Commit Graph

303 Commits (82bf3a74c1f75ec2c311a7a0b830b900d09da2bd)

Author SHA1 Message Date
iglocska 3b215a5ec0
fix: [alignments] fixed invalid urls in alignment fields lacking a /
- as reported by SK-CERT
2022-09-19 01:59:23 +02:00
iglocska 822c96dbf0
fix: [single view generic field] allow for unsanitised raw input 2022-09-18 18:32:43 +02:00
iglocska 09ff4eba53
fix: [xss] resolved in the genericField of the single view
- as reported by SK-CERT
2022-09-18 18:27:39 +02:00
iglocska d35a674505
chg: [navigation] added keycloak self management
- also some changes to the navigation system
2022-08-24 11:39:56 +02:00
Sami Mokaddem 8c4c75d83a
fix: [localTools:action] Catch error if local tool's action returned unexpected data 2022-06-08 11:51:52 +02:00
iglocska be064bb0c9
new: [KC] profile link added 2022-05-17 10:42:44 +02:00
Sami Mokaddem 61736531b1
chg: [indexTable:context_filters] Support of default context filter
This filter is used by default if none is provided
2022-03-09 08:55:59 +01:00
Sami Mokaddem 7d345f98f2
chg: [index_table:group_search] Changed name for better visibility 2022-02-28 10:46:38 +01:00
Sami Mokaddem 04b82d356e
chg: [indexTable:filtering] Initial work on supporting custom operators 2022-02-25 15:36:55 +01:00
Sami Mokaddem f044bd8957
chg: [layout:sidebar] Only show collapsible parents if they have children 2022-02-23 10:19:16 +01:00
Sami Mokaddem bd14d52571
chg: Removed useless comments 2022-02-23 08:11:24 +01:00
Sami Mokaddem 7ea5acb167
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable 2022-02-21 11:17:05 +01:00
iglocska 495c4ee93c
fix: [security] XSS in the generic action template
- a previously assumed internal url can have user input appended via the MISP local tool connector
- requires a compromised connected MISP instance where a malicious administrator modifies the UUIDs of cerebrate relevant objects to JS payloads

- as reported by Dawid Czarcnecki of Zigrin Security
2022-02-20 12:07:06 +01:00
Sami Mokaddem ec37a637f8
chg: [header] moved inline style in css file 2022-02-09 09:51:21 +01:00
Sami Mokaddem e67c711935
chg: [notifications] Slightly improved UI 2022-02-09 09:30:59 +01:00
Sami Mokaddem a77e29fa38
new: [layout:sidebar] Notifications in the sidebar 2022-02-08 17:58:30 +01:00
Sami Mokaddem d1cf408163
new: [helpers:bootstrap] Added notification bubble 2022-02-08 17:57:20 +01:00
Sami Mokaddem 62ca877f0b
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable 2022-02-08 08:42:25 +01:00
Sami Mokaddem e13b4e7bc5
fix: [settings:settingField] Enforce sanitization of input fields
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 11:43:09 +01:00
Sami Mokaddem 14ec995c2b
fix: [userSettings] Perform URI validation for bookmarks
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 10:48:55 +01:00
iglocska e60d97c214
fix: [security] genericForm reflected XSS in form descriptions for user controlled descriptions
- accessible via the MISP local tool setting change
- sanitise the description

- as reported by Dawid Czarnecki from Zigrin Security
2022-02-03 23:56:23 +01:00
iglocska 8b6fc78695
fix: [generic fields] org field URL missing slash fixed 2022-01-28 00:51:09 +01:00
iglocska 589f932fe9
chg: [form] dropdown default key added 2022-01-27 21:09:32 +01:00
Sami Mokaddem dc8710d89e
fix: [users:view] Correctly reload authkey child panel when performing operations 2022-01-27 10:21:55 +01:00
Sami Mokaddem f53b458103
fix: [userSettings] Allow admin to edit other user's settings 2022-01-26 12:11:44 +01:00
Sami Mokaddem 6005552e76
fix: [genericElements:tags] List tags when editing an entity 2022-01-25 15:02:04 +01:00
Sami Mokaddem 42de70e87d
chg: [ui:header-notification] Added support of variant severity 2022-01-25 11:31:17 +01:00
Sami Mokaddem 249892c3e0
chg: [notifications] Support of modal when clicking on notification element 2022-01-25 09:32:16 +01:00
