Commit Graph

144 Commits

Author SHA1 Message Date
Murtuza Zabuawala
ee8fec6d7f Allow enhanced cookie protection to be disabled for compatibility with dynamically addressed hosting environments. Fixes #4566 2019-08-06 09:21:31 +01:00
Dave Page
9a8a28e4f9 Allow a banner to be displayed on the login and other related pages showing custom text. Fixes #4549 2019-08-01 11:39:40 +01:00
Akshay Joshi
b4d9fea83d Update version for release 2019-07-23 10:40:51 +05:30
Akshay Joshi
252429df50 Update version for release 2019-06-28 09:40:31 -04:00
Akshay Joshi
173acd46a5 Update version for release 2019-06-25 01:44:21 +05:30
Akshay Joshi
969a2961fe Update version for release. 2019-06-01 14:19:28 +05:30
Akshay Joshi
8851cb0704 Update version for release 2019-05-28 12:09:33 +05:30
Aditya Toshniwal
dfa892d2a2 1. Added Master Password to increase the security of saved passwords. Fixes #4184
2. In server(web) mode, update all the saved server credentials when user password is changed. Fixes #3377
2019-05-28 12:00:18 +05:30
Khushboo Vashi
6f0eafb223 Fixed CSRF security vulnerability issue. per Alvin Lindstam. Fixes #4217
Initial patch by: Khushboo Vashi
Modified by: Ashesh Vashi and Murtuza Zabuawala
2019-05-28 10:59:51 +05:30
Akshay Joshi
991fe3d797 Update version for release. 2019-04-30 10:49:49 +05:30
Akshay Joshi
ceb0e39e14 Update version for release 2019-04-08 18:31:51 +05:30
Akshay Joshi
7f23f729c6 Update version for release. 2019-04-01 15:19:25 +05:30
Dave Page
ab9a3a57ad Make the Query Tool history persistent across sessions. Fixes #4017 2019-03-13 13:37:34 +00:00
Akshay Joshi
28555b387f Update version for release 2019-03-04 17:35:55 +05:30
Dave Page
f72dcc23ea Allow X-FRAME-OPTIONS to be set in config.py. Default to SAMEORIGIN. Fixes #3439
DENY cannot be supported without breaking the debugger and query tool.
2019-02-12 16:17:14 +00:00
Akshay Joshi
9a758f8fd3 Update version for release. 2019-02-04 18:04:33 +05:30
Akshay Joshi
8b135f2932 Update message catalog and version for release. 2019-01-11 23:34:24 +05:30
Akshay Joshi
561ee7556f Update version for release 2019-01-07 16:14:58 +05:30
Dave Page
b5c7a108ab Put the appname back how it should be! 2019-01-04 10:54:35 +00:00
Dave Page
d6778aa915 Bump version prior to 4.0 2019-01-04 10:53:10 +00:00
Dave Page
d7da8be486 Make the upgrade check key configurable. 2019-01-02 12:56:39 +00:00
Murtuza Zabuawala
e23d307c56 Update copyright notices for 2019 2019-01-02 15:54:12 +05:30
Dave Page
e2df00fc05 Use the standard copyright string. 2018-12-20 10:58:31 +00:00
Akshay Joshi
527e084ef7 Bump version number for release 2018-11-26 15:35:26 +05:30
Dave Page
29ed7ec881 Fix standalone setup script execution. 2018-11-05 13:39:43 +00:00
Akshay Joshi
d97431cb4f Bump version number for release. 2018-10-29 22:29:07 +05:30
Akshay Joshi
7144db7f5a Cleanup session files periodically. Fixes #3674 2018-10-09 11:34:13 +01:00
Dave Page
c092495b7a Bump version number for release. 2018-10-01 10:25:19 +01:00
Dave Page
61f00a0cbb Update versions for 3.3. 2018-09-03 10:11:34 +01:00
Isaias Sanchez
2eac2f43ac Add a Spanish translation. Fixes #3553 2018-08-08 17:17:26 +01:00
Akshay Joshi
7479467a54 Update version and message catalog for release. 2018-08-06 16:15:11 +05:30
Akshay Joshi
c8c5f83dfe Add support to save and clear SSH Tunnel password. Fixes #3511 2018-08-06 15:56:46 +05:30
Aditya Toshniwal
cb8a288f85 Added version number for URL's to ensure that files are only cached on a per-version basis. Fixes #2136. 2018-08-06 15:21:10 +05:30
Dave Page
d7eb41fff4 Include a cacert file when needed for the upgrade check. Fixes #3185 2018-07-23 16:15:58 +01:00
Dave Page
58ef723476 SESSION_SKIP_PATHS should be set before we load local or distro config files. 2018-07-23 15:44:54 +01:00
Ioseph Kim
c7325bea93 Add a Korean translation. 2018-07-12 10:02:54 +01:00
Aditya Toshniwal
82d77c4608 Don't create a session when the /misc/ping test endpoint is called. Fixes #3371 2018-07-05 11:12:03 +01:00
Dave Page
f04b2e33b5 Prep for 3.1 release. 2018-06-26 11:13:46 +01:00
Akshay Joshi
28126a0a0d Fixed pep8 issue for last commit. 2018-05-18 11:30:40 +05:30
Akshay Joshi
fb0c322ccf Correct the logic to set the SUPPORT_SSH_TUNNEL flag, if the flag is set the False in local config file, then we should not override it. 2018-05-18 11:26:11 +05:30
Murtuza Zabuawala
a68dac97c4 Set SESSION_COOKIE_SAMESITE='Lax' per Flask recommendation to prevents sending cookies with CSRF-prone requests from external sites, such as submitting a form. Fixes #3342 2018-05-09 14:04:50 +01:00
Dave Page
554a199fd2 Bump version to avoid confusion 2018-05-04 13:52:24 +01:00
Akshay Joshi
b7fb01ab04 Add support for SSH tunneled connections. Fixes #1447 2018-05-04 11:27:27 +01:00
Khushboo Vashi
413709fc78 Simplify cookie domain/path settings, per discussion. Instead of trying to be smart, just let the user specify them in the config, e.g.
COOKIE_DEFAULT_DOMAIN = None
SESSION_COOKIE_DOMAIN = None
2018-03-23 10:14:02 +00:00
Dave Page
6668d5eb93 Bump version for release. 2018-03-21 10:48:52 +00:00
Khushboo Vashi
534f1f35fe Appropriately set the cookie path. Fixes #3197 2018-03-19 17:09:19 +00:00
Fred Escallier
6c59563afa Add a French translation. Fixes #3184 2018-03-15 06:58:39 -04:00
Joao Pedro De Almeida Pereira
3a6994f719 Final PEP-8 fixes 2018-03-08 09:33:43 +00:00
Murtuza Zabuawala
abf0b1a7ae Allow admins to disable the use of Gravatar if they choose. Fixes #3037 2018-03-07 16:35:33 +00:00
Dave Page
2706d9cd8e Bump the version to 3.0, per discussion on the mailing lists 2018-02-05 15:38:20 +00:00