Commit Graph

47 Commits (d9f4e996f254b7d94012fb7433c9f9327f58866b)

Author SHA1 Message Date
iglocska d9f4e996f2 Parse authorization headers for a valid MISP auth key, fixes #478
- Keeps parsing until a valid auth key is found
2015-05-04 19:01:12 +02:00
Iglocska 699e5a9d17 Small fix to editing an event via the api
- adding attributes without a uuid will cause the edit to fail
- attributes without a uuid will now be added as a new attribute
2015-04-16 23:16:15 +02:00
Iglocska e339f0e646 Fixed various issues with the attribute REST api
- also updated the sample curl scripts
2015-04-14 13:50:51 +02:00
Iglocska e8bcab19db Background job for pull incorrectly checks the push flag on the server, fixes #457
- Issue fixed: When background jobs are enabled the wrong flag is checked when attemptying to enqueue a pull
2015-04-13 14:40:42 +02:00
Iglocska cc5c32fca2 Sync update issue fixed
- attributes were not correctly updated during a manual push due to an incorrect conditional
- re-publishing was unaffected
2015-04-02 00:14:36 +02:00
Iglocska c9d1badaa3 Organization field in Servers too short to fit valid organisation identifiers, fixes #436
- updated the MYSQL.sql file for future MISP installations
- added admin script to do the update from the web interface
2015-03-17 00:06:59 +01:00
Iglocska 150f29276b Version bump 2015-03-14 08:38:00 +01:00
iglocska 6763159e87 Security fix
- filenames are now enclosed by quotes instead of double quotes while executing the zip command via exec
2015-03-10 10:58:15 +01:00
iglocska a6b603752b Version bump 2015-02-24 15:57:30 +01:00
iglocska baf4d03aab Version bump 2015-02-23 10:40:11 +01:00
iglocska d9c4ca2f4c Version bump 2015-02-18 11:51:05 +01:00
iglocska 54626d9378 Version bump 2015-02-16 17:34:58 +01:00
iglocska b5be1a36fb Correlation disabled for http-method, fixes #406 2015-02-16 13:30:15 +01:00
iglocska f9f36d60e1 Version bump 2015-02-10 14:44:44 +01:00
iglocska 9378837f39 Documentation changes 2015-02-09 11:07:18 +01:00
iglocska 12d7025bce Patch fixing json download, fixes #387
- World's smallest patch
2015-02-05 17:25:40 +01:00
iglocska 9c999ab59c Version incremented 2015-02-05 10:12:55 +01:00
iglocska b475e1d2e6 Version incremented 2015-02-04 11:07:40 +01:00
iglocska 8c30115f12 Documentation fail fixes #384 2015-02-03 21:53:03 +01:00
iglocska f0aa849d04 Various improvements to the exports
- Unified the way exports accept negated parameters
- Fixed the documentation
- Most exports are now restrictable by the event date (From/To parameters)
- none cached XML export now writes to file after converting each event, clearing the memory and resolving any potential memory issues
2015-02-03 17:06:05 +01:00
iglocska 98f65aae09 Merging several pull requests and a few other changes
- Pull request by RichieB2B: CentOS 6 & 7 installation instructions
- Pull request by RichieB2B: STIX exports now include comments for indicators
- Pull request by RichieB2B: Issue fixed with md5 type attributes not generating observables correctly during a STIX export
- Password policy change-able by a site admin via a regex and a min char requirement. Old functionality assumed if not set.
- bug fixed with incorrect jobs being created appearing during a scheduled pull (designates a push)
- slight changes to the installation instructions
- database.default.php now uses localhost instead of 127.0.0.1 and the default MySQL port
2015-02-02 13:12:15 +01:00
iglocska 6b6c62bd53 Fix to the new sync issues since 2.3.39, fixing #365
Incorrectly trying to look up authenticated user in the model fixed
2015-01-15 13:46:11 +01:00
iglocska cedaac360a Fixes to the scheduled tasks and some documentation issues
- Scheduled pulls should work correctly now
- Scheduled pushes and pulls correctly display in the logs
- Scheduled caching correctly sets the next date of execution
2015-01-12 17:35:08 +01:00
iglocska bb642579b6 Remote attribute deletion removed
- Deleting attributes on connected MISP instances can cause serious performance issues on multiple interconnected instnaces, temporarily removed
- Version number incremented
2014-12-19 15:01:14 +01:00
iglocska 3723119d83 Logging of admin emails and auth refresh
- admin emails now generate log entries
- authentication is refreshed on activity
2014-12-12 10:42:12 +01:00
iglocska f14a26444b Fix to some event altering actions not updating the timestamp 2014-12-10 14:08:08 +01:00
iglocska 6e7554a26f Freetext import tool enhancement
- mass edit types where applicable
- ip-src/ip-dst type will create two attributes, one for each
2014-12-10 13:06:52 +01:00
iglocska 5dbc28e65a version number incremented 2014-12-05 15:30:04 +01:00
iglocska 800c550cc9 STIX export now correctly uses a custom namespace instead of the default "example", fixes #301 2014-12-03 16:23:30 +01:00
iglocska 1346f7e931 Fix to an issue with the markings in the STIX export
- xpath describing the current node and descendants is incorrect
2014-12-02 16:13:29 +01:00
iglocska 6548474422 Version number incremented 2014-11-27 14:51:49 +01:00
iglocska 2c7b7415b9 Improvements to the attribute search
- case insensitivity
- tag searches

