Aditya Toshniwal
f16498a8a7
Optimize Webpack to improve overall performance.
...
Changes include:
1) Remove underscore-string and sprintf-js packages as we were using only %s. Instead, added a function to do the same. Also changed gettext to behave like sprintf directly.
2) backgrid.sizeable.columns was not used anywhere, removed. @babel/polyfill is deprecated, replaced it with core-js.
3) Moved few css to make sure they get minified and bundled.
4) Added Flask-Compress to send static files as compressed gzip. This will reduce network traffic and improve initial load time for pgAdmin.
5) Split few JS files to make code reusable.
6) Lazy load few modules like leaflet, wkx is required only if geometry viewer is opened. snapsvg loaded only when explain plan is executed. This will improve sqleditor initial opening time.
Reviewed By: Khushboo Vashi
Fixes #4701
2019-10-10 12:05:28 +05:30
Aditya Toshniwal
bfca1e3ac8
Set the Werkzeug logger to the same log level as the rest of the app.
2019-08-08 15:36:22 +01:00
Murtuza Zabuawala
ee8fec6d7f
Allow enhanced cookie protection to be disabled for compatibility with dynamically addressed hosting environments. Fixes #4566
2019-08-06 09:21:31 +01:00
Dave Page
71919a4ce9
Prevent the "Please login to access this page" message displaying multiple times. Fixes #4306
2019-06-17 14:12:36 +01:00
Dave Page
13704a4f34
Disable upgrade checks whilst testing.
2019-06-03 11:35:59 -04:00
Aditya Toshniwal
91075cc3f5
Disable the master password in test mode (for now).
2019-05-31 10:19:04 -04:00
Aditya Toshniwal
dfa892d2a2
1. Added Master Password to increase the security of saved passwords. Fixes #4184
...
2. In server(web) mode, update all the saved server credentials when user password is changed. Fixes #3377
2019-05-28 12:00:18 +05:30
Khushboo Vashi
6f0eafb223
Fixed CSRF security vulnerability issue. per Alvin Lindstam. Fixes #4217
...
Initial patch by: Khushboo Vashi
Modified by: Ashesh Vashi and Murtuza Zabuawala
2019-05-28 10:59:51 +05:30
Dave Page
ea4dbd31e8
Don't try to set permissions on Windows. It won't work anyway. Fixes #4276
2019-05-20 13:53:08 +01:00
Dave Page
d728ee7436
Ensure sanity of the permissions on the storage and session directories and the config database. Fixes #4182
2019-04-17 16:57:34 +01:00
Akshay Joshi
c4ea1a56bc
Fixed typo in logging.raiseException, it is 'raiseExceptions'. Fixes #3933
2019-03-25 11:36:18 +05:30
Khushboo Vashi
546161ab1a
Fix an issue with stdout redirection on Windows, and remove code added in a failed attempt to resolve a Windows regression test issue.
2019-03-19 15:55:34 +00:00
Khushboo Vashi
31e17f025b
Attempt to fix the Windows regression test weirdness.
2019-03-18 09:30:08 +00:00
Akshay Joshi
bbeb395beb
Ignore exceptions in the logger. Fixes #3933
2019-02-28 13:22:12 +00:00
Dave Page
f72dcc23ea
Allow X-FRAME-OPTIONS to be set in config.py. Default to SAMEORIGIN. Fixes #3439
...
DENY cannot be supported without breaking the debugger and query tool.
2019-02-12 16:17:14 +00:00
Cyril Jouve
a1ce6d9513
Remove another Python 2.6 hack
2019-02-07 10:32:40 +00:00
Akshay Joshi
22d458b01e
Close connections gracefully when the user logs out of pgAdmin. Fixes #3942
2019-02-06 13:17:52 +00:00
Navnath Gadakh
5fdc1ffb38
Exclude HTTPExceptions from the all_exception_handler as they should be returned as-is. Fixes #3961
2019-02-04 10:31:47 +00:00
Aditya Toshniwal
1f29859040
Improve application level exception handling for unhandled exceptions.
2019-01-23 12:49:05 +05:30
Murtuza Zabuawala
e23d307c56
Update copyright notices for 2019
2019-01-02 15:54:12 +05:30
Aditya Toshniwal
943fc25f60
Make the setup process more robust against aborted executions. Fixes #3830
2018-12-21 10:30:49 +00:00
Harshal Dhumal
822d384746
Purge connections from the cache on logout. Fixes #3703
2018-10-17 12:42:41 +01:00
Akshay Joshi
7144db7f5a
Cleanup session files periodically. Fixes #3674
2018-10-09 11:34:13 +01:00
Aditya Toshniwal
ff87cf5544
Correctly handle "values" in web/pgadmin/__init__.py -> strip_version_number which can be None in some cases and will cause exception when None
2018-08-16 09:23:58 +01:00
Aditya Toshniwal
cb8a288f85
Added version number for URL's to ensure that files are only cached on a per-version basis. Fixes #2136 .
