692 Commits

Author SHA1 Message Date
OpenProject Actions CI 86f9f2975f update locales from crowdin [ci skip] 2026-06-09 16:08:35 +00:00
Jan Sandbrink 40301c3463 Make SSRF error message more specific
Feedback from devs that were confronted with the "is not an allowed host"
message shows, that the message is not very actionable. It's not clear why something
that is clearly a legitimate and existing host would be considered "not allowed".

The new error message clearly points at the SSRF policy as the source. Making the
problem more search engine friendly and hopefully allowing admins to better understand
what they have to fix.
2026-06-08 09:34:34 +02:00
Ivan Kuchin e3afba4465 follow yamllint except key ordering 2026-05-26 16:33:15 +02:00
Oliver Günther 637ec7d10f Merge remote-tracking branch 'origin/release/17.3' into release/17.4 2026-05-19 18:26:23 +02:00
Jan Sandbrink e7bee82f9e Introduce and use ConfidentialCache
It's like OpenProject::Cache, but it encrypts cached
values at rest. Callers that store confidential things in the cache
have been updated to use it, reducing the risk to expose secrets
to an attacker that obtained access to the contents of OpenProject's cache.
2026-05-19 15:56:53 +02:00
OpenProject Actions CI 9bc594acc2 update locales from crowdin [ci skip] 2026-05-19 04:35:25 +00:00
OpenProject Actions CI 2936dd6e13 update locales from crowdin [ci skip] 2026-05-10 13:52:50 +00:00
OpenProject Actions CI cddc29b8e0 update locales from crowdin [ci skip] 2026-05-10 04:26:19 +00:00
OpenProject Actions CI c67fd8034c update locales from crowdin [ci skip] 2026-05-09 04:18:54 +00:00
OpenProject Actions CI f579df8b4b update locales from crowdin [ci skip] 2026-04-24 04:18:08 +00:00
Oliver Günther 2a4c152d21 Use safe_ip? on OIDC metadata call 2026-04-22 12:53:10 +02:00
OpenProject Actions CI 47f078f0cd update locales from crowdin [ci skip] 2026-04-14 04:07:21 +00:00
OpenProject Actions CI dd7f45a05e update locales from crowdin [ci skip] 2026-04-14 04:04:43 +00:00
OpenProject Actions CI dbf6fd8e8d update locales from crowdin [ci skip] 2026-04-13 04:11:14 +00:00
OpenProject Actions CI f97f227f12 update locales from crowdin [ci skip] 2026-04-13 04:08:47 +00:00
OpenProject Actions CI 27a95c1932 update locales from crowdin [ci skip] 2026-04-12 12:47:07 +00:00
OpenProject Actions CI 8c154d623d update locales from crowdin [ci skip] 2026-04-12 12:45:29 +00:00
OpenProject Actions CI c118fc0c0a update locales from crowdin [ci skip] 2026-04-12 04:08:28 +00:00
OpenProject Actions CI 13e368f21e update locales from crowdin [ci skip] 2026-04-12 04:06:25 +00:00
OpenProject Actions CI e8e46408b4 update locales from crowdin [ci skip] 2026-04-11 03:55:45 +00:00
Henriette Darge c633ed3f29 Harmonize dangerDialog titles and headings to match lookbook expectations 2026-04-10 10:56:14 +02:00
Henriette Darge d0ebdbdd8a Adapt test to new DangerDialogs 2026-04-10 10:56:14 +02:00
Henriette Darge 1146317eae Replace old danger zone with new dangerDialog for openid providers 2026-04-10 10:56:14 +02:00
OpenProject Actions CI 9ce2ccddbf update locales from crowdin [ci skip] 2026-04-09 11:41:23 +00:00
OpenProject Actions CI 10937badb2 update locales from crowdin [ci skip] 2026-04-09 11:38:47 +00:00
OpenProject Actions CI 25848bcc7c update locales from crowdin [ci skip] 2026-04-09 04:02:14 +00:00
OpenProject Actions CI 8157603028 update locales from crowdin [ci skip] 2026-04-09 03:59:36 +00:00
OpenProject Actions CI ac7be2506b update locales from crowdin [ci skip] 2026-04-08 04:14:29 +00:00
OpenProject Actions CI a9b1d7920e update locales from crowdin [ci skip] 2026-04-08 04:07:10 +00:00
OpenProject Actions CI 8b18547f44 update locales from crowdin [ci skip] 2026-03-31 04:03:54 +00:00
OpenProject Actions CI b4e20c2e37 update locales from crowdin [ci skip] 2026-03-31 04:01:36 +00:00
OpenProject Actions CI 1eb9e64c9a update locales from crowdin [ci skip] 2026-03-26 07:55:42 +00:00
OpenProject Actions CI 905cc4f873 update locales from crowdin [ci skip] 2026-03-26 07:50:33 +00:00
Oliver Günther 4d731dcab6 Replace raw and explicit html_safe calls 2026-03-20 09:49:10 +01:00
Marcello Rocha 5076b9806d Merge pull request #22103 from opf/dependabot/bundler/dev/httpx-1.7.2
Bump httpx from 1.6.3 to 1.7.2
2026-03-09 10:19:27 +01:00
Marcello Rocha e3049b2658 Update calls to httpx loading the necessary auth plugin 2026-03-02 18:47:40 +01:00
Jan Sandbrink 9e216690d2 Validate schemes for CopyToClipboardComponent
When trying to use this component, I wanted to use the input scheme
that I copied from elsewhere in the code. At first I was surprised that
the lookbook didn't yet contain a playground, where I could try this style out.

After adding it, I was surprised that it didn't look like an input at all and learned
that this scheme does not even exist... But it was already used multiple times :O
2026-03-02 16:54:58 +01:00
Dombi Attila c389018b1e Remove es-AR translation 2026-02-16 14:34:07 +02:00
OpenProject Actions CI 82420f0f09 update locales from crowdin [ci skip] 2026-02-16 08:09:09 +00:00
OpenProject Actions CI 5c7c9ecb95 update locales from crowdin [ci skip] 2026-02-15 03:53:21 +00:00
OpenProject Actions CI 691d56b177 update locales from crowdin [ci skip] 2026-02-10 04:06:56 +00:00
OpenProject Actions CI 3bc6f32b7d update locales from crowdin [ci skip] 2026-02-07 03:49:27 +00:00
Henriette Darge f039bef878 Adapt test to new ID generation on Primer checkboxes 2026-02-06 11:12:16 +01:00
OpenProject Actions CI 9fb06a8ab8 update locales from crowdin [ci skip] 2026-02-06 03:51:00 +00:00
OpenProject Actions CI 22f84cea86 update locales from crowdin [ci skip] 2026-01-30 03:49:34 +00:00
OpenProject Actions CI 5d266cb1cb update locales from crowdin [ci skip] 2026-01-13 03:39:18 +00:00
OpenProject Actions CI 5dfa40b079 update locales from crowdin [ci skip] 2026-01-12 03:36:46 +00:00
OpenProject Actions CI 273d248c4c update locales from crowdin [ci skip] 2026-01-11 03:36:03 +00:00
OpenProject Actions CI 16cdd4fddb update locales from crowdin [ci skip] 2026-01-10 03:38:02 +00:00
OpenProject Actions CI f9cd11687c update locales from crowdin [ci skip] 2026-01-09 14:16:12 +00:00