Mika Koivisto's commits on svn://svn.liferay.com/repos/public/portal/trunk.

Revision 110456

2012-05-21T22:16:40Z

Use Content-disposition attachment for all non inline resources.
XSS issue in downloading file through webdav url
SVN
JIRA

Revision 110456

2012-05-21T22:16:40Z

Use Content-disposition attachment for all non inline resources.
XSS issue in downloading file through webdav url
SVN
JIRA

Revision 110453

2012-05-21T22:16:35Z

Don't set public cache headers
There is public Cache-Control header for file download
SVN
JIRA

Revision 110453

2012-05-21T22:16:35Z

Don't set public cache headers
There is public Cache-Control header for file download
SVN
JIRA

Revision 110249

2012-05-17T07:05:36Z

Check permission on the mount point instead of the repository node
Can't edit Sharepoint repository, it's missing the option
SVN
JIRA

Revision 110249

2012-05-17T07:05:36Z

Check permission on the mount point instead of the repository node
Can't edit Sharepoint repository, it's missing the option
SVN
JIRA

Revision 110091

2012-05-15T01:32:58Z

Sharepoint Hook: User can't checkin file after checkout
SVN
JIRA

Revision 109763

2012-05-11T17:47:20Z

Allow /c/portal/status when setup wizard isn't completed
Exception in setup wizard causes recursive exceptions and hides the real exception
SVN
JIRA

Revision 109516

2012-05-08T22:57:38Z

Struts portlet can be exploited to execute any JSP or Servlet
SVN
JIRA

Revision 109515

2012-05-08T22:57:36Z

Auto Login Hook get invoked twice per request
SVN
JIRA

Revision 109232

2012-05-04T02:26:17Z

MVC Portlet can be exploited to include any JSP or Servlet
SVN
JIRA

Revision 109232

2012-05-04T02:26:17Z

MVC Portlet can be exploited to include any JSP or Servlet
SVN
JIRA

Revision 109224

2012-05-04T02:26:04Z

include INCLUDE dispatcher also to prevent exploit from MVCPortlet
SecureFilter can be bypassed, this allows an attacker full control over a liferay instance
SVN
JIRA

Revision 109224

2012-05-04T02:26:04Z

include INCLUDE dispatcher also to prevent exploit from MVCPortlet
SecureFilter can be bypassed, this allows an attacker full control over a liferay instance
SVN
JIRA

Revision 109139

2012-05-03T04:17:53Z

SecureFilter can be bypassed, this allows an attacker full control over a liferay instance
SVN
JIRA

Revision 109139

2012-05-03T04:17:53Z

SecureFilter can be bypassed, this allows an attacker full control over a liferay instance
SVN
JIRA

Revision 108835

2012-04-27T18:14:55Z

Don't treat friend urls with .html as static content
Page with .html in the friendly url get's cached in browser due to filters
SVN
JIRA

Revision 108835

2012-04-27T18:14:55Z

Don't treat friend urls with .html as static content
Page with .html in the friendly url get's cached in browser due to filters
SVN
JIRA

Revision 106752

2012-04-05T22:47:54Z

Workaround for https://jira.nuxeo.com/browse/NXP-9174
Cannot get listing of folders from mounted Nuxeo 5.5 repository
SVN
JIRA

Revision 106464

2012-04-04T04:19:00Z

Make all properties of default password policy configurable in portal(-ext).properties
Make default password policy configurable from portal(-ext).properties
SVN
JIRA

Revision 106464

2012-04-04T04:19:00Z

Make all properties of default password policy configurable in portal(-ext).properties
Make default password policy configurable from portal(-ext).properties
SVN
JIRA

Revision 106228

2012-03-30T18:12:34Z

Allow configuring enabled social bookmarks per blog
Allow configuring enabled social bookmarks on per blog basis
SVN
JIRA

Revision 106228

2012-03-30T18:12:34Z

Allow configuring enabled social bookmarks per blog
Allow configuring enabled social bookmarks on per blog basis
SVN
JIRA

Revision 106215

2012-03-30T18:12:13Z

Use https for twitter and facebook to avoid unsecure content warnings when browsing site using https
Social bookmarks taglib uses unsecure urls for facebook and twitter js
SVN
JIRA

