Commit Graph

14499 Commits (540cb4d1fe0c6036f69cbbf4a2bce78b699121e3)

Author SHA1 Message Date
Sami Mokaddem 540cb4d1fe
Bumped db_version 2020-03-10 11:58:05 +01:00
iglocska eeac34f400
chg: [version] bump 2020-03-10 11:51:42 +01:00
iglocska 91a8390e5a
chg: [cleanup] removed alert 2020-03-10 11:36:01 +01:00
iglocska 010bc9a692
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-10 11:34:51 +01:00
iglocska f1faa7845f
fix: [dashboard] grid scope fix 2020-03-10 11:34:30 +01:00
mokaddem 3758b085a4
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-10 11:22:17 +01:00
mokaddem 495218cea8
fix: [dashboards:edit] Prevent overriding the edited template with data
stored in user-settings
2020-03-10 11:21:35 +01:00
iglocska e0ad3ec9a4
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-10 10:59:44 +01:00
iglocska 9d3476cb6c
fix: [dashboard] several small fixes
- fixed issue of first few updates failing right after adding a self updating widget
- don't try to reload a removed widget
- fixed the internal random parametrised widget refresh to something more sane
2020-03-10 10:58:41 +01:00
mokaddem 2e2cb08a0b
fix: [dashboard:saveTemplate] Prevent array re-indexing causing issue
with HTML select's option value
2020-03-10 10:52:53 +01:00
Steve Clement c2b23e73c3
fix: [sfv] Checksums wrong 2020-03-10 18:43:32 +09:00
Alexandre Dulaunoy f3f468d90d
chg: [misp-warninglists] updated to the latest version 2020-03-10 09:44:33 +01:00
Alexandre Dulaunoy 1f41434290
chg: [misp-objects] updated to the latest version 2020-03-10 09:44:10 +01:00
Alexandre Dulaunoy 6e407bd45d
chg: [misp-taxonimies] updated to the latest version 2020-03-10 09:43:38 +01:00
Alexandre Dulaunoy f5f7fad1a8
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-09 22:52:40 +01:00
Alexandre Dulaunoy c10baaeefe
chg: [misp-galaxy] updated to the latest version 2020-03-09 22:51:57 +01:00
iglocska b83a238a80
chg: [dashboard] world map scale parameterised 2020-03-09 11:15:56 +01:00
Andras Iklody 0e2babfa04
Merge pull request #5687 from MISP/feature-widget-improvement
chg: [widget:worldmap] Various JS and UI Improvements
2020-03-09 11:08:41 +01:00
mokaddem 8ed6b9786e
chg: [widget:worldmap] Reusage of declated variable 2020-03-09 11:05:28 +01:00
mokaddem 67998be781
chg: [widget:worldmap] Various JS and UI Improvements
- Variables and function have their own scope, not overridin each other
- Scale color ranges from blue to red
- Tooltip picks the correct data instead of the latest declared one
- PHP no longuer printed in JS, avoiding the need of `eval` command
- Widget redraw itself after a page resize
2020-03-09 10:54:55 +01:00
iglocska 8c7bef419d
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-09 10:36:22 +01:00
iglocska 23f1c9f51d
fix: [logs] pagination settings are lost when flipping pages after a search 2020-03-09 10:35:28 +01:00
mokaddem 83542716e5
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-09 09:02:55 +01:00
mokaddem 2ccf3dab76
fix: [user:resetAuthkey] Allows the function to be called 2020-03-09 09:02:06 +01:00
mokaddem e44c77ef88
fix: [flashErrorMessage] Sanitized error message printed by session that
should never contains user-made text

