Commit Graph

215 Commits

Author SHA1 Message Date
Xavier Guimard
41fe04e8b8 LEMONLDAP::NG : Doxygen documentation in progress... 2008-12-29 10:28:31 +00:00
Xavier Guimard
2e5911ac4e LEMONLDAP::NG : Doxygen in progress. 2008-12-28 08:36:52 +00:00
Clément Oudot
985bdc2509 LEMONLDAP::NG : don't test url if direct access to portal 2008-12-27 11:00:45 +00:00
Xavier Guimard
228288d43c LEMONLDAP::NG : Doxygen in progress 2008-12-26 19:18:23 +00:00
Xavier Guimard
13a5a1daab LEMONLDAP::NG : Doxygen documentation in progress 2008-12-26 17:58:48 +00:00
Xavier Guimard
52e22cd675 LEMONLDAP::NG : little more documentation 2008-12-25 20:06:23 +00:00
Xavier Guimard
5483c4451a LEMONLDAP::NG : * Romanian translation update
* perltidy
                * test for menu
2008-12-25 14:14:15 +00:00
Xavier Guimard
e4a7734f23 LEMONLDAP::NG : dependencies 2008-12-25 08:21:30 +00:00
Xavier Guimard
0d8ab5ea2b LEMONLDAP::NG : Perl module versions update for CPAN export 2008-12-25 08:04:33 +00:00
Xavier Guimard
78852ac337 LEMONLDAP::NG perltidy 2008-12-24 14:57:23 +00:00
Xavier Guimard
13cdc9b8ec LEMONLDAP::NG : XSS patch not compatible with logout system 2008-12-24 14:55:44 +00:00
Xavier Guimard
2449e92c2d LEMONLDAP::NG : A site in the protected domain is accepted in $portal->{urldc} even if the site is not declared in the manager 2008-12-24 09:12:53 +00:00
Xavier Guimard
8e6c8de591 LEMONLDAP::NG : I think version 0.9.3 is ready... 2008-12-24 08:32:11 +00:00
Xavier Guimard
5ba1178057 LEMONLDAP::NG : New Makefile in progress. Debian install is broken for now. 2008-12-22 17:49:36 +00:00
Clément Oudot
d28f3036e3 LEMONLDAP::NG : Add icons in input fields 2008-12-18 16:08:03 +00:00
Xavier Guimard
cc07eae107 LEMONLDAP::NG : customFunctions are now shared in macros, groups, headers and rules 2008-12-11 17:02:02 +00:00
Xavier Guimard
a77e385730 LEMONLDAP::NG : little bug in SOAP error() 2008-12-08 10:56:19 +00:00
Xavier Guimard
16a29be9fa LEMONLDAP::NG : error display in SOAP 2008-12-07 20:07:52 +00:00
Xavier Guimard
b9ba2337e4 LEMONLDAP::NG : now the portal can be called by browser or by SOAP 2008-12-07 14:12:36 +00:00
Xavier Guimard
68d447b422 LEMONLDAP::NG : typo 2008-12-07 12:15:40 +00:00
Xavier Guimard
53dc4bbbf4 LEMONLDAP::NG : * To avoid XSS, 3 controls :
1) url must be base64 encoded
                  2) urldc is serialized on 1 line ("s/[\r\n]//sg")
                  3) urldc must not contains '"`\0<
                * Common/CGI can now intercept SOAP requests
2008-12-07 09:02:44 +00:00
Xavier Guimard
8b4f38e58c LEMONLDAP::NG : XSS prevention 2008-12-06 10:26:24 +00:00
Xavier Guimard
66c60cc416 LEMONLDAP::NG : * branche 0.9.2 is missing
* ' and " are now filtered in url in Portal.pm
2008-12-06 07:27:35 +00:00
Xavier Guimard
5bbe35cedc LEMONLDAP::NG : To help Doxygen, we have to use "use base" instead of @ISA when possible 2008-12-04 13:53:05 +00:00
Xavier Guimard
5f552f4085 LEMONLDAP::NG : minnor things 2008-12-03 18:30:57 +00:00
Xavier Guimard
b8905b4247 LEMONLDAP::NG : * bug correction : AuthLDAP can now be used without UserDBLDAP 2008-12-03 16:43:31 +00:00
Clément Oudot
35df5dddb8 LEMONLDAP::NG : Enforce XSS protection by deleting bad urls 2008-12-03 16:41:30 +00:00
Xavier Guimard
24a14caeda LEMONLDAP::NG : * Security fix : redirections in portal must be in protected sites
* perltidy in Manager/Sessions.pm
                * Doxygen in progress...