Revision 106215

2012-03-30T18:12:13Z

Use https for twitter and facebook to avoid unsecure content warnings when browsing site using https
Social bookmarks taglib uses unsecure urls for facebook and twitter js
SVN
JIRA

Revision 106147

2012-03-29T23:31:06Z

Make login navigation hookable Some login hooks require adding new login links like twitter, linkedIn and google.
Make login portlet navigation section hookable
SVN
JIRA

Revision 106147

2012-03-29T23:31:06Z

Make login navigation hookable Some login hooks require adding new login links like twitter, linkedIn and google.
Make login portlet navigation section hookable
SVN
JIRA

Revision 106073

2012-03-28T21:20:01Z

Make portal settings authentication sections configurable and hookable This will be needed by SAML plugin and other authentication plugins
Make portal settings authentication sections configurable and hookable
SVN
JIRA

Revision 106073

2012-03-28T21:20:01Z

Revision 104970

2012-03-16T04:17:22Z

Check for null
Unable to modify site pages when a logo is defined
SVN
JIRA

Revision 104970

2012-03-16T04:17:22Z

Check for null
Unable to modify site pages when a logo is defined
SVN
JIRA

Revision 100510

2012-02-13T20:42:49Z

Don't start workflow if document is checked out
Checking in a document causes console error
SVN
JIRA

Revision 100510

2012-02-13T20:42:49Z

Don't start workflow if document is checked out
Checking in a document causes console error
SVN
JIRA

Revision 100292

2012-02-10T01:28:44Z

Make filters dependent on InvokerFilter work even with servlet spec 2.3 and don't move filters in web.xml to liferay-web.xml when liferay-web-xml-enabled=false
If web.xml for plugin is not greater than v2.4, Servlet Filter regexes are not respected
SVN
JIRA

Revision 100159

2012-02-09T04:10:01Z

By pass terms etc when impersonating the user
Impersonation asks for new password in case password need to be changed for a user
SVN
JIRA

Revision 100153

2012-02-09T04:09:50Z

Webdav should find the group by it's friendly url and not by it's name
Cannot retrieve document library document of group A via webdav if group B has a name that is equal to the friendly url of group A minus the / prefix
SVN
JIRA

Revision 99989

2012-02-08T04:45:04Z

Format create date for consistency
Wrong date of incoherence between dates on document and media
SVN
JIRA

Revision 99741

2012-02-04T09:10:24Z

Make configurable from UI
top_head.jsp references CDN Host when loading css.jsp
SVN
JIRA

Revision 99740

2012-02-04T09:10:21Z

Apply CDN host or dynamic resources CDN host
top_head.jsp references CDN Host when loading css.jsp
SVN
JIRA

Revision 99739

2012-02-04T09:10:17Z

Apply the property
top_head.jsp references CDN Host when loading css.jsp
SVN
JIRA

Revision 99738

2012-02-04T09:10:13Z

Add new property to allow disabling cdn for dynamic resources like css and javascript
top_head.jsp references CDN Host when loading css.jsp
SVN
JIRA

Revision 99312

2012-02-01T06:10:48Z

Handle errors properly
Generating preview from corrupt pdf throws unhandled IOException
SVN
JIRA

Revision 98635

2012-01-24T22:51:43Z

On public layouts User inherits permissions from Guest where as on private layouts not
SVN
JIRA

Revision 98619

2012-01-24T21:55:13Z

Fix NullPointerException
Struts actions returning null cannot be overridden
SVN
JIRA

Revision 98607

2012-01-24T20:27:32Z

Implement CONTAINS() in search
Full document content search for external repositories
SVN
JIRA

Revision 98190

2012-01-18T07:17:24Z

Implement isreadonly property
Document Library's WebDAV items open read only
SVN
JIRA

Revision 98190

2012-01-18T07:17:24Z

Implement isreadonly property
Document Library's WebDAV items open read only
SVN
JIRA

Revision 98189

2012-01-18T07:17:22Z

Implement dummy checkout method to allow Office open document in read-write mode
Document Library's WebDAV items open read only
SVN
JIRA

Revision 98189

2012-01-18T07:17:22Z

Implement dummy checkout method to allow Office open document in read-write mode
Document Library's WebDAV items open read only
SVN
JIRA