Sami Mokaddem 6321725fa9
new: [notification] Added initial version of the notification system 2022-01-24 15:13:28 +01:00
Sami Mokaddem 7af31448cd
fix: [genericElements:index_table] Improved positioniong of pagination link for sorting 2022-01-21 09:09:05 +01:00
Sami Mokaddem 695fcdaf26
chg: [genericELements:index_table] Tabler head accept icons 2022-01-21 09:08:13 +01:00
Sami Mokaddem d324eb497e
fix: [genericElements:tags] List tags when editing an entity 2022-01-20 14:37:19 +01:00
Sami Mokaddem e6ec31ff23
fix: [appTable:table_statistics] Compute timeline only if the fields exist in the DB schema 2022-01-20 13:44:19 +01:00
Sami Mokaddem a98c7f8f32
fix: [metaTemplate] Various fixed on meta-templates updates 2022-01-20 12:00:39 +01:00
Sami Mokaddem 324ac1ce40
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into refactor-metatemplates 2022-01-20 09:00:45 +01:00
Sami Mokaddem 1d7fc00a65
chg: [layout:header-profile] Improved spacing 2022-01-19 09:33:57 +01:00
iglocska 12d7607aae
new: [encryption key] view added
- was missing, despite links to it
2022-01-17 09:45:45 +01:00
Sami Mokaddem a1a9029053
chg: [metaTemplate] Better placement of notice message 2021-12-20 14:28:04 +01:00
Sami Mokaddem 19b4648efb
chg: [genericElement:metafield_panel] Only display notice if the entity has meta fields 2021-12-17 14:04:44 +01:00
Sami Mokaddem 02cc0c30a3
chg: [metaTemplate] Major refactoring and documentation - WiP 2021-12-14 15:09:40 +01:00
Sami Mokaddem aa83b1aa37
chg: [metaTemplate] Update system and conflict resolution interfaces - WiP 2021-12-08 11:11:46 +01:00
Sami Mokaddem 6865114118
chg: [genericElements:form] Support of more option and radio input 2021-12-08 11:08:40 +01:00
Sami Mokaddem 819d96e805
new: [metaTemplate] Interface and functions to update meta-templates - WiP
Actual update not implemented yet.
2021-12-01 11:01:31 +01:00
Sami Mokaddem a6ecab5b47
new: [elements:breadcrumb] Added possibility to have badges in action item 2021-12-01 08:41:25 +01:00
iglocska 2eb2459936
fix: [forms] added missing password form field 2021-11-26 10:52:44 +01:00
iglocska 15d738aa77
fix: [forms] dropdowns overriding values from request 2021-11-26 10:51:58 +01:00
iglocska 061f3fc468
chg: [profile] added org to profile menu 2021-11-24 01:26:29 +01:00
Sami Mokaddem d136955160
chg: [elements:widgets] Slightly refactored highlight panel and removed useless code 2021-11-23 22:07:31 +01:00
Sami Mokaddem bfd3a0c1e0
chg: [genericElements:index_table] Immediately save index setting when dropdown menu gets closed 2021-11-23 21:55:01 +01:00
Sami Mokaddem 7c92c12de9
chg: [element:index_table] Slight UI adjustement 2021-11-23 15:53:05 +01:00
Sami Mokaddem 025b551e77
chg: [genericElements:index_table] Added close button for stat widget config UI 2021-11-23 13:49:34 +01:00
Sami Mokaddem ef91cfcee3
chg: [genericElements:index_table] Continuation of stats for current view - WiP 2021-11-17 17:04:39 +01:00
iglocska 92ddd04ba0
fix: [JSON fields] fixed escaping issues 2021-11-17 15:58:52 +01:00
Sami Mokaddem 25f0f07251
chg: [genericElements:index_table] Added support of statistic for current view - WiP 2021-11-15 11:51:47 +01:00
Sami Mokaddem 829e471ac1
chg: [element:widget] Added support of condensed UI for highlight-panel
This could be later on refactored to be formed from smaller views
2021-11-15 11:51:08 +01:00
Sami Mokaddem 5e39707623
chg: [element:bar] better support of passed options 2021-11-15 11:49:35 +01:00
Sami Mokaddem 7cf7363009
chg: [genericElements:index_table] Moved description to a tooltip
Description describing indexes are great when discovering an app for the first time but start taking important place and become useless when users gets to know the app better. Moving it to a tooltip makes sense in that regard.