2008-12-03 16:05:27 +00:00
Xavier Guimard
1af1632c72 LEMONLDAP::NG : minor security fix : PE_USERNOTFOUND has not to be used 2008-12-03 13:30:37 +00:00
Xavier Guimard
fbc8b7bfd2 LEMONLDAP::NG : * security fix => XSS
* Begin Doxygen documentation
2008-12-03 13:27:30 +00:00
Xavier Guimard
6dc275710c LEMONLDAP::NG : * avoid a little warning in tests
* Manager/Sessions.pm and purgeCentralCache now use the same Apache::Session get_key_from_all_sessions() function
2008-12-01 17:21:34 +00:00
Xavier Guimard
de7edc7387 LEMONLDAP::NG : better manner to delete cookie 2008-12-01 13:39:52 +00:00
Xavier Guimard
d7bbb44924 LEMONLDAP::NG : * change default value for existing sessions : now, it's PE_DONE
* after POST and logout, Portal generates a redirection to itself unless an url is given. This help MSIE to relog after logout
2008-12-01 09:36:02 +00:00
Xavier Guimard
96e625a29d LEMONLDAP::NG : binmod(STDOUT,'utf8') has to be called at each request 2008-11-26 11:20:36 +00:00
Xavier Guimard
ccbb0a12e0 LEMONLDAP::NG : * eval+abort in XML parsing (to avoid die include in XML::LibXML)
* Correct use of UTF8 : a apps-list.xml UTF8 encoded was not displayed correctly
2008-11-26 11:11:03 +00:00
Xavier Guimard
9b46d1fba0 LEMONLDAP::NG : * Portal/Menu.pm depends from XML::LibXML
* Links in Debian examples installation
2008-11-26 07:40:42 +00:00
Xavier Guimard
d99ef1ba3f LEMONLDAP::NG : web form in a distinct file 2008-11-24 14:06:54 +00:00
Xavier Guimard
a72eebdd81 LEMONLDAP::NG : Notification system skeleton 2008-11-24 06:57:18 +00:00
Xavier Guimard
5926aed0e7 LEMONLDAP::NG : COMMIT in DBI.pm and pb in make test 2008-11-22 18:09:57 +00:00
Xavier Guimard
2725f06fd3 LEMONLDAP::NG : * Handler/SharedConf.pm is more simple now since it use the new Conf.pm capabilities
* CGIs now use abort() instead of die
                * debug system in COnf.pm (set "LogLevel debug" in Apache)
2008-11-21 17:51:52 +00:00
Xavier Guimard
63f196078b LEMONLDAP::NG : die replaced by $self->abort in CGIs 2008-11-21 07:27:08 +00:00
Xavier Guimard
ac87a4b49e LEMONLDAP::NG : removing old feature : LDAP filter in groups 2008-11-20 18:13:27 +00:00
Xavier Guimard
b5c2abb2a0 LEMONLDAP::NG : customFunctions called "package::function" where not correctly interpreted 2008-11-19 11:19:06 +00:00
Clément Oudot
19b5fa1190 LEMONLDAP::NG : fix bug #311849 2008-11-18 12:47:30 +00:00
Xavier Guimard
cae4cbade0 LEMONLDAP::NG : New module Lemonldap::NG::Common. It contains Conf.pm and Cie 2008-11-17 16:59:56 +00:00
Xavier Guimard
dd0c815795 LEMONLDAP::NG : one more bug... 2008-11-17 15:12:17 +00:00
Xavier Guimard
e42c8b263f LEMONLDAP::NG : little bugs in customFunctions 2008-11-17 15:06:58 +00:00
Xavier Guimard
d88ae29227 LEMONLDAP::NG : new customFunctions feature (+ perltidy everywhere) 2008-11-17 14:02:50 +00:00
Clément Oudot
e5d13fdf17 LEMONLDAP::NG : Add Sessions Explorer in Application Menu 2008-11-16 12:40:28 +00:00
Xavier Guimard
f399324f18 LEMONLDAP::NG : little hook in Menu.pm 2008-11-14 07:16:26 +00:00