3e656efb00 
								
							 
						 
						
							
							
								
								Added include func for search api  
							
							
							
						 
						
							2024-10-21 02:42:49 +05:30  
				
					
						
							
							
								 
						
							
								6f1c54d018 
								
							 
						 
						
							
							
								
								Users: Changed name validation to min:1 instead of 2  
							
							... 
							
							
							
							Would cause scenarios where users could be created with 1 char, but then
fail to update due to validation differences.
Added test to cover.
For #5263  
							
						 
						
							2024-10-15 11:07:41 +01:00  
				
					
						
							
							
								 
						
							
								4dc75bad05 
								
							 
						 
						
							
							
								
								Settings: Added test to cover setting category by view  
							
							
							
						 
						
							2024-10-11 13:33:07 +01:00  
				
					
						
							
							
								 
						
							
								51287d545b 
								
							 
						 
						
							
							
								
								Searching: Fixed some form search issues  
							
							... 
							
							
							
							- Form was not retaining certain filters
- Form request handling of entity type set wrong filter name
Added test to cover. 
							
						 
						
							2024-10-05 14:49:30 +01:00  
				
					
						
							
							
								 
						
							
								b1a3ea1aa4 
								
							 
						 
						
							
							
								
								Languages: Enabled Welsh option  
							
							
							
						 
						
							2024-10-04 11:02:17 +01:00  
				
					
						
							
							
								 
						
							
								966ff91386 
								
							 
						 
						
							
							
								
								Search: Prevented negated terms filling in UI inputs  
							
							... 
							
							
							
							Added test to cover. 
							
						 
						
							2024-10-03 19:40:11 +01:00  
				
					
						
							
							
								 
						
							
								cd84d08157 
								
							 
						 
						
							
							
								
								Search: Added exact/filter/tag term negation support  
							
							
							
						 
						
							2024-10-03 19:27:03 +01:00  
				
					
						
							
							
								 
						
							
								93c677a6a9 
								
							 
						 
						
							
							
								
								Searching: Added negation support to UI and term handling  
							
							... 
							
							
							
							Updated/added tests to cover.
Support for actual search queries still remains. 
							
						 
						
							2024-10-03 15:59:50 +01:00  
				
					
						
							
							
								 
						
							
								177cfd72bf 
								
							 
						 
						
							
							
								
								Search: Added structure for search term inputs  
							
							... 
							
							
							
							Sets things up to allow more complex terms ready to handle negation. 
							
						 
						
							2024-10-02 17:31:45 +01:00  
				
					
						
							
							
								 
						
							
								e65655594f 
								
							 
						 
						
							
							
								
								Merge branch 'feature/opensearch' into development  
							
							
							
						 
						
							2024-09-30 17:21:51 +01:00  
				
					
						
							
							
								 
						
							
								514db60617 
								
							 
						 
						
							
							
								
								Tests: Categorised up meta tests  
							
							... 
							
							
							
							Extracted robots.txt tests into its own file to fit into new folder.
Also tweaked open search tests a tad to specifically check long app
names. 
							
						 
						
							2024-09-30 17:07:53 +01:00  
				
					
						
							
							
								 
						
							
								2f74cfb42c 
								
							 
						 
						
							
							
								
								Add test for OpenSearch endpoint  
							
							
							
						 
						
							2024-09-30 17:45:20 +02:00  
				
					
						
							
							
								 
						
							
								d12e8ec923 
								
							 
						 
						
							
							
								
								Users: Improved user response for failed invite sending  
							
							... 
							
							
							
							Added specific handling to show relevant error message when user
creation fails due to invite sending errors, while also returning user
to the form with previous input.
Includes test to cover.
For #5195  
							
						 
						
							2024-09-29 16:41:18 +01:00  
				
					
						
							
							
								 
						
							
								89f84c9a95 
								
							 
						 
						
							
							
								
								Pages: Updated editor field to always be set  
							
							... 
							
