Commit Graph
23514 Commits
Author SHA1 Message Date
Steffen Schaefer ddca44907f Introduces SharedResources interface in sse.security.ui to make it
possible to refactor parts of user management UI of Home to SSE
2016-01-20 13:24:34 +01:00
Steffen Schaefer e74572bf2c Rendering full name and company of a user in the UI if available 2016-01-20 11:02:04 +01:00
Papick Garcia Taboada 825748d4a4 Added company to UI 2016-01-20 10:20:11 +01:00
Papick Garcia Taboada 3a6e30f725 Added "company" to security i18n 2016-01-20 10:18:20 +01:00
Steffen Schaefer 536be3c6cd Merge branch 'design2015' into design2015-user-management
Conflicts:
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/home/shared/app/UserManagementContextImpl.java
2016-01-20 09:51:44 +01:00
Steffen Schaefer 82de39befc Fixed compiler error after merge 2016-01-20 09:48:33 +01:00
Steffen Schaefer 60830251c6 Merge branch 'master' into design2015
Conflicts:
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages_de.properties
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages_ru.properties
	java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/StringMessages_zh.properties
2016-01-20 09:47:41 +01:00
Axel Uhl 563a282b73 fixed message strings explaining soring schemes for ESS / 12
Change-Id: Ia8d076dbc49fb21c269789185cf00d9c6cf89f9f
2016-01-18 18:33:38 +01:00
Axel Uhl a23387bacd fixed ordering in BoatClassMasterdata
Change-Id: I8fc0fe40ca99e89137d6d2a3754ec14595bba298
2016-01-18 18:25:45 +01:00
Axel Uhl b5e60a0417 factored out commonalities between ESS High Point scoring schemes for act leaderboards
Change-Id: I962f12756e1667a53c533bdd95c0f6757cf29349
2016-01-18 18:24:01 +01:00
Axel Uhl 11132b9fa2 factored out commonalities between the two different ESS HighPoint overall scoring schemes
Change-Id: Iebaf853057056aad271bc20868d6f08323ea31b4
2016-01-18 18:19:45 +01:00
Axel Uhl ba9a19c7c6 re-format and comment change only
Change-Id: I447224e1cc21eef1034f40665f135b0ec800adf8
2016-01-18 17:51:51 +01:00
Axel Uhl b488c2608f Merge branch 'master' into gc32-changes 2016-01-18 17:14:00 +01:00
Axel Uhl 0fffbe7869 upgraded TracAPI version also in pom.xml
Change-Id: I25e689f8460f12919c37f9798709fdfae03f61a3
2016-01-18 17:06:41 +01:00
Axel Uhl 1891a5562b upgraded TracAPI to version 3.1.1; this should resolve the timeouts during unsubscribe
Change-Id: I7ffa172214d76938258890285b8af4fb48a1028e
2016-01-18 16:58:54 +01:00
Jonas Dann 67e5e98b5c Merge branch 'master' into bug3416 2016-01-13 19:01:27 +01:00
Jonas Dann fae4768cd8 Tested and seems to work 2016-01-13 18:59:29 +01:00
Jonas Dann ea14b195ed deleted extension time for race start was in the past. Forgot that before 2016-01-13 16:49:24 +01:00
Papick Garcia Taboada 59297896ac Merge branch 'design2015' into design2015-user-management 2016-01-13 16:09:41 +01:00
Papick Garcia Taboada f5b860d315 Merge commit '803c91dd7879c58c8bfeb16ec26a855aafe340d9' into design2015
# Conflicts:
#	java/com.sap.sailing.gwt.ui/pom.xml
#	java/com.sap.sse.gwt.theme/pom.xml
#	java/pom.xml
2016-01-13 15:57:32 +01:00
Jonas Dann abb6f210ba Did the todos in RaceTimesCalculationUtil 2016-01-13 14:14:50 +01:00
Axel Uhl 803c91dd78 fixed position of race filter text box in TracTracEventManagementPanel
Change-Id: Ic7c8599f383184ac73775b48bb6431343b549277
2016-01-13 12:09:15 +01:00
Axel Uhl 1830f17cc5 Merge branch 'android-maven-build-bug3190' 2016-01-13 09:48:32 +01:00
Axel Uhl 74ada427fe also enable live mode regardless the time point of the newest tracking event; disable live mode after endOfTracking has passed 2016-01-12 21:34:16 +01:00
Jonas Dann 256ee81c1b Solved some problems related to the timeSlider documented in bug 3416 2016-01-12 20:30:47 +01:00
Axel Uhl ee2eb970ec call updated(TimePoint) on a DynamicTrackedRaceImpl for mark fixes which are now assumed to be restricted to the race's tracking duration
Change-Id: I8e2ad31d5480922268acf191cc9d1b5f4540f7a3
2016-01-12 18:14:31 +01:00
Axel Uhl 3917060c1a Merge branch 'master' into android-maven-build-bug3190
Conflicts:
	java/pom.xml

Change-Id: I8707442d05979fcd8e0a8be0b593ee3e94a513d3
2016-01-12 12:47:30 +01:00
