Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2025-12-16 23:40:13 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
12454 commits 2 branches 844 tags 122 MiB
Commit graph

105 commits

Author SHA1 Message Date
Lauri Ojansivu
ae1f80a52c Added attachments API and admin panel attachment management for file storage backends settings. Fixed drag drop upload attachments from file manager to minicard or opened card. 
Thanks to xet7 !
 2025-10-11 11:05:46 +03:00
Lauri Ojansivu
e1fa607f87 Security Fix JVN#74210258: Stored XSS. 
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7 !
 2025-10-10 23:06:06 +03:00
Lauri Ojansivu
9720e703fd Security Fix JVN#14269684: Broken access control. 
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7 !
 2025-10-10 22:59:20 +03:00
Lauri Ojansivu
30c1597b65 Security Fix FG-VD-22-078: Prevent SVG Billion Laughs Attack. 
Thanks to Nguyen Thanh Nguyen of Fortinet's FortiGuard Labs and xet7 !
 2025-10-10 22:16:47 +03:00
Lauri Ojansivu
a8de2f224f Use attachments from old CollectionFS database structure, when not yet migrated to Meteor-Files/ostrio-files, without needing to migrate database structure. 
Thanks to xet7 !
 2025-10-10 19:07:04 +03:00
Martin Filser
3fc9c6efe7 Move every Attachments.findOne() to the ReactiveCache 2023-07-18 21:25:28 +02:00
Martin Filser
a182482cfb Move every Boards.findOne(boardId) to the ReactiveCache (Part 2) 2023-07-18 21:25:28 +02:00
Lauri Ojansivu
aef6967d4c Fix Exception in callback of async function: TypeError: this._now is not a function. Part 2. 
Thanks to xet7 !
 2023-04-21 22:03:47 +03:00
Lauri Ojansivu
aeb0f1e6d8 Fix Exception in callback of async function: TypeError: this._now is not a function. 
Thanks to xet7 !
 2023-04-21 21:15:00 +03:00
Lauri Ojansivu
76ac070f9b Save files serverside with filename ObjectID, without filename. 
Thanks to g-roliveira, iamabrantes, Floaz, koelle25, scott-dunt, mfilser and xet7 !

Fixes #4416
 2023-04-17 23:42:56 +03:00
Lauri Ojansivu
f11650ece1 Added more descriptive times of attachment migrations and uploads. 
Thanks to xet7 !

Related https://github.com/wekan/wekan/issues/4891
 2023-04-14 15:16:50 +03:00
Lauri Ojansivu
fd9478dc57 Try to fix build errors on some platforms. 
Thanks to xet7 !

Related #4842
 2023-02-21 21:27:34 +02:00
Lauri Ojansivu
382168a5b4 Try to fix some security issues. Part 2. 
Thanks to responsible security disclosure contributors and xet7 !
 2023-02-20 16:48:02 -05:00
Lauri Ojansivu
ff993e7c91 Try to fix some security issues. 
Thanks to responsible security disclosure contributors and xet7 !
 2023-02-20 01:21:33 +02:00
Lauri Ojansivu
cd1750f368 Forked minio npm package to @wekanteam/minio to update package dependencies. S3/MinIO support In Progress. 
Thanks to xet7 !

Related #142
 2023-01-16 15:11:31 +02:00
Martin Filser
f6fbd0a5c2 Attachment, rename not needed anymore since Meteor-Files 2.3.0 
Thanks to @dr-dimitru
https://github.com/wekan/wekan/pull/4638#issuecomment-1217883870

00ab6f723b
 2022-08-21 11:10:27 +02:00
Martin Filser
25443926d3 Attachment, path was wrong if the file hasn't a extension 2022-08-21 11:10:27 +02:00
Tobias Wolf
469d81f8a5 Separate uploaded file validation logic from the model "Attachments" 2022-08-19 14:30:22 +02:00
Lauri Ojansivu
c23f5dc858 Fix Validate attachment error at PR Meteor files 2.2.1 fixes + attachment view. 
Thanks to xet7 !

