Commit Graph

455 Commits (2a754160ef07bd82612b693b651fd11b95440d73)

Author SHA1 Message Date
iglocska be064bb0c9
new: [KC] profile link added 2022-05-17 10:42:44 +02:00
Sami Mokaddem 5c520e440d
chg: [metatemplate:meta_fields_to_update] Only show notice if applicable 2022-03-09 09:16:47 +01:00
Sami Mokaddem 61736531b1
chg: [indexTable:context_filters] Support of default context filter
This filter is used by default if none is provided
2022-03-09 08:55:59 +01:00
Sami Mokaddem 39d89efb53
chg: [meta-template:update] Default update strategy to be `create_new` 2022-03-09 08:21:27 +01:00
Sami Mokaddem 66572a788f
fix: [metatemplates:index] Pass all needed arguments 2022-03-08 17:22:39 +01:00
Sami Mokaddem 3d0fdeba81
fix: [users:add] Decoupled password required and visibility 2022-03-01 13:59:10 +01:00
Sami Mokaddem 7d345f98f2
chg: [index_table:group_search] Changed name for better visibility 2022-02-28 10:46:38 +01:00
Sami Mokaddem 3ef64911f9
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable 2022-02-28 09:51:51 +01:00
Sami Mokaddem 04b82d356e
chg: [indexTable:filtering] Initial work on supporting custom operators 2022-02-25 15:36:55 +01:00
iglocska 4902a3f8a6
new: [password auth] added setting to disable password auth
- not needed in some cases for keycloak enabled instances
2022-02-25 00:33:00 +01:00
iglocska 678ad0fe8e
chg: [templates] for user creation now have a minimalist individiual creation included 2022-02-24 13:48:10 +01:00
iglocska 304586ff19
chg: [user] view add link to user's individual 2022-02-24 13:47:49 +01:00
Sami Mokaddem f044bd8957
chg: [layout:sidebar] Only show collapsible parents if they have children 2022-02-23 10:19:16 +01:00
Sami Mokaddem bd14d52571
chg: Removed useless comments 2022-02-23 08:11:24 +01:00
Sami Mokaddem c0b6925aa5
chg: Removed unused commented code 2022-02-22 14:07:01 +01:00
Sami Mokaddem 7ea5acb167
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable 2022-02-21 11:17:05 +01:00
iglocska 9245b2d720
fix: [genericTemplates] delete template can be invoked without an ID 2022-02-20 15:05:03 +01:00
iglocska 495c4ee93c
fix: [security] XSS in the generic action template
- a previously assumed internal url can have user input appended via the MISP local tool connector
- requires a compromised connected MISP instance where a malicious administrator modifies the UUIDs of cerebrate relevant objects to JS payloads

- as reported by Dawid Czarcnecki of Zigrin Security
2022-02-20 12:07:06 +01:00
Sami Mokaddem ec37a637f8
chg: [header] moved inline style in css file 2022-02-09 09:51:21 +01:00
Sami Mokaddem e67c711935
chg: [notifications] Slightly improved UI 2022-02-09 09:30:59 +01:00
Sami Mokaddem a77e29fa38
new: [layout:sidebar] Notifications in the sidebar 2022-02-08 17:58:30 +01:00
Sami Mokaddem d1cf408163
new: [helpers:bootstrap] Added notification bubble 2022-02-08 17:57:20 +01:00
Sami Mokaddem 62ca877f0b
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable 2022-02-08 08:42:25 +01:00
Sami Mokaddem e13b4e7bc5
fix: [settings:settingField] Enforce sanitization of input fields
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 11:43:09 +01:00
Sami Mokaddem 14ec995c2b
fix: [userSettings] Perform URI validation for bookmarks
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 10:48:55 +01:00
Sami Mokaddem dfb8d73a92
fix: [userSettings] Renamed template to match the controller endpoint 2022-02-07 10:37:03 +01:00
iglocska e60d97c214
fix: [security] genericForm reflected XSS in form descriptions for user controlled descriptions
- accessible via the MISP local tool setting change
- sanitise the description

- as reported by Dawid Czarnecki from Zigrin Security
2022-02-03 23:56:23 +01:00
iglocska 8b6fc78695
fix: [generic fields] org field URL missing slash fixed 2022-01-28 00:51:09 +01:00
iglocska 9dd488e766
fix: [login] hide keycloak login if keycloak login is disabled 2022-01-27 22:11:51 +01:00
iglocska 1ca0f21b86
chg: [user add] form defaults
- org will default to own org for site admins
- role will default to the default role (if set)
2022-01-27 21:54:59 +01:00
iglocska 05daa5470a
fix: [sharing group form] default to own org as owner
- reconsider if this should be a configurable setting at all