also, generatecorrelation is now a background job
2014-11-20 10:40:24 +01:00
iglocska 53c1ef40b0 Fix to the CSRF protection blocking a proposal add 2014-11-19 10:24:46 +01:00
iglocska aa492066d8 Diagnostics check fails on PGP check if the server's key is a sign only key 2014-11-14 13:12:40 +01:00
iglocska 01fd0b93ce Comments also sanitized 2014-11-14 11:28:42 +01:00
iglocska ad77555daa Stronger escaping of special characters in the XML exports 2014-11-14 09:04:36 +01:00
iglocska 4b7e56a43c Fix to an issue with the CSV export
- missing linebreak after header row added
- fixed an issue with quotes in the value field not being escaped properly
2014-11-12 15:36:07 +01:00
iglocska 4e116a8afe Fixes issue with file attachments not being downloadable for users of another org 2014-11-05 16:25:17 +01:00
iglocska 9b935d14ce Added flag to mimic the quickfilter of the event view to the API
- search on any sub-string match in the event info, orgc, attribute value, attribute comment via the API
2014-11-03 09:55:44 +01:00
iglocska 85166481b7 Fix to the missing accept terms button 2014-10-31 14:59:49 +01:00
iglocska 0eb0e9a937 Version pushed 2014-10-31 14:46:54 +01:00
iglocska 8bd467b39e Version updated 2014-10-30 10:50:24 +01:00
iglocska 4568589044 File management added and various small changes
- Important! Logo images have now moved to a different location! Make sure that you update your settings!
- Site admins can now manage the uploaded image files and the terms of use file via the server settings interface
- add, link, delete files directly from the interface
2014-10-29 15:20:30 +01:00
iglocska 15fa296fdb Update to the terms and conditions
- use terms file as before if nothing else specified
- specify a file in the app/files/terms directory via the server settings tool
- specify whether to show it inline or create a download link for users instead
- by default everything is the same as before, except that the MISP installation path is no longer exposed by a non-existing terms file
2014-10-28 15:11:40 +01:00
iglocska 7344405ba3 Version number fixed 2014-10-27 17:25:03 +01:00
iglocska a87d88e049 Event attribute pagination is persistent through edits / deletes 2014-10-27 16:51:23 +01:00
iglocska 6d73409b90 Version check tool added
- check the latest tag on github and compare it to the local version
- from here on all hotfix, minor, major releases should be tagged apropriately.
2014-10-27 16:03:43 +01:00