5330745e69
Add the content type for external URLs
2026-05-29 10:26:43 +02:00
6f63faeed1
Extract and use charset to properly encode attachments
2026-05-29 10:26:43 +02:00
4946b38f7d
Merge branch 'release/16.6' into release/17.0
2026-01-09 11:58:06 +01:00
17080e74fd
Add default framework headers removed in secure_headers
...
Headers manually added through secure_headers were dropped when
switching to Rails CSP:
https://github.com/opf/openproject/blob/v15.5.1/config/initializers/secure_headers.rb#L43
https://community.openproject.org/projects/openproject/work_packages/65352/activity
2026-01-09 11:55:38 +01:00
9f65e471df
Rename Setting to avatar_link_expiration_seconds
2025-11-11 20:29:04 +00:00
9ff68b84c6
Fix wording (code): change "expiry" to "expiration"
2025-11-11 20:29:04 +00:00
45c5419dff
extract raise_query_errors to make it available in ParamsToQuery.collection_response
2024-11-04 19:03:49 +01:00
12ee9e6b83
Merge remote-tracking branch 'origin/idea/56781-remove-years-from-copyrights' into dev
2024-08-06 10:17:59 +02:00
69f4cc2ff3
[ #41852 ] fix undefined method path for nil class when click attachment
...
- bug: return 404 if local attachment file has been deleted
- https://community.openproject.org/wp/41852
2024-08-06 07:26:38 +02:00
4911b8a149
remove years from copyrights (except for COPYRIGHT file)
2024-07-31 15:02:49 +02:00
aec8632d38
Add spec
2024-05-22 11:31:10 +02:00
9adc0ec751
Prevent plain text from being inlinable
2024-05-22 10:39:38 +02:00
3b2121f733
Revert "Merge remote-tracking branch 'origin/release/13.4' into dev"
...
This reverts commit 40b2bbeb09b4c6cb17cc
2024-03-21 11:31:17 +01:00
7787e457a3
Revert "Merge branch 'dev' into release/13.4"
...
This reverts commit a901541269e573ca00b7
2024-03-20 20:19:08 +01:00
9e4934cd0a
change quotes using rubocop --only Style/StringLiterals,Style/QuotedSymbols -a
2024-03-20 18:05:22 +01:00
51c134db95
Run rubocop -a on lib/api
2024-02-23 10:02:23 -05:00
857532e506
Implement attachment statuses and virus scanning
2024-02-20 09:36:41 +01:00
c795874f7f
Update copyright year for 2024
...
command used: `rg -l 'Copyright \(C\) 2012-202\d the OpenProject' | xargs -n 100 sed -i -r 's/Copyright \(C\) 2012-202. the OpenProject/Copyright (C) 2012-2024 the OpenProject/'`
2024-01-02 16:23:54 +01:00
21a696ef9b
Update copyright information for 2023
2022-12-30 15:51:26 +01:00
48a4f1b6ad
lint with rubocop --autocorrect (safe cops only)
2022-06-02 10:40:10 +02:00
a33524ef6d
remove ruby magic comment for utf-8
...
ruby interprets source encoding as utf-8 since 2.0.0, making magic comment redundant and useless
2022-03-10 19:36:58 +01:00
bc8d423ec2
update copyright information for 2022
2022-03-01 17:05:59 +01:00
b4d8a76d28
use ifc model title as filename for ifc downloads
2021-11-10 15:54:25 +00:00
ccfa29c728
Move license and copyright docs to root, fix names and references
2021-09-02 21:50:46 +02:00
8df966abff
Use the configured variable for expiry ( #8985 )
...
https://github.com/opf/openproject/pull/8941
2021-02-12 12:26:17 +00:00
6140f4c7e9
update copyright to 2021 ( #8925 )
...
Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded.
Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013
2021-01-13 17:47:45 +01:00
4dd8e433b4
Fix/bump gems ( #8770 )
...
* bump aws-sdk-core
* bump danger
* bump parser
* bump grape - stream related header setting bug has been fixed
* reapply cache headers on stream as grape insists on niling them
* bump aws-partitions
* bump regexp_parser
* bump rubocop
* bump webmock
2020-10-26 21:25:18 +01:00
0b6d82c632
cache non avatar attachments for a year
2020-03-05 14:49:33 +01:00
ff672fd5d5
replace deprectead method call
2020-03-02 15:49:31 +01:00
bd7f4e4814
Update copyright notice
2020-01-15 11:31:26 +01:00
61c6bf5ec2
Fix for downloading attachments that are JSON files.
...
https://community.openproject.com/projects/openproject/work_packages/31661
2019-11-13 18:26:55 +01:00
817e7918bc
let caching of avatar response base on setting
2019-10-21 10:27:46 +02:00
bfe1e2003f
make external avatar URLs valid for 24h
2019-10-18 12:03:22 +01:00
50828e930a
[31205] Fix attachment disposition for local files
...
This got first changed in https://github.com/opf/openproject/pull/7456
And then disposition for local removed in a33016a24676e9ae86c03be6241c811b57116dc7#diff-7b0581da1680146a96496be759fc3240
https://community.openproject.com/wp/31205k
2019-09-27 14:24:02 +02:00
ebd51081dc
Merge remote-tracking branch 'origin/release/9.0' into dev
2019-07-12 08:28:33 +02:00
4cc4730bcd
use correct content disposition for local files
2019-07-11 08:43:30 +01:00
32bbbca2bf
extract wp table config menu trigger into own component
2019-06-25 15:59:42 +02:00
1a16c039a2
Add an avatar endpoint to avoid loading user API
...
[ci skip]
2019-05-27 09:54:40 +02:00
Oliver Günther