Commit Graph

429 Commits

Author SHA1 Message Date
Xavier Guimard
43120ba4d4 LEMONLDAP::NG : cleanup 2008-12-22 17:50:12 +00:00
Xavier Guimard
5ba1178057 LEMONLDAP::NG : New Makefile in progress. Debian install is broken for now. 2008-12-22 17:49:36 +00:00
Xavier Guimard
82fd48c92e LEMONLDAP::NG : doc update 2008-12-20 07:18:17 +00:00
Xavier Guimard
cb9c75eb79 LEMONLDAP::NG : typo 2008-12-19 18:02:03 +00:00
Clément Oudot
d28f3036e3 LEMONLDAP::NG : Add icons in input fields 2008-12-18 16:08:03 +00:00
Xavier Guimard
c9adec5db5 LEMONLDAP::NG : Little problem in average count. The current minute has not to be taken in account. 2008-12-18 11:18:41 +00:00
Xavier Guimard
8b0058e546 LEMONLDAP::NG : little bug in Proxy.pm and debconf dependency 2008-12-13 17:12:14 +00:00
Xavier Guimard
ebb1d13a2e LEMONLDAP::NG : documentation update 2008-12-13 09:52:53 +00:00
Xavier Guimard
cc07eae107 LEMONLDAP::NG : customFunctions are now shared in macros, groups, headers and rules 2008-12-11 17:02:02 +00:00
Clément Oudot
66fd842630 LEMONLDAP::NG : Remove non created wiki pages from local doc 2008-12-10 16:55:00 +00:00
Clément Oudot
36e38a0af4 LEMONLDAP::NG : Adapt doc.pl to new wiki documentation 2008-12-10 16:24:04 +00:00
Xavier Guimard
a77e385730 LEMONLDAP::NG : little bug in SOAP error() 2008-12-08 10:56:19 +00:00
Xavier Guimard
16a29be9fa LEMONLDAP::NG : error display in SOAP 2008-12-07 20:07:52 +00:00
Xavier Guimard
b9ba2337e4 LEMONLDAP::NG : now the portal can be called by browser or by SOAP 2008-12-07 14:12:36 +00:00
Xavier Guimard
68d447b422 LEMONLDAP::NG : typo 2008-12-07 12:15:40 +00:00
Xavier Guimard
ae392f0276 LEMONLDAP::NG : SOAP Service in progress... 2008-12-07 11:47:38 +00:00
Xavier Guimard
53dc4bbbf4 LEMONLDAP::NG : * To avoid XSS, 3 controls :
1) url must be base64 encoded
                  2) urldc is serialized on 1 line ("s/[\r\n]//sg")
                  3) urldc must not contains '"`\0<
                * Common/CGI can now intercept SOAP requests
2008-12-07 09:02:44 +00:00
Xavier Guimard
8b4f38e58c LEMONLDAP::NG : XSS prevention 2008-12-06 10:26:24 +00:00
Xavier Guimard
66c60cc416 LEMONLDAP::NG : * branche 0.9.2 is missing
* ' and " are now filtered in url in Portal.pm
2008-12-06 07:27:35 +00:00
Xavier Guimard
789a39df97 LEMONLDAP::NG : * Support for Apache::Session::PHP (for Manager/Session and purgeCentralCache)
* better cache control for Common::CGI.pm::header_public()
                * bug with the manager introduced previously
2008-12-05 16:30:27 +00:00
Xavier Guimard
5bbe35cedc LEMONLDAP::NG : To help Doxygen, we have to use "use base" instead of @ISA when possible 2008-12-04 13:53:05 +00:00
Xavier Guimard
5f552f4085 LEMONLDAP::NG : minnor things 2008-12-03 18:30:57 +00:00
Xavier Guimard
b8905b4247 LEMONLDAP::NG : * bug correction : AuthLDAP can now be used without UserDBLDAP 2008-12-03 16:43:31 +00:00
Clément Oudot
35df5dddb8 LEMONLDAP::NG : Enforce XSS protection by deleting bad urls 2008-12-03 16:41:30 +00:00
Xavier Guimard
e4603c4276 LEMONLDAP::NG : Regexp::Assemble dependency in Debian 2008-12-03 16:09:33 +00:00
Xavier Guimard
24a14caeda LEMONLDAP::NG : * Security fix : redirections in portal must be in protected sites
* perltidy in Manager/Sessions.pm
                * Doxygen in progress...
2008-12-03 16:05:27 +00:00
Xavier Guimard
1af1632c72 LEMONLDAP::NG : minor security fix : PE_USERNOTFOUND has not to be used 2008-12-03 13:30:37 +00:00
