicationStateHook

2018-07-09 16:28:25 +02:00

Controller.php

Controller: Fix doc of httpNotFound and httpBadRequest

2024-04-15 13:02:10 +02:00

Cookie.php

Remember me (#4112)

2021-05-21 15:43:06 +02:00

CookieSet.php

Ensure Return Type Compatibility with Internal Classes

2022-03-24 12:29:06 +01:00

FileCache.php

FileCache: Add method to prepare sub directories

2019-06-25 16:18:26 +02:00

Form.php

Revert "Form: Process request parameter _frameUpload"

2022-06-13 15:50:52 +02:00

Hook.php

Really mark class Icinga\Web\Hook deprecated -.-

2022-06-14 14:24:30 +02:00

JavaScript.php

Remove requiring vendor dependencies

2023-08-09 15:16:16 +02:00

LessCompiler.php

Remove the use of unavailable property $this->lessc->importDisabled

2023-08-23 10:53:13 +02:00

Menu.php

Menu.php: Add classes for nav-items to only be shown on mobile

2022-05-12 15:13:16 +02:00

Notification.php

Change all license headers to only reflect a file's year of creation

2016-02-08 15:41:00 +01:00

RememberMe.php

LoginForm: Also disable stay logged in case of no encryption method

2021-08-10 10:09:15 +02:00

RememberMeUserDevicesList.php

Rememberme compatibility with php version 5.6+ (#4472)

2021-07-26 17:37:38 +02:00

RememberMeUserList.php

Rememberme compatibility with php version 5.6+ (#4472)

2021-07-26 17:37:38 +02:00

Request.php

Properly handle window id's and container id's

2020-01-14 10:14:02 +01:00

Response.php

Response: Only preserve showCompact for explicit redirects

2023-10-27 10:15:47 +02:00

Session.php

Don't call session_start() after ini_set()

2018-01-24 17:38:20 +01:00

StyleSheet.php

Introduce migration ListItem & ItemList classes

2023-09-19 14:37:55 +02:00

Url.php

Url: Always compare host and port to identify external urls

2025-03-26 10:23:31 +01:00

UrlParams.php

UrlParams: Fix parameter types of addValues() method

2023-08-23 10:53:15 +02:00

UserAgent.php

Remember me (#4112)

2021-05-21 15:43:06 +02:00

View.php

View: Consider letter a legacy icon name

2024-11-28 16:55:59 +01:00

Widget.php

Widget: Imported class AbstractWidget

2023-08-23 10:53:13 +02:00

Window.php

Window: Only accept valid window IDs

2025-03-26 10:24:17 +01:00

Wizard.php

Wizard: Fix throw exception

2023-08-23 10:53:14 +02:00