Axel Uhl
e6fef6c04f
Merge branch 'master' into bug2851
...
Conflicts:
java/com.sap.sailing.domain/src/com/sap/sailing/domain/leaderboard/impl/FlexibleLeaderboardImpl.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingService.java
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/SailingServiceAsync.java
Change-Id: Ifd8c60c6f7d2d2274a68681607a1b5df7b4040b7
2016-01-13 09:39:02 +01:00
Axel Uhl
a08dc8f121
Merge remote-tracking branch 'server/master'
2016-01-12 18:18:58 +01:00
Axel Uhl
ee2eb970ec
call updated(TimePoint) on a DynamicTrackedRaceImpl for mark fixes which are now assumed to be restricted to the race's tracking duration
...
Change-Id: I8e2ad31d5480922268acf191cc9d1b5f4540f7a3
2016-01-12 18:14:31 +01:00
Axel Uhl
ccc71c426a
Merge remote-tracking branch 'server/master'
2016-01-12 09:57:53 +01:00
Axel Uhl
f91153d93c
cleaned up the ClientUtils implementation and removed unused OAuth cruft; removed GWT dependency from com.sap.sse.security;
...
removed RemoteServiceServlet superclass from SecurityServiceImpl; why was it there? The GWT RPC is implemented by
UserManagementServiceImpl
Change-Id: Ifc2e1f848b9fb5d7f24398a0497d301b037a822e
2016-01-12 09:43:07 +01:00
Axel Uhl
4e0c3f7073
providing update feature for additional User properties in SecurityService and UserManagementService
...
Change-Id: I46a4c2c58e35595dc20b85575a27c1cfbd639592
2016-01-12 09:28:23 +01:00
Axel Uhl
fb3f74d297
added fields fullName and company to User
...
Change-Id: I831b2a229c29081aab8f79174caa8d1900303b67
2016-01-12 09:13:01 +01:00
Axel Uhl
bfb9ecb9b5
using java.net.URLEncoder.encode to encode UUID parameter to startToReplicateFrom method
...
Change-Id: I6af165b62a09fbd28d59830b3bf910ab34f985e7
2016-01-11 21:43:58 +01:00
Axel Uhl
f12f3d5f82
also using StringEscapeUtils.escapeHtml to escape competitor ID in exception/error message to avoid XSS attack
...
Change-Id: I9c70c02682dcac23238251faa13e0e4a2cc83ea5
2016-01-11 21:38:25 +01:00
Axel Uhl
b885e975dc
using another SafeHtmlUtils.fromString to escape a string to avoid XSS attacks
...
Change-Id: Ib90b5cfcf180f3643ef0eb1f9e49df9a792daf9c
2016-01-11 21:35:16 +01:00
Axel Uhl
4332497ac9
Updated fortify (markdown)
2016-01-11 13:26:20 +00:00
Axel Uhl
9ea2777da7
Merge remote-tracking branch 'server/master'
2016-01-11 14:11:05 +01:00
Axel Uhl
c22dc1f0c3
Created fortify (markdown)
2016-01-11 13:05:43 +00:00
Axel Uhl
19c8ef792d
Using a safeClose method in abstract super class HttpRequest
...
Change-Id: I16a66858b6f413aafad19025ed0f7ec973208ed1
2016-01-11 13:54:31 +01:00
Axel Uhl
c18df38916
catch IOException during close in finally
...
Change-Id: Ia199b13d9669ee4397a3f494031efa4aaa318287
2016-01-11 13:49:10 +01:00
Axel Uhl
40ddcab65e
Added link to new Fortify security scans document to Wiki home
2016-01-11 12:03:25 +00:00
Axel Uhl
571f113c0d
consolidate import to clear warnings
...
Change-Id: I642af7b17622b0c823ae6baa10e0203ca59dbed6
2016-01-11 12:59:54 +01:00
Axel Uhl
6797656bd8
releasing camera also in onStop and onDestroy
...
Change-Id: I26887b13f742b38353461937fa73cf0234c226be
2016-01-11 12:57:23 +01:00
Axel Uhl
1c41fd8ef1
moved close() call into finally clause
...
Change-Id: I9802c78c0a21252a4b43a9fe7e3096656b18dee8
2016-01-11 12:42:00 +01:00
Axel Uhl
c061ad0c41
removed redundant comments in AnalyticsProvider
...
