Shannon
e7e209280c
Fixes issue with replacing webapi formatter
2013-12-04 14:47:19 +11:00
Shannon
5b7e9c712e
Merge remote-tracking branch 'origin/6.2.0' into 7.0.1
...
Conflicts:
src/Umbraco.Web.UI/umbraco/LiveEditing/Modules/SkinModule/ModuleInjector.aspx
src/Umbraco.Web.UI/umbraco/Umbraco.aspx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/LiveEditing/Modules/SkinModule/ImageUploader.aspx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/dashboard.aspx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/developer/Cache/viewCacheItem.aspx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/developer/Macros/assemblyBrowser.aspx.cs
2013-12-04 13:50:55 +11:00
Shannon
33aa4e2062
Fixes potential xss
2013-12-04 13:33:24 +11:00
Shannon
1efa75c891
Fixes potential xss
2013-12-04 12:42:40 +11:00
perploug
cb13b4a0e0
Merge branch '7.0.1' of https://github.com/umbraco/Umbraco-CMS into 7.0.1
2013-12-03 13:44:53 +01:00
Shannon
cb8dbf9da5
fixes up some merge issues
2013-12-03 18:14:04 +11:00
Shannon
2a05687c8b
Merge remote-tracking branch 'origin/6.2.0' into 7.0.1
...
Conflicts:
src/Umbraco.Core/Persistence/Relators/PropertyTypePropertyGroupRelator.cs
src/Umbraco.Core/Persistence/Repositories/MemberRepository.cs
src/Umbraco.Core/PluginManager.cs
src/Umbraco.Tests/Services/ContentServiceTests.cs
src/Umbraco.Web.UI/install/Default.aspx.cs
src/Umbraco.Web.UI/umbraco/LiveEditing/Modules/SkinModule/ModuleInjector.aspx
src/Umbraco.Web.UI/umbraco/Umbraco.aspx.cs
src/Umbraco.Web.UI/umbraco/dashboard.aspx
src/Umbraco.Web.UI/umbraco/dialogs/sort.aspx
src/Umbraco.Web.UI/umbraco/dialogs/umbracoField.aspx
src/Umbraco.Web.UI/umbraco/logout.aspx
src/Umbraco.Web.UI/umbraco/umbraco.aspx
src/Umbraco.Web/UI/Pages/UmbracoEnsuredPage.cs
src/Umbraco.Web/Umbraco.Web.csproj
src/Umbraco.Web/umbraco.presentation/install/LegacyClasses.cs
src/Umbraco.Web/umbraco.presentation/umbraco/dashboard.aspx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/logout.aspx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/umbraco.aspx.cs
src/umbraco.cms/businesslogic/Packager/Installer.cs
src/umbraco.providers/members/MembersMembershipProvider.cs
2013-12-03 18:10:00 +11:00
Shannon
d4514844f8
Fixes a few other potential xss entry points
2013-12-03 17:58:42 +11:00
Shannon
6b7a495d19
Fixes a few other potential xss entry points and cleans up some legacy webforms files
2013-12-03 16:38:58 +11:00
Shannon
601eb0bf38
Fixes a few other potential xss entry points and cleans up some legacy webforms files
2013-12-03 16:28:51 +11:00
Shannon
037e7e0797
Fixes remaining xslt injection U4-3175
2013-12-03 15:56:50 +11:00
Shannon
a7e32e97e3
Fixes xss issue
2013-12-03 15:40:12 +11:00
Shannon
9d90506265
Fixes issue with authcookie on renew - need to ensure its http only and persited for a day remains, ensures the csrf cookies are set when getting the user since that is called before logging in.
2013-12-03 11:57:41 +11:00
Shannon
08100793af
completed csrf protection
2013-12-03 11:36:17 +11:00
perploug
a265424b3f
Replaces all rootScope.broadcast with eventsService
...
Broadcast is inefficient and eventsService gives us extra options for
funneling all app events through one pipeline.
For now it just replicates rootScope on/emit, but longer term we can get
this to handle async UI events
2013-12-02 13:51:03 +01:00
perploug
bb87fa7fa8
removes outcommented code
2013-12-02 12:24:36 +01:00
perploug
16cf64866a
default tinymce config to have default height and width
2013-12-02 12:21:39 +01:00
perploug
11da6d5be7
Merge branch '7.0.1' of https://github.com/umbraco/Umbraco-CMS into 7.0.1
2013-12-02 09:42:53 +01:00
Shannon
ea35ea1af5
getting csrf stuff coded up, it's pretty much done just need to write a couple tests and add the filter to the necessary controller/actions
2013-12-02 17:20:50 +11:00
Shannon
33c32579c8
Adds AngularJsonMediaTypeFormatter and ensures our controllers all use this formatter in order to enable angular's JSON Vulnerability protection.
