Xavier Guimard
78852ac337
LEMONLDAP::NG perltidy
2008-12-24 14:57:23 +00:00
Xavier Guimard
13cdc9b8ec
LEMONLDAP::NG : XSS patch not compatible with logout system
2008-12-24 14:55:44 +00:00
Xavier Guimard
2449e92c2d
LEMONLDAP::NG : A site in the protected domain is accepted in $portal->{urldc} even if the site is not declared in the manager
2008-12-24 09:12:53 +00:00
Xavier Guimard
8e6c8de591
LEMONLDAP::NG : I think version 0.9.3 is ready...
2008-12-24 08:32:11 +00:00
Xavier Guimard
5ba1178057
LEMONLDAP::NG : New Makefile in progress. Debian install is broken for now.
2008-12-22 17:49:36 +00:00
Clément Oudot
d28f3036e3
LEMONLDAP::NG : Add icons in input fields
2008-12-18 16:08:03 +00:00
Xavier Guimard
cc07eae107
LEMONLDAP::NG : customFunctions are now shared in macros, groups, headers and rules
2008-12-11 17:02:02 +00:00
Xavier Guimard
a77e385730
LEMONLDAP::NG : little bug in SOAP error()
2008-12-08 10:56:19 +00:00
Xavier Guimard
16a29be9fa
LEMONLDAP::NG : error display in SOAP
2008-12-07 20:07:52 +00:00
Xavier Guimard
b9ba2337e4
LEMONLDAP::NG : now the portal can be called by browser or by SOAP
2008-12-07 14:12:36 +00:00
Xavier Guimard
68d447b422
LEMONLDAP::NG : typo
2008-12-07 12:15:40 +00:00
Xavier Guimard
53dc4bbbf4
LEMONLDAP::NG : * To avoid XSS, 3 controls :
...
1) url must be base64 encoded
2) urldc is serialized on 1 line ("s/[\r\n]//sg")
3) urldc must not contains '"`\0<
* Common/CGI can now intercept SOAP requests
2008-12-07 09:02:44 +00:00
Xavier Guimard
8b4f38e58c
LEMONLDAP::NG : XSS prevention
2008-12-06 10:26:24 +00:00
Xavier Guimard
66c60cc416
LEMONLDAP::NG : * branche 0.9.2 is missing
...
* ' and " are now filtered in url in Portal.pm
2008-12-06 07:27:35 +00:00
Xavier Guimard
5bbe35cedc
LEMONLDAP::NG : To help Doxygen, we have to use "use base" instead of @ISA when possible
2008-12-04 13:53:05 +00:00
Xavier Guimard
5f552f4085
LEMONLDAP::NG : minnor things
2008-12-03 18:30:57 +00:00
Xavier Guimard
b8905b4247
LEMONLDAP::NG : * bug correction : AuthLDAP can now be used without UserDBLDAP
2008-12-03 16:43:31 +00:00
Clément Oudot
35df5dddb8
LEMONLDAP::NG : Enforce XSS protection by deleting bad urls
2008-12-03 16:41:30 +00:00
Xavier Guimard
24a14caeda
LEMONLDAP::NG : * Security fix : redirections in portal must be in protected sites
...
* perltidy in Manager/Sessions.pm
* Doxygen in progress...
2008-12-03 16:05:27 +00:00
Xavier Guimard
1af1632c72
LEMONLDAP::NG : minor security fix : PE_USERNOTFOUND has not to be used
2008-12-03 13:30:37 +00:00
Xavier Guimard
fbc8b7bfd2
LEMONLDAP::NG : * security fix => XSS
...
* Begin Doxygen documentation
2008-12-03 13:27:30 +00:00
Xavier Guimard
6dc275710c
LEMONLDAP::NG : * avoid a little warning in tests
...
* Manager/Sessions.pm and purgeCentralCache now use the same Apache::Session get_key_from_all_sessions() function
2008-12-01 17:21:34 +00:00
Xavier Guimard
de7edc7387
LEMONLDAP::NG : better manner to delete cookie
2008-12-01 13:39:52 +00:00
Xavier Guimard
d7bbb44924
LEMONLDAP::NG : * change default value for existing sessions : now, it's PE_DONE
...
* after POST and logout, Portal generates a redirection to itself unless an url is given. This help MSIE to relog after logout
2008-12-01 09:36:02 +00:00
Xavier Guimard
96e625a29d
LEMONLDAP::NG : binmod(STDOUT,'utf8') has to be called at each request
2008-11-26 11:20:36 +00:00
Xavier Guimard
ccbb0a12e0
LEMONLDAP::NG : * eval+abort in XML parsing (to avoid die include in XML::LibXML)
...