- Better safe than sorry
2020-03-09 08:57:27 +01:00
iglocska 584d2c1fdf
fix: [widgets] worldmap fixed 2020-03-09 00:32:21 +01:00
iglocska bebc70a012
chg: [dashboard] show owner email of template to site owners and the owner themselves 2020-03-09 00:14:59 +01:00
iglocska bf2694c490
new: [dashboard] added template delete functionality 2020-03-09 00:08:23 +01:00
iglocska 6773b8d799
fix: [dashboards] fixed invalid recall of dashboard template 2020-03-08 23:54:02 +01:00
iglocska 8d02332b31
new: [dashboard] persistence package
- export dashboard state
- import dashboard state
- save dashboard state
  - make it available to others on the instance on demand
  - admins can set a default password for users that don't have anything configured yet
  - load another template based on what the community has shared
- added Whoami widget which was an outcome of the ESDC training
- various improvements, new fields for genericElements, etc
2020-03-08 23:36:27 +01:00
mokaddem 5e15ab1ef1
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-06 16:38:22 +01:00
mokaddem 6fad7028b3
fix: [user:edit] Prevent password change with the current password
- As reported by an external pentest company on behalf of the Centre for Cyber security Belgium (CCB)
2020-03-06 16:19:12 +01:00
mokaddem 40560b8873
fix: [user:edit] Correctly re-insert form data wipping password
information
2020-03-06 16:17:28 +01:00
mokaddem fc0ed4c9a0
chg: [login] Display last time the user logged in 2020-03-06 16:12:40 +01:00
mokaddem 431ccc6a04
chg: [response header] Added `X-XSS-Protection` header
- As reported by an external pentest company on behalf of the Centre for Cyber security Belgium (CCB)
2020-03-06 16:06:35 +01:00
mokaddem e24a9eb44c
fix: [security] Fixed presistent xss in the sighting popover tool
- As reported by an external pentest company on behalf of the Centre for Cyber security Belgium (CCB)
2020-03-06 16:05:26 +01:00
mokaddem de80d340cf
fix: [user:resetauthkey] Method can only be accessed via POST request
- As reported by an external pentest company on behalf of the Centre for Cyber security Belgium (CCB)
2020-03-06 15:58:08 +01:00
mokaddem 43a0757fb3
fix: [security] Fix reflected xss via unsanitized URL parameters
- As reported by an external pentest company on behalf of the Centre for Cyber security Belgium (CCB)
2020-03-06 15:44:58 +01:00
mokaddem 31827905ec
fix: [settings] `require_password_confirmation` set to true
by default
2020-03-06 15:41:38 +01:00
iglocska 6c4ea364db
fix: [ACL] added new function to ACL 2020-03-06 15:02:44 +01:00
iglocska 9770555c39
new: [workers] restart all dead workers 2020-03-06 14:56:35 +01:00
mokaddem 9bab7d8217
chg: [server:rest] Query builder gets loaded with body after the POST
fix #5680
2020-03-06 11:24:13 +01:00
mokaddem 4f3ed331f0
chg: Removed unwanted indentation 2020-03-06 10:58:50 +01:00
mokaddem 2061707932
fix: [attribute:validation] Better validation of IPv6-[dst/src] and
improved display.

fix #5682
2020-03-06 10:54:06 +01:00
iglocska cd4b6936c8
new: [widgets] Whoami widget added 2020-03-06 10:06:31 +01:00
iglocska 60640f4916
fix: [js] fixed invalid defaults passed from php 2020-03-05 10:16:10 +01:00
iglocska 5e56e7dfc7
new: [dashboard] various fixes / improvements
- simple list now accepts arrays for values
- fixed margin issues
- fixed empty sync test issues
2020-03-05 10:08:15 +01:00
iglocska c0e25c28ad
chg: [dashboard] cleanup
prevent @mokaddem's and @rommelfs's eyes from bleeding
2020-03-04 15:08:18 +01:00
iglocska 1fe4d0dd57
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-03-04 14:46:40 +01:00
iglocska 218ea0333c
new: [dashboard] added a way to auto reload widgets
- has to be defined in the code of the widget
2020-03-04 14:46:01 +01:00