2013-12-02 13:31:44 +11:00
Shannon
1ac6f6db50
publicizes macroproperty
2013-12-02 13:30:08 +11:00
perploug
7baa81c2df
missing en translation for login dialog
2013-11-29 12:00:03 +01:00
perploug
a0e88a297d
Blocks search box from loading untill after login
2013-11-29 11:59:44 +01:00
perploug
8d2b52a5b0
fixes: U4-3749 Login page is not translated
2013-11-29 11:58:58 +01:00
perploug
81389ce435
Fixes: U4-3685 Richtext Editor - Custom toolbars and dimensions ignored
2013-11-29 11:56:52 +01:00
Shannon
e981776e6d
Created new EnsurePublishedContentRequestAttribute for custom routing to still be able to render macros.
2013-11-29 17:41:38 +11:00
Shannon
48b3806129
adds umbraco session id to UserData so we can use for csrf
2013-11-29 12:42:50 +11:00
Shannon
9fc8e18881
Fixes csrf issue
...
Conflicts:
src/Umbraco.Web.UI/config/ClientDependency.config
src/Umbraco.Web.UI/umbraco/logout.aspx
src/Umbraco.Web.UI/umbraco/umbraco.aspx
src/Umbraco.Web/umbraco.presentation/install/LegacyClasses.cs
src/Umbraco.Web/umbraco.presentation/umbraco/logout.aspx.cs
2013-11-29 12:17:58 +11:00
Shannon
250276bbd4
Merge branch '6.1.6-U4-3619' into 6.2.0
2013-11-29 11:26:01 +11:00
Shannon
af29f61478
Fixes csrf issue
2013-11-29 11:10:25 +11:00
perploug
cdfebe705d
Merge branch '7.0.1' of https://github.com/umbraco/Umbraco-CMS into 7.0.1
2013-11-28 15:35:34 +01:00
perploug
e6714ae829
Ensure refresh node action is translated
2013-11-28 15:35:23 +01:00
perploug
a0dead872b
DA lang file updates
2013-11-28 15:35:06 +01:00
perploug
b6ebc34199
ensure create dialogs can reopen the menu
2013-11-28 15:34:56 +01:00
perploug
49e7ace2d9
tree menu should not be selectable
2013-11-28 15:34:39 +01:00
perploug
d140eab12d
Ensures dialogs doesnt reopen the menu
2013-11-28 15:34:24 +01:00
perploug
83e05a4f84
Merge pull request #259 from nilzen/U4-3683
...
Fixed: U4-3683 Icon selector problem (Chrome)
2013-11-28 05:43:08 -08:00
perploug
ff52755636
Media and content tree root node translation
2013-11-28 13:26:05 +01:00
perploug
a7cd18c3d2
The section mapping was reversed, so werent translated
2013-11-28 13:20:52 +01:00
perploug
98a0208b47
Removes button icon from script editor
2013-11-28 13:08:54 +01:00
perploug
b923305527
adds pointer cursor to help
2013-11-28 13:06:28 +01:00
perploug
04ccbdde4d
Dims buttons during action to prevent multiple saves
2013-11-28 13:06:19 +01:00
perploug
de1e3d150f
Missing script translation
2013-11-28 13:05:36 +01:00
perploug
07182529f4
replace $element with $scope.$on($destroy)
...
We should never access dom element from controllers
2013-11-28 12:32:03 +01:00
perploug
e076b687c6
added rte and assets service mocks
2013-11-28 12:32:02 +01:00
Shannon
7f305db637
Fixing: U4-3687 Umbraco 7 Packaging Issues - have fixed the data type package issues, cleaned up some code and fixed a different underlying pre-val issue for empty legacy aliases
2013-11-28 16:57:05 +11:00
Shannon
50e10155e7
Completes: U4-3712 Allow c# property editors to have custom js injected into the js initialization block so they can load in angular controllers
2013-11-28 14:27:58 +11:00
Shannon
478b7cde42
Removes uGoLive from the core (for now until it is rebuilt against v7 )
2013-11-28 10:51:54 +11:00
Shannon
c86f52d5ea
Completes: U4-3230 Combine/Minify manifest files to one request with CDF
2013-11-28 10:37:08 +11:00
Shannon
58fc51ae93
Fixes: U4-3736 Unit test Can_Get_File_Dates() now testing correctly, disregarding local (nont-UTC) time.
2013-11-28 09:30:50 +11:00