							
							
							- Migration for setting on existing pages
- Added test to cover simple new page scenario
For #5117  
							
						 
						
							2024-09-29 14:36:41 +01:00  
				
					
						
							
							
								 
						
							
								6103a22feb 
								
							 
						 
						
							
							
								
								Exports: Made pdf command timeout configurable  
							
							... 
							
							
							
							Added test to cover.
For #5119  
							
						 
						
							2024-09-27 16:33:58 +01:00  
				
					
						
							
							
								 
						
							
								b35b62d59f 
								
							 
						 
						
							
							
								
								Merge branch 'lexical' into development  
							
							
							
						 
						
							2024-09-27 12:04:01 +01:00  
				
					
						
							
							
								 
						
							
								8b32e6c15a 
								
							 
						 
						
							
							
								
								Page Editors: Added switching/options for new lexical editor  
							
							
							
						 
						
							2024-09-22 20:06:55 +01:00  
				
					
						
							
							
								 
						
							
								9aa3442a17 
								
							 
						 
						
							
							
								
								API: Fixed lacking permission enforcement on book contents  
							
							
							
						 
						
							2024-08-29 14:43:21 +01:00  
				
					
						
							
							
								 
						
							
								c68d154f0f 
								
							 
						 
						
							
							
								
								LDAP: Updated tests for recursive group changes  
							
							
							
						 
						
							2024-08-28 21:16:18 +01:00  
				
					
						
							
							
								 
						
							
								1b4ed69f41 
								
							 
						 
						
							
							
								
								LDAP: Updated recursive group search to query by DN  
							
							... 
							
							
							
							Added test to cover, added pre-change.
Need to test post-changes and fix tests. 
							
						 
						
							2024-08-28 15:39:05 +01:00  
				
					
						
							
							
								 
						
							
								897bb338f9 
								
							 
						 
						
							
							
								
								CSP: Updated handling of drawio URL to consider port  
							
							... 
							
							
							
							Previously if a custom port was used in the DRAWIO option it would not
be considered in the CSP handling, which would block loading.
Added test to cover.
For #5107  
							
						 
						
							2024-07-14 16:06:18 +01:00  
				
					
						
							
							
								 
						
							
								767699a066 
								
							 
						 
						
							
							
								
								OIDC: Fixed incorrect detection of group detail population  
							
							... 
							
							
							
							An empty (but valid formed) groups list provided via the OIDC ID token
would be considered as a lacking detail, and therefore trigger a lookup
to the userinfo endpoint in an attempt to get that information.
This fixes this to properly distinguish between not-provided and empty
state, to avoid userinfo where provided as valid but empty.
Includes test to cover.
For #5101  
							
						 
						
							2024-07-14 14:21:16 +01:00  
				
					
						
							
							
								 
						
							
								ca310966b2 
								
							 
						 
						
							
							
								
								Actually add the test this time  
							
							
							
						 
						
							2024-07-05 03:59:49 +00:00  
				
					
						
							
							
								 
						
							
								25f92ce584 
								
							 
						 
						
							
							
								
								Add test to verify different case on extensions works  
							
							
							
						 
						
							2024-07-04 19:48:12 -04:00  
				
					
						
							
							
								 
						
							
								a8ce199e0d 
								
							 
						 
						
							
							
								
								Pages: Fixed unused changelog on first page publish  
							
							... 
							
							
							
							Included test to cover.
For #5056  
							
						 
						
							2024-06-09 17:18:23 +01:00  
				
					
						
							
							
								 
						
							
								3406846c82 
								
							 
						 
						
							
							
								
								Images: Updated GIF handling to use native methods  
							
							... 
							
							
							
							Changes GIF image thumbnail handling to direcly load via gd instead of
going through interventions own handling (which supports frames) since
we don't need animation for our thumbnails, and since performance issues
could arise with GIFs that have large frame counts.
For #5029  
							
						 
						
							2024-06-09 17:00:58 +01:00  
				
					
						
							
							
								 
						
							
								bddc6ae66b 
								
							 
						 
						
							
							
								
								Roles: Added max validation for role external auth id field  
							
							... 
							