Xavier Guimard
fbc8b7bfd2 LEMONLDAP::NG : * security fix => XSS
* Begin Doxygen documentation
2008-12-03 13:27:30 +00:00
Xavier Guimard
e1e67bae80 LEMONLDAP::NG : Javascript typo: little error in Manager 2008-12-02 13:56:45 +00:00
Xavier Guimard
d63589f919 LEMONLDAP::NG : typo... 2008-12-01 18:27:30 +00:00
Xavier Guimard
f4aa93f57f LEMONLDAP::NG : Debian installation in progress... 2008-12-01 17:48:37 +00:00
Xavier Guimard
6dc275710c LEMONLDAP::NG : * avoid a little warning in tests
* Manager/Sessions.pm and purgeCentralCache now use the same Apache::Session get_key_from_all_sessions() function
2008-12-01 17:21:34 +00:00
Xavier Guimard
de7edc7387 LEMONLDAP::NG : better manner to delete cookie 2008-12-01 13:39:52 +00:00
Xavier Guimard
d7bbb44924 LEMONLDAP::NG : * change default value for existing sessions : now, it's PE_DONE
* after POST and logout, Portal generates a redirection to itself unless an url is given. This help MSIE to relog after logout
2008-12-01 09:36:02 +00:00
Xavier Guimard
96e625a29d LEMONLDAP::NG : binmod(STDOUT,'utf8') has to be called at each request 2008-11-26 11:20:36 +00:00
Xavier Guimard
ccbb0a12e0 LEMONLDAP::NG : * eval+abort in XML parsing (to avoid die include in XML::LibXML)
* Correct use of UTF8 : a apps-list.xml UTF8 encoded was not displayed correctly
2008-11-26 11:11:03 +00:00
Xavier Guimard
9b46d1fba0 LEMONLDAP::NG : * Portal/Menu.pm depends from XML::LibXML
* Links in Debian examples installation
2008-11-26 07:40:42 +00:00
Xavier Guimard
d99ef1ba3f LEMONLDAP::NG : web form in a distinct file 2008-11-24 14:06:54 +00:00
Xavier Guimard
a72eebdd81 LEMONLDAP::NG : Notification system skeleton 2008-11-24 06:57:18 +00:00
Xavier Guimard
5926aed0e7 LEMONLDAP::NG : COMMIT in DBI.pm and pb in make test 2008-11-22 18:09:57 +00:00
Xavier Guimard
2725f06fd3 LEMONLDAP::NG : * Handler/SharedConf.pm is more simple now since it use the new Conf.pm capabilities
* CGIs now use abort() instead of die
                * debug system in COnf.pm (set "LogLevel debug" in Apache)
2008-11-21 17:51:52 +00:00
Xavier Guimard
63f196078b LEMONLDAP::NG : die replaced by $self->abort in CGIs 2008-11-21 07:27:08 +00:00
Xavier Guimard
ac87a4b49e LEMONLDAP::NG : removing old feature : LDAP filter in groups 2008-11-20 18:13:27 +00:00
Xavier Guimard
1e17091abb LEMONLDAP::NG : *security bug* : a blank password was available on AuthBasic 2008-11-20 17:34:35 +00:00
Xavier Guimard
eea294ce3b LEMONLDAP::NG : Manager/Base.pm becomes Common/CGI.pm 2008-11-20 06:53:44 +00:00
Xavier Guimard
2718750aed LEMONLDAP::NG : documentation in storage.conf 2008-11-19 18:04:00 +00:00
Xavier Guimard
c9fc66bbef LEMONLDAP::NG : Conf.pm now can use local cache. If "localStorage" is set in "configStorage" :
* getConf acts as a "must-revalidate" proxy for the configuration (get numConf
                   from globalCache and give local conf if ti's the same number
                 * if "local=>1" is set when calling getConf, globalConfiguration number is not
                   checked and it returns local config

                Handler/SharedConf will so be simplified
2008-11-19 17:49:46 +00:00
Xavier Guimard
64f0192eda LEMONLDAP::NG : an uid can start with a "0" 2008-11-19 15:50:25 +00:00
Xavier Guimard
45670f3d21 LEMONLDAP::NG : bless was not safe in Conf.pm 2008-11-19 11:25:35 +00:00
Xavier Guimard
f68de89899 LEMONLDAP::NG : Debian installation in progress ... 2008-11-19 11:19:37 +00:00