2022-01-27 21:10:00 +01:00
iglocska 589f932fe9
chg: [form] dropdown default key added 2022-01-27 21:09:32 +01:00
Sami Mokaddem 7de1c14407
chg: [userSettings:add] Adhere to the passed user context 2022-01-27 10:44:47 +01:00
Sami Mokaddem dc8710d89e
fix: [users:view] Correctly reload authkey child panel when performing operations 2022-01-27 10:21:55 +01:00
Sami Mokaddem 789bd9926f
chg: [navigation:users] Restored breadcrumb navigation to access user profile settings 2022-01-27 08:41:31 +01:00
Sami Mokaddem 54ee91ba1a
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2022-01-26 12:11:53 +01:00
Sami Mokaddem f53b458103
fix: [userSettings] Allow admin to edit other user's settings 2022-01-26 12:11:44 +01:00
iglocska acc9c94baa
Merge branch 'main' into develop 2022-01-25 15:59:31 +01:00
Sami Mokaddem 578eacfd89
fix: [templates:common] Removed extra closing tag 2022-01-25 15:02:58 +01:00
Sami Mokaddem 4f8b663b87
chg: [localtTools:connectionRequest] Provide more info on exception 2022-01-25 15:02:30 +01:00
Sami Mokaddem 6005552e76
fix: [genericElements:tags] List tags when editing an entity 2022-01-25 15:02:04 +01:00
Sami Mokaddem a7e2fb2ea7
chg: [auditlog:index] Break text in changed column 2022-01-25 15:01:48 +01:00
Sami Mokaddem 77285257da
fix: [templates:common] Removed extra closing tag 2022-01-25 14:03:48 +01:00
iglocska e9f77aff51
Merge branch 'develop' into main 2022-01-25 11:36:06 +01:00
iglocska 57e2c75352
fix: [users] role based action filtering added
- to avoid annoying clickable, but blocked actions for og admins
2022-01-25 11:34:22 +01:00
Sami Mokaddem 42de70e87d
chg: [ui:header-notification] Added support of variant severity 2022-01-25 11:31:17 +01:00
Sami Mokaddem 249892c3e0
chg: [notifications] Support of modal when clicking on notification element 2022-01-25 09:32:16 +01:00
Sami Mokaddem 7535cd2bdf
chg: [localtTools:connectionRequest] Provide more info on exception 2022-01-24 16:12:46 +01:00
Sami Mokaddem 6321725fa9
new: [notification] Added initial version of the notification system 2022-01-24 15:13:28 +01:00
Sami Mokaddem fc2c67ef55
new: [dependency:js] Added moment.js 2022-01-24 15:12:48 +01:00
Sami Mokaddem 7af31448cd
fix: [genericElements:index_table] Improved positioniong of pagination link for sorting 2022-01-21 09:09:05 +01:00
Sami Mokaddem 695fcdaf26
chg: [genericELements:index_table] Tabler head accept icons 2022-01-21 09:08:13 +01:00
Sami Mokaddem f8c775ba03
chg: [api:index] Serve redoc script directly form the server 2022-01-20 14:54:47 +01:00
Sami Mokaddem d324eb497e
fix: [genericElements:tags] List tags when editing an entity 2022-01-20 14:37:19 +01:00
Sami Mokaddem ef16bc3676
chg: [auditlog:index] Break text in changed column 2022-01-20 14:24:03 +01:00
Sami Mokaddem 38a9aa9869
chg: [auditlog] Allow filtering and searching the table 2022-01-20 13:55:27 +01:00
Sami Mokaddem e6ec31ff23
fix: [appTable:table_statistics] Compute timeline only if the fields exist in the DB schema 2022-01-20 13:44:19 +01:00
Sami Mokaddem a98c7f8f32
fix: [metaTemplate] Various fixed on meta-templates updates 2022-01-20 12:00:39 +01:00
Sami Mokaddem 324ac1ce40
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into refactor-metatemplates 2022-01-20 09:00:45 +01:00
Andras Iklody 80cd93da40
Merge pull request #80 from righel/add-integration-tests
Add integration tests
2022-01-19 16:25:19 +01:00
Sami Mokaddem 1d7fc00a65
chg: [layout:header-profile] Improved spacing 2022-01-19 09:33:57 +01:00
Luciano Righetti ee5c723c71 Merge branch 'develop' into add-integration-tests 2022-01-18 18:11:53 +01:00
iglocska dbaa2ba7b3
fix: [encryption keys] several fixes
- fix the user view to correctly point to the list of related encryption keys
- fix the lookup on the index to be based on owner_model + owner_id combo
- fix the filtering of the dropdown in the encryption key add form to only valid options
2022-01-18 16:56:38 +01:00
Luciano Righetti f48c1a5a17 Merge branch 'develop' into add-integration-tests 2022-01-18 14:29:54 +01:00
Sami Mokaddem 46870a4bcc
fix: [organisation:add] Removed useless description field 2022-01-17 15:45:51 +01:00
iglocska 0328bfed46
fix: [inividuals] add shouldn't have the tagging options