Fixes #4640
 2022-08-16 22:27:22 +03:00
Martin Filser
ea5025595a Server side code don't need a Meteor.call 2022-08-16 18:34:27 +02:00
Martin Filser
344aeb4051 Meteor-Files 2.2.1 changed the function "namingFunction" 
See also:
f872569be2
 2022-08-16 18:34:26 +02:00
Martin Filser
db8e707049 Attachment filename was truncated to 28 characters since Meteor-Files 2.1.0. Fixed this 
See also:
e3a347c432 (diff-4d4d0cea7e443590b59dddca4fc34faa6f37fbfd94a251d8d0047b8aa8ca19eeR4-R6)
 2022-08-16 18:34:26 +02:00
Tobias Wolf
e6b705be26 Remove leftover unused arguments parsing for external execution 2022-08-16 12:01:25 +02:00
Tobias Wolf
b5d311c00c Add support to validate attachment uploads by an external program 2022-08-15 21:09:46 +02:00
Lauri Ojansivu
7c619859fc Updated dependencies like ostrio:files etc. 
Thanks to developers of dependencies and xet7 !

Related https://github.com/veliovgroup/Meteor-Files/issues/847
 2022-08-15 15:24:16 +03:00
Tobias Wolf
ed3223fedc Add support to validate attachment uploads by type and size 2022-08-03 13:06:23 +02:00
Martin Filser
26e1c1dc4a Attachment file rename is now possible 
- Relates to: #2099
 2022-05-20 12:38:46 +02:00
Martin Filser
000e27a4a1 Board copy moves the attachments to the "copied from board storage" 2022-04-30 21:05:04 +02:00
Martin Filser
3fad014e91 Multi-File Storage code was missing after merge 
- Merge commit was: 68e8155805
- Partially resolved by this commit: a34cbf95e8
 2022-04-27 17:18:53 +02:00
Lauri Ojansivu
a34cbf95e8 Add missing code. 2022-04-22 01:19:43 +03:00
Lauri Ojansivu
68e8155805 Multi-File Storage. 
Thanks to mfilser !

Related https://github.com/wekan/wekan/pull/4484

Merge branch 'master' into upgrade-meteor
 2022-04-22 00:55:42 +03:00
Martin Filser
c6212c7d62 Initial attachment upload set's now "original" in filename too 
- later if the file is moving to filesystem, it has "original" in the filename too.
 2022-04-20 20:50:41 +02:00
Martin Filser
b8d14abe0c Attachment Management at Admin Console 2022-04-20 20:50:41 +02:00
Martin Filser
a064e03fc7 Store file on filesystem renew's the storage path 2022-04-20 20:50:41 +02:00
Martin Filser
9d587e76ab Remove filesCollection from FileStoreStrategy classes 2022-04-20 20:50:41 +02:00
Martin Filser
72b8672e62 Move storage names for filesystem and gridfs to constants 2022-04-20 20:50:41 +02:00
Martin Filser
9ef45a75af removed createOnAfterUpload file and use existing code for initial file move to GridFS 2022-04-20 20:50:41 +02:00
Martin Filser
927f155078 WRITABLE_PATH is mandatory, so simplify the code logic 2022-04-20 20:50:41 +02:00
Martin Filser
883beba9ed Split AttachmentStoreStrategy classes to new FileStoreStrategy classes 2022-04-20 20:50:41 +02:00
Martin Filser
0fcfd8e168 Attachment filename contains now the filename of the uploaded file 2022-04-20 20:50:41 +02:00
Martin Filser
44fd652b05 Move Attachment to other storages now possible 2022-04-20 20:50:41 +02:00
Lauri Ojansivu
0c3ca14699 Merge branch 'upgrade-meteor-2.6' of https://github.com/majus/wekan into upgrade-meteor 2022-04-18 21:25:47 +03:00
Denis Perov
a4732bacce Support WRITEABLE_PATH envrionemnt variable 2022-04-18 18:18:15 +03:00
David Arnold
1cddd607ec Revert "use tempdirs" 
This reverts commit a7d51cf21b.
 2022-04-18 18:18:01 +03:00
David Arnold
80d0ec0898 use tempdirs 2022-04-18 18:18:01 +03:00
David Arnold
2288c8ac15 hack: Nasty hack for covercard auth 2022-04-18 18:18:01 +03:00
David Arnold
3d6085157e Fix: access denied on second load 2022-04-18 18:17:21 +03:00
David Arnold
0f272b1e66 fixup! Ref: Attachments to use modern gridfs (rm localstore) 2022-04-18 18:17:20 +03:00
David Arnold
dcac00696e fixup! Ref: Attachments to use modern gridfs (rm localstore) 2022-04-18 18:17:01 +03:00
David Arnold
4158334c2d fixup! Ref: Avatars to use modern gridfs 2022-04-18 18:17:01 +03:00