Commit Graph

5479 Commits (d5ce838ddca4f95b6c303b64b53b70b0b1bc28da)

Author SHA1 Message Date
Christophe Vandeplas d5ce838ddc
Feature/api log and pin ip (#8965)
* fix: [sightings] don't be case insensitive on code side

* chg: [AuthKey] store IPs used to connect and show them

* chg: [AuthKey] db change

* fix: [AuthKeys] prevent race condition with double IPs

* chg: [git] exclude DebugKit plugin from git

* fix: [AuthKey] integrate mokaddem's remarks

* chg: [authkey] One-click IP as only allowed IP

* chg: [authkey] pin IP on view page

---------
2023-03-29 09:18:47 +08:00
iglocska e77a4fced7
fix: [php7.2 compat] make 7.2 happy with no trailing comma in the funciton params 2023-03-10 14:30:20 +01:00
Christophe Vandeplas eefb1fc32a Merge branch 'develop' of https://github.com/MISP/MISP into develop 2023-03-10 13:16:36 +01:00
Christophe Vandeplas 5b1bc40ba0 chg: [diagnostics] Report on Vendor dependencies 2023-03-10 13:14:39 +01:00
Sami Mokaddem 8dbcd43b42
Merge branch 'pr-8948' into develop 2023-03-10 11:22:16 +01:00
Anders Einar Hilden da5278d349 [new]: [doc] [ApacheSecureAuth] Add minimal docs for ApacheSecureAuth, and a bigger section about using the /users/logout401 endpoint. 2023-03-10 10:34:05 +01:00
Anders Einar Hilden ec495da477 [new]: [ApacheSecureAuth] Add endpoint /users/logout401 for logging out from HTTP Basic Auth
This can be used by i.e. ApacheSecureAuth to make a browser forget cached HTTP Basic Auth credentials, which would otherwise result in a logut->login loop.
2023-03-10 10:34:05 +01:00
iglocska 68c6563dc8
fix: [attribute correlations] account for both entry points, event view and attribute index
- to select the correct field for the remote ID (rather than point at an attribute ID in the related events)
2023-02-28 13:56:07 +01:00
iglocska 91d87b4e44
fix: [correlations] attribute index / search shows incorrect correlations, fixes #8930
- showed the attribute ID rather than the event ID, also leading to invalid URLs for pivoting
2023-02-27 14:56:30 +01:00
Sami Mokaddem d418f33835
fix: [workflow:standalone_module_execute] Clear error output on sucess 2023-02-23 10:45:28 +01:00
Sami Mokaddem d51bebcbf4
chg: [events:populate] Added support of regeneration of UUIDs 2023-02-14 08:59:06 +01:00
Sami Mokaddem c92667ce1f
chg: [view:ajaxTags] Added placeholder for highlighted taxonomies without a tag 2023-02-13 10:53:57 +01:00
Sami Mokaddem 683a90199c
fix: [feed:edit] Make sure to keep orgc_id to its saved value 2023-01-10 12:04:56 +01:00
Sami Mokaddem a44b681aca
chg: [logs:event_index] Added notice about displayed data and usage of LightPaginator 2023-01-10 11:17:07 +01:00
Sami Mokaddem 9b6a9d2ef6
Merge branch 'develop' of github.com:MISP/MISP into develop 2023-01-10 10:05:43 +01:00
Sami Mokaddem f7238fe5e7
fix: [security] XSS in authkey add
- as reported by Dawid Czarnecki from Zigrin Security
2023-01-10 10:05:22 +01:00
iglocska 5667a3dd84
chg: [event index] changed to the indextable generator 2022-12-24 06:28:42 +01:00
iglocska f551639a96
new: [indexTable] added 3 new simple elements
- custom_element -> loop the data through an element set via element_path
- model -> for the various log indeces, format the log entry's model entry as MODEL #MODEL_ID
- time -> loop the data through the time helper's time() function
2022-12-24 06:27:01 +01:00
iglocska 6703d82ad0
chg: [indexTable] added option for the generic Field to set a default value, if the referenced value is empty
