Commit Graph

12571 Commits

Author SHA1 Message Date
Paula Quispe
972e509d8d HOR-3784 2017-10-19 12:58:04 -04:00
Roly Rudy Gutierrez Pinto
519ce80895 HOR-3968 2017-10-19 12:43:53 -04:00
Roly Rudy Gutierrez Pinto
11f01b8453 HOR-3841 2017-10-19 11:44:31 -04:00
Marco Antonio Nina Mena
11498fca10 Fix CR 2017-10-19 11:39:00 -04:00
Marco Antonio Nina Mena
5fe388fc90 Change use array to object 2017-10-19 10:04:15 -04:00
Roly Rudy Gutierrez Pinto
3b6e2416ef HOR-3841 2017-10-19 09:46:48 -04:00
Roly Rudy Gutierrez Pinto
0e12d2369d HOR-3968 2017-10-18 16:29:01 -04:00
Paula Quispe
adc0c23acf HOR-3980 2017-10-18 16:02:20 -04:00
Roly Rudy Gutierrez Pinto
4c62c0f411 HOR-3968 2017-10-18 15:32:43 -04:00
Roly Rudy Gutierrez Pinto
c501c56dd5 HOR-3968 2017-10-18 15:22:09 -04:00
Roly Rudy Gutierrez Pinto
266c9824f3 HOR-3968 2017-10-18 15:11:11 -04:00
Roly Rudy Gutierrez Pinto
17704c3793 HOR-3968 2017-10-18 14:59:07 -04:00
Roly Rudy Gutierrez Pinto
c93bd3fc6b HOR-3968 2017-10-18 14:53:15 -04:00
davidcallizaya
6b8ef94015 HOR-3967
Fix PUT catalog and deprecate it.
2017-10-18 14:33:38 -04:00
Marco Antonio Nina Mena
babfb1a22e HOR-3987 When I Enable/disabled a plugin (when I'm extend its API) appear a error and I can not use PM
- you need to specify if you want an associative array instead of an object
2017-10-18 12:15:13 -04:00
Roly Rudy Gutierrez Pinto
d998ce391f HOR-3968 2017-10-18 10:47:40 -04:00
David Callizaya
5f3ea6ade1 Merged in bugfix/HOR-3921 (pull request #6115)
HOR-3921

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
2017-10-17 20:21:50 +00:00
Paula Quispe
b26beb72c4 HOR-3521 2017-10-17 13:52:26 -04:00
Marco Antonio Nina Mena
878adff94d Merged in bugfix/HOR-3920-B (pull request #6113)
HOR-3920-B

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
2017-10-17 14:19:39 +00:00
Marco Antonio Nina Mena
229ad1e40f change permission PM_SETUP TO PM_SETUP_ADVANCE 2017-10-17 08:02:50 -04:00
Marco Antonio Nina Mena
313103f591 Add realpath to variable File 2017-10-16 15:47:36 -04:00
davidcallizaya
cda3c88d98 HOR-3979
Wrong trigger class registration because of class case sensitive names in PluginsRegistry.
2017-10-16 15:07:23 -04:00
Paula Quispe
45cc6bf7a8 Merged in bugfix/HOR-3713 (pull request #6107)
HOR-3713