Revision 98188

2012-01-18T07:17:21Z

Windows WebDAV client makes calls to frontpage extensions if it detects /_vti_inf.html on the server
WebDAV fails to connect
SVN
JIRA

Revision 98188

2012-01-18T07:17:21Z

Windows WebDAV client makes calls to frontpage extensions if it detects /_vti_inf.html on the server
WebDAV fails to connect
SVN
JIRA

Revision 98187

2012-01-18T07:17:19Z

Use correct timeout for infinite lock
Webdav lock method does not report infinite lock timeout correctly
SVN
JIRA

Revision 98187

2012-01-18T07:17:19Z

Use correct timeout for infinite lock
Webdav lock method does not report infinite lock timeout correctly
SVN
JIRA

Revision 98177

2012-01-18T01:35:40Z

MS Office probes /api and /sharepoint urls which causes null exception to be logged
SVN
JIRA

Revision 98177

2012-01-18T01:35:40Z

MS Office probes /api and /sharepoint urls which causes null exception to be logged
SVN
JIRA

Revision 97690

2012-01-11T01:17:07Z

Don't show webdav url to remote repositories
Documents and Media Library - webdav url is shown for mounted folders
SVN
JIRA

Revision 97688

2012-01-11T01:17:04Z

Fix other webdav url references
Documents and Media portlet generates wrong webdav URL - doesn't respect portal.ctx
SVN
JIRA

Revision 97687

2012-01-11T01:17:02Z

Fix document library webdav url
Documents and Media portlet generates wrong webdav URL - doesn't respect portal.ctx
SVN
JIRA

Revision 97669

2012-01-11T01:16:23Z

Url and description are required
Maven: Url and description are missing from portal-parent.xml
SVN
JIRA

Revision 97602

2012-01-10T00:40:57Z

Fix stream handling so that the whole document gets uploaded
Saving a word document directly from Word 2007 fails
SVN
JIRA

Revision 97559

2012-01-06T22:31:50Z

Maven: portal-client.jar location incorrect
SVN
JIRA

Revision 97513

2012-01-06T19:47:58Z

Add missing context path
Documents and Media portlet generates wrong webdav URL - doesn't respect portal.ctx
SVN
JIRA

Revision 96755

2011-12-28T09:43:45Z

Source format
Media Gallery portlet showing non-media files for Recent view and for CMIS repository
SVN
JIRA

Revision 96489

2011-12-22T19:41:44Z

Remote repositories don't support related assets
Related Asset not working for documents in repository
SVN
JIRA

Revision 96374

2011-12-21T23:31:03Z

Handle blank extension
When downloading a document with a title that has no file extension from the repository, the wrong file extension is displayed when downloaded.
SVN
JIRA

Revision 96373

2011-12-21T23:31:01Z

Better not try to guess the extension
When downloading a document with a title that has no file extension from the repository, the wrong file extension is displayed when downloaded.
SVN
JIRA

Revision 96298

2011-12-21T01:02:56Z

Don't list mounted folders
Sharepoint Protocol lists mounted repositories as empty folders
SVN
JIRA

Revision 96224

2011-12-20T21:31:05Z

Handle CmisPermissionDeniedException properly
CMISRepositoryUtil does not handle CmisPermissionDeniedException
SVN
JIRA

Revision 96171

2011-12-20T21:29:26Z

Show lock message even if it's not checked out
Documents and Media Library - webdav publishing - version
SVN
JIRA

Revision 96170

2011-12-20T21:29:24Z

Fix test
Documents and Media Library - webdav publishing - version
SVN
JIRA

Revision 96169

2011-12-20T21:29:23Z

Make webdav use locking instead of checkout
Documents and Media Library - webdav publishing - version
SVN
JIRA

Revision 96168

2011-12-20T21:29:21Z

Generated
Documents and Media Library - webdav publishing - version
SVN
JIRA

Revision 96167

2011-12-20T21:29:19Z

Re add locking to api
Documents and Media Library - webdav publishing - version
SVN
JIRA

Revision 95702

2011-12-15T00:08:22Z

Add sessionid to url if cookieless session
Can't download or see previews of protected documents when cookies are disabled
SVN
JIRA