Change-Id: I823d0306becac831b0ae093154ba570c24274b16
2016-01-11 09:50:43 +01:00
Axel Uhl
4a7242df2e
replaced two more string concatenations in DatabaseHelper by ? and selectionArgs usage
...
Change-Id: I337277d604f9f28020db3fe41029cd551e293c6f
2016-01-11 09:43:10 +01:00
Axel Uhl
ef3be27867
using ? query args in DatabaseHelper
...
Change-Id: I83f6a878d34196ba4f31fbbd2149cc547beed8ef
2016-01-11 09:41:13 +01:00
Axel Uhl
9a208d9105
removed redundant comments; enhanced logging by the exception
...
Change-Id: Id975b1134d3ff74d3fcb0202b642d32c2c29e255
2016-01-11 09:31:34 +01:00
Axel Uhl
d4b2b34de3
omit exception message from log
...
Change-Id: Ic60cb62452376d20fda6a41e55e114cbe97f7cf9
2016-01-08 22:53:13 +01:00
Axel Uhl
47febe3d8c
replaced e.printStackTrace by reasonable logging
...
Change-Id: Iead1364cf8438c88780621d93856b628d54c67ac
2016-01-08 22:49:38 +01:00
Axel Uhl
09a9eea119
avoid log forging
...
Change-Id: I449954fb97a7debdad0a311d8c434678140c287a
2016-01-08 22:28:46 +01:00
Axel Uhl
aeb61b9dfe
replaced e.printStackTrace() by proper logging statements
...
Change-Id: Ica5f8fac6fd7616126d546041b83669bc6a9fe36
2016-01-08 16:42:59 +01:00
Axel Uhl
95198ef094
replaced printStackTrace() by proper logging
...
Change-Id: I69ddb3f2284295ca079e6417204e09f711db466c
2016-01-08 16:30:51 +01:00
Axel Uhl
bd36943783
added assert for non-null uri parameter
...
Change-Id: I867c8da773c21d5542bad4cd9317e59e09976a04
2016-01-08 16:27:36 +01:00
Axel Uhl
9c6824f13c
added logging in previously empty exception handlers in ImageController
...
Change-Id: I88ec5fb80f76bdad387fdd1af103e03deb2c71af
2016-01-08 16:16:04 +01:00
Axel Uhl
c74fc32f38
fixed imports
...
Change-Id: I87651dbccd82e986de12531ac5180ce483a02ead
2016-01-08 16:13:17 +01:00
Axel Uhl
7c7c55307b
added logging statements into previously empty exception handlers
...
Change-Id: I57bd11858d3559ae470f2e7a455699793ce53730
2016-01-08 16:12:30 +01:00
Axel Uhl
6ba4d7d867
Fortify found this. In RacingActivity.registerOnService use start() instead of run() to launch thread in background
...
Change-Id: I2f64377e26a2e2a2cb27425a1e6bfeebebd8d422
2016-01-08 16:02:57 +01:00
Axel Uhl
76ac8458c7
more security fixes in accordance with the Fortify security scans; now all Corporate Security Requirements have been dealt with
...
Change-Id: I8badf465e3dfec80e194a5d8fa62d9019e65b646
2016-01-08 14:17:38 +01:00
Axel Uhl
bfd33b20cd
use parseStrict instead of parseLenient in URLFieldWithFileUpload; fixed <pre> wrapping by setting content type to text/html instead of application/json
...
Change-Id: I37852c582333b787e3a9ff8dfeef59e5703c1442
2016-01-08 11:23:32 +01:00
Axel Uhl
8246a64a3f
using UriUtils.fromString to avoid XSS security vulnerability
...
Change-Id: Ia6aada15502dd1e4e6a53cf9e6067fbea6a07fef
2016-01-08 11:01:54 +01:00
Axel Uhl
29300c415d
fixed a NullPointerException for file upload dialog widget: when starting file upload, URL field is still empty, causing the NPE
...
Change-Id: Ia9a41c0ce0b4eaeb567cd901d61d7253940f2c5f
2016-01-08 11:00:29 +01:00
Axel Uhl
44362206c9
audited and fixed reflective XSS vulnerabilities, mostly using StringEscapeUtils
...
Change-Id: If01b16aed1496818524b7b57528337f9c2bcbaa0
2016-01-08 09:48:37 +01:00
Axel Uhl
45c8576d02
Using Apache StringEscapeUtils.escapeHtml to make the reflection of URL parameter HTML safe
...