Papick Garcia Taboada 84ff96fea6 Merge branch 'design2015-user-management' of ssh://sapsailing.com/home/trac/git into design2015-user-management 2016-01-12 10:00:12 +01:00
Papick Garcia Taboada 4237a379cd Merge commit '4332497ac993f28c7406d1936510f859090892c4' into design2015
# Conflicts:
#	java/com.sap.sse.security.ui/.settings/org.eclipse.core.resources.prefs
2016-01-12 09:56:00 +01:00
Axel Uhl f91153d93c cleaned up the ClientUtils implementation and removed unused OAuth cruft; removed GWT dependency from com.sap.sse.security;
removed RemoteServiceServlet superclass from SecurityServiceImpl; why was it there? The GWT RPC is implemented by
UserManagementServiceImpl

Change-Id: Ifc2e1f848b9fb5d7f24398a0497d301b037a822e
2016-01-12 09:43:07 +01:00
Axel Uhl 4e0c3f7073 providing update feature for additional User properties in SecurityService and UserManagementService
Change-Id: I46a4c2c58e35595dc20b85575a27c1cfbd639592
2016-01-12 09:28:23 +01:00
Axel Uhl fb3f74d297 added fields fullName and company to User
Change-Id: I831b2a229c29081aab8f79174caa8d1900303b67
2016-01-12 09:13:01 +01:00
Axel Uhl bfb9ecb9b5 using java.net.URLEncoder.encode to encode UUID parameter to startToReplicateFrom method
Change-Id: I6af165b62a09fbd28d59830b3bf910ab34f985e7
2016-01-11 21:43:58 +01:00
Axel Uhl f12f3d5f82 also using StringEscapeUtils.escapeHtml to escape competitor ID in exception/error message to avoid XSS attack
Change-Id: I9c70c02682dcac23238251faa13e0e4a2cc83ea5
2016-01-11 21:38:25 +01:00
Axel Uhl b885e975dc using another SafeHtmlUtils.fromString to escape a string to avoid XSS attacks
Change-Id: Ib90b5cfcf180f3643ef0eb1f9e49df9a792daf9c
2016-01-11 21:35:16 +01:00
Simon Pamies c1f870082e Added new high point scoring schemes for GC32 scoring based on NOR 1.5 from October 2015 2016-01-11 14:04:22 +01:00
Simon Pamies e790410b63 Merge branch 'master' into gc32-changes 2016-01-11 10:41:13 +01:00
Axel Uhl 76ac8458c7 more security fixes in accordance with the Fortify security scans; now all Corporate Security Requirements have been dealt with
Change-Id: I8badf465e3dfec80e194a5d8fa62d9019e65b646
2016-01-08 14:17:38 +01:00
Simon Pamies 336143dd6e Added first information for GC32s 2016-01-08 12:05:09 +01:00
Axel Uhl bfd33b20cd use parseStrict instead of parseLenient in URLFieldWithFileUpload; fixed <pre> wrapping by setting content type to text/html instead of application/json
Change-Id: I37852c582333b787e3a9ff8dfeef59e5703c1442
2016-01-08 11:23:32 +01:00
Axel Uhl 8246a64a3f using UriUtils.fromString to avoid XSS security vulnerability
Change-Id: Ia6aada15502dd1e4e6a53cf9e6067fbea6a07fef
2016-01-08 11:01:54 +01:00
Axel Uhl 29300c415d fixed a NullPointerException for file upload dialog widget: when starting file upload, URL field is still empty, causing the NPE
Change-Id: Ia9a41c0ce0b4eaeb567cd901d61d7253940f2c5f
2016-01-08 11:00:29 +01:00
Axel Uhl 44362206c9 audited and fixed reflective XSS vulnerabilities, mostly using StringEscapeUtils
Change-Id: If01b16aed1496818524b7b57528337f9c2bcbaa0
2016-01-08 09:48:37 +01:00
Axel Uhl 45c8576d02 Using Apache StringEscapeUtils.escapeHtml to make the reflection of URL parameter HTML safe
Change-Id: Ib77b0f83c4f935b9d90181434031fa74f2699248
2016-01-07 17:32:26 +01:00
Axel Uhl cb233be2eb using StringEscapeUtils.escapeHtml to escape XSS vulnerabilities
Change-Id: I2a10fb6d3c2bf5d0788ac2d69530caec17809f05
2016-01-07 17:27:11 +01:00
Axel Uhl 23f8487cf9 filter more explicitly for "localhost" in RedirectServlet
Change-Id: Ie8cf5857b52987e7d664aa65b387909f4ae4a932
2016-01-07 10:10:30 +01:00
Axel Uhl e2cfbf539d use SafeUriUtils for URL encoding
Change-Id: Ibdb7608b8d3d5768924dd4e111440dee876afd00
2016-01-07 10:09:21 +01:00
Axel Uhl 850e602cd3 removed redundant default Jetty servlet registration in security.ui bundle
Change-Id: Ie6fcc1db0b04bdf7e737dd8017ef643cf1e39b59
2016-01-07 10:08:28 +01:00
Axel Uhl 68f9c0ce7d started auditing and fixing in particular some cross site scripting vulnerabilites, introducing more usage of EntryPointLinkFactory
Change-Id: I1ad5384ad86d5495e1e0ee89bb1efc5020cd9b9d
2016-01-05 18:11:17 +01:00
Axel Uhl 9fc5373015 to make QuadTree test measurements comparable, reduce max tree node size from 100 to 30 again 2015-12-24 16:53:40 +01:00