							
							
							For #5037  
							
						 
						
							2024-06-08 20:33:34 +01:00  
				
					
						
							
							
								 
						
							
								d133f904d3 
								
							 
						 
						
							
							
								
								Auth: Changed email confirmations to use login attempt user  
							
							... 
							
							
							
							Negates the need for a public confirmation resend form
since we can instead just send direct to the last session login attempter. 
							
						 
						
							2024-05-20 17:23:15 +01:00  
				
					
						
							
							
								 
						
							
								69af9e0dbd 
								
							 
						 
						
							
							
								
								Routes: Added throttling to a range of auth-related endpoints  
							
							... 
							
							
							
							Some already throttled in some means, but this adds a simple ip-based
non-request-specific layer to many endpoints.
Related to #4993  
							
						 
						
							2024-05-20 14:00:58 +01:00  
				
					
						
							
							
								 
						
							
								67df127c26 
								
							 
						 
						
							
							
								
								API: Added to, and updated, testing to cover audit log additions  
							
							
							
						 
						
							2024-05-05 15:44:58 +01:00  
				
					
						
							
							
								 
						
							
								dd251d9e62 
								
							 
						 
						
							
							
								
								Merge branch 'nesges/development' into development  
							
							
							
						 
						
							2024-05-04 14:00:40 +01:00  
				
					
						
							
							
								 
						
							
								5c28bcf865 
								
							 
						 
						
							
							
								
								Registration: Reviewed added simple honeypot, added testing  
							
							... 
							
							
							
							Also cleaned up old RegistrationController syntax.
Review of #4970  
							
						 
						
							2024-05-04 13:59:41 +01:00  
				
					
						
							
							
								 
						
							
								b0720777be 
								
							 
						 
						
							
							
								
								Merge pull request  #4985  from BookStackApp/ldap_ca_cert_control  
							
							... 
							
							
							
							LDAP CA TLS Cert Option, PR Review and continuation 
							
						 
						
							2024-05-02 23:16:16 +01:00  
				
					
						
							
							
								 
						
							
								8087123f2e 
								
							 
						 
						
							
							
								
								LDAP: Review, testing and update of LDAP TLS CA cert control  
							
							... 
							
							
							
							Review of #4913 
Added testing to cover option.
Updated option so it can be used for a CA directory, or a CA file.
Updated option name to be somewhat abstracted from original underling
PHP option.
Tested against Jumpcloud.
Testing took hours due to instability which was due to these settings
sticking and being unstable on change until php process restart.
Also due to little documentation for these options.
X_TLS_CACERTDIR option needs cert files to be named via specific hashes
which can be achieved via c_rehash utility.
This also adds detail on STARTTLS failure, which took a long time to
discover due to little detail out there for deeper PHP LDAP debugging. 
							
						 
						
							2024-05-02 23:11:31 +01:00  
				
					
						
							
							
								 
						
							
								6b681961e5 
								
							 
						 
						
							
							
								
								LDAP: Updated default user filter placeholder format  
							
							... 
							
							
							
							To not conflict with env variables, and to align with placeholders used
for PDF gen command.
Added test to cover, including old format supported for
back-compatibility.
For #4967  
							
						 
						
							2024-04-28 12:29:57 +01:00  
				
					
						
							
							
								 
						
							
								f0dd33c1b4 
								
							 
						 
						
							
							
								
								PDF: Added tests for pdf command, fixed old tests for changes  
							
							
							
						 
						
							2024-04-26 15:39:40 +01:00  
				
					
						
							
							
								 
						
							
								8b14a701a4 
								
							 
						 
						
							
							
								
								OIDC Userinfo: Fixed issues with validation logic from changes  
							
							... 
							