Change-Id: Ib77b0f83c4f935b9d90181434031fa74f2699248
2016-01-07 17:32:26 +01:00
Axel Uhl
cb233be2eb
using StringEscapeUtils.escapeHtml to escape XSS vulnerabilities
...
Change-Id: I2a10fb6d3c2bf5d0788ac2d69530caec17809f05
2016-01-07 17:27:11 +01:00
Axel Uhl
23f8487cf9
filter more explicitly for "localhost" in RedirectServlet
...
Change-Id: Ie8cf5857b52987e7d664aa65b387909f4ae4a932
2016-01-07 10:10:30 +01:00
Axel Uhl
e2cfbf539d
use SafeUriUtils for URL encoding
...
Change-Id: Ibdb7608b8d3d5768924dd4e111440dee876afd00
2016-01-07 10:09:21 +01:00
Axel Uhl
850e602cd3
removed redundant default Jetty servlet registration in security.ui bundle
...
Change-Id: Ie6fcc1db0b04bdf7e737dd8017ef643cf1e39b59
2016-01-07 10:08:28 +01:00
Axel Uhl
68f9c0ce7d
started auditing and fixing in particular some cross site scripting vulnerabilites, introducing more usage of EntryPointLinkFactory
...
Change-Id: I1ad5384ad86d5495e1e0ee89bb1efc5020cd9b9d
2016-01-05 18:11:17 +01:00
Axel Uhl
abebe9dfa9
Merge remote-tracking branch 'server/master'
2016-01-05 11:22:30 +01:00
Axel Uhl
8fabfcc69b
Merge remote-tracking branch 'origin/master'
2016-01-05 11:19:38 +01:00
Axel Uhl
9fc5373015
to make QuadTree test measurements comparable, reduce max tree node size from 100 to 30 again
2015-12-24 16:53:40 +01:00
Axel Uhl
57b4914505
Merge remote-tracking branch 'origin/bug3405'
2015-12-24 16:48:30 +01:00
Axel Uhl
96d51518ba
performance improvement for QuadTree Node.get(Bounds)
...
Change-Id: I51711145b9b3beba1031fc9c7665e2af0c351eab
2015-12-24 14:52:54 +01:00
Axel Uhl
80bf2e6220
using a multi-pass approach with small arrays turns out to be much faster than java.util sort mechanisms with Comparators
...
Change-Id: I38083366b449903fef57fff42ef3c270cddb2942
2015-12-24 12:58:40 +01:00
Axel Uhl
759dc0ada9
fixed subnode traversal check; left code for pre-sorting children commented in Node; to decide soon what works better; still some warnings
...
Change-Id: Ief71343a4dd1387ceea27fdbafbeae144085942f
2015-12-24 12:21:57 +01:00
Axel Uhl
8bd932c9c2
fixed node distance calculation to point outside node; fixes failing tests; added specific test case for Node.getDistance
2015-12-24 03:11:14 +01:00
Axel Uhl
897d1d9a9a
fixed parenthesizing of ternary expression in Node.split for QuadTree implementation; fixes one of two failing test cases
2015-12-24 02:36:47 +01:00
Axel Uhl
28dccb5a08
Merge branch 'archive-hotfix'
2015-12-24 00:51:56 +01:00
Axel Uhl
284763c3b5
added a few interesting metrics and made Leaderboard have its name as dimension
2015-12-23 21:25:53 +01:00
Axel Uhl
d39079a24d
use getRawFixes instead of getFixes to massively speed up GPS fix number stats
2015-12-23 20:08:11 +01:00
Axel Uhl
79bcac5264
fixed HashSet import
2015-12-23 19:26:53 +01:00
Axel Uhl
fd25c870d9
all tests working again; performance still 15% worse for getNearest than for old implementation, but we may have to live with that for now
...
Change-Id: I2af5b35ed17928a5fd2ea60d8ba8191321313d97
2015-12-23 18:29:08 +01:00
Axel Uhl
9b9dba8b48
Merge branch 'master' into bug3405
2015-12-23 17:26:44 +01:00
Axel Uhl
8d48a79c12
avoid NPE in DomainFactoryImpl.getStartFinishPlacemarksForTrackedRace
...
Change-Id: I12edc7833a894043be12bc2bbdc51950dca81676
2015-12-23 17:26:13 +01:00
Axel Uhl
b703335ed6
trying to accelerate the nearest node lookup in QuadTree Node by pre-sorting children, but it actually got slower by that
...
