ldestailleur
6c0873708a
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-09-05 15:34:13 +02:00
ldestailleur
c2ed4519b1
Merge branch '19.0' of git@github.com:Dolibarr/dolibarr.git into 20.0
2025-09-05 11:38:30 +02:00
ldestailleur
781adf507b
Merge branch '18.0' of git@github.com:Dolibarr/dolibarr.git into 19.0
2025-09-04 20:47:13 +02:00
ThomasNgr-OpenDSI
01aa901f93
18.0 fix CVE 2024 40137 ( #34762 )
...
* Sec: Remove all functions that accept callable params - CVE-2024-40137
* FIX #34746 - More complete fix for CVE-2024-40137
---------
Co-authored-by: ldestailleur <eldy@destailleur.fr >
2025-09-04 14:59:44 +02:00
ldestailleur
96a74c4976
Disable this test where result is not predicable
2025-09-04 14:13:13 +02:00
ldestailleur
bb0974add9
FIX Security when using feature Advanced Target of emailing (hidden in
...
v21, default in v22+). Possible SQL injection by users with permissions
to make mass emailing. Reported by Simon Perdrisat.
2025-09-01 16:38:01 +02:00
Benjamin Chanudet
d81f8e539d
FIX #34857 Structured communication number checksum is now always correct ( #35081 )
...
* FIX #34857 Structured communication number now works correctly
* make sure we follow Dolibarr code chart
* fix last CI warning
2025-08-26 05:16:32 +02:00
ldestailleur
f722602402
Fix comparison on version to show the warning to upgrade database
2025-08-20 16:02:46 +02:00
Laurent Destailleur
19af522109
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-07-31 23:54:30 +02:00
Laurent Destailleur
ad7807d045
Merge remote-tracking branch 'origin/19.0' into 20.0
2025-07-31 23:40:06 +02:00
Laurent Destailleur
8dc50b4c5a
Merge remote-tracking branch 'origin/18.0' into 19.0
2025-07-31 23:16:27 +02:00
Laurent Destailleur
b226894e36
Merge remote-tracking branch 'origin/17.0' into 18.0
2025-07-31 23:14:31 +02:00
Laurent Destailleur
3b0a4c9fa9
Merge branch '16.0' of git@github.com:Dolibarr/dolibarr.git into 17.0
2025-07-31 23:11:32 +02:00
VIAL-GOUTEYRON Quentin
154a25f8cb
Enhance working days calculation to incorporate half-day adjustments and optimize public holiday checks ( #34552 )
...
* "Enhance working days calculation to incorporate half-day adjustments and optimize public holiday checks"
* "Add test cases for num_open_day() to validate half-day and weekend boundary scenarios"
* "Update DateLibTest to include Saturday and Sunday as non-working days in test setup"
2025-07-31 22:59:29 +02:00
ldestailleur
b03f30c7e2
Sec: Remove functions accepting callable params - Reported by phdwg1410
2025-07-27 13:54:02 +02:00
Laurent Destailleur
30b8237a52
Fix phpunit
2025-05-22 17:01:13 +02:00
ldestailleur
d76848351c
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-05-10 13:30:36 +02:00
ldestailleur
ae94c71a10
Merge branch '19.0' of git@github.com:Dolibarr/dolibarr.git into 20.0
2025-05-10 13:25:31 +02:00
ldestailleur
445f089556
Merge branch '18.0' of git@github.com:Dolibarr/dolibarr.git into 19.0
2025-05-10 12:53:37 +02:00
Laurent Destailleur (aka Eldy)
b85bfc40f4
Fix phpunit
2025-05-06 11:59:08 +02:00
ldestailleur
996770b8f2
Fix protect use of sanitize to make sql injection
2025-03-06 03:39:47 +01:00
ldestailleur
1391c61a64
Remove test, not yet supported in v20
2025-03-05 19:11:34 +01:00
ldestailleur
86f836b652
Merge backport
2025-03-04 21:27:10 +01:00
Laurent Destailleur (aka Eldy)
bd9bf8b5a8
