Commit Graph

456 Commits

Author SHA1 Message Date
1496b650ea [feature] Add uniqueUserCount response field to info/info.json handler 2020-10-09 20:17:01 +03:00
c93c3f79dc [bug] Fix bug 46695
Do not start forcesave for encrypted files
2020-09-22 16:12:22 +03:00
c56fb1a0e5 [bug] Fix connecting document server with mysql to community server 2020-09-16 16:39:14 +03:00
eae99ffe8a Merge branch hotfix/v5.6.3 into release/v6.0.0 2020-08-14 14:54:38 +00:00
8740bb8902 [bug] Fix Path Traversal vulnerability via image upload params 2020-08-12 13:49:58 +03:00
dc33c59409 Merge branch hotfix/v5.6.2 into release/v6.0.0 2020-08-07 08:14:13 +00:00
2c18303530 [license] Check licensed number of editor connections for cluster 2020-08-06 17:51:39 +03:00
060cb3fda2 [bug] Fix Path Traversal vulnerability via savefile param 2020-08-05 17:38:13 +03:00
a49f5a6417 Merge branch hotfix/v5.6.1 into release/v6.0.0 2020-08-05 09:36:08 +00:00
566ffd3fc0 [bug] Fix bug 45976.
Fix Path Traversal vulnerability via converterservice param - filetype. Add filetype allowlist via regex
2020-07-31 18:51:22 +03:00
6a3d85e1f0 Merge pull request #162 from ONLYOFFICE/hotfix/v5.5.4
Hotfix/v5.5.4
2020-07-10 14:50:24 +03:00
38f0680028 [config] Add urlExclusionRegex option to exclude authorization from urls matching regular expression
Main goal is to exclude authorization from requests to S3 file storage
Empty string(default value) - option is disabled.
2020-07-03 19:33:42 +03:00
800aa272a9 [config] Add jwt.verify options; Set "clockTolerance": 60 2020-06-09 00:54:11 +03:00
8bff952a0b [bug] Fix unexpected commands in collaboration editing
Fixed bug with unexpected sending of commands (auth, authChanges) in case of page refreshing during collaboration editing
2020-06-08 12:44:48 +03:00
56ab5a4fb3 [bug] For bug 45406.
Fix bug for external database. Update baseurl with the last value.
2020-06-08 11:11:52 +03:00
d8fe8d15b1 [log] Log callbackUrl response different from {"error": 0}; Change 'storeForgotten' and backoff log level to warn; 2020-06-08 11:11:39 +03:00
3c51c3866e [plugins] Update
Change warning if subscribe to plugin folder update failed
2020-06-01 15:58:00 +03:00
ba7efd47e4 fix concatenation 2020-05-29 00:34:49 -04:00
0a1469558f [bug] Fix bug 45406 2020-05-25 16:47:36 +03:00
1d2f3c9528 [bug] Fix uploading encrypted image after Revision: 1fef4b7043 2020-05-25 16:44:56 +03:00
fb18831b92 [config] Add pgPoolExtraOptions (connection options) (#154)
Co-authored-by: konovalovsergey <Sergey.Konovalov@onlyoffice.com>
2020-05-14 12:19:30 +03:00
1fef4b7043 [jwt] Move token from url to header when uploading image
Prevent potential session hijacking using token from server logs
2020-05-13 17:03:00 +03:00
0376217329 [bug] Fix forcesave button behavior in co-editing mode 2020-04-28 12:03:16 +03:00
84fd779d54 [bug] Fix wrong callbackUrl after updating DS without dropping DB 2020-04-28 11:55:57 +03:00
57413ec727 [license] Delete
Delete limits from OS
2020-03-25 10:37:45 +03:00
29456535f4 [bug] Fix ReferenceError: saveLock is not defined 2020-03-20 22:41:02 +03:00
2a1322caae [bug] Fix sql injections in checkStatusFile, deleteChangesCallback 2020-03-17 16:05:48 +03:00
64bd38b9d0 [feature] Add 'mariadb' as 'services.CoAuthoring.sql.type' parameter 2020-03-16 13:07:15 +03:00
c6196558dc [feature] Fix old database compatibility 2020-03-10 20:19:26 +03:00
b59b9174a3 [feature] Optimize saveChanges for better performance(postgre) 2020-03-10 20:19:26 +03:00
c701be8b6b [feature] Remove required Content-Type from POST requests 2020-03-06 18:01:55 +03:00
984f74be64 [bug] Fix postgresql command for citus compatibility
Fix "error: functions used in the DO UPDATE SET clause of INSERTs on distributed tables must be marked IMMUTABLE"
2020-03-06 12:38:07 +03:00
1d72cf119b [bug] Fix postgresql command for citus compatibility (#140) 2020-03-02 19:41:38 +03:00
9eb62da6d7 [bug] Fix 44702 (#139) 2020-03-02 15:06:22 +03:00
f8d1638780 [run] Cluster
Delete cluster for docserver because it's no longer needed. Always alone.
2020-02-25 15:26:40 +03:00
77498ef2d5 [api] Add /internal/cluster/inactive handler. rework forcesave (#136) 2020-02-21 19:09:24 +03:00
4a62dbc8e7 Add addon support
(cherry picked from commit 2191174c19958449be69adfedc83e847a2f19d6a)
2020-02-19 17:30:29 +03:00
69c976e7a0 [bug] Fix Update Version error on opening. Refactor EditorData interface. Remove gc.js from start services (#135) 2020-02-19 16:05:24 +03:00
e796affb5b Feature/editor data memory (#134)
* [feature] Add editorDataMemory instead of redis

* [config] Add editorDataStorage, remove pubsub.name

* [bug] Fix config path
2020-02-18 19:15:04 +03:00
f48f901553 Fix reading license key file 2020-02-13 18:51:01 +03:00
81ccbd1bd9 Fix pkg runtime error 2020-02-07 15:32:00 +03:00
6a90cbf2df [bug] Fix bug: disconnect after uploading oversized changes (#131) 2020-02-07 15:23:29 +03:00
a64d419613 Add support building source with 'pkg' 2020-02-07 12:03:11 +03:00
732d66f828 [bug] For bug 40874 (#129)
sendData instead connection.close
2020-01-23 18:19:25 +03:00
02daec914e [bug] Fix bug 44259 (#128)
Set default 'codepage' and 'delimiter' in ConvertService.ashx while 'region' param is not used.
2020-01-22 18:16:10 +03:00
f66fbbbc49 [bug] Fix bug 44169 (#127)
Fix bug with ole object copy/paste. Fix vulnerability with user defined docId while imageFromUrl command
2020-01-20 13:45:55 +03:00
cd86ca8169 [api] Add error '-7' for incorrect conversion params 2019-12-20 19:35:56 +03:00
e02c3bc833 [feature] Use a personal callbackUrl for each userId 2019-12-20 16:48:26 +03:00
7b7d54dacd [api] Rename regionalSettings -> region 2019-12-17 17:55:38 +03:00
459d77a9ef [api] Remove undocumented ConvertService.ashx param "doctparams"; regionalSettings.toLowerCase() 2019-12-10 16:04:24 +03:00