Robbert Gurdeep Singh 034abaa73a Security: Use Header.Set and Header.Del for X-Grafana-User header (#25495) ...

This ensures that the X-Grafana-User header can be trusted.
If the configuration enabled the setting of this header, the
server can now trust that X-Grafana-User is set/unset by Grafana.
Before this, an anonymous user could simply set the X-Grafana-User
header themselves (using the developer tool for example)

2020-06-11 21:15:17 +02:00

..

avatar

Only allow 32 hexadecimal digits for the avatar hash (#25322)

2020-06-03 15:56:13 +02:00

datasource

Data sources: Don't fail if URL doesn't specify protocol (#24497)

2020-05-12 13:04:18 +02:00

dtos

Allow API to assign new user to a specific organization (#21775)

2020-04-15 12:11:45 +03:00

live

Lower log level for some startup logs statements (#23517)

2020-04-14 12:18:45 +02:00

pluginproxy

Security: Use Header.Set and Header.Del for X-Grafana-User header (#25495)

2020-06-11 21:15:17 +02:00

routing

removes unused return object

2018-06-26 09:22:31 +02:00

static

pkg: fix codespell issues

2018-04-13 20:31:29 +02:00

admin_provisioning.go

Chore: Fix various spelling errors in back-end code (#25241)

2020-06-01 17:11:25 +02:00

admin_users_test.go

Allow API to assign new user to a specific organization (#21775)

2020-04-15 12:11:45 +03:00

admin_users.go

Allow API to assign new user to a specific organization (#21775)

2020-04-15 12:11:45 +03:00

admin.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

alerting_test.go

API: Restrict anonymous user information access (#18422)

2019-08-12 20:03:48 +02:00

alerting.go

API: Added alert state validation before changing its state (#21375)

2020-01-09 11:18:51 +01:00

annotations_test.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

annotations.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

api.go

Backend plugins: Refactor to allow shared contract between core and external backend plugins (#25472)

2020-06-11 16:14:05 +02:00

apikey.go

API: Optionally list expired keys (#20468)

2019-11-20 13:14:57 +02:00

app_routes.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

basic_auth_test.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

basic_auth.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

common_test.go

Data sources: Don't fail if URL doesn't specify protocol (#24497)

2020-05-12 13:04:18 +02:00

common.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

dashboard_permission_test.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

dashboard_permission.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

dashboard_snapshot_test.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

dashboard_snapshot.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

dashboard_test.go

Linting fixes for provisoning (#23600)

2020-04-16 05:46:20 +02:00

dashboard.go

Onboarding: New getting started panel (#23826)

2020-05-13 08:00:40 +02:00

dataproxy_test.go

dataproxy should forward a trailing slash to proxy

2018-10-03 12:55:01 +02:00

dataproxy.go

Data sources: Don't fail if URL doesn't specify protocol (#24497)

2020-05-12 13:04:18 +02:00

datasources_test.go

Data sources: Don't fail if URL doesn't specify protocol (#24497)

2020-05-12 13:04:18 +02:00

datasources.go

Backend plugins: Refactor to allow shared contract between core and external backend plugins (#25472)

2020-06-11 16:14:05 +02:00

folder_permission_test.go

Chore: Fix various spelling errors in back-end code (#25241)

2020-06-01 17:11:25 +02:00

folder_permission.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

folder_test.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

folder.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

frontendsettings.go

Provisioning: Allows specifying uid for datasource and use that in derived fields (#23585)

2020-04-20 15:48:38 +02:00

grafana_com_proxy.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

http_server_test.go

Re-organize packages and add basic auth test

2018-11-19 13:54:13 -05:00

http_server.go

Refactor search (#23550)

2020-04-20 16:20:45 +02:00

index.go

Chore: Fix various spelling errors in back-end code (#25241)

2020-06-01 17:11:25 +02:00

ldap_debug_test.go

Chore: Fix various spelling errors in back-end code (#25241)

2020-06-01 17:11:25 +02:00

ldap_debug.go

Chore: Fix various spelling errors in back-end code (#25241)

2020-06-01 17:11:25 +02:00

login_oauth.go

SAML Role and Team sync (open source part) (#23391)

2020-04-17 10:48:37 +03:00

login_test.go

Auth: Remove trailing / in cookies' path (#22265) (#22265)

2020-04-06 17:56:19 +03:00

login.go

SAML Role and Team sync (open source part) (#23391)

2020-04-17 10:48:37 +03:00

metrics.go

Query: do not require datasource name and id (#24718)

2020-05-14 20:05:16 -07:00

org_invite.go

Upgrade golangci-lint and fixes some linting errors. (#22909)

2020-03-23 13:37:53 +01:00

org_users.go

API: Restrict anonymous user information access (#18422)

2019-08-12 20:03:48 +02:00

org.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

password.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

playlist_play.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

playlist.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

plugins.go

Backend plugins: Refactor to allow shared contract between core and external backend plugins (#25472)

2020-06-11 16:14:05 +02:00

preferences.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

quota.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

render.go

Image Rendering: New setting to control render request concurrency (#23950)

2020-04-27 17:25:08 +02:00

search.go

Refactor search (#23550)

2020-04-20 16:20:45 +02:00

signup.go

Upgrade golangci-lint and fixes some linting errors. (#22909)

2020-03-23 13:37:53 +01:00

stars.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

team_members.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

team_test.go

API: Minor fix for team creation endpoint when using API key (#18252)

2019-08-08 11:27:47 +03:00

team.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

user_test.go

Admin: New Admin User page (#20498)

2020-01-13 17:10:19 +01:00

user_token_test.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00

user_token.go

Api: Fix auth tokens returning wrong seenAt value (#17980)

2019-07-08 14:30:02 +02:00

user.go

Chore: Avoid aliasing importing models in api package (#22492)

2020-03-04 12:57:20 +01:00