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
2017-10-16 16:07:47 +00:00
Paula Quispe
4681ebc346 HOR-3713 2017-10-16 09:14:11 -04:00
davidcallizaya
be147ee39d HOR-3979
Add PLUGIN_TASK_EXTENDED_PROPERTIES for plugins.
2017-10-13 16:22:56 -04:00
Roly Rudy Gutierrez Pinto
6c96225ce2 HOR-3851 2017-10-13 11:05:39 -04:00
davidcallizaya
3584cc2975 HOR-3967
Fix CR observations and CS.
2017-10-13 10:59:18 -04:00
davidcallizaya
69b2370ba6 HOR-3921
Fix CR observations.
2017-10-13 10:49:45 -04:00
davidcallizaya
086cc31982 HOR-3921
Fix CSRF security issue.
2017-10-13 07:57:22 -04:00
Roly Rudy Gutierrez Pinto
e188867c36 HOR-3968 2017-10-12 08:32:30 -04:00
Marco Antonio Nina Mena
437220f1e5 - correction validated with tracker_designer parameter missing 2017-10-11 16:15:09 -04:00
Marco Antonio Nina Mena
f8300900b5 HOR-3920 Unauthenticated calling of may Ajax pages with tracker_designer=1 (URL INJECTION)
- Add validation in sysGeneric with session PIN and CASE
2017-10-11 16:15:03 -04:00
Paula Quispe
0fc897e90a Merged in bugfix/HOR-3969 (pull request #6104)
HOR-3969

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
2017-10-11 19:26:51 +00:00
Roly Rudy Gutierrez Pinto
ab5a6526de HOR-3968 2017-10-11 13:47:24 -04:00
Marco Antonio Nina Mena
c7e8614ada - sanitize field current_directory 2017-10-11 13:26:34 -04:00
davidcallizaya
d828c081eb HOR-3967
Complete access control for PUT endpoints.
2017-10-11 11:19:53 -04:00
Marco Antonio Nina Mena
45c6b0df57 - Fix path 2017-10-10 16:22:07 -04:00
Marco Antonio Nina Mena
99700467b8 HOR-3858 Unauthenticated download of any file from server with "processes/processes_GetFile" page + Path Traversal
- Add validation path only PATH_DATA_MAILTEMPLATES or PATH_DATA_PUBLIC
- exists process uid
2017-10-10 16:18:22 -04:00
Roly Rudy Gutierrez Pinto
c3f74fca4b HOR-3851 2017-10-10 12:41:15 -04:00
Roly Rudy Gutierrez Pinto
8ac8e50691 HOR-3851 2017-10-10 12:33:25 -04:00
Paula Quispe
e85be7412e HOR-3969 2017-10-10 12:20:01 -04:00
Roly Rudy Gutierrez Pinto
4e1f891e28 HOR-3961 2017-10-10 10:06:23 -04:00
Paula Quispe
d0483f8b44 HOR-3784 2017-10-10 07:24:30 -04:00
Paula Quispe
7c724070dd HOR-3938 2017-10-09 13:19:54 -04:00
Roly Rudy Gutierrez Pinto
216e2dca28 HOR-3851 2017-10-06 17:21:21 -04:00
Paula Quispe
958e1255a8 Merged in bugfix/HOR-3901 (pull request #6086)
HOR-3901

Approved-by: David Callizaya <david.callizaya@processmaker.com>
2017-10-06 11:55:42 +00:00
Paula Quispe
1dba1d1599 Merged in bugfix/HOR-3912 (pull request #6078)
HOR-3912

Approved-by: Roly <gproly@gmail.com>
Approved-by: Paula Quispe <paula.quispe@processmaker.com>
Approved-by: David Callizaya <david.callizaya@processmaker.com>
2017-10-05 21:30:30 +00:00
Fabio Guachalla
0d745239e3 Merged in bugfix/FBI-2139 (pull request #6091)
FBI-2139

Approved-by: Rodrigo Quelca <rockoinfo@yahoo.com>
2017-10-05 20:06:07 +00:00
Paula Quispe
99db5a9d90 Merged in bugfix/HOR-3936 (pull request #6079)
HOR-3936

Approved-by: Marco Antonio Nina Mena <marco.antonio.nina@processmaker.com>
Approved-by: David Callizaya <david.callizaya@processmaker.com>
Approved-by: Paula Quispe <paula.quispe@processmaker.com>
2017-10-04 14:10:32 +00:00
Paula Quispe
53f6ea99b8 Merged in release/3.2.2 (pull request #6094)
HOR-3951

Approved-by: Paula Quispe <paula.quispe@processmaker.com>
2017-10-04 12:59:43 +00:00