github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2024-11-07 20:31:06 -05:00
Code Issues Projects Releases Packages Wiki Activity
overleaf/services/web/test/unit/coffee
History
Simon Detheridge 56dcbefb5b Check for safe paths in all ProjectEntityHandler methods 
Some import mechanisms (for example, Github project import) call methods such as 'upsert*' directly, bypassing existing filename checks.

Added checks to all methods in ProjectEntityHandler that can create or rename a file.

bug: overleaf/sharelatex#908
Signed-off-by: Simon Detheridge <s@sd.ai>
2018-10-08 15:31:04 +01:00
..
Analytics send licences graph request to v1 for data instead of analytics 2018-08-22 18:31:29 +01:00
Announcement Update analytics manager to use new path 2018-02-07 09:39:00 +00:00
Authentication Fix ordering of boolean check to be more readable 2018-10-08 11:25:24 +01:00
Authorization use ProjectGetter rather than Project directly 2018-02-16 08:55:09 +00:00
BetaProgram remove UserLocator 2018-05-28 14:11:13 +02:00
Blog Move test/UnitTests -> unit/test 2017-11-27 17:10:22 +00:00
Chat Move test/UnitTests -> unit/test 2017-11-27 17:10:22 +00:00
Collaborators use multiple emails when relevant 2018-06-08 17:53:45 +02:00
Compile fix broken test for compile controller 2018-06-20 13:44:07 +01:00
Contact Move test/UnitTests -> unit/test 2017-11-27 17:10:22 +00:00
Cooldown Move test/UnitTests -> unit/test 2017-11-27 17:10:22 +00:00
Docstore Move test/UnitTests -> unit/test 2017-11-27 17:10:22 +00:00
Documents return projectHistoryId in DocumentController.getDoc 2018-04-13 13:45:02 +01:00
DocumentUpdater send projectHistoryId with project structure updates 2018-04-13 13:45:03 +01:00
Downloads Replace ShareLaTeX with Overleaf in name of multiple project download file (Closes: #963) 2018-09-24 16:33:54 +01:00
Editor remove unused call to UserGetter.getUser 2018-09-13 17:39:30 +01:00
Email Stub out brandPrefix for email tests 2017-12-21 17:18:10 +00:00
Exports make the zip fetching endpoint for exports generic to either zips or pdfs 2018-09-27 16:11:11 +01:00
FileStore Revert "Revert "Upgrade to mocha 5.0.1"" 2018-02-27 15:03:21 +00:00
helpers handle dynamic Proxy URLs 2018-07-06 12:03:47 +02:00
History Revert "Record and show last modified by user for projects" 2018-09-13 14:00:30 +01:00
InactiveData Move test/UnitTests -> unit/test 2017-11-27 17:10:22 +00:00
infrastructure Add additional functionality to RedirectManager 2018-09-17 15:38:45 +01:00
Institutions add getInstitutionsPlan function 2018-09-24 13:16:31 +01:00
Metadata Merge branch 'ns-package-aware-autocomplete' 2017-11-28 10:24:37 -05:00
Notifications move call for creating ip matched notifcation to project controller 2018-09-05 15:40:59 +01:00
PasswordReset Send out confirmation emails on register and record confirmedAt date 2018-06-21 10:21:15 +01:00
Project Check for safe paths in all ProjectEntityHandler methods 2018-10-08 15:31:04 +01:00
Referal Fix unit tests 2018-06-28 15:28:44 +01:00
References Account for the new referencesSearch flag when deciding to do fullIndex 2018-05-14 11:31:59 +01:00
Security Store OneTimeTokens in mongo rather than redis 2018-06-21 10:22:08 +01:00
Subscription Merge pull request #893 from sharelatex/ja-fix-duplicate-text-in-email 2018-09-28 11:15:40 +01:00
SudoMode WIP: trying to get acceptance tests to pass 2018-10-04 15:05:40 +01:00
SystemMessages Move test/UnitTests -> unit/test 2017-11-27 17:10:22 +00:00
Tags add new tag methods 2018-09-03 10:40:28 -04:00
Templates fix invalid project names when opening templates 2018-09-28 10:38:25 +01:00
ThirdPartyDataStore Fix tests 2018-03-05 10:37:53 +00:00
TokenAccess use v1 doc info api 2018-10-02 11:16:46 -04:00
Uploads Add latexmkrc in FileTypeManager 2018-05-10 16:59:58 -04:00
User Fix tests after refactoring register validation 2018-10-08 10:44:25 +01:00