Change-Id: I1dd09586d52451b1e1e7cb9872188da36667a84f
2015-12-23 17:25:44 +01:00
Axel Uhl
9bad7c7b09
Merge remote branch 'origin/master'
2015-12-23 17:14:24 +01:00
Axel Uhl
6f094d5972
test for QuadTree green again
...
Change-Id: Ief3445280989f55578e6f8b161accd84fc085298
2015-12-23 16:18:21 +01:00
Axel Uhl
7c3cb7d68f
implemented algorithm to find nearest element without distance limit
...
Change-Id: I4171aa8a96ff6b4a469861d2496059e4d7878a88
2015-12-23 16:05:13 +01:00
Axel Uhl
0446011853
fixed QuadTree.getLatLngDistance for date line wraparound, greening the formerly failing test
...
Change-Id: Ic8976ed732777d4d0b3ab48ef5e9c652e0c4e46a
2015-12-23 15:45:35 +01:00
Axel Uhl
e51a1d7ccc
added a failing test case for cross dateline operations of QuadTree.getLatLngDistance
...
Change-Id: I32c997568fafeeaad1e29a1756d3793911025215
2015-12-23 15:41:17 +01:00
Axel Uhl
3b848aeef2
interims commit, compiles but does nothing much yet for QuadTree Node
...
Change-Id: I59c85da525caad8ed3011e7e62202f7b7071dc88
2015-12-23 15:04:24 +01:00
Axel Uhl
2350f62344
reduced QuadTree contract as far as possible
...
Change-Id: I06c64d0a0f4ef13db50d3cb3098605871f8ae457
2015-12-23 13:34:08 +01:00
Axel Uhl
80a14625b3
Merge branch 'master' into bug3405
2015-12-23 13:21:56 +01:00
Axel Uhl
b25e059931
added PositionTest test case
...
Change-Id: I2cf1443b759908436fa21102efd5656ca5892e0d
2015-12-23 13:21:45 +01:00
Axel Uhl
62860fda82
added failing test case for across-dateline quad tree
...
Change-Id: I9dfe342999504aea8f15c35d300730fce0e410ae
2015-12-23 13:21:34 +01:00
Axel Uhl
6b222accb9
Switched QuadTree to general Bounds implementation; added performnace measurements; improved Javadoc of Measurement micro-framework
...
Change-Id: I78921b61df5403ac6339ad24ecfc0483ddfb3381
2015-12-23 13:10:08 +01:00
Axel Uhl
2ce77965ee
added comments on Measurement micro-framework; started to adjust QuadTreeTest
...
Change-Id: I7ed24c2bdf340aeff053161f3b1b737886f60e18
2015-12-23 11:16:52 +01:00
Axel Uhl
a5ac08bd08
fixing bug 3412: tails turning grey when showing only selected competitors
...
Change-Id: Ic4173297cb47c0ce8100a348a3ac8df40a0ac495
2015-12-23 10:28:21 +01:00
Axel Uhl
5af77785a5
fixed NPE in FixesAndTails regarding the tailPreparer which could be null if boat data has not been received for all competitors shown
...
Change-Id: If21c9679bd3b0036c70f893b823e327dd6e74776
2015-12-23 10:15:13 +01:00
Axel Uhl
1911642208
Merge branch 'master' into bug3378
2015-12-22 22:53:24 +01:00
Axel Uhl
9cde214ee8
Merge remote-tracking branch 'server/master'
2015-12-22 22:53:09 +01:00
Axel Uhl
3885c0cc2b
fixing bug 3413 by using the competitor ID as String for color selection and leaderboard selection model updates
...
Change-Id: I3b41ff88922767c08a657d6db3ddacddec154f1d
2015-12-22 22:47:55 +01:00
Axel Uhl
a070261066
use EntityIdentityWrapper as default key in RefreshableMultiSelectionModel for faster comparison
...
Change-Id: I8039590fa3f3de82d8c56939ecb2dedd8a464bcf
2015-12-22 18:16:43 +01:00
Axel Uhl
ec04b7973e
initialize RaceDefinition's RaceCompetitorSet appropriately
...
Change-Id: I2b56c26c50e08272b83f957df2fa2205d07142ec
2015-12-21 19:22:56 +01:00
Axel Uhl
a5eec00c83
consolidated imports
...
Change-Id: Ic554f563e67f65fd6df98a4f11d17e4cc0546dca
2015-12-21 18:38:40 +01:00
Axel Uhl
6e5dd60159
fixed issue with illegal use of ByteArrayOutputStream in GWT
...
