Commit Graph

289 Commits

Author SHA1 Message Date
24ca9f4ded Merge pull request #485 from chlupac/FileController
File Controller bug
2020-05-15 07:28:12 -04:00
9850e249fc File Controller bug 2020-05-15 08:20:00 +02:00
caabac3e74 removed redundant assembly download logic, added security on download controller methods 2020-05-14 18:40:53 -04:00
82429c2545 Merge pull request #477 from jimspillane/PathTraversal
Add File and Path rules
2020-05-14 11:55:07 -04:00
cba5865e81 Merge pull request #478 from sbwalker/master
Allow modules to be installed/uninstalled with embedded scripts or IInstallable interface. Fix module uninstall issues.
2020-05-14 11:53:33 -04:00
aa97dd4d0d Allow modules to be installed/uninstalled with embedded scripts or IInstallable interface. Fix module uninstall issues. 2020-05-14 11:54:28 -04:00
8afe8e7474 Add File and Path rules
Apply the file and path naming rules found at 
https://docs.microsoft.com/en-us/windows/win32/fileio/naming-a-file

Mitigate path traversal.
2020-05-14 09:53:36 -04:00
1cca18c4d2 Add additional reserved names and characters
Added CONIN$,CONOUT$ and characters <>:"/\|?*

Added .Split('.')[0] to folder.Name to catch names like CON.txt and allow names like CONTRACT.
2020-05-12 22:38:28 -04:00
598b433cd2 Merge pull request #463 from chlupac/IClientStartup
IClientStartup  implementation
2020-05-12 14:31:10 -04:00
f4710f90c0 Merge pull request #464 from sbwalker/master
validate folder names, handle missing files more gracefully
2020-05-12 14:30:44 -04:00
f05c7d79e3 add security to site template API 2020-05-12 14:31:18 -04:00
6f3fe8d933 validate folder names, handle missing files more gracefully 2020-05-12 13:24:51 -04:00
da73d519d7 IClientStartup implementation 2020-05-12 10:00:28 +02:00
4d7ec16f36 Merge pull request #459 from chlupac/IServerStartup
IServerStartup implementation
2020-05-11 12:56:22 -04:00
7c814a67b3 IServerStartup implementation 2020-05-11 11:19:12 +02:00
a1449fb2dd Fix Uploadable files
When testing for allowable file extensions using a comma separated list, like (jpg,mp3,txt,zip), extensions such as .xt or .p3 will return true.  Adding Split(',') will test each of the extensions correctly.

