Commit Graph

21639 Commits (582658545450149fb66c104bcd4ef1bc74ac97f3)

Author SHA1 Message Date
iglocska 0480794dcf
fix: [cryptographic signing] added more graceful failures when GPG isn't configured 2022-03-21 11:31:58 +01:00
Jakub Onderka d6a116afc5
Merge pull request #8231 from JakubOnderka/fix-undefined-variable
chg: [UI] Open modal without onclick
2022-03-20 15:29:59 +01:00
Jakub Onderka 6f25141be3 chg: [UI] Update jQuery to 3.6.0 2022-03-20 15:18:26 +01:00
Jakub Onderka 38fc903501 chg: [UI] Open modal without onclick vol. 2 2022-03-20 14:55:58 +01:00
Jakub Onderka 611f75026f fix: [UI] Do not log exception for invalid key 2022-03-20 14:21:32 +01:00
Jakub Onderka 5ccab0d157 fix: [UI] Undefined variable debugMode 2022-03-20 14:21:32 +01:00
Jakub Onderka f6d1015f95 chg: [UI] Open modal without onclick 2022-03-20 14:21:32 +01:00
Jakub Onderka ec0fae0c94 fix: [internal] Code style 2022-03-20 14:21:31 +01:00
Jakub Onderka ebef28b8cc
Merge pull request #8228 from JakubOnderka/validate-attribute-type
fix: [api] Validate attribute type to avoid warnings
2022-03-20 14:18:31 +01:00
Jakub Onderka 840d72dc76
Merge pull request #8227 from JakubOnderka/redis-exception
chg: [internal] Throw exception if Redis class not found
2022-03-20 14:17:48 +01:00
Jakub Onderka 931d8c094b
Merge pull request #8230 from JakubOnderka/fix-undefined-variable
fix: [UI] Undefined variable
2022-03-20 08:58:14 +01:00
Jakub Onderka d133f705ac fix: [UI] Undefined variable 2022-03-20 08:43:49 +01:00
Jakub Onderka f3ed07fefc fix: [api] Validate attribute type to avoid warnings 2022-03-19 13:14:10 +01:00
Jakub Onderka 9d8fc81678 chg: [internal] Throw exception if Redis class not found 2022-03-19 12:31:55 +01:00
iglocska d6375b9794
Merge branch '2.4' into develop 2022-03-18 13:55:46 +01:00
iglocska 205ddb0b5a
fix: [event view] make having a valid PGP setup optional for viewing events
- don't throw an exception, rather set an empty key
2022-03-18 13:54:31 +01:00
Alexandre Dulaunoy ab1305cc18
Merge pull request #8218 from righel/org-svg-logo-setting
new: add setting for allowing svg org logos
2022-03-18 11:01:14 +01:00
iglocska dddcc1dcff
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-18 10:12:39 +01:00
iglocska df1eb43b2c
Merge branch '2.4' into develop 2022-03-18 10:12:25 +01:00
iglocska 891572be9f
fix: [signing] fail gracefully if pgp not configured on event index
- return the index, but set fingerprint as null rather than throwing an exception
2022-03-18 10:11:29 +01:00
Sami Mokaddem b0a4660a88
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-18 09:14:29 +01:00
Sami Mokaddem ae0e335a05
chg: [events:restSearchExport] Format export based on the responseType 2022-03-18 09:14:10 +01:00
Jakub Onderka 2d23e0125b
Merge pull request #8215 from JakubOnderka/pgp-signature-optim
chg: [cryptograhicKey] Simplified code for event pushing
2022-03-17 17:03:40 +01:00
iglocska 615ef1a6e7
Merge branch 'develop' into 2.4 2022-03-17 16:15:11 +01:00
iglocska 68d1e16fb2
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-17 16:12:42 +01:00
iglocska ff9cd40221
chg: [queryversion] bumped 2022-03-17 16:12:13 +01:00
Luciano Righetti 8dcf414340 fix: [security] restrict setting to cli only. enabling this setting could allow potential ssrf attacks, as reported by Ianis BERNARD - NATO Cyber Security Centre 2022-03-17 15:55:21 +01:00
iglocska 07b091778a
Merge branch '2.4' into develop 2022-03-17 15:51:06 +01:00
Alexandre Dulaunoy bb82bd710c
Merge pull request #8216 from 3c7/patch-1
Update OidcAuth readme
2022-03-17 15:49:19 +01:00
Alexandre Dulaunoy 78d6f8b93f
Merge pull request #8217 from DCSO/linotp_errormessages
[chg] LinOTP error exceptions up to the ui
2022-03-17 15:48:35 +01:00
Andras Iklody 440d692bfa
Merge pull request #8219 from DCSO/linotp_on_off_config
[chg] LinOTP now with enable/disable as config feature
2022-03-17 15:47:20 +01:00
iglocska 83f1397f96
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-17 15:37:43 +01:00
iglocska 965b382faa
fix: [cryptographic key view] fixed
- was just grabbing the first key
2022-03-17 15:37:22 +01:00
Luciano Righetti 8cc93687dc fix: [security] lfi via custom terms file setting, as reported by Ianis BERNARD - NATO Cyber Security Centre 2022-03-17 15:36:35 +01:00
iglocska 1b5edc99cf
fix: [event index] minimal mode fixed for signed events 2022-03-17 15:22:02 +01:00
Hendrik Baecker eb7a1301bb [chg] LinOTP now with enable/disable as config feature 2022-03-17 15:19:58 +01:00
iglocska c4cb313f61
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-17 14:51:34 +01:00
iglocska 90d232bde2
fix: [signing] removed colour coding of protected/unprotected events
- gave the idea that one is "right" and one is "wrong", whilst they're just for different use-cases
2022-03-17 14:50:14 +01:00
Luciano Righetti c2456c8ce3 Merge branch 'org-svg-logo-setting' of github.com:righel/MISP into org-svg-logo-setting 2022-03-17 14:49:59 +01:00
Sami Mokaddem 4af6a4d1aa
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-17 14:43:27 +01:00
Sami Mokaddem d65ef9c966
chg: [cryptographicKeys] Indexed more column and bumped db_schema 2022-03-17 14:43:01 +01:00
Luciano Righetti 2bd4a5b30c fix: [security] a malicious site administrator could store an XSS payload in a svg org logo which would be executed if someone opens the direct link to the image, as reported by Ianis BERNARD - NATO Cyber Security Centre 2022-03-17 14:42:49 +01:00
iglocska f16d83c60c
fix: [event view] distribution field fixed
- didn't display the sharing groups
2022-03-17 14:38:06 +01:00
Luciano Righetti 08a07a38ae new: add setting for allowing svg org logos 2022-03-17 14:36:07 +01:00
iglocska 63bc2ff77b
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-17 14:29:39 +01:00
iglocska 0ada3e9bb5
fix: [signing] add try/catch around the gpg initialisation
- otherwise instances without gpg set up will fail when viewing events
2022-03-17 14:28:56 +01:00
Sami Mokaddem 6862f1a9d8
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-03-17 14:25:51 +01:00
Sami Mokaddem 2d14113de9
chg: [events:view] Removed duplicated lockpad icon 2022-03-17 14:25:40 +01:00
Hendrik Baecker c42d34faac [chg] LinOTP error exceptions up to the ui 2022-03-17 14:23:24 +01:00
Nils Kuhnert 48752ba624
Update OidcAuth readme
Replaced required dependency.
2022-03-17 14:12:32 +01:00