Henry Oswald 7fd29b18a8 destroy users session before creating a new one for them after login ...

session changed to prevent against fixation attacks

2015-07-01 15:29:02 +01:00

..

Authentication

destroy users session before creating a new one for them after login

2015-07-01 15:29:02 +01:00

Blog

blog returns 404's if the page does not exist in blog

2014-07-23 12:16:52 +01:00

Chat

patched xss hole with messages not setting the content type correctly

2015-05-19 11:04:52 +01:00

Collaborators

kill off CollaboratorsHandler. changeUsersPrivilegeLevel as it is not used anywhere

2015-05-28 13:02:08 +01:00

Compile

fix unit test for build parameter

2015-03-02 15:33:45 +00:00

Docstore

Don't show diffs of deleted docs (much simpler)

2014-06-06 14:43:45 +01:00

Documents

Don't proxy version number to/from docstore

2014-05-15 12:44:08 +01:00

DocumentUpdater

Send source of update to doc updater and allow external updates to be ignored in UI

2014-10-16 11:27:10 +01:00

Downloads

Add in backend multiple project downloading

2014-06-18 16:37:18 +01:00

Editor

clients can not rename docs/files/folders to blank name.

2015-03-04 11:10:59 +00:00

Email

Fix failing unit test

2015-03-19 16:41:09 +00:00

FileStore

downloading a file now sets the filename in header correctly

2014-02-20 22:33:12 +00:00

helpers

changed authentication controller to use req.parsedUrl.pathname as query strings on req.url were breaking the whitelist

2015-04-30 11:57:40 +01:00

infrastructure

modify LockManager test to avoid dependence on timing

2015-05-18 09:14:28 +01:00

PasswordReset

added tests around new endpoints for joining groups

2015-05-27 20:50:16 +01:00

Project

removed req.session.destorys from endpoints now on the api router which are not needed

2015-07-01 15:26:05 +01:00

Referal

converted all analytics to use new google analytics, removing mixpanel

2014-03-08 19:00:26 +00:00

Security

make PasswordResetTokenHandler generic so it can be used for invites

2015-05-26 15:24:09 +01:00

Subscription

if a domain licence link has expired render a nice message explaining they need to retry

2015-06-01 12:43:42 +01:00

SystemMessages

Add in system messages

2014-07-24 13:24:08 +01:00

Tags

fix unit tests I broke by adding timeout to tags

2014-04-16 17:51:40 +01:00

ThirdPartyDataStore

removed req.session.destorys from endpoints now on the api router which are not needed

2015-07-01 15:26:05 +01:00

TrackChanges

Flush project to track changes when leaving

2014-03-22 09:34:43 +00:00

Uploads

changed name used when project or file uploaded, this changed when

2015-07-01 15:28:49 +01:00

User

renamed SubscriptionDomainAllocator -> SubscriptionDomainHandler

2015-05-27 20:57:54 +01:00