FIX #CVE-2024-34051
2025-02-17 12:24:03 +01:00
Laurent Destailleur (aka Eldy)
705164cc9f
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-02-13 20:39:19 +01:00
Laurent Destailleur (aka Eldy)
256e0e0470
Merge branch '19.0' of git@github.com:Dolibarr/dolibarr.git into 20.0
2025-02-13 20:37:12 +01:00
Laurent Destailleur (aka Eldy)
054010f8ec
Fix test
2025-02-13 20:34:55 +01:00
Laurent Destailleur (aka Eldy)
36fd5b7b26
FIX #CVE-2024-34051
2025-02-13 20:29:25 +01:00
Laurent Destailleur (aka Eldy)
61e50f4430
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-02-05 18:30:13 +01:00
Laurent Destailleur (aka Eldy)
cffd5d422e
Merge branch '19.0' of git@github.com:Dolibarr/dolibarr.git into 20.0
2025-02-05 18:18:55 +01:00
Laurent Destailleur (aka Eldy)
39293b79ff
Merge branch '18.0' of git@github.com:Dolibarr/dolibarr.git into 19.0
2025-02-05 18:16:40 +01:00
Laurent Destailleur (aka Eldy)
9fc78cd1b6
Fix regression
2025-02-05 18:16:09 +01:00
MDW
70f9dde739
Qual: Improve lang test + message in case of test exception
...
# Qual: Improve lang test + message in case of test exception
This fixes the language test enabling the error message itself.
I also improved the Exception handling so that a backtrace is shown to help
find where it happened (here the error message was empty which was strange
and made it harder to find - the (empty(val)?a:b) was lacking parentheses
for proper concatenation
2025-01-30 18:11:41 +01:00
Laurent Destailleur (aka Eldy)
163bce66d4
Fix protection against unknown specifier
2025-01-28 13:55:25 +01:00
Laurent Destailleur (aka Eldy)
4c6498b2f8
More phpunit test
2025-01-27 11:41:59 +01:00
Laurent Destailleur (aka Eldy)
c2d2de53f9
Accept img src=data into dolPrintHTML
2025-01-27 10:51:36 +01:00
Laurent Destailleur (aka Eldy)
fa9fe2efa7
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-01-20 15:02:37 +01:00
Laurent Destailleur (aka Eldy)
c9ab22782e
Merge branch '19.0' of git@github.com:Dolibarr/dolibarr.git into 20.0
2025-01-20 14:57:45 +01:00
Laurent Destailleur (aka Eldy)
1f360ca498
Merge branch '18.0' of git@github.com:Dolibarr/dolibarr.git into 19.0
2025-01-20 12:28:49 +01:00
Laurent Destailleur
0d350d09ce
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-01-20 00:49:21 +01:00
MDW
490750e810
Qual: Remove var_dump and exit from SocieteTest
2025-01-17 23:19:09 +01:00
Laurent Destailleur (aka Eldy)
cf62921762
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into 21.0
2025-01-15 13:01:03 +01:00
Laurent Destailleur (aka Eldy)
ac049e1f23
Fix test
2025-01-15 12:13:23 +01:00
Laurent Destailleur (aka Eldy)
a5fe192125
FIX country id is not saved when we provide country_code only
2025-01-13 13:31:38 +01:00
Laurent Destailleur (aka Eldy)
e5249391f0
Debug v21 - Fix trans
2025-01-12 22:33:20 +01:00
Laurent Destailleur (aka Eldy)
802562a575
Fix regression after a fix
2025-01-09 19:35:01 +01:00
Laurent Destailleur (aka Eldy)
b024b95948
Fix typo
2025-01-09 19:35:01 +01:00
Laurent Destailleur (aka Eldy)
0ffd31c1a1
Restore lines commented for test
2025-01-09 19:35:01 +01:00
Laurent Destailleur (aka Eldy)
56710ce9b7
FIX CVE-2024-55227 and CVE-2024-55228 CSRF when
...
MAIN_RESTRICTHTML_ONLY_VALID_HTML_TIDY is
on (hidden option not on by default)
2025-01-09 19:35:01 +01:00
tnegre
7e82f70c77
add case when HTML tags contain attributes
2025-01-09 11:05:45 +01:00