Adding ToLower() will allow mixed case extensions, like .JPG or .Zip to return true.
2020-05-09 14:58:39 -04:00
f6f895b516 more responsive design adjustments 2020-05-09 12:16:39 -04:00
552df0c9fc Merge pull request #455 from chlupac/NewVersion
Ignore abstract classes at loading
2020-05-08 17:30:06 -04:00
c2ed71ab0d added classes to all theme controls, added mobile support to Oqtane theme 2020-05-08 17:30:35 -04:00
1e270e6423 Ignore abstract classes at loading 2020-05-08 21:30:31 +02:00
f07146fd50 updated external module template to support new assembly loading criteria, fixed minor issue in assembky loading logic 2020-05-07 16:24:36 -04:00
a63a659888 Merge pull request #419 from chlupac/BootswatchCdn
Bootswatch themes in Oqtane.Themes.OqtaneTheme CDN version
2020-05-07 15:25:03 -04:00
d6f3fd108b Merge pull request #449 from chlupac/LoadOptimalization
Simplified loading of oqtane assemblies
2020-05-07 15:09:32 -04:00
47f17a589f implementation of [OqtaneIgnore] class attribute in controls 2020-05-07 21:02:43 +02:00
d7ad175cd7 fixes for framework upgrade, fixes for control panel CSS styles, added AllPages attrubute for Modules, bumped version to 0.9.1 to test upgrades 2020-05-07 14:38:24 -04:00
e78a5e090d Bootswatch themes in Oqtane.Themes.OqtaneTheme
Theme is set in Oqtane.Client\Themes\OqtaneTheme\Default.razor
```
    protected override async Task OnParametersSetAsync()
    {
    // go to https://www.bootstrapcdn.com/bootswatch/ and take your favorite theme
    //<link href="https://stackpath.bootstrapcdn.com/bootswatch/4.4.1/cyborg/bootstrap.min.css" rel="stylesheet" integrity="sha384-l7xaoY0cJM4h9xh1RfazbgJVUZvdtyLWPueWNtLAphf/UbBgOVzqbOTogxPwYLHM" crossorigin="anonymous">
        await LoadBootstrapTheme("https://stackpath.bootstrapcdn.com/bootswatch/4.4.1/cyborg/bootstrap.min.css","sha384-l7xaoY0cJM4h9xh1RfazbgJVUZvdtyLWPueWNtLAphf/UbBgOVzqbOTogxPwYLHM");
        await IncludeCSS("Theme.css");
    }
```
2020-05-07 12:17:44 +02:00
c394c6ea7a Resolved authentication issue #441 related to alias refactoring #439, fixed breaking change in .NET Core 3.2 related to Blazor WebAssembly identification 2020-05-05 16:28:50 -04:00
a02cfea6c9 improve performance of alias handling and allow aliases to be an unlimited number of subfolders in depth 2020-05-05 09:15:36 -04:00
45aeb17020 fixed module action import/export, improved module installation 2020-05-01 15:58:34 -04:00
3afa489f22 upgrade to .NET Core 3.2 RC 2020-05-01 11:32:41 -04:00
7c6dc6d774 Added ability to execute version specific code during framework upgrade (removed ApplicationVersion table and replaced with Version field on Tenant table), updated version number to 0.9.0 and renamed install scripts to match - this will be a baseline release which will be upgradeable 2020-05-01 10:27:14 -04:00
d387e6e573 Page editor fix
Script check
2020-05-01 11:24:10 +02:00
34538dd945 install/upgrade refactoring to consolidate all use cases and implement IInstallable interface for modules, moved tenant creation to site management UI, fixed z-order issues in Blazor theme, enhanced JS Interop methods to support integrity and crossorigin 2020-04-30 13:58:04 -04:00
eebe5d8d8c Merge pull request #416 from chlupac/SiteInstall
Get custom theme and layout on a default install
2020-04-28 09:02:55 -04:00
375c706029 Get custom theme and layout on a default install 2020-04-28 14:51:27 +02:00
e6c26210a0 z-order tweak to Blazor theme 2020-04-27 15:31:32 -04:00
d2fd8c7f4e improved responsive design for Blazaor theme to make it more mobile friendly 2020-04-27 14:18:58 -04:00
6b2411b396 fixed merge issue 2020-04-26 13:39:56 -04:00
df3afb1e21 Merge branch 'master' into master 2020-04-26 13:27:16 -04:00
6d93fcfc1c Merge pull request #401 from chlupac/DatabaseManagerBug
Create Data directoty if does not exists
2020-04-26 13:21:42 -04:00
9a7bde4357 Merge pull request #402 from hishamco/preview5
Updated to Blazor WebAssembly 3.2 preview 5
2020-04-26 13:20:50 -04:00
06db9efc08 Merge branch 'master' into PermissionOptimalization 2020-04-26 13:19:54 -04:00
58d3c406cd added IInstallable interface and uninstall implementation for modules. Refactoring module installation to use interface still in progress. 2020-04-26 13:15:02 -04:00
7606e7b488 Permission Optimalization 2020-04-26 16:19:20 +02:00
91d1e7c684 Updated to Blazor WebAssembly 3.2 preview 5 2020-04-25 17:25:20 +03:00
a09be84824 Create Data directoty if does not exists 2020-04-25 10:58:38 +02:00
6790dfe9a2 Merge pull request #393 from hishamco/preview4
Updated to Blazor WebAssembly 3.2 preview 4
2020-04-23 10:07:18 -04:00
79eae9c5fa Merge branch 'master' into master 2020-04-21 15:17:22 -04:00
ab5257cea2 Security fixes for Site Administrators to ensure proper access. Improvements to User and Role management components. Fix logic in CreateUser so that it does not prevent Administrators from creating users. 2020-04-21 15:16:12 -04:00
f83778fd70 Updated to Blazor WebAssembly 3.2 preview 4 2020-04-21 19:56:24 +03:00