Commit Graph

277 Commits (e13dc152e7dd9a8ed00304570b3506f4ef62f3c6)

Author SHA1 Message Date
Sami Mokaddem e13dc152e7
fix: [users:registration] Fixed and improved user registration 2022-12-12 16:02:41 +01:00
Sami Mokaddem e366da6171
fix: [behavior:keycloak] Trying to lower fever the best I can 2022-12-12 08:45:02 +01:00
Sami Mokaddem ea6d33112f
fix: [genericElement:keycloakStatus] Typo fixed 2022-12-12 08:16:16 +01:00
Sami Mokaddem af622dd19b
new: [users:view] Added keycloak status showing the potential differences between Cerebrate and Keycloak 2022-12-09 11:54:34 +01:00
Sami Mokaddem 21c5601c29
chg: [genericElement:fieldScaffold] Let cake's form helper decide the input type if not specified 2022-12-08 15:50:03 +01:00
Sami Mokaddem d15f74698f
chg: [genericElement:index_table] Use provided element for the metafields 2022-11-15 14:55:26 +01:00
Sami Mokaddem be7293a5a4
new: [listTopBar:contextFilters] Added support of element to generate filter content 2022-11-15 11:12:03 +01:00
Sami Mokaddem f5b946d5a9
new: [element:bootstrapUI] To create HTML from BootrstrapHelper by using element 2022-11-15 11:11:06 +01:00
Sami Mokaddem 84069cfe40
chg: [metaTemplateField] More generic way to specify form type 2022-11-14 15:45:28 +01:00
Sami Mokaddem b6fdf37d54
fix: [metafields:dropdown] Patched saving multiple fields with custom value 2022-11-14 15:38:50 +01:00
Sami Mokaddem b53f2681b4
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into feature-metafield-dropdown 2022-11-14 14:53:02 +01:00
Sami Mokaddem 7d6696e079
new: [metaFields] Adding support of sane_default + improving form & crud - WiP 2022-11-14 09:04:35 +01:00
iglocska 260e1d30a1
new: [individuals] rework
- allow modifications for org admins of individuals associated to their users
  - unless they're site admins
- add user information to the individual index to bring clarity to the individual vs users confusion
- rework of the user form field object
2022-11-13 11:09:34 +01:00
iglocska c44e1a8418
new: [metafields] added view representation of info/warning/danger keys 2022-11-09 14:01:37 +01:00
iglocska d43e7c6c22
new: [generic form] added checkbox option for boolean fields in metatemplates 2022-11-09 14:00:18 +01:00
Sami Mokaddem 866fbc2d51
chg: [layout:notification-menu] Improved spacing and size 2022-10-28 11:09:42 +02:00
Sami Mokaddem 03bd4aba30
new: [genericElement:group_table_action] Added support of `show # element` in the table 2022-10-28 09:13:15 +02:00
Sami Mokaddem 67eb9de05a
new: [ui:index_table] Fire pending debounced functions on dropdown hidden 2022-10-28 09:12:30 +02:00
Sami Mokaddem cfae8cb914
chg: [indexTable:indexStatistic] better support of themes 2022-10-21 15:36:08 +02:00
Sami Mokaddem 25b6db7303
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2022-10-21 15:31:41 +02:00
Sami Mokaddem 5389f02b4f
new: [scss:boostrap-additional] Added `btn-outline-text` to ease integration with themes 2022-10-21 15:29:45 +02:00
iglocska 41a241cada
new: [pgp] library ported from MISP
- added proper view elements for encryption keys
- added key information extraction
2022-10-21 15:25:52 +02:00
Sami Mokaddem ddfc83af6f
chg: [navigation:socialProvider] Improved UI for SSO profile management 2022-10-21 14:14:38 +02:00
Sami Mokaddem 96041cc71a
chg: [genericIndex:select_visible_columns] Show meta-template versions 2022-09-29 17:54:58 +02:00
iglocska 3b215a5ec0
fix: [alignments] fixed invalid urls in alignment fields lacking a /
- as reported by SK-CERT
2022-09-19 01:59:23 +02:00
iglocska 822c96dbf0
fix: [single view generic field] allow for unsanitised raw input 2022-09-18 18:32:43 +02:00
iglocska 09ff4eba53
fix: [xss] resolved in the genericField of the single view
- as reported by SK-CERT
2022-09-18 18:27:39 +02:00
iglocska d35a674505
chg: [navigation] added keycloak self management
- also some changes to the navigation system
2022-08-24 11:39:56 +02:00
Sami Mokaddem 8c4c75d83a
fix: [localTools:action] Catch error if local tool's action returned unexpected data 2022-06-08 11:51:52 +02:00
iglocska be064bb0c9
new: [KC] profile link added 2022-05-17 10:42:44 +02:00
Sami Mokaddem 61736531b1
chg: [indexTable:context_filters] Support of default context filter
This filter is used by default if none is provided
2022-03-09 08:55:59 +01:00
Sami Mokaddem 7d345f98f2
chg: [index_table:group_search] Changed name for better visibility 2022-02-28 10:46:38 +01:00
Sami Mokaddem 04b82d356e
chg: [indexTable:filtering] Initial work on supporting custom operators 2022-02-25 15:36:55 +01:00
Sami Mokaddem f044bd8957
chg: [layout:sidebar] Only show collapsible parents if they have children 2022-02-23 10:19:16 +01:00
Sami Mokaddem bd14d52571
chg: Removed useless comments 2022-02-23 08:11:24 +01:00
Sami Mokaddem 7ea5acb167
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable 2022-02-21 11:17:05 +01:00
iglocska 495c4ee93c
fix: [security] XSS in the generic action template
- a previously assumed internal url can have user input appended via the MISP local tool connector
- requires a compromised connected MISP instance where a malicious administrator modifies the UUIDs of cerebrate relevant objects to JS payloads

