Commit Graph

598 Commits (1c0df3687ae3d1e72f61523af8d8367db783ebb7)

Author SHA1 Message Date
iglocska be9fb9e802
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-04-19 15:18:40 +02:00
iglocska 2688961cc3
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-04-18 17:59:34 +02:00
iglocska ccbd119417
chg: [internal] setupSyncRequest made public
- to be able to access it via shell scripts
2022-04-18 17:57:38 +02:00
iglocska 93821c0de6
fix: [security] Sanitise paths for several file interactions
- remove :// anywhere we don't expect a protocol to be supplied
- remove phar:// in certauth plugin's fetcher

- as reported by Dawid Czarnecki of Zigrin Security
2022-04-17 18:25:51 +02:00
iglocska 0108f1bde2
fix: [security] unregister phar from stream wrappers globally for all Model code
- blanket protection against phar deserialization vulnerabilities

- as reported by Dawid Czarnecki of Zigrin Security
2022-04-17 16:30:14 +02:00
Jakub Onderka 9e8608b3d3 chg: [jsonTool] Properly handle invalid JSON for PHP 7.2 and older 2022-04-10 09:38:25 +02:00
Jakub Onderka 9d8fc81678 chg: [internal] Throw exception if Redis class not found 2022-03-19 12:31:55 +01:00
Sami Mokaddem d65ef9c966
chg: [cryptographicKeys] Indexed more column and bumped db_schema 2022-03-17 14:43:01 +01:00
iglocska b80a7af2c3
new: [cryptographic keys] model and controllers added
- sets MISP up for information signing
- sign data during synchronisation
2022-03-13 12:35:12 +01:00
iglocska 870b9d761b
fix: [db schema] fixed 2022-03-04 16:10:12 +01:00
iglocska 7834ec3760
fix: [organisations] made meta fields default to '' and not allow null values
- fixes a filtering issue with sharing group blueprints leading to sharing groups that are more restrictive than expected
2022-03-02 17:32:35 +01:00
iglocska 639a4929e3
new: [sharing group blueprints]
- create a rule based blueprint that is used to create and update a sharing group
- nest sharing groups
- filter organisations by metadata fields
- nested via boolean operators
- CLI exposed
- API exposed
- Lightweight ownership model (only blueprint owner can see and edit the blueprint)
2022-03-02 02:09:20 +01:00
Jakub Onderka bd9cecbc2c chg: [internal] Use ProcessTool in Sighting 2021-11-22 09:57:39 +01:00
Jakub Onderka 0cc7804219 chg: [internal] Current branch and commit checking 2021-11-14 19:09:38 +01:00
Jakub Onderka a424c01844 chg: [internal] Small optim 2021-11-14 19:09:38 +01:00
Jakub Onderka db3183ae54 chg: [internal] Faster way how to get current commit 2021-11-14 19:09:38 +01:00
Jakub Onderka 553036de94
Merge pull request #7955 from JakubOnderka/code-style-background-jobs
chg: [internal] Code style
2021-11-12 11:48:28 +01:00
Jakub Onderka fb99021ab9 chg: [internal] Code style 2021-11-12 09:44:21 +01:00
Jakub Onderka 6806cdf574 new: [user] Add sub field for user 2021-11-11 16:34:27 +01:00
Luciano Righetti ba0399a6fb chg: remove MISP.use_simple_background_jobs setting in favor of SimpleBackgroundJobs.enabled 2021-11-10 16:44:02 +01:00
Luciano Righetti 9e23a2744f chg: merge develop, fix conflicts 2021-11-09 14:23:51 +01:00
Luciano Righetti 4218787934 chg: move initTool() logic to constructor 2021-11-09 08:43:39 +01:00
Jakub Onderka 5c5f2b54ca
Merge pull request #7938 from JakubOnderka/authkeys-encrypted-vol2
Authkeys encrypted vol2
2021-11-09 08:36:44 +01:00
Luciano Righetti 96a46b6899 chg: merge develop, fix conflicts. 2021-11-08 14:37:27 +01:00
iglocska dc925a321f
Merge branch 'develop' of github.com:MISP/MISP into develop 2021-11-08 14:17:01 +01:00
iglocska 952a98dba8
Merge branch 'local_only' into develop 2021-11-08 14:15:18 +01:00
Luciano Righetti f2c9d12eae chg: merge develop, fix conflicts. 2021-11-08 11:35:20 +01:00
Jakub Onderka 5569d7d2bf new: [security] Store authkeys for servers encrypted 2021-11-07 17:51:04 +01:00
Jakub Onderka 3459a09943 chg: [internal] App model cleanup 2021-11-07 10:40:01 +01:00
Jakub Onderka c9b8564c0a
Merge pull request #7927 from JakubOnderka/system-setting
System setting in database
2021-11-06 16:15:23 +01:00
Luciano Righetti f80fcec2db chg: rename settings 2021-11-05 15:46:42 +01:00
Jakub Onderka c9597ba3e9 new: Store system settings in database 2021-11-05 09:19:56 +01:00
Luciano Righetti 309f7ed50e fix: wrong update query 2021-11-04 16:51:56 +01:00
Luciano Righetti 5242d3204d chg: rename conf name 2021-11-04 11:39:24 +01:00
iglocska a0e8acc45f
Merge branch 'develop' of github.com:MISP/MISP into develop 2021-11-04 11:05:32 +01:00
iglocska eddf95355a
fix: [database] upgrade script using mb4 defaulted to 255 key length
- default should be 191
2021-11-04 11:04:56 +01:00
Luciano Righetti 946bdb68e6 chg: add db update 2021-11-03 17:09:42 +01:00
Luciano Righetti b1eaed2b1b chg: merge develop, fix conflicts 2021-11-03 13:54:20 +01:00
Luciano Righetti 453418d6a5 fix: use class registry to get job class 2021-11-02 16:53:42 +01:00
Luciano Righetti cce5e581d4 fix: add missing jobId param to enqueue() calls 2021-11-02 16:25:43 +01:00
Luciano Righetti ae3300d5d0 chg: use new bg jobs tool in AppModel 2021-11-02 11:55:12 +01:00
Jakub Onderka f1283996ad chg: [internal] Optimise AuditLog 2021-10-31 10:52:47 +01:00
Jakub Onderka 9ae7d88f23 chg: [internal] Optimise Tag::findTagIdsByTagNames 2021-10-30 19:43:17 +02:00
Jakub Onderka 94808488ce
Merge pull request #7852 from JakubOnderka/optimise-sighting
chg: [internal] Optimise sightings
2021-10-29 21:25:42 +02:00
Jakub Onderka 0d8292289d chg: [internal] Optimise afterFind and simplify ISODatetimeToUTC 2021-10-28 13:56:27 +02:00
Jakub Onderka 6ade27a27c chg: [internal] Move attribute validation to different tool 2021-10-28 09:42:04 +02:00
Loïc Fortemps dc71f6e451
Merge branch 'develop' into local_tags 2021-10-27 17:06:02 +02:00
Loic Fortemps a1ba1c053e
Adding a local_only option for Tags and Galaxies 2021-10-27 16:51:54 +02:00
Luciano Righetti 5e19ca6761 chg: refactor all background job calls from event model and controller to use new tool 2021-10-27 11:33:32 +02:00
Luciano Righetti 35cf34fab2 Merge branch 'develop' into add_simple_background_jobs 2021-10-26 10:55:13 +02:00