2021-11-15 08:29:16 +01:00
Sami Mokaddem 509b203591
chg: [instance:home] Added support of both `modified` and `created` in stat panels 2021-11-12 15:40:03 +01:00
Sami Mokaddem 6579482526
chg: [Organisation] Moved model to use meta-field behavior instead of association 2021-11-11 14:50:25 +01:00
Sami Mokaddem 0dfa87be6f
chg: [genericElement:index_table] Conditional inclusion of header in column visibility selector 2021-11-11 08:24:07 +01:00
Sami Mokaddem fc0f12e38e
chg: [genericElement:index] Highlight filtering button if filters are present 2021-11-10 15:34:33 +01:00
Sami Mokaddem cc0b1ad3b4
chg: [component:CRUD] Added support of metafield in quickfilter feature 2021-11-10 15:28:09 +01:00
Sami Mokaddem d6d592ff8c
new: [genericElement:index_table] Added support of meta_fields searches 2021-11-10 12:07:27 +01:00
Sami Mokaddem acd80e2f18
chg: [genericElement:index_table] Small UI improvement for column visibility selector 2021-11-10 09:30:23 +01:00
Sami Mokaddem a005d0491f
new: [genericElements:index_table] Support of meta_fields in table column 2021-11-10 09:06:39 +01:00
Sami Mokaddem b6cf9e39dd
chg: [genericElement:index_table] Better support of array in generic fields 2021-11-10 08:58:21 +01:00
Sami Mokaddem f62caa919b
chg: [navigation] Navigation's actions now relies on modal instead of redirecting to the page 2021-11-08 15:56:39 +01:00
Sami Mokaddem 50737543a9
chg: [component:CRUD] Cleanup leftovers comments 2021-11-08 15:03:05 +01:00
Sami Mokaddem 94fbd74918
chg: [component:CRUD] Support of validation and re-edition (WiP) 2021-11-08 14:08:47 +01:00
Sami Mokaddem fc436e89e2
chg: [element:genericForm] Usage of bootstrap component to generate ajax modal 2021-11-05 17:44:05 +01:00
Sami Mokaddem 26859d045e
fix: [element] Made single views aware of multiple meta-fields 2021-11-05 17:03:11 +01:00
Sami Mokaddem 9f7f39ec85
chg: [app] More UI improvement for responsiveness 2021-11-04 15:19:45 +01:00
Sami Mokaddem 4f084e6beb
chg: [app] Various layout improvements for responsiveness 2021-11-04 10:47:03 +01:00
Sami Mokaddem c55088aa85
chg: [metaTemplate] Continuation of refactoring - WiP
Editing meta field from entities working
2021-11-04 08:10:32 +01:00
Sami Mokaddem 9373c35bc6
chg: [metaTemplate] Started refactoring the whole feature
Objective of the refactoring is to:
Simplified metafields searches and started to add support of multi-field and edition
2021-11-03 11:47:10 +01:00
Sami Mokaddem 51d93d40af
chg: [ui] Various UI improvement and cleanup
New according bootstrap component and small UI enhancements
2021-10-28 09:27:30 +02:00
Sami Mokaddem 4ef6738053
chg: [mailinglist] Improved feature
Previously, emails were stored as json encoded string. To add more flexibility and prevent inconsistencies (such as propagating email changes to the mailing list), it has been moved to a table.
