Commit Graph
23362 Commits
Author SHA1 Message Date
Axel Uhl 7216a8cee5 Merge branch 'master' into bug2851 2016-01-13 09:52:31 +01:00
Axel Uhl 1830f17cc5 Merge branch 'android-maven-build-bug3190' 2016-01-13 09:48:32 +01:00
Axel Uhl 5650c97a51 consolidated imports to remove warnings
Change-Id: Ibba9a42165dc0baaf6fb76986ad0c0de6c4a6587
2016-01-13 09:47:09 +01:00
Axel Uhl e6fef6c04f Merge branch 'master' into bug2851
Conflicts:
	java/com.sap.sailing.domain/src/com/sap/sailing/domain/leaderboard/impl/FlexibleLeaderboardImpl.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingService.java
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingServiceAsync.java

Change-Id: Ifd8c60c6f7d2d2274a68681607a1b5df7b4040b7
2016-01-13 09:39:02 +01:00
Axel Uhl ee2eb970ec call updated(TimePoint) on a DynamicTrackedRaceImpl for mark fixes which are now assumed to be restricted to the race's tracking duration
Change-Id: I8e2ad31d5480922268acf191cc9d1b5f4540f7a3
2016-01-12 18:14:31 +01:00
Axel Uhl 3917060c1a Merge branch 'master' into android-maven-build-bug3190
Conflicts:
	java/pom.xml

Change-Id: I8707442d05979fcd8e0a8be0b593ee3e94a513d3
2016-01-12 12:47:30 +01:00
Axel Uhl f91153d93c cleaned up the ClientUtils implementation and removed unused OAuth cruft; removed GWT dependency from com.sap.sse.security;
removed RemoteServiceServlet superclass from SecurityServiceImpl; why was it there? The GWT RPC is implemented by
UserManagementServiceImpl

