Christophe Maudoux
|
1d2db0594f
|
Tidy
|
2021-07-04 22:13:32 +02:00 |
|
Christophe Maudoux
|
466b6a3241
|
Avoid to store passwords (#2557)
|
2021-07-04 22:07:21 +02:00 |
|
Yadd
|
4a61606ee8
|
typo
|
2021-06-29 16:55:29 +02:00 |
|
Yadd
|
b0e7ba5d8a
|
Fix URIRE
|
2021-06-29 16:50:39 +02:00 |
|
Yadd
|
83b45db614
|
Fix versions
|
2021-06-28 15:36:29 +02:00 |
|
Yadd
|
3b8222ae8a
|
Fix trusted domains regex (#2535)
|
2021-06-25 08:59:52 +02:00 |
|
Maxime Besson
|
15054b9038
|
Extra precaution for #2539
|
2021-06-25 07:54:03 +02:00 |
|
Maxime Besson
|
cf70ebe293
|
Stop triggering XSS protection on escaped commas
Commas are safe in HTML and JS, so there is no risk of XSS
|
2021-06-24 20:16:20 +02:00 |
|
Maxime Besson
|
4a2a786598
|
Fix CDA wildcard regexp (#2534)
|
2021-06-24 19:02:17 +02:00 |
|
Maxime Besson
|
dbd65d1b2b
|
Handle wildcards in CDA check (#2534)
|
2021-06-24 16:59:20 +02:00 |
|
Yadd
|
3732cdcc19
|
Better URL parsing (#2477)
|
2021-06-24 14:33:27 +02:00 |
|
Clément OUDOT
|
bdeb1e70d9
|
Allow to display password value in login form (#2454)
|
2021-06-16 20:50:11 +02:00 |
|
Maxime Besson
|
63cd5ffb40
|
Revert 652d8ba9bc
See #2482
|
2021-06-11 08:53:26 +02:00 |
|
Christophe Maudoux
|
de3164fea7
|
Fix button top margin (#1976)
|
2021-05-01 22:35:56 +02:00 |
|
Christophe Maudoux
|
fc481d40d2
|
Rename param (#1976)
|
2021-04-30 22:36:31 +02:00 |
|
Maxime Besson
|
cd97d3b922
|
Refactor $req->{cspFormAction} (#2513)
|
2021-04-23 09:02:24 +02:00 |
|
Maxime Besson
|
a876d978af
|
Suggest improvement for next major version
|
2021-04-23 09:02:24 +02:00 |
|
Maxime Besson
|
913ebbd556
|
fix missing domain in child-src during SAML POST logout (#2513)
|
2021-04-23 09:02:24 +02:00 |
|
Maxime Besson
|
5ba0c11b58
|
Add helper to build CSP host list (#2513)
|
2021-04-23 09:02:24 +02:00 |
|
Christophe Maudoux
|
21ced5dbad
|
Fix speChars test, typos & display (#2509)
|
2021-04-14 13:28:12 +02:00 |
|
Maxime Besson
|
2c8cbbefe6
|
"xxx is allowed to update 2FA" should be a debug message
|
2021-03-30 16:32:14 +02:00 |
|
Maxime Besson
|
c0f8e8f46b
|
Skip serializing psgi streams when saving request
It can interfere with unit tests in some cases, like #2000
|
2021-03-15 21:18:08 +01:00 |
|
Yadd
|
3883c5abff
|
Fix vhost regexp (#2477)
|
2021-03-02 07:57:21 +01:00 |
|
Xavier Guimard
|
b5c0ca94c4
|
CrowdSec plugin (#2451)
|
2021-02-19 07:40:36 +01:00 |
|
Christophe Maudoux
|
5f7981e256
|
Improve error message & unit test (#2458)
|
2021-02-16 22:04:38 +01:00 |
|
Christophe Maudoux
|
1757cf5337
|
Merge branch 'CheckDevOps-plugin' into 'v2.0'
Check DevOps file plugin (#2458)
See merge request lemonldap-ng/lemonldap-ng!178
|
2021-02-16 18:46:19 +00:00 |
|
Christophe Maudoux
|
1f66e03969
|
