Commit Graph

1187 Commits (de6fc6f6ae123cce77f1d864a0c93bfcef14b49a)

Author SHA1 Message Date
Alexandre Dulaunoy de6fc6f6ae Version 1.0 of MISP XML Document Type Definition.
The first version of the XML format is loosely based on the current XML
format used by MISP in commit 84b552fb74.

The purpose is to track down the changes in the format and especially
to ensure a consistent definition of the XML format for external tools
and software using the MISP XML format.
2013-07-29 11:37:09 +02:00
iglocska 07c7e8fadf Migration script updated with the regexp changes 2013-07-29 10:33:50 +02:00
iglocska b3f6032857 Fixes an issue with the upload of malware samples not generating an md5
hash if the file is too large
2013-07-26 10:13:44 +02:00
iglocska 8bf54e7c01 Removed password creation for new users through the contact users menu 2013-07-25 17:23:52 +02:00
iglocska e577d587fd Discard shadowattribute changed to Postlink
- Prevents deletion through XSRF
2013-07-25 17:16:56 +02:00
iglocska 96170dae29 Fixed an issue with siteadmin contact e-mails resetting passwords of non existing users
- a site admin could issue a password reset to a non-existing user
2013-07-25 14:45:34 +02:00
Christophe Vandeplas bd61f73bd2 fixed a newly created bug in memberslist 2013-07-18 12:18:10 +02:00
iglocska 7486f478e0 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-18 11:33:11 +02:00
iglocska 7fb1e6f70e Some bugs fixed
- Resetting the auth key for a user that doesn't exist created an empty
user 

- change_pw showed an admin menu on the side

- rerouting after an incorrect auth request fixed (users/index doesn't
exist)

- temporarily disabled the redirect after login
2013-07-18 11:32:26 +02:00
Christophe Vandeplas 4bca5b9e30 memberslist based on orgc, is more logic to reflect the contributions 2013-07-18 11:14:11 +02:00
Christophe Vandeplas 00d8d24434 minor NIDS export performance improvement 2013-07-18 11:04:00 +02:00
iglocska 58f72ab4d1 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-18 10:58:54 +02:00
iglocska dde52f124a Initial refactoring of the event view / xml exports
- event view and xml exports all use __fetchEvent now

- unified the permission checks

- same output for event/id.xml and the xml exports
2013-07-18 10:58:10 +02:00
iglocska e74aabf924 Fixes XSS vulnerability in filters 2013-07-17 16:41:31 +02:00
Christophe Vandeplas 8e8f41ab13 Fixes in server push 2013-07-17 14:27:51 +02:00
Christophe Vandeplas 205ba665a5 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-17 14:07:24 +02:00
Christophe Vandeplas 2424cbbf26 Server push lower memory footprint solving OoM problem.
Enabled per-id push like pull
2013-07-17 14:06:24 +02:00
iglocska fc7620bd53 Minor change with shadowattributes
- short was still used on the shadow attribute value field, if the
shadow attribute was a proposal to the event itself and not to an
attribute
2013-07-17 13:25:28 +02:00
Christophe Vandeplas d8d3254450 more logging with PGP errors 2013-07-17 12:54:55 +02:00
iglocska 1e2dd15842 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-17 12:05:13 +02:00
iglocska 62d4addb9d Some css changes broke the shadow attributes
- should be fixed
2013-07-17 12:04:57 +02:00
Christophe Vandeplas 00e463bdff reverted commit of url validation that didn't validate parts of urls 2013-07-16 15:44:03 +02:00
Christophe Vandeplas e13c2e883c fixing problems in pull with distribution data validation 2013-07-16 15:28:04 +02:00
Christophe Vandeplas 8fc0f9756b removed TODO 2013-07-16 14:43:54 +02:00
iglocska 30d6bebcf8 Change of domain type in IOC Export fixes #134 2013-07-16 08:45:36 +02:00
iglocska 85a7e8c97c OpenIOC issue
- Attribute type domain exported into the wrong ioc term.
2013-07-15 17:23:53 +02:00
iglocska 1f5aa5420f Security issue fixed with UsersController
- users could view other user profiles

- users could view other user profiles through edit user
2013-07-15 16:46:44 +02:00
iglocska dff2379ec3 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-15 11:35:46 +02:00
iglocska 32a6c61938 Removed quotation marks from csv export
- Not needed, linebreaks are removed anyway
2013-07-15 11:35:15 +02:00
Christophe Vandeplas ad8ecd15d6 leftovers from communitie/cluster/... 2013-07-15 11:30:57 +02:00
Christophe Vandeplas ca30cf006f Import ThreatConnect attributes into event, see issue #119 2013-07-15 09:10:18 +02:00
Christophe Vandeplas 371ae3b14b fixes in data validation 2013-07-13 08:37:41 +02:00
Christophe Vandeplas 130f470c90 Revert "fix bug in removing remote attributes if push is not enabled"
This reverts commit c4d5344153.
2013-07-13 08:22:37 +02:00
Christophe Vandeplas c4d5344153 fix bug in removing remote attributes if push is not enabled 2013-07-13 08:21:42 +02:00
Christophe Vandeplas a0dabb83dc cleanup: hidden functions to _function and removed unnecessary function 2013-07-13 07:39:46 +02:00
Christophe Vandeplas 2a8efc5770 minor admin tools improvements 2013-07-12 15:35:00 +02:00
Christophe Vandeplas e328dc948e huge performance increase in generateCount 2013-07-12 14:55:56 +02:00
Christophe Vandeplas b314a04e58 fixes bug introduced in commit 2334599f3d 2013-07-12 12:59:10 +02:00
Christophe Vandeplas aa0da25383 minor UI glitch in IOC/IDS naming 2013-07-12 12:47:55 +02:00
Christophe Vandeplas 66ce874b99 do not change 'info' field upon pull (was: Imported from $url) 2013-07-12 10:34:59 +02:00
Christophe Vandeplas 3ff797c14b fixes #133 2013-07-12 10:18:48 +02:00
Christophe Vandeplas 2334599f3d redirects to filtered events page upon delete 2013-07-12 09:36:04 +02:00
Christophe Vandeplas 4388d18ba1 UI improvement on private event/attribute 2013-07-12 07:54:58 +02:00
iglocska 3e9a967188 Removal of some references to the old private flag 2013-07-11 17:25:47 +02:00
iglocska b5a829e011 Re-enabled route from /admin/users/login to /users/login
- when an admin user got logged out the system threw an error instead of
returning him/her to the login screen
2013-07-11 17:09:58 +02:00
iglocska 9425f1baf0 Slight colour change for the private background colouring 2013-07-11 16:41:34 +02:00
iglocska 53675fe3a3 Some UI changes and reattached the regexp for the admin validation tool
- org only events have a redish background in the event index

- org only events and attributes have their distribution level marked in
red
2013-07-11 16:38:39 +02:00
Christophe Vandeplas b8dcc4d00a must be sleepy...holliday effect? 2013-07-11 14:30:56 +02:00
Christophe Vandeplas ff2f08f60d fixes bug in previous commit. 2013-07-11 14:28:12 +02:00
Christophe Vandeplas 7949181fbc improved password generation algorithm in reset password 2013-07-11 14:26:28 +02:00