- as reported by Dawid Czarcnecki of Zigrin Security
2022-02-20 12:07:06 +01:00
Sami Mokaddem ec37a637f8
chg: [header] moved inline style in css file 2022-02-09 09:51:21 +01:00
Sami Mokaddem e67c711935
chg: [notifications] Slightly improved UI 2022-02-09 09:30:59 +01:00
Sami Mokaddem a77e29fa38
new: [layout:sidebar] Notifications in the sidebar 2022-02-08 17:58:30 +01:00
Sami Mokaddem d1cf408163
new: [helpers:bootstrap] Added notification bubble 2022-02-08 17:57:20 +01:00
Sami Mokaddem 62ca877f0b
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable 2022-02-08 08:42:25 +01:00
Sami Mokaddem e13b4e7bc5
fix: [settings:settingField] Enforce sanitization of input fields
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 11:43:09 +01:00
Sami Mokaddem 14ec995c2b
fix: [userSettings] Perform URI validation for bookmarks
- As reported by Dawid Czarnecki from Zigrin Security
2022-02-07 10:48:55 +01:00
iglocska e60d97c214
fix: [security] genericForm reflected XSS in form descriptions for user controlled descriptions
- accessible via the MISP local tool setting change
- sanitise the description

- as reported by Dawid Czarnecki from Zigrin Security
2022-02-03 23:56:23 +01:00
iglocska 8b6fc78695
fix: [generic fields] org field URL missing slash fixed 2022-01-28 00:51:09 +01:00
iglocska 589f932fe9
chg: [form] dropdown default key added 2022-01-27 21:09:32 +01:00
Sami Mokaddem dc8710d89e
fix: [users:view] Correctly reload authkey child panel when performing operations 2022-01-27 10:21:55 +01:00
Sami Mokaddem f53b458103
fix: [userSettings] Allow admin to edit other user's settings 2022-01-26 12:11:44 +01:00
Sami Mokaddem 6005552e76
fix: [genericElements:tags] List tags when editing an entity 2022-01-25 15:02:04 +01:00