Aditya Toshniwal
bfca1e3ac8
Set the Werkzeug logger to the same log level as the rest of the app.
2019-08-08 15:36:22 +01:00
Murtuza Zabuawala
ee8fec6d7f
Allow enhanced cookie protection to be disabled for compatibility with dynamically addressed hosting environments. Fixes #4566
2019-08-06 09:21:31 +01:00
Dave Page
71919a4ce9
Prevent the "Please login to access this page" message displaying multiple times. Fixes #4306
2019-06-17 14:12:36 +01:00
Dave Page
13704a4f34
Disable upgrade checks whilst testing.
2019-06-03 11:35:59 -04:00
Aditya Toshniwal
91075cc3f5
Disable the master password in test mode (for now).
2019-05-31 10:19:04 -04:00
Aditya Toshniwal
dfa892d2a2
1. Added Master Password to increase the security of saved passwords. Fixes #4184
...
2. In server(web) mode, update all the saved server credentials when user password is changed. Fixes #3377
2019-05-28 12:00:18 +05:30
Khushboo Vashi
6f0eafb223
Fixed CSRF security vulnerability issue. per Alvin Lindstam. Fixes #4217
...
Initial patch by: Khushboo Vashi
Modified by: Ashesh Vashi and Murtuza Zabuawala
2019-05-28 10:59:51 +05:30
Dave Page
ea4dbd31e8
Don't try to set permissions on Windows. It won't work anyway. Fixes #4276
2019-05-20 13:53:08 +01:00
Dave Page
d728ee7436
Ensure sanity of the permissions on the storage and session directories and the config database. Fixes #4182
2019-04-17 16:57:34 +01:00
Akshay Joshi
c4ea1a56bc
Fixed typo in logging.raiseException, it is 'raiseExceptions'. Fixes #3933
2019-03-25 11:36:18 +05:30
Khushboo Vashi
546161ab1a
Fix an issue with stdout redirection on Windows, and remove code added in a failed attempt to resolve a Windows regression test issue.
2019-03-19 15:55:34 +00:00
Khushboo Vashi
31e17f025b
Attempt to fix the Windows regression test weirdness.
2019-03-18 09:30:08 +00:00
Akshay Joshi
bbeb395beb
Ignore exceptions in the logger. Fixes #3933
2019-02-28 13:22:12 +00:00
Dave Page
f72dcc23ea
Allow X-FRAME-OPTIONS to be set in config.py. Default to SAMEORIGIN. Fixes #3439
...
DENY cannot be supported without breaking the debugger and query tool.
2019-02-12 16:17:14 +00:00
Cyril Jouve
a1ce6d9513
Remove another Python 2.6 hack
2019-02-07 10:32:40 +00:00
Akshay Joshi
22d458b01e
Close connections gracefully when the user logs out of pgAdmin. Fixes #3942
2019-02-06 13:17:52 +00:00
Navnath Gadakh
5fdc1ffb38
Exclude HTTPExceptions from the all_exception_handler as they should be returned as-is. Fixes #3961
2019-02-04 10:31:47 +00:00
Aditya Toshniwal
1f29859040
Improve application level exception handling for unhandled exceptions.
2019-01-23 12:49:05 +05:30
Murtuza Zabuawala
e23d307c56
Update copyright notices for 2019
2019-01-02 15:54:12 +05:30
Aditya Toshniwal
943fc25f60
Make the setup process more robust against aborted executions. Fixes #3830
2018-12-21 10:30:49 +00:00
Harshal Dhumal
822d384746
Purge connections from the cache on logout. Fixes #3703
2018-10-17 12:42:41 +01:00
Akshay Joshi
7144db7f5a
Cleanup session files periodically. Fixes #3674
2018-10-09 11:34:13 +01:00
Aditya Toshniwal
ff87cf5544
Correctly handle "values" in web/pgadmin/__init__.py -> strip_version_number which can be None in some cases and will cause exception when None
2018-08-16 09:23:58 +01:00
Aditya Toshniwal
cb8a288f85
Added version number for URL's to ensure that files are only cached on a per-version basis. Fixes #2136 .
2018-08-06 15:21:10 +05:30
Aditya Toshniwal
82d77c4608
Don't create a session when the /misc/ping test endpoint is called. Fixes #3371
2018-07-05 11:12:03 +01:00
Akshay Joshi
83f9d8a547
Minor fix to handle auto-discovery of servers with no port recorded.
