Release/2.8.1 #3234
Open
Release/2.8.1 #3234
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- Updated use of @XssProtect annotation; - Corrected definition tests in build.gradle for XssValidatorUtilsTestsSuite;
- Corrected UserProfilesAPI.java
- Corrected EventDetectorDTO.java;
- Added support for List and Map for XssProtect annotations; - Corrected protect in: FolderPointHierarchy, CompoundComponentDTO;
- Added support array for XssProtect annotation; - Corrected protect for JsonEventSearch;
- Fixed select 'Add user' in MailingList; - Added: UserIdentifier, AddressEntryJson, EmailRecipientJson, MailingListJson, UserEntryJson; - Reduced data users in: ViewDwr, WatchListDwr, UsersDwr, ReportsDwr, MailingListsDwr, EventHandlersDwr, DataPointDetailsController;
…de_user_information_in_DWR
- Corrected MailingListsDwr.getMailingList(int id); - ReportsDwr.init;
…4_Updated_REST_API_with_incoming_data_for_XSS_protection
…de_user_information_in_DWR
…on_in_DWR Fix/#3178 hide user information in dwr
…_incoming_data_for_XSS_protection
…I_with_incoming_data_for_XSS_protection Feature/#3174 updated rest api with incoming data for xss protection
- Added block packages: java.lang.Process.* java.lang.invoke..* java.io..* java.nio..* - Added access packages: org.scada_lts..* com.serotonin..* cc.radiuino.scadabr..* br.org.scadabr..* java.util..* java.lang..* org.springframework.jdbc.core..* - Added tests to ScriptExecutorTest;
- Added block packages: java.lang.Process.* java.lang.invoke..* java.io..* java.nio..* - Added access packages: java.util..* - Added tests to ScriptExecutorTest;
- Added block packages: java.lang.Process.* java.lang.invoke..* java.io..* java.nio..* - Added access packages: java.util..* - Added tests to ScriptExecutorTest;
- Refactor ScriptsAPI - using specially created exceptions for the REST API;
- Deprecated ScriptController and endpoint /script/execute/{xid} (use: /api/scripts/execute/{xid})
- Added or corrected name tests ScriptExecutorTestsSuite: JavaClassDeniedScriptExecutorTest,
JavaClassGrantedScriptExecutorTest,
JsScriptExecutorTest;
- Added migration: V2_8_1__SynopticPanelChangeDataTypeForColumnVectorImage
…t time: - Corrected time for return to normal for DifferenceDetectorRT(NoChangeDetectorRT, NoUpdateDetectorRT);
- Corrected generate keystore added applicationUri, corrected other attributes; - Set 20 for search depth limit;
- Fixed leak threads;
- Revert scadalts.security.js.access.granted.class.regexes
…tween_Return_to_Normal_status_and_Reise_event_time #3220 Fixed time shift between Return to Normal status and Reise even…
- change client alias;
- Refactored OpcUaClientFactory and KeyStoreLoader; - Created classes: CertificateDataImpl, ClientCertificate; - Created interfaces: CertificateData, KeyStoreData;
- Created static factory method CertificateData.scadaLts
- Fixed DataPointRT.isUnreliable; - Corrected message for exception from constructor ClientCertificate;
- svg.validator.messages.ignore - Added ignore message with path-effect;
…_problem #3218 Synoptic panel file problem:
- Removed import org.scada_lts.utils.PathSecureUtils in SvgProcessingUtils;
- Moved NettyTerminateUtils to impl package; - Added PollingDataSourceUtils.terminateNetty;
This reverts commit 1c5f9c7.
This reverts commit d8d774f.
- Moved NettyTerminateUtils to impl package; - Added PollingDataSourceUtils.terminateNetty; - Update docker-compose.yml, docker-compose-dev.yml;
- Created annotation java bean validation @scriptprotect: ScriptConstraintListValidator,ScriptValidator, ScriptValidatorUtils; - Set @scriptprotect annotation: MetaPointLocatorJson, JsonScript,MetaPointLocatorVO, ScriptComponent, ScriptVO, PointLinkVO, ViewScriptComponentDTO; - Set @XssProtect annotation: DataPointVO, UserComment, ImplDefinition, PointComponent, ScriptVO, ContextualizedScriptVO, ButtonComponent, ScriptButtonComponent, BinaryEventTextRenderer, MultistateEventValue, RangeEventValue, AlphanumericValue, PointEventDetectorVO, PointLinkVO; - Added validation before execute script: ScriptExecutor, ContextualizedScriptRT; - Added script validation before save: MetaPointLocatorVO, PointLinkVO, ScriptVO; - Added classes: SandboxClassShutter, ScriptContextUtils; - Added exception: ScriptLocalizableException; - Refactor ScriptsAPI.java; - Removed deprecated classes: PointView.java, AnalogImageSetRenderer.java BaseGraphicRenderer.java BasicImageRenderer.java BasicRenderer.java BinaryImageSetRenderer.java DynamicImageRenderer.java GraphicRenderer.java ImageSetRenderer.java MultistateImageSetRenderer.java ScriptRenderer.java ThumbnailRenderer.java;
- Fixed endpoint to test script, added: ScriptsAPI.executeScriptTest - Corrected exception handler for Java Bean Validation error;
- Fixed endpoint /api/scripts/execute-test returned String message.
- Support deprecated endpoint /script; - Added check isSecurityJsValidatorEnabled before validation;
- Added property scadalts.security.js.filter.enabled in env.properties;
…are_OPC_Server #3213 How Connect to Kepware OPC Server:
…ting Fix/#3214 safe mode for scripting
- Corrected HeadersFromSystemSettingsWriter, if a given parameter exists, it is updated;
This reverts commit 6a4d676.
…_in_AuthenticationAPI #3225 Wrong endpoint type in AuthenticationAPI
…ite_attribute_for_session_cookie #3228 Configure SameSite attribute for session cookie
|
Important Review skippedToo many files! 40 files out of 190 files are above the max files limit of 150. You can disable this status message by setting the Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Collaborator
Author
|
@coderabbitai review |
✅ Actions performedReview triggered.
|
- Corrected V2_8_1__SynopticPanelChangeDataTypeForColumnVectorImage;
Collaborator
Author
|
@coderabbitai review |
✅ Actions performedReview triggered.
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.