 Lauri Ojansivu
|
e9a727301d
Fix SECURITY ISSUE 1: File Attachments enables stored XSS (High).
|
1 nedēļu atpakaļ |
|
Lauri Ojansivu
|
30620d0ca4
Some migrations and mobile fixes.
|
2 nedēļas atpakaļ |
|
Lauri Ojansivu
|
4283b5b0e3
Disable not working minio and s3 support temporarily.
|
3 nedēļas atpakaļ |
|
Lauri Ojansivu
|
cc99da5357
Fixed Error in migrate-lists-to-per-swimlane migration.
|
3 nedēļas atpakaļ |
|
Lauri Ojansivu
|
bd8c565415
Fixes to make board showing correctly.
|
4 nedēļas atpakaļ |
|
Lauri Ojansivu
|
ae1f80a52c
Added attachments API and admin panel attachment management for file storage backends settings. Fixed drag drop upload attachments from file manager to minicard or opened card.
|
4 nedēļas atpakaļ |
|
Lauri Ojansivu
|
e1fa607f87
Security Fix JVN#74210258: Stored XSS.
|
1 mēnesi atpakaļ |
|
Lauri Ojansivu
|
9720e703fd
Security Fix JVN#14269684: Broken access control.
|
1 mēnesi atpakaļ |
|
Lauri Ojansivu
|
30c1597b65
Security Fix FG-VD-22-078: Prevent SVG Billion Laughs Attack.
|
1 mēnesi atpakaļ |
|
Lauri Ojansivu
|
a8de2f224f
Use attachments from old CollectionFS database structure, when not yet migrated to Meteor-Files/ostrio-files, without needing to migrate database structure.
|
1 mēnesi atpakaļ |
|
Martin Filser
|
3fc9c6efe7
Move every Attachments.findOne() to the ReactiveCache
|
2 gadi atpakaļ |
|
Martin Filser
|
a182482cfb
Move every Boards.findOne(boardId) to the ReactiveCache (Part 2)
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
aef6967d4c
Fix Exception in callback of async function: TypeError: this._now is not a function. Part 2.
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
aeb0f1e6d8
Fix Exception in callback of async function: TypeError: this._now is not a function.
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
76ac070f9b
Save files serverside with filename ObjectID, without filename.
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
f11650ece1
Added more descriptive times of attachment migrations and uploads.
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
fd9478dc57
Try to fix build errors on some platforms.
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
382168a5b4
Try to fix some security issues. Part 2.
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
ff993e7c91
Try to fix some security issues.
|
2 gadi atpakaļ |
|
Lauri Ojansivu
|
cd1750f368
Forked minio npm package to @wekanteam/minio to update package dependencies. S3/MinIO support In Progress.
|
2 gadi atpakaļ |
|
Martin Filser
|
f6fbd0a5c2
Attachment, rename not needed anymore since Meteor-Files 2.3.0
|
3 gadi atpakaļ |
|
Martin Filser
|
25443926d3
Attachment, path was wrong if the file hasn't a extension
|
3 gadi atpakaļ |
|
Tobias Wolf
|
469d81f8a5
Separate uploaded file validation logic from the model "Attachments"
|
3 gadi atpakaļ |
|
Lauri Ojansivu
|
c23f5dc858
Fix Validate attachment error at PR Meteor files 2.2.1 fixes + attachment view.
|
3 gadi atpakaļ |
|
Martin Filser
|
ea5025595a
Server side code don't need a Meteor.call
|
3 gadi atpakaļ |
|
Martin Filser
|
344aeb4051
Meteor-Files 2.2.1 changed the function "namingFunction"
|
3 gadi atpakaļ |
|
Martin Filser
|
db8e707049
Attachment filename was truncated to 28 characters since Meteor-Files 2.1.0. Fixed this
|
3 gadi atpakaļ |
|
Tobias Wolf
|
e6b705be26
Remove leftover unused arguments parsing for external execution
|
3 gadi atpakaļ |
|
Tobias Wolf
|
b5d311c00c
Add support to validate attachment uploads by an external program
|
3 gadi atpakaļ |
|
Lauri Ojansivu
|
7c619859fc
Updated dependencies like ostrio:files etc.
|
3 gadi atpakaļ |