* Correct use of UTF8 : a apps-list.xml UTF8 encoded was not displayed correctly
2008-11-26 11:11:03 +00:00
Xavier Guimard
9b46d1fba0
LEMONLDAP::NG : * Portal/Menu.pm depends from XML::LibXML
...
* Links in Debian examples installation
2008-11-26 07:40:42 +00:00
Xavier Guimard
d99ef1ba3f
LEMONLDAP::NG : web form in a distinct file
2008-11-24 14:06:54 +00:00
Xavier Guimard
a72eebdd81
LEMONLDAP::NG : Notification system skeleton
2008-11-24 06:57:18 +00:00
Xavier Guimard
5926aed0e7
LEMONLDAP::NG : COMMIT in DBI.pm and pb in make test
2008-11-22 18:09:57 +00:00
Xavier Guimard
2725f06fd3
LEMONLDAP::NG : * Handler/SharedConf.pm is more simple now since it use the new Conf.pm capabilities
...
* CGIs now use abort() instead of die
* debug system in COnf.pm (set "LogLevel debug" in Apache)
2008-11-21 17:51:52 +00:00
Xavier Guimard
63f196078b
LEMONLDAP::NG : die replaced by $self->abort in CGIs
2008-11-21 07:27:08 +00:00
Xavier Guimard
ac87a4b49e
LEMONLDAP::NG : removing old feature : LDAP filter in groups
2008-11-20 18:13:27 +00:00
Xavier Guimard
b5c2abb2a0
LEMONLDAP::NG : customFunctions called "package::function" where not correctly interpreted
2008-11-19 11:19:06 +00:00
Clément Oudot
19b5fa1190
LEMONLDAP::NG : fix bug #311849
2008-11-18 12:47:30 +00:00
Xavier Guimard
cae4cbade0
LEMONLDAP::NG : New module Lemonldap::NG::Common. It contains Conf.pm and Cie
2008-11-17 16:59:56 +00:00
Xavier Guimard
dd0c815795
LEMONLDAP::NG : one more bug...
2008-11-17 15:12:17 +00:00
Xavier Guimard
e42c8b263f
LEMONLDAP::NG : little bugs in customFunctions
2008-11-17 15:06:58 +00:00
Xavier Guimard
d88ae29227
LEMONLDAP::NG : new customFunctions feature (+ perltidy everywhere)
2008-11-17 14:02:50 +00:00
Clément Oudot
e5d13fdf17
LEMONLDAP::NG : Add Sessions Explorer in Application Menu
2008-11-16 12:40:28 +00:00
Xavier Guimard
f399324f18
LEMONLDAP::NG : little hook in Menu.pm
2008-11-14 07:16:26 +00:00
Xavier Guimard
7d6989a4a6
LEMONLDAP::NG : * uri in Menu.pm can now contains user datas
...
* protection documentation in Sessions.pm example file
2008-11-12 16:09:35 +00:00
Xavier Guimard
1aafc1049c
LEMONLDAP::NG : Debian installation in progress...
2008-11-12 15:35:27 +00:00
Clément Oudot
5c7468b6e5
LEMONLDAP::NG : correct bug on anonymous manager authentication and no ppolicy authentication
2008-11-05 21:26:37 +00:00
Xavier Guimard
e42f1febef
LEMONLDAP::NG : * IP view in Manager/Sessions.pm
...
* Bug in CGI.pm : local cache was erased each time
* Bug in purgeCentralCache : timeout was always 7200
2008-11-05 14:55:02 +00:00
Xavier Guimard
a75e882741
LEMONLDAP::NG : New module Sessions.pm to manage sessions
2008-11-04 16:35:16 +00:00
Clément Oudot
9e2a494da5
LEMONLDAP::NG : password can now be stored in session
2008-10-16 07:35:42 +00:00
Clément Oudot
7a7ad20ed7
LEMONLDAP::NG : put all configuration in /etc/lemonldap-ng/
2008-10-13 20:53:06 +00:00
Clément Oudot
9db86c4def
LEMONLDAP::NG : Use FAMFAMFAM icons in pastel skin
2008-10-13 20:36:09 +00:00
Clément Oudot
73f531fb43
LEMONLDAP::NG : minor bugs in _LDAP.pm
2008-10-08 09:40:24 +00:00