2018-08-06 15:21:10 +05:30
Aditya Toshniwal
82d77c4608
Don't create a session when the /misc/ping test endpoint is called. Fixes #3371
2018-07-05 11:12:03 +01:00
Akshay Joshi
83f9d8a547
Minor fix to handle auto-discovery of servers with no port recorded.
2018-06-21 16:34:33 -04:00
Murtuza Zabuawala
be055ce57d
Update Python and JS modules. Fixes #3154
2018-04-04 10:47:01 +01:00
Khushboo Vashi
413709fc78
Simplify cookie domain/path settings, per discussion. Instead of trying to be smart, just let the user specify them in the config, e.g.
...
COOKIE_DEFAULT_DOMAIN = None
SESSION_COOKIE_DOMAIN = None
2018-03-23 10:14:02 +00:00
Dave Page
c8b456d464
PEP8 fixes
2018-03-20 14:02:56 +00:00
Khushboo Vashi
4942c938ac
Fix an error on exit caused by the cookie path patch.
2018-03-20 13:55:06 +00:00
Khushboo Vashi
534f1f35fe
Appropriately set the cookie path. Fixes #3197
2018-03-19 17:09:19 +00:00
Dave Page
93d44d5643
Revert "Ensure the cookie domain and path are properly set. Fixes #3197 "
...
This reverts commit 9c4edb4a28
.
Jenkins really doesn't like this.
2018-03-15 14:54:14 -04:00
Khushboo Vashi
9c4edb4a28
Ensure the cookie domain and path are properly set. Fixes #3197
2018-03-15 13:59:29 -04:00
Joao Pedro De Almeida Pereira
3a6994f719
Final PEP-8 fixes
2018-03-08 09:33:43 +00:00
Harshal Dhumal
43d3e0ca64
PEP8 fixes.
2018-02-26 15:58:48 +00:00
Harshal Dhumal
e0da9c5a0c
Significantly improve connection loss detection and handling in the query tool. Fixes #2815
2018-02-01 14:29:18 +01:00
Murtuza Zabuawala
393ce53d2d
Fix PEP8 issues in the Tools module. Fixes #3063
2018-01-26 16:54:21 +00:00
Dave Page
89821c0d19
Update copyright notices for 2018.
2018-01-05 10:42:50 +00:00
Murtuza Zabuawala
bceb6aef3c
Don't try to render security URLs in desktop mode. Fixes #2952 . Fixes #2922
2017-12-18 09:15:36 +00:00
Harshal Dhumal
f3256aef71
Don't login the user with every request in desktop mode. Just do it once. Fixes #2922
2017-11-30 12:02:41 +00:00
Harshal Dhumal
35a5cf22d5
Refuse password changes (and tell the user) if the notification email cannot be sent. Fixes #2892
2017-11-30 11:16:38 +00:00
Murtuza Zabuawala
9ae4a03784
Allow changing of the users password without leaving the app. Fixes #2891
2017-11-28 10:55:54 +00:00
Alexander Lakhin
8860bc3c3e
Saved user language was not being picked up in case of non-server mode.
...
Because - the get_locale(...) function was being executed before any
request, and user login after first request. Hence - the values for
the labels in the Preferences are not being translated properly.
Fetch the raw value of user_language from configuration in case of
runtime/non-server mode to fix the issue.
2017-10-30 18:20:41 +05:30
Khushboo Vashi
91406d2879
Ensure HTMLMIN is only used with Python 2.7+
2017-10-10 09:14:23 +01:00
Harshal Dhumal
f0ad26ba7a
Fix for Exception when the server is restarted. Fixes #2713
...
This issue was caused because we recently added session_write_delay in session.
So session won't be written/updated to disk from memory until specified seconds are elapsed.
However we must forcefully write/update session to disk if user loges in or out irrespective of session_write_delay to keep sessions from memory and disk in sync as user logged in status is kept in session.
2017-09-18 14:39:43 +01:00
Harshal Dhumal
765e130336
Support Flask-Security 3.0
2017-09-18 11:40:09 +01:00
Surinder Kumar
7835da267b
Allow pgAdmin to run with config database versions from the future. Fixes #2664
2017-08-29 15:03:02 +01:00
Murtuza Zabuawala
178d583bcd
Fix paths under non-standard virtual directories. Fixes #2563
2017-07-25 10:15:18 +01:00
Murtuza Zabuawala
64f3a559ab
Add the Flask-Paranoid module for a little extra, well, paranoia in web mode. Fixes #2584
2017-07-20 18:04:33 +01:00