Change-Id: Iaf5aadf8ca1f9b598ca85c6e9808e122d783c4f0
2015-12-21 18:37:36 +01:00
Axel Uhl
ebe431f5e8
wired the RaceCompetitorSet stuff to RaceMap; need to test if this works as expected
...
Change-Id: I3306f62454881c366a7a64bd03bebf8d83ff52f9
2015-12-21 18:27:57 +01:00
Axel Uhl
4450024be7
Merge branch 'master' into bug3378
2015-12-21 17:00:32 +01:00
Axel Uhl
0da412d0a4
generate a different deep link for iOS users into the invitational mail
...
Change-Id: I41244866752d5854521652577c709c4d2cf83fdd
2015-12-21 16:57:16 +01:00
Axel Uhl
96331af6a6
Merge branch 'master' into bug3378
2015-12-21 16:25:11 +01:00
Axel Uhl
e0809a21dc
use synchronization to exclude the possibility of the Java Memory Model causing trouble in SmartFutureCacheTest with concurrency
...
Change-Id: Ibbb726f3c32ddf748bab05300a32b7ed165940f3
2015-12-21 16:24:12 +01:00
Axel Uhl
715f3a59de
Merge branch 'master' into bug3378
2015-12-21 16:09:16 +01:00
Axel Uhl
d17e900b81
fixed NPE in Expedition file import; eliminated RaceSelection JSNI code in favor of GWT's native JSON support
...
Change-Id: I794d4eae05a26b81d7abea1ea6466493812f2035
2015-12-21 16:08:23 +01:00
Axel Uhl
ba492b6d47
instead of using Md5Utils, use MessageDigest directly on client side which should support MD5 out of the box
...
Change-Id: I449cd904a653d44ca85db0bbc301393871967370
2015-12-21 13:59:22 +01:00
Axel Uhl
1faac1a22d
Merge branch 'master' into bug3378
...
Conflicts:
java/com.sap.sailing.gwt.ui/src/main/java/com/sap/sailing/gwt/ui/client/shared/racemap/RaceMap.java
Change-Id: I6aeb319976a6d99fd649f6f196025c5d53977a05
2015-12-21 10:27:16 +01:00
Axel Uhl
2fc855df88
reset debug logging level from FINEST to INFO
...
Change-Id: I43307d20fbeb267cd42bfda1f53b3bc52529bd98
2015-12-21 10:25:59 +01:00
Axel Uhl
6d88a75b87
in Igtimi WebSocketConnectionManager.reconnect() wait for the connection for 5s; if not connected, try again with failover URL
...
Change-Id: I52737084334cdf918fff78643447822de93c2bd6
2015-12-21 10:21:26 +01:00
Axel Uhl
b9ecb366e5
use Jetty SslContextFactory to enable wss:// connection to Igtimi Websocket server
...
Change-Id: Id6045e7370ae5750d1e7b85c6806f9e2676651fa
2015-12-21 10:11:50 +01:00
Axel Uhl
80ade813aa
fixed Util import in DeviceConfigurationListComposite
...
Change-Id: Icbf769f06e734bc7b33a16a841e1fe01b2558f00
2015-12-18 18:08:59 +01:00
Axel Uhl
94a2796a65
removed redundant field for EntityIdentityComparator in TableWrapper
...
Change-Id: Ifd04e096ce2123652a99b419c11c272d6c3d1abc
2015-12-18 17:54:29 +01:00
Axel Uhl
d9c9b519ac
fixed Javadoc and consolidated imports
...
Change-Id: Icb060167dd7a0e5ccd5b9bcd82fdea2ac4bad12e
2015-12-18 17:47:50 +01:00
Axel Uhl
26b7e7cb25
don't use DeferredCommand but explicitly add selection change handler again after having selected the tracked race for a selected race column
...
Change-Id: I3a3473cc4a958788b581b91647b4721aa250db81
2015-12-18 17:45:49 +01:00
Axel Uhl
4c33cfe1b9
use an EntityIdentityComparator for the DeviceConfigurationPanel
...
Change-Id: Icc0e0fcd8079de3df38f8625036902b89b1a749d
2015-12-18 17:31:14 +01:00
Axel Uhl
81ace333ee
made SelectionCheckboxColumn concrete and instantiate instead of creating redundant anonymous inner subclasses
...
Change-Id: If415fff584fa8768a56c8174de2db3ec8b06539e
2015-12-18 17:20:05 +01:00
Axel Uhl