Commit Graph

1186 Commits (07c7e8fadff6b93119d185cc5304e7527e357be1)

Author SHA1 Message Date
iglocska 07c7e8fadf Migration script updated with the regexp changes 2013-07-29 10:33:50 +02:00
iglocska b3f6032857 Fixes an issue with the upload of malware samples not generating an md5
hash if the file is too large
2013-07-26 10:13:44 +02:00
iglocska 8bf54e7c01 Removed password creation for new users through the contact users menu 2013-07-25 17:23:52 +02:00
iglocska e577d587fd Discard shadowattribute changed to Postlink
- Prevents deletion through XSRF
2013-07-25 17:16:56 +02:00
iglocska 96170dae29 Fixed an issue with siteadmin contact e-mails resetting passwords of non existing users
- a site admin could issue a password reset to a non-existing user
2013-07-25 14:45:34 +02:00
Christophe Vandeplas bd61f73bd2 fixed a newly created bug in memberslist 2013-07-18 12:18:10 +02:00
iglocska 7486f478e0 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-18 11:33:11 +02:00
iglocska 7fb1e6f70e Some bugs fixed
- Resetting the auth key for a user that doesn't exist created an empty
user 

- change_pw showed an admin menu on the side

- rerouting after an incorrect auth request fixed (users/index doesn't
exist)

- temporarily disabled the redirect after login
2013-07-18 11:32:26 +02:00
Christophe Vandeplas 4bca5b9e30 memberslist based on orgc, is more logic to reflect the contributions 2013-07-18 11:14:11 +02:00
Christophe Vandeplas 00d8d24434 minor NIDS export performance improvement 2013-07-18 11:04:00 +02:00
iglocska 58f72ab4d1 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-18 10:58:54 +02:00
iglocska dde52f124a Initial refactoring of the event view / xml exports
- event view and xml exports all use __fetchEvent now

- unified the permission checks

- same output for event/id.xml and the xml exports
2013-07-18 10:58:10 +02:00
iglocska e74aabf924 Fixes XSS vulnerability in filters 2013-07-17 16:41:31 +02:00
Christophe Vandeplas 8e8f41ab13 Fixes in server push 2013-07-17 14:27:51 +02:00
Christophe Vandeplas 205ba665a5 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-17 14:07:24 +02:00
Christophe Vandeplas 2424cbbf26 Server push lower memory footprint solving OoM problem.
Enabled per-id push like pull
2013-07-17 14:06:24 +02:00
iglocska fc7620bd53 Minor change with shadowattributes
- short was still used on the shadow attribute value field, if the
shadow attribute was a proposal to the event itself and not to an
attribute
2013-07-17 13:25:28 +02:00
Christophe Vandeplas d8d3254450 more logging with PGP errors 2013-07-17 12:54:55 +02:00
iglocska 1e2dd15842 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-17 12:05:13 +02:00
iglocska 62d4addb9d Some css changes broke the shadow attributes
- should be fixed
2013-07-17 12:04:57 +02:00
Christophe Vandeplas 00e463bdff reverted commit of url validation that didn't validate parts of urls 2013-07-16 15:44:03 +02:00
Christophe Vandeplas e13c2e883c fixing problems in pull with distribution data validation 2013-07-16 15:28:04 +02:00
Christophe Vandeplas 8fc0f9756b removed TODO 2013-07-16 14:43:54 +02:00
iglocska 30d6bebcf8 Change of domain type in IOC Export fixes #134 2013-07-16 08:45:36 +02:00
iglocska 85a7e8c97c OpenIOC issue
- Attribute type domain exported into the wrong ioc term.
2013-07-15 17:23:53 +02:00
iglocska 1f5aa5420f Security issue fixed with UsersController
- users could view other user profiles

- users could view other user profiles through edit user
2013-07-15 16:46:44 +02:00
iglocska dff2379ec3 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-15 11:35:46 +02:00
iglocska 32a6c61938 Removed quotation marks from csv export
- Not needed, linebreaks are removed anyway
2013-07-15 11:35:15 +02:00
Christophe Vandeplas ad8ecd15d6 leftovers from communitie/cluster/... 2013-07-15 11:30:57 +02:00
Christophe Vandeplas ca30cf006f Import ThreatConnect attributes into event, see issue #119 2013-07-15 09:10:18 +02:00
Christophe Vandeplas 371ae3b14b fixes in data validation 2013-07-13 08:37:41 +02:00
Christophe Vandeplas 130f470c90 Revert "fix bug in removing remote attributes if push is not enabled"
This reverts commit c4d5344153.
2013-07-13 08:22:37 +02:00
Christophe Vandeplas c4d5344153 fix bug in removing remote attributes if push is not enabled 2013-07-13 08:21:42 +02:00
Christophe Vandeplas a0dabb83dc cleanup: hidden functions to _function and removed unnecessary function 2013-07-13 07:39:46 +02:00
Christophe Vandeplas 2a8efc5770 minor admin tools improvements 2013-07-12 15:35:00 +02:00
Christophe Vandeplas e328dc948e huge performance increase in generateCount 2013-07-12 14:55:56 +02:00
Christophe Vandeplas b314a04e58 fixes bug introduced in commit 2334599f3d 2013-07-12 12:59:10 +02:00
Christophe Vandeplas aa0da25383 minor UI glitch in IOC/IDS naming 2013-07-12 12:47:55 +02:00
Christophe Vandeplas 66ce874b99 do not change 'info' field upon pull (was: Imported from $url) 2013-07-12 10:34:59 +02:00
Christophe Vandeplas 3ff797c14b fixes #133 2013-07-12 10:18:48 +02:00
Christophe Vandeplas 2334599f3d redirects to filtered events page upon delete 2013-07-12 09:36:04 +02:00
Christophe Vandeplas 4388d18ba1 UI improvement on private event/attribute 2013-07-12 07:54:58 +02:00
iglocska 3e9a967188 Removal of some references to the old private flag 2013-07-11 17:25:47 +02:00
iglocska b5a829e011 Re-enabled route from /admin/users/login to /users/login
- when an admin user got logged out the system threw an error instead of
returning him/her to the login screen
2013-07-11 17:09:58 +02:00
iglocska 9425f1baf0 Slight colour change for the private background colouring 2013-07-11 16:41:34 +02:00
iglocska 53675fe3a3 Some UI changes and reattached the regexp for the admin validation tool
- org only events have a redish background in the event index

- org only events and attributes have their distribution level marked in
red
2013-07-11 16:38:39 +02:00
Christophe Vandeplas b8dcc4d00a must be sleepy...holliday effect? 2013-07-11 14:30:56 +02:00
Christophe Vandeplas ff2f08f60d fixes bug in previous commit. 2013-07-11 14:28:12 +02:00
Christophe Vandeplas 7949181fbc improved password generation algorithm in reset password 2013-07-11 14:26:28 +02:00
Christophe Vandeplas 3ef36db5bf corrections in the documentatino 2013-07-11 14:21:38 +02:00