Revision 95620

2011-12-14T07:39:00Z

Add no-cache Set-cookie to prevent modern proxies from caching the cookie.
Liferay Portal Security Vulnerability: HTTP Response Headers include Expires (caching) AND Set-Cookie (non-authenticated user can get access to authenticated session FROM CACHE)
SVN
JIRA

Revision 95619

2011-12-14T07:38:58Z

Don't add Expires header if new session has been created
Liferay Portal Security Vulnerability: HTTP Response Headers include Expires (caching) AND Set-Cookie (non-authenticated user can get access to authenticated session FROM CACHE)
SVN
JIRA

Revision 95592

2011-12-14T01:33:37Z

Allow plugins to use CMISearchQueryBuilder
Expose CMIS search query builder to plugins
SVN
JIRA

Revision 95591

2011-12-14T01:33:35Z

Expires must use GMT not UTC
HeaderFilter generates a malformed Expires header
SVN
JIRA

Revision 95550

2011-12-13T23:17:30Z

Fix total count
CMIS search total count not incremented correctly if start > 0
SVN
JIRA

Revision 95396

2011-12-13T01:30:23Z

Try to discover mime type
PDFProcessor throws NullPointerException
SVN
JIRA

Revision 95395

2011-12-13T01:30:22Z

Add missing mime type check
PDFProcessor throws NullPointerException
SVN
JIRA

Revision 95393

2011-12-13T01:30:19Z

generated
AssetEntry missing from CMIS FileVersion
SVN
JIRA

Revision 95392

2011-12-13T01:30:17Z

Impl
AssetEntry missing from CMIS FileVersion
SVN
JIRA

Revision 95390

2011-12-13T01:30:13Z

Try to figure out extension from mime type
CMIS showing generic icon if document title is missing extension
SVN
JIRA

Revision 95389

2011-12-13T01:30:12Z

Fix INCLUDE filter url matching in plugins
InvokerFilter is not invoking INCLUDE dispatches
SVN
JIRA

Revision 95388

2011-12-13T01:30:11Z

Don't include jsessionid in external urls
When cookies are disabled jsessionid is appended to external urls
SVN
JIRA

Revision 95272

2011-12-09T22:15:25Z

Add unit tests for checkin/checkout
Add unit test to verify checkin and checkout works.
SVN
JIRA

Revision 95272

2011-12-09T22:15:25Z

Add unit tests for checkin/checkout
Add unit test to verify checkin and checkout works.
SVN
JIRA

Revision 95162

2011-12-09T02:09:48Z

Skip until start
CMIS searchs returns all the results without considering the folder
SVN
JIRA

Revision 95162

2011-12-09T02:09:48Z

Skip until start
CMIS searchs returns all the results without considering the folder
SVN
JIRA

Revision 95143

2011-12-09T00:12:54Z

Fix context query
CMIS searchs returns all the results without considering the folder
SVN
JIRA

Revision 95143

2011-12-09T00:12:54Z

Fix context query
CMIS searchs returns all the results without considering the folder
SVN
JIRA

Revision 95134

2011-12-08T23:55:45Z

Source format
Not wrapping CmisObjectNotFoundException with meaningful exception
SVN
JIRA

Revision 95134

2011-12-08T23:55:45Z

Source format
Not wrapping CmisObjectNotFoundException with meaningful exception
SVN
JIRA

Revision 95133

2011-12-08T23:55:44Z

Display correct error if document is removed
Not wrapping CmisObjectNotFoundException with meaningful exception
SVN
JIRA

Revision 95133

2011-12-08T23:55:44Z

Display correct error if document is removed
Not wrapping CmisObjectNotFoundException with meaningful exception
SVN
JIRA

Revision 95132

2011-12-08T23:55:43Z

Wrap CmisObjectNotFoundException with expected NoSuchXXXException
Not wrapping CmisObjectNotFoundException with meaningful exception
SVN
JIRA

Revision 95132

2011-12-08T23:55:43Z

Wrap CmisObjectNotFoundException with expected NoSuchXXXException
Not wrapping CmisObjectNotFoundException with meaningful exception
SVN
JIRA

Revision 95118

2011-12-08T22:21:19Z

Don't use directly underlaying LiferayRepository services
Can't add documents to remote repositories
SVN
JIRA

Revision 95118

2011-12-08T22:21:19Z

Don't use directly underlaying LiferayRepository services
Can't add documents to remote repositories
SVN
JIRA