							
							
							Also updated test to suit validation changes 
							
						 
						
							2024-04-19 16:43:51 +01:00  
				
					
						
							
							
								 
						
							
								0958909cd9 
								
							 
						 
						
							
							
								
								OIDC Userinfo: Added additional tests to cover jwks usage  
							
							
							
						 
						
							2024-04-19 15:05:00 +01:00  
				
					
						
							
							
								 
						
							
								fa543bbd4d 
								
							 
						 
						
							
							
								
								OIDC Userinfo: Started writing tests to cover userinfo calling  
							
							
							
						 
						
							2024-04-17 23:26:56 +01:00  
				
					
						
							
							
								 
						
							
								dc6013fd7e 
								
							 
						 
						
							
							
								
								Merge branch 'development' into lukeshu/oidc-development  
							
							
							
						 
						
							2024-04-16 14:57:36 +01:00  
				
					
						
							
							
								 
						
							
								f05ec4cc26 
								
							 
						 
						
							
							
								
								Tags: Stopped recycle bin tags being counted on index  
							
							... 
							
							
							
							For #4892 
Added test to cover. 
							
						 
						
							2024-04-15 18:44:59 +01:00  
				
					
						
							
							
								 
						
							
								ee40adf11a 
								
							 
						 
						
							
							
								
								Merge pull request  #4921  from BookStackApp/v24-02  
							
							... 
							
							
							
							v23.02.3 changes 
							
						 
						
							2024-04-05 15:21:05 +01:00  
				
					
						
							
							
								 
						
							
								19f78dbe6c 
								
							 
						 
						
							
							
								
								WYSIWYG descriptions: Allowed anchor target attrs  
							
							... 
							
							
							
							Allowed since this is a control in the editor UI, but would previously
be stripped by editor config & server-side filtering.
For #4925  
							
						 
						
							2024-04-03 16:46:53 +01:00  
				
					
						
							
							
								 
						
							
								a33dbcb04a 
								
							 
						 
						
							
							
								
								References: Fixed references count/list recycle bin interaction  
							
							... 
							
							
							
							Count and reference list would get references then attempt to load
entities, which could fail to load if in the recycle bin.
This updates the queries to effectively ignore references for items we
can't see (in recycle bin).
Added test to cover.
For #4918  
							
						 
						
							2024-04-01 17:08:53 +01:00  
				
					
						
							
							
								 
						
							
								a2fd80954b 
								
							 
						 
						
							
							
								
								Licensing: Added links and tests for new licenses endpoint  
							
							... 
							
							
							
							For #4907  
							
						 
						
							2024-03-23 22:04:18 +00:00  
				
					
						
							
							
								 
						
							
								b4b84f81a0 
								
							 
						 
						
							
							
								
								Deps: Updated custom symfony/mailer package  
							
							... 
							
							
							
							Done during #4903  work 
							
						 
						
							2024-03-17 16:32:59 +00:00  
				
					
						
							
							
								 
						
							
								d6b7717985 
								
							 
						 
						
							
							
								
								Framework: Fixed issues breaking tests  
							
							... 
							
							
							
							For #4903  
							
						 
						
							2024-03-16 15:26:34 +00:00  
				
					
						
							
							
								 
						
							
								794671ef32 
								
							 
						 
						
							
							
								
								Framework: Upgrade from Laravel 9 to 10  
							
							... 
							
							
							
							Following Laravel guidance and GitHub diff.
Not yet in tested state with app-specific changes made. 
							
						 
						
							2024-03-16 15:12:14 +00:00  
				
					
						
							
							
								 
						
							
								07761524af 
								
							 
						 
						
							
							
								
								Dev: Fixed flaky OIDC test, updated dev version  
							
							
							
						 
						
							2024-03-12 12:08:26 +00:00  
				
					
						
							
							
								 
						
							
								c9d9ad10f2 
								
							 
						 
						
							
							
								
								Merge branch 'totp-patch' into development  
							
							
							
						 
						
							2024-03-10 18:32:02 +00:00