2018-06-21 16:34:33 -04:00
Murtuza Zabuawala
be055ce57d
Update Python and JS modules. Fixes #3154
2018-04-04 10:47:01 +01:00
Khushboo Vashi
413709fc78
Simplify cookie domain/path settings, per discussion. Instead of trying to be smart, just let the user specify them in the config, e.g.
...
COOKIE_DEFAULT_DOMAIN = None
SESSION_COOKIE_DOMAIN = None
2018-03-23 10:14:02 +00:00
Dave Page
c8b456d464
PEP8 fixes
2018-03-20 14:02:56 +00:00
Khushboo Vashi
4942c938ac
Fix an error on exit caused by the cookie path patch.
2018-03-20 13:55:06 +00:00
Khushboo Vashi
534f1f35fe
Appropriately set the cookie path. Fixes #3197
2018-03-19 17:09:19 +00:00
Dave Page
93d44d5643
Revert "Ensure the cookie domain and path are properly set. Fixes #3197 "
...
This reverts commit 9c4edb4a28
.
Jenkins really doesn't like this.
2018-03-15 14:54:14 -04:00
Khushboo Vashi
9c4edb4a28
Ensure the cookie domain and path are properly set. Fixes #3197
2018-03-15 13:59:29 -04:00
Joao Pedro De Almeida Pereira
3a6994f719
Final PEP-8 fixes
2018-03-08 09:33:43 +00:00
Harshal Dhumal
43d3e0ca64
PEP8 fixes.
2018-02-26 15:58:48 +00:00
Harshal Dhumal
e0da9c5a0c
Significantly improve connection loss detection and handling in the query tool. Fixes #2815
2018-02-01 14:29:18 +01:00
Murtuza Zabuawala
393ce53d2d
Fix PEP8 issues in the Tools module. Fixes #3063
2018-01-26 16:54:21 +00:00
Dave Page
89821c0d19
Update copyright notices for 2018.
2018-01-05 10:42:50 +00:00
Murtuza Zabuawala
bceb6aef3c
Don't try to render security URLs in desktop mode. Fixes #2952 . Fixes #2922
2017-12-18 09:15:36 +00:00
Harshal Dhumal
f3256aef71
Don't login the user with every request in desktop mode. Just do it once. Fixes #2922
2017-11-30 12:02:41 +00:00
Harshal Dhumal
35a5cf22d5
Refuse password changes (and tell the user) if the notification email cannot be sent. Fixes #2892
2017-11-30 11:16:38 +00:00
Murtuza Zabuawala
9ae4a03784
Allow changing of the users password without leaving the app. Fixes #2891
2017-11-28 10:55:54 +00:00
Alexander Lakhin
8860bc3c3e
Saved user language was not being picked up in case of non-server mode.
...
Because - the get_locale(...) function was being executed before any
request, and user login after first request. Hence - the values for
the labels in the Preferences are not being translated properly.
Fetch the raw value of user_language from configuration in case of
runtime/non-server mode to fix the issue.
2017-10-30 18:20:41 +05:30
Khushboo Vashi
91406d2879
Ensure HTMLMIN is only used with Python 2.7+
2017-10-10 09:14:23 +01:00
Harshal Dhumal
f0ad26ba7a
Fix for Exception when the server is restarted. Fixes #2713
...
This issue was caused because we recently added session_write_delay in session.
So session won't be written/updated to disk from memory until specified seconds are elapsed.
However we must forcefully write/update session to disk if user loges in or out irrespective of session_write_delay to keep sessions from memory and disk in sync as user logged in status is kept in session.
2017-09-18 14:39:43 +01:00
Harshal Dhumal
765e130336
Support Flask-Security 3.0
2017-09-18 11:40:09 +01:00
Surinder Kumar
7835da267b
Allow pgAdmin to run with config database versions from the future. Fixes #2664
2017-08-29 15:03:02 +01:00
Murtuza Zabuawala
178d583bcd
Fix paths under non-standard virtual directories. Fixes #2563
2017-07-25 10:15:18 +01:00
Murtuza Zabuawala
64f3a559ab
Add the Flask-Paranoid module for a little extra, well, paranoia in web mode. Fixes #2584
2017-07-20 18:04:33 +01:00
Dave Page
83ac1f3555
Remove debug logging of the URL map which is extremely long now, and not of a great deal of use.
2017-07-20 16:15:53 +01:00