Append an option to download rules.json file from remote server (#2458)
|
2021-02-16 12:15:18 +01:00 |
|
Maxime Besson
|
31d0f26174
|
Clear hook list on configuration reload (#2463)
|
2021-02-15 15:13:53 +01:00 |
|
Christophe Maudoux
|
6e1efc8bb5
|
WIP: CheckDevOps plugin skeleton (#2458)
|
2021-02-12 18:11:37 +01:00 |
|
Maxime Besson
|
4408852d33
|
tidy
|
2021-02-12 18:10:53 +01:00 |
|
Maxime Besson
|
424cf91e88
|
Fix error message on missing template dir (#2460)
|
2021-02-12 18:10:53 +01:00 |
|
Christophe Maudoux
|
4515768513
|
Display explicit error message (#2329)
|
2021-02-10 22:27:12 +01:00 |
|
Christophe Maudoux
|
55071d5210
|
Keep old behavior if no JS (#1976)
|
2021-02-05 18:05:59 +01:00 |
|
Maxime Besson
|
090fad7475
|
Add warning when hook stack encounters error
|
2021-02-01 18:15:55 +01:00 |
|
Christophe Maudoux
|
ea80b4df0e
|
Use Ajax request (#1976)
|
2021-01-30 23:22:03 +01:00 |
|
Maxime Besson
|
84684b3b5b
|
Avoid loading plugins when their config is an empty hash (#2448)
|
2021-01-28 11:42:36 +01:00 |
|
Xavier Guimard
|
39518079d5
|
Clean "afterSub" and "aroundSub" during reload (#2448)
|
2021-01-27 17:30:54 +01:00 |
|
Xavier Guimard
|
4455f13976
|
Clean "afterSub" and "aroundSub" during init (#2448)
|
2021-01-27 15:28:34 +01:00 |
|
Christophe Maudoux
|
377fe4796c
|
Update version (#1976)
|
2021-01-23 23:11:57 +01:00 |
|
Christophe Maudoux
|
7c3955b2aa
|
Allow input type select with FindUser (#1976)
|
2021-01-23 23:00:23 +01:00 |
|
Christophe Maudoux
|
e4444c907f
|
Append CheckUser normalized headers option & Improve unit test (#2436)
|
2021-01-08 18:38:05 +01:00 |
|
Christophe Maudoux
|
c0f71ee0f1
|
Fix FindUSer with Choice (#1976)
|
2020-12-27 13:29:10 +01:00 |
|
Christophe Maudoux
|
406fdbc54b
|
Append unit test if Impersonation is missing (#1976)
|
2020-12-26 15:27:25 +01:00 |
|
Christophe Maudoux
|
f956810e48
|
Redirect to Portal (#1976)
|
2020-12-23 22:47:08 +01:00 |
|
Christophe Maudoux
|
bfcdd370df
|
Merge branch 'v2.0' into findUser
|
2020-12-21 21:11:55 +01:00 |
|
Maxime Besson
|
ed0be42c93
|
Merge branch 'WIP-plugin-hooks-2359' into 'v2.0'
Plugin hook system to extend issuers (and maybe more)
See merge request lemonldap-ng/lemonldap-ng!166
|
2020-12-21 16:35:03 +01:00 |
|
Christophe Maudoux
|
4d04672c20
|
WIP: FindUser skeleton (#1976)
|
2020-12-20 22:54:35 +01:00 |
|
Christophe Maudoux
|
652d8ba9bc
|
Prevent authentication on backend if account is locked (#2243)
|
2020-12-16 22:49:41 +01:00 |
|
Maxime Besson
|
9ba6938e90
|
Show a friendlier error message when a module fails init (#2410)
|
2020-12-07 16:59:48 +01:00 |
|
Christophe Maudoux
|
c2266720f9
|
Unauthenticated logout request with route & improve unit test (#2342)
|
2020-12-06 11:21:11 +01:00 |
|