2021-10-28 09:00:20 +02:00
Sami Mokaddem fe9fbe2e99
new: [mailing-list] Added mailing list feature - WiP 2021-10-25 16:20:36 +02:00
Sami Mokaddem 8686aa87a6
fix: [genericElement:index_table] Better support of nested dropdown if it has been added after page load 2021-10-20 15:41:11 +02:00
Sami Mokaddem 7940920f3d
fix: [genericElement:indexTable] Ignore row selector column 2021-10-20 15:39:37 +02:00
Sami Mokaddem 6c4efc044d
fix: [settings] Make sure to save multi-select value as an array 2021-10-20 12:48:13 +02:00
Sami Mokaddem ab7db2c348
chg: [element:settings] Added support of multi-select fields 2021-10-20 12:21:13 +02:00
Sami Mokaddem 43dfacfe72
chg: [genericElement:indexTable] Refactored code and added support of compact display 2021-10-20 11:28:39 +02:00
Sami Mokaddem 7941a6530a
new: [genericElement:indexTable] Table actions - WiP
Table actions allow to perform actions on the table such as hide/show columns, regroup rows by fields and so on
2021-10-20 09:39:12 +02:00
Sami Mokaddem 97428a8892
chg: [ui:home] Nicer icons and layout 2021-10-18 14:59:18 +02:00
Sami Mokaddem 78180fa90f
new: [userSettings] Added complete support of user settings
Including support of bookmarks, sidebar behavior and theming
2021-10-18 13:28:26 +02:00
Sami Mokaddem 14c7d20cc1
fix: [ui:sidebar] Make the sidebar scrollable if content is too large 2021-10-18 13:11:19 +02:00
Sami Mokaddem 3ea877fe10
chg: [ui:settings] Refactored setting factory to be more generic 2021-10-12 10:21:12 +02:00
Sami Mokaddem 0d6e6aa7a4
chg: [userSettings] Initial version of template - WiP 2021-10-12 10:16:36 +02:00
Sami Mokaddem 29ca08ce60
new: [sidebar:bookmarks] Added early version of user-defined bookmarks
Bookmark configs are saved in their respective user setting for each users
2021-10-08 16:57:38 +02:00
Sami Mokaddem 39fdb8ec0d
new: [user-settings] Added user settings feature 2021-10-08 10:27:40 +02:00
Sami Mokaddem 7ab8a93fbd
chg: [navigation] regrouped navigation related data into files 2021-10-08 10:23:03 +02:00
Sami Mokaddem 015c5bc721
chg: [element:genericForm] Added support of bs5 floating label 2021-10-04 16:16:13 +02:00
Sami Mokaddem 07a4ebfc92 chg: [ui:keycloak] Nice login and logged-in UI 2021-10-04 13:15:47 +02:00
Sami Mokaddem f9113819ee chg: [elements:flash] Support of toast for flash messages 2021-10-04 13:06:12 +02:00
mokaddem bc8de62815 chg: [ui:settings] Setting page support themes 2021-09-28 10:59:57 +02:00
mokaddem 20a7903573 chg: [instance:settings] Support of BS5 in setting page 2021-09-28 09:23:02 +02:00
mokaddem b4fdc625da chg: [setting] Support of themes in settings 2021-09-18 11:21:50 +02:00
mokaddem 652c59c597 fix: [settings] Fixed scrollspy 2021-09-18 10:33:27 +02:00
mokaddem 43ac537fbc fix: [navigation] Added setting page and more layout fixes 2021-09-18 10:31:05 +02:00