- via the key 'empty'
2022-12-24 06:25:43 +01:00
iglocska 684d3e5139
fix: [security] XSS in the template file uploads
- as reported by Dawid Czarnecki from Zigrin Security
2022-12-22 15:37:43 +01:00
iglocska 8574067e03
fix: [index actions] urlencode the parameter values, otherwise certain functionalities passing for example tag names around won't work
- fixes #8820
2022-12-22 14:28:23 +01:00
Jakub Onderka ea2e0421b6
Merge pull request #8613 from JakubOnderka/fix-ui
Fix UI
2022-12-22 12:54:56 +01:00
Jakub Onderka 55e4a1ce89 fix: [UI] Add missing space after tag 2022-12-21 12:59:17 +01:00
Sami Mokaddem 0aa2475c1b
Merge branch 'develop' of github.com:MISP/MISP into develop 2022-12-20 13:03:37 +01:00
Sami Mokaddem 83cfe23052
new: [event-timeline] Added Timestamp distribution chart when the timeline cannot show all items 2022-12-20 13:03:29 +01:00
Sami Mokaddem ba533e9b3d
chg: [graph.js] Updated to version 4.1.1 2022-12-20 13:02:32 +01:00
StefanKelm 9bba80ccd7
Update correlations.ctp
tiny typo
2022-12-17 06:39:40 +01:00
Jakub Onderka 4ba72eb14e fix: [UI] Fix user sorting 2022-12-15 10:05:13 -05:00
Jakub Onderka cc4c5ff27f fix: [UI] Do not show model ID in audit log if it is zero 2022-12-15 10:05:13 -05:00
Jakub Onderka 95bdc013f3 chg: [UI] Add titles for attribute actions 2022-12-15 10:05:13 -05:00
Jakub Onderka 716014d5b2 fix: [UI] Warnings when user don't have permission to see sharing group orgs 2022-12-15 10:05:13 -05:00
Jakub Onderka 511d2aa0db fix: [UI] Galaxy cluster distribution levels 2022-12-15 10:05:13 -05:00
Jakub Onderka cd4bd53d68 fix: [UI] View action should be last 2022-12-15 10:05:13 -05:00
Jakub Onderka ed4cf8172a fix: [UI] Galaxy cluster UI cleanup 2022-12-15 10:05:13 -05:00
Jakub Onderka 359d692ff0 fix: [UI] Use correct menu for categories_and_types page 2022-12-15 10:05:13 -05:00
Jakub Onderka ce850e209c fix: [UI] Remove duplicate autoalert field in user profile 2022-12-15 10:05:13 -05:00
Jakub Onderka d5dc274cd1 fix: [UI] Show user column for auth keys just for admins 2022-12-15 10:05:13 -05:00
Jakub Onderka d1dbde5404 fix: [UI] Correctly fetch data from resolved MISP format 2022-12-15 10:05:13 -05:00
Jakub Onderka 9ff1d02700 chg: [import] Do not put same comment to all attribute in object 2022-12-15 10:05:13 -05:00
Jakub Onderka e4fd5280fd fix: [UI] Margin fixes for resolved_misp_format.ctp 2022-12-15 10:05:13 -05:00
Jakub Onderka ece1461f78 fix: [UI] To IDS checkbox for attribute search 2022-12-15 10:05:13 -05:00
Jakub Onderka 410c8aa103 chg: [internal] Simplify importChoice 2022-12-15 10:05:13 -05:00
Jakub Onderka dac0feb164 new: [UI] Show similar objects when creating object from freetext 2022-12-15 10:05:13 -05:00
Jakub Onderka 9153234885 new: [UI] Allow to create object from freetext 2022-12-15 10:05:13 -05:00
Jakub Onderka 119000bf3e chg: [internal] Move finding object similarities from controller to model 2022-12-15 10:05:13 -05:00
Jakub Onderka e35c13d0f4 new: [UI] Preparation for creating object from freetext 2022-12-15 10:05:13 -05:00
Jakub Onderka 5262a40cb9 fix: [UI] Remove unnecessary prevent default from ListTopBar 2022-12-15 10:05:13 -05:00
Jakub Onderka b959b94bbb chg: [UI] Cleanup for resolved_attributes template 2022-12-15 10:05:13 -05:00
Jakub Onderka fd37c0b0c7 chg: [internal] Add object code cleanup 2022-12-15 10:05:13 -05:00
Jakub Onderka ef3d0e33b7 chg: [UI] Nicer user edit for notifications 2022-12-15 10:05:13 -05:00