- can't tag that which does not exist yet
2022-01-17 13:20:34 +01:00
iglocska 244020802c
Merge branch 'main' into develop 2022-01-17 13:17:51 +01:00
iglocska 453c838dfe
fix: [placeholder removed] WiP functionality for local_tool->local_tool connections within the same brood temporarily removed
- was never fully implemented
2022-01-17 13:15:26 +01:00
iglocska b4534c373b
fix: [organisation] add/edit doesn't save URL 2022-01-17 12:53:14 +01:00
Sami Mokaddem f18307b3cb
chg: [localTools:local_tool_connectors] Added support of CodeMirror placeholder 2022-01-17 11:30:26 +01:00
Sami Mokaddem aeaa833f64
new: [CodeMirror] Shows a placeholder whenever the textarea is empty 2022-01-17 11:29:50 +01:00
iglocska 12d7607aae
new: [encryption key] view added
- was missing, despite links to it
2022-01-17 09:45:45 +01:00
Luciano Righetti a69608530c new: add /api openapi spec view with redoc, add faker to fixtures, validate api responses with openapi spec, add /api/v1/ prefix to api routes 2022-01-07 13:45:52 +01:00
Sami Mokaddem 30ec856dc3
fix: [local_tool:batchApiAction] Various UI and backend fixes 2021-12-21 12:36:36 +01:00
Sami Mokaddem 3ed5af776a
fix: [local_tool:batchApiAction] Various UI and backend fixes 2021-12-21 12:34:37 +01:00
Sami Mokaddem a1a9029053
chg: [metaTemplate] Better placement of notice message 2021-12-20 14:28:04 +01:00
Sami Mokaddem 19b4648efb
chg: [genericElement:metafield_panel] Only display notice if the entity has meta fields 2021-12-17 14:04:44 +01:00
Sami Mokaddem da5c4e2de7
chg: [metaTemplate:index] Improved text 2021-12-16 11:03:34 +01:00
Sami Mokaddem fa364c2b2f
fix: [metaTemplate] Repaired update_all 2021-12-15 15:33:58 +01:00
Sami Mokaddem 02cc0c30a3
chg: [metaTemplate] Major refactoring and documentation - WiP 2021-12-14 15:09:40 +01:00
Sami Mokaddem aa83b1aa37
chg: [metaTemplate] Update system and conflict resolution interfaces - WiP 2021-12-08 11:11:46 +01:00
Sami Mokaddem 6865114118
chg: [genericElements:form] Support of more option and radio input 2021-12-08 11:08:40 +01:00
Sami Mokaddem 296e8b119a
fix: [genericTemplates:delete] Make sure to sanitize modal content 2021-12-08 11:07:02 +01:00
iglocska bb3b264cfb
fix: [sharing group index] fixed members link 2021-12-05 00:02:33 +01:00
iglocska 5041a57e08
fix: [sharing groups] index members column fixed 2021-12-04 23:58:42 +01:00
iglocska 332f374e01
chg: [sharing group index] add button now has the new checkaccess conditions applied 2021-12-01 14:26:20 +01:00
Sami Mokaddem 819d96e805
new: [metaTemplate] Interface and functions to update meta-templates - WiP
Actual update not implemented yet.
2021-12-01 11:01:31 +01:00
Sami Mokaddem a6ecab5b47
new: [elements:breadcrumb] Added possibility to have badges in action item 2021-12-01 08:41:25 +01:00
iglocska 2406e31b72
fix: [user add] form fixes 2021-11-26 10:53:24 +01:00
iglocska 2eb2459936
fix: [forms] added missing password form field 2021-11-26 10:52:44 +01:00
iglocska 15d738aa77
fix: [forms] dropdowns overriding values from request 2021-11-26 10:51:58 +01:00
iglocska cc5c750de8
chg: [audit log] change field renamed to changed
- change is a reserved keyword
- this way quoting of field names is no longer needed in the cakePHP settings
2021-11-25 00:57:31 +01:00
iglocska a4f6e06e7a
fix: [roles index] correctly allow site admins to modify / remove roles 2021-11-25 00:55:36 +01:00
Sami Mokaddem e8e1a16673
chg: [search_all] Added drafty support of meta-fields 2021-11-24 22:39:22 +01:00
Sami Mokaddem aa42e6763a
chg: [metaTemplate] Started implementing new update system - WiP 2021-11-24 09:14:09 +01:00
iglocska 6d7a555368
chg: [index views] slight changes
- hide inaccessible action buttons on org index
- add owner to sharing group index
2021-11-24 01:28:01 +01:00
iglocska e708730e97
chg: [roles] hide action buttons on the role index when they wouldn't be available anyway 2021-11-24 01:27:14 +01:00
iglocska ed848e9cee
chg: [sharing groups] show owner org on the index 2021-11-24 01:26:55 +01:00
iglocska 061f3fc468
chg: [profile] added org to profile menu 2021-11-24 01:26:29 +01:00
iglocska 81ab202917
chg: [templates] org fields added to user templates 2021-11-24 01:25:57 +01:00