Change-Id: Ifc2e1f848b9fb5d7f24398a0497d301b037a822e
2016-01-12 09:43:07 +01:00
Axel Uhl 4e0c3f7073 providing update feature for additional User properties in SecurityService and UserManagementService
Change-Id: I46a4c2c58e35595dc20b85575a27c1cfbd639592
2016-01-12 09:28:23 +01:00
Axel Uhl fb3f74d297 added fields fullName and company to User
Change-Id: I831b2a229c29081aab8f79174caa8d1900303b67
2016-01-12 09:13:01 +01:00
Axel Uhl bfb9ecb9b5 using java.net.URLEncoder.encode to encode UUID parameter to startToReplicateFrom method
Change-Id: I6af165b62a09fbd28d59830b3bf910ab34f985e7
2016-01-11 21:43:58 +01:00
Axel Uhl f12f3d5f82 also using StringEscapeUtils.escapeHtml to escape competitor ID in exception/error message to avoid XSS attack
Change-Id: I9c70c02682dcac23238251faa13e0e4a2cc83ea5
2016-01-11 21:38:25 +01:00
Axel Uhl b885e975dc using another SafeHtmlUtils.fromString to escape a string to avoid XSS attacks
Change-Id: Ib90b5cfcf180f3643ef0eb1f9e49df9a792daf9c
2016-01-11 21:35:16 +01:00
Axel Uhl 76ac8458c7 more security fixes in accordance with the Fortify security scans; now all Corporate Security Requirements have been dealt with
Change-Id: I8badf465e3dfec80e194a5d8fa62d9019e65b646
2016-01-08 14:17:38 +01:00
Axel Uhl bfd33b20cd use parseStrict instead of parseLenient in URLFieldWithFileUpload; fixed <pre> wrapping by setting content type to text/html instead of application/json
Change-Id: I37852c582333b787e3a9ff8dfeef59e5703c1442
2016-01-08 11:23:32 +01:00
Axel Uhl 8246a64a3f using UriUtils.fromString to avoid XSS security vulnerability
Change-Id: Ia6aada15502dd1e4e6a53cf9e6067fbea6a07fef
2016-01-08 11:01:54 +01:00
Axel Uhl 29300c415d fixed a NullPointerException for file upload dialog widget: when starting file upload, URL field is still empty, causing the NPE
Change-Id: Ia9a41c0ce0b4eaeb567cd901d61d7253940f2c5f
2016-01-08 11:00:29 +01:00
Axel Uhl 44362206c9 audited and fixed reflective XSS vulnerabilities, mostly using StringEscapeUtils
Change-Id: If01b16aed1496818524b7b57528337f9c2bcbaa0
2016-01-08 09:48:37 +01:00
Axel Uhl 45c8576d02 Using Apache StringEscapeUtils.escapeHtml to make the reflection of URL parameter HTML safe
Change-Id: Ib77b0f83c4f935b9d90181434031fa74f2699248
2016-01-07 17:32:26 +01:00
Axel Uhl cb233be2eb using StringEscapeUtils.escapeHtml to escape XSS vulnerabilities
Change-Id: I2a10fb6d3c2bf5d0788ac2d69530caec17809f05
2016-01-07 17:27:11 +01:00
Axel Uhl 23f8487cf9 filter more explicitly for "localhost" in RedirectServlet
Change-Id: Ie8cf5857b52987e7d664aa65b387909f4ae4a932
2016-01-07 10:10:30 +01:00
Axel Uhl e2cfbf539d use SafeUriUtils for URL encoding
Change-Id: Ibdb7608b8d3d5768924dd4e111440dee876afd00
2016-01-07 10:09:21 +01:00
Axel Uhl 850e602cd3 removed redundant default Jetty servlet registration in security.ui bundle
Change-Id: Ie6fcc1db0b04bdf7e737dd8017ef643cf1e39b59
2016-01-07 10:08:28 +01:00
Axel Uhl 68f9c0ce7d started auditing and fixing in particular some cross site scripting vulnerabilites, introducing more usage of EntryPointLinkFactory
Change-Id: I1ad5384ad86d5495e1e0ee89bb1efc5020cd9b9d
2016-01-05 18:11:17 +01:00
Axel Uhl 9fc5373015 to make QuadTree test measurements comparable, reduce max tree node size from 100 to 30 again 2015-12-24 16:53:40 +01:00
Axel Uhl 57b4914505 Merge remote-tracking branch 'origin/bug3405' 2015-12-24 16:48:30 +01:00
Axel Uhl 96d51518ba performance improvement for QuadTree Node.get(Bounds)
Change-Id: I51711145b9b3beba1031fc9c7665e2af0c351eab
2015-12-24 14:52:54 +01:00
Axel Uhl 80bf2e6220 using a multi-pass approach with small arrays turns out to be much faster than java.util sort mechanisms with Comparators
Change-Id: I38083366b449903fef57fff42ef3c270cddb2942
2015-12-24 12:58:40 +01:00
Axel Uhl 759dc0ada9 fixed subnode traversal check; left code for pre-sorting children commented in Node; to decide soon what works better; still some warnings
Change-Id: Ief71343a4dd1387ceea27fdbafbeae144085942f
2015-12-24 12:21:57 +01:00
Axel Uhl 8bd932c9c2 fixed node distance calculation to point outside node; fixes failing tests; added specific test case for Node.getDistance 2015-12-24 03:11:14 +01:00
Axel Uhl 897d1d9a9a fixed parenthesizing of ternary expression in Node.split for QuadTree implementation; fixes one of two failing test cases 2015-12-24 02:36:47 +01:00
Axel Uhl 28dccb5a08 Merge branch 'archive-hotfix' 2015-12-24 00:51:56 +01:00
Axel Uhl 284763c3b5 added a few interesting metrics and made Leaderboard have its name as dimension 2015-12-23 21:25:53 +01:00
Axel Uhl d39079a24d use getRawFixes instead of getFixes to massively speed up GPS fix number stats 2015-12-23 20:08:11 +01:00
Lennart Hensler 45c0a132f3 Added statistics for the number of competitor/mark fixes 2015-12-23 19:53:36 +01:00
Axel Uhl 79bcac5264 fixed HashSet import 2015-12-23 19:26:53 +01:00
Axel Uhl fd25c870d9 all tests working again; performance still 15% worse for getNearest than for old implementation, but we may have to live with that for now
Change-Id: I2af5b35ed17928a5fd2ea60d8ba8191321313d97
2015-12-23 18:29:08 +01:00
Axel Uhl 9b9dba8b48 Merge branch 'master' into bug3405 2015-12-23 17:26:44 +01:00
Axel Uhl 8d48a79c12 avoid NPE in DomainFactoryImpl.getStartFinishPlacemarksForTrackedRace
Change-Id: I12edc7833a894043be12bc2bbdc51950dca81676
2015-12-23 17:26:13 +01:00
Axel Uhl b703335ed6 trying to accelerate the nearest node lookup in QuadTree Node by pre-sorting children, but it actually got slower by that
Change-Id: I1dd09586d52451b1e1e7cb9872188da36667a84f
2015-12-23 17:25:44 +01:00
Axel Uhl 9bad7c7b09 Merge remote branch 'origin/master' 2015-12-23 17:14:24 +01:00
Axel Uhl 6f094d5972 test for QuadTree green again
Change-Id: Ief3445280989f55578e6f8b161accd84fc085298
2015-12-23 16:18:21 +01:00
Axel Uhl 7c3cb7d68f implemented algorithm to find nearest element without distance limit
Change-Id: I4171aa8a96ff6b4a469861d2496059e4d7878a88
2015-12-23 16:05:13 +01:00
Alexander Ries ecba12a90a Merge remote-tracking branch 'origin/master' 2015-12-23 15:55:09 +01:00
Axel Uhl 0446011853 fixed QuadTree.getLatLngDistance for date line wraparound, greening the formerly failing test
Change-Id: Ic8976ed732777d4d0b3ab48ef5e9c652e0c4e46a
2015-12-23 15:45:35 +01:00
Axel Uhl e51a1d7ccc added a failing test case for cross dateline operations of QuadTree.getLatLngDistance
Change-Id: I32c997568fafeeaad1e29a1756d3793911025215
2015-12-23 15:41:17 +01:00
Axel Uhl 3b848aeef2 interims commit, compiles but does nothing much yet for QuadTree Node
Change-Id: I59c85da525caad8ed3011e7e62202f7b7071dc88
2015-12-23 15:04:24 +01:00
Axel Uhl 2350f62344 reduced QuadTree contract as far as possible
Change-Id: I06c64d0a0f4ef13db50d3cb3098605871f8ae457
2015-12-23 13:34:08 +01:00
Axel Uhl 80a14625b3 Merge branch 'master' into bug3405 2015-12-23 13:21:56 +01:00
Axel Uhl b25e059931 added PositionTest test case
Change-Id: I2cf1443b759908436fa21102efd5656ca5892e0d
2015-12-23 13:21:45 +01:00
Axel Uhl 62860fda82 added failing test case for across-dateline quad tree
Change-Id: I9dfe342999504aea8f15c35d300730fce0e410ae
2015-12-23 13:21:34 +01:00