Commit Graph

95 Commits

Author SHA1 Message Date
Simon Detheridge 56dcbefb5b Check for safe paths in all ProjectEntityHandler methods
Some import mechanisms (for example, Github project import) call methods such as 'upsert*' directly, bypassing existing filename checks.

Added checks to all methods in ProjectEntityHandler that can create or rename a file.

bug: overleaf/sharelatex#908
Signed-off-by: Simon Detheridge <s@sd.ai>
2018-10-08 15:31:04 +01:00
Simon Detheridge e66210d2af Add method to sanitize full paths
For convenience, add a method to SafePath to break a path into components and verify the status of each one.

bug: overleaf/sharelatex#908
Signed-off-by: Simon Detheridge <s@sd.ai>
2018-10-08 14:48:17 +01:00
Brian Gough 4621234220 clean up broken project on error in ProjectDuplicator 2018-10-02 12:14:22 +01:00
Brian Gough 1f6abd4e69 fix invalid project names when opening templates 2018-09-28 10:38:25 +01:00
Brian Gough 6b80d3563d add support for creating unique project names 2018-09-28 09:48:15 +01:00
Brian Gough 0d4143205d strip quotes from mainFile 2018-09-25 09:05:49 +01:00
Brian Gough 418bc10a18 allow getting doc paths by project id 2018-09-24 16:04:23 +01:00
Brian Gough 2692090f3f support a mainFile parameter for templates 2018-09-24 15:27:16 +01:00
James Allen ef11161ddb Revert "Record and show last modified by user for projects" 2018-09-13 14:00:30 +01:00
James Allen ab10336110 Record last update time and user from project-history 2018-09-13 10:38:52 +01:00
hugh-obrien 8ef90a0dcb move call for creating ip matched notifcation to project controller 2018-09-05 15:40:59 +01:00
Tim Alby 3324796086 don't regard v1 teams as paid subscriptions
- use `userHasV1Subscription` instead of `userHasV1SubscriptionOrTeam` in `LimitationsManager.userHasSubscriptionOrIsGroupMember `
- remove `userHasV1SubscriptionOrTeam`
- rename `LimitationsManager.userHasSubscriptionOrIsGroupMember` to `LimitationsManager.hasPaidSubscription`
- rename some variables for clarity
2018-09-03 15:09:57 +01:00
Paulo Reis efc926ffc5 Load theme as a user setting; allow the user to change it; update tests. 2018-08-27 15:25:00 +01:00
Brian Gough c2828c8ca5 add unit tests 2018-08-13 10:53:43 +01:00
Brian Gough efcd3577ce avoid clobbering imported image names 2018-08-06 16:56:44 +01:00
Alasdair Smith 62f69a4bcd Fix case sensitivity 2018-07-18 09:26:03 +01:00
Alasdair Smith 823e12e4a8 Fix tests to add new Features dependency 2018-07-18 09:26:03 +01:00
Shane Kilkelly f6424ada40 Merge pull request #655 from sharelatex/sk-linked-files-output-redux
Linked files from project output
2018-06-25 10:28:29 +01:00
James Allen 0edd2b5fe7 Fix check for hasSubscription 2018-06-22 14:10:20 +01:00
Shane Kilkelly fadbd72837 Add unit test for copying project with linked files 2018-06-22 10:52:49 +01:00
Alasdair Smith 6c1994e25b Stub errors in tests to cache 2018-06-20 11:19:23 +01:00
Shane Kilkelly 0cb5beb689 Merge branch 'master' into sk-linked-files-from-project 2018-05-24 13:47:28 +01:00
Alasdair Smith 81fdca91c1 Fix failing test 2018-05-24 10:27:36 +01:00
Shane Kilkelly 3181f624a7 Remove obsolete auth check 2018-05-24 10:22:17 +01:00
Shane Kilkelly 4daf062be9 Add unit test for ProjectController.projectEntitiesJson 2018-05-22 16:40:39 +01:00
Shane Kilkelly b1c1cdecef Add unit test for ProjectController.userProjectsJson 2018-05-22 16:17:59 +01:00
Shane Kilkelly bc5769cd73 Stub out the ProjectEntityHandler in ProjectController tests 2018-05-22 15:56:01 +01:00
Hayden Faulds 9ccdf073c4 accept attributes rather than projectHistoryId to ProjectCreationHandler 2018-05-10 11:39:23 +01:00
Brian Gough 1278e2da45 fix project structure version when deleting folder 2018-05-08 13:37:33 +01:00
James Allen 40da785363 Fix test for sampling front users 2018-05-01 09:02:43 +01:00
James Allen 6399621d1f Show front widget for paid and sampled free users 2018-04-30 17:13:57 +01:00
Alasdair Smith ad1df3532f Merge pull request #490 from sharelatex/hof-deleted-project-history
Pass project history id with updates
2018-04-23 10:05:07 +01:00
James Allen 9e525702c1 Merge branch 'master' into ja-restore-files 2018-04-16 16:14:31 +01:00
Hayden Faulds 7755a7cc1f add overleaf to projections for project structure updates 2018-04-13 13:45:07 +01:00
Hayden Faulds 3006d018d9 send projectHistoryId with project structure updates 2018-04-13 13:45:03 +01:00
Hayden Faulds 50686090c8 push doc pathname logic into DocController 2018-04-12 16:16:44 +01:00
Brian Gough 882b555433 create new file on replace 2018-04-09 12:05:08 +01:00
Brian Gough baec4eb195 move uploads outside the lock 2018-04-09 12:05:07 +01:00
James Allen 1e8439a2c6 Fix restore of docs from old deleted docs 2018-04-06 10:30:13 +01:00
Hayden Faulds 57de597e60 404 when resyncing deleting projects 2018-03-16 15:26:19 +00:00
Hayden Faulds d22d8324af disable history resync when project-history is not enabled 2018-03-15 16:57:39 +00:00
James Allen 371caa41ca Merge pull request #378 from sharelatex/hof-history-resync
resync project history endpoint
2018-03-13 13:33:08 +00:00
Shane Kilkelly 9dc8600588 Add a unit test for the analytics events sent from project-creation 2018-03-12 10:50:15 +00:00
Hayden Faulds 5b2e7d981a resyncProject -> resyncProjectHistory 2018-03-09 11:11:06 +00:00
Hayden Faulds 50fdfec6e8 add unit tests for project history resync 2018-03-09 11:11:06 +00:00
Tim Alby 4b291fab2a Record new project event 2018-03-06 18:13:24 -05:00
James Allen cae09028ff Fix tests 2018-03-05 10:37:53 +00:00
Brian Gough 3bbd49c7eb Merge pull request #377 from sharelatex/bg-add-project-structure-version-number
add project structure version number
2018-03-05 08:41:14 +00:00
Brian Gough 67d784a74a increment project version on every structure change 2018-03-01 12:32:08 +00:00
James Allen becb76d69b Don't allow backslashes in file names 2018-03-01 11:42:44 +00:00