Commit graph

79 commits

Author SHA1 Message Date
Revant Nandgaonkar
1d0e72834d fix: remove unused imports 2021-04-19 15:54:16 +05:30
Revant Nandgaonkar
8c74df6cc3 fix: duplicate validate_auth calls 2021-04-19 15:18:15 +05:30
Suraj Shetty
0a399f56c8
Merge pull request #12743 from surajshetty3416/fix-whitelisted-method-failure 2021-04-02 12:45:33 +05:30
Suraj Shetty
8cfdb3406c
fix: Throw validation error instead 2021-03-31 22:30:29 +05:30
Suraj Shetty
f0075f5b1f fix: Invalid method should not throw 404 error 2021-03-31 17:07:07 +05:30
Sagar Vora
1a9a13e4c2 fix: better code quality for run_doc_method 2021-03-30 13:47:39 +05:30
Sagar Vora
81b65545b7 fix: improved docstring for run_doc_method 2021-03-30 13:37:14 +05:30
Sagar Vora
f1ed50a64d fix: add valid_http_method validation for methods 2021-03-30 13:28:55 +05:30
Sagar Vora
40fa9e277a fix: remove deleted module from imports 2021-03-30 13:16:38 +05:30
Sagar Vora
08d88425d2 fix: sider issues 2021-03-30 13:14:16 +05:30
Sagar Vora
497ea861f4 feat: frappe.whitelist for class methods 2021-03-30 13:07:58 +05:30
Saurabh
a0086db9b6
fix(frappe client): validate http method for frappe.client api (#11228) 2020-09-14 12:30:30 +05:30
Shivam Mishra
1426b2d4b9
refactor: translate error message 2020-04-30 15:56:34 +05:30
Chinmay D. Pai
d7e9ef60b8
fix: add support for more document mimetypes
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2020-04-16 14:31:25 +05:30
Chinmay D. Pai
23b3f65b3b
fix: limit file upload mimetype if user has no desk access
limits file upload mimetype to jpg, png, and pdf in case the user does
not have desk access, to prevent abuse of the servers as a file storage
system

Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2020-04-16 14:09:59 +05:30
prafful1234
e19b712e23
fix(api): Fix api for user oauth validations (#9676)
* fix(api): Fix api for user oauth validations

* fix: add auth exceptions + format functions

* fix: Moved exceptions and a validation check

* Fix: Reqested changes

Co-authored-by: prafful1234 <prafful@mntechnique.com>
Co-authored-by: Rohan Bansal <rohan@digithinkit.com>
Co-authored-by: Suraj Shetty <13928957+surajshetty3416@users.noreply.github.com>
2020-04-11 10:27:00 +05:30
Rucha Mahabal
fa6a29ff37 fix: conflicts 2019-11-13 11:23:30 +05:30
Rushabh Mehta
6d6f575904 feat(server scripts): add server scripts! 2019-10-11 14:16:49 +05:30
Rucha Mahabal
4cfe9eed79 fix: authentication in handler.py 2019-10-11 02:16:31 +05:30
Shivam Mishra
82cb2d0cbb refactor: improved permission logic 2019-09-02 17:33:42 +05:30
Shivam Mishra
652483c225 Merge branch 'upload-guest-fix' of github.com:scmmishra/frappe into upload-guest-fix 2019-09-02 16:33:03 +05:30
Shivam Mishra
72228946e5 refactor: explicitly set ignore_permissions for file upload 2019-09-02 16:32:38 +05:30
Shivam Mishra
bc3e4f6a1d
Update handler.py 2019-08-28 09:28:31 +05:30
Shivam Mishra
c9cad5aa7f refactor: check mimetype for uplaod 2019-08-27 18:10:47 +05:30
Shivam Mishra
630e67c25e feat: config option for allowing guests to upload 2019-08-16 08:36:08 +05:30
Shivam Mishra
09e6ae03d9 refactor: allow guests to upload files 2019-08-12 18:00:11 +05:30
Faris Ansari
b4ae975313 feat: Introduce new upload dialog 2019-04-11 01:41:07 +05:30
Chinmay Pai
75c7992557
file-api: add new test, fix minor bugs and code indentation
Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-09-21 13:40:25 +05:30
Chinmay Pai
5bd66f134d
file-api: add improvements to save() api
file can now be saved by calling save() on the file object instance

Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-09-13 09:46:48 +05:30
Chinmay Pai
22ba310aaf
[2/3] file-api: code migration
migrate api from file_manager.py to file.py

Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-09-03 18:04:45 +05:30
Chinmay Pai
ff03d8d0fe
file-api: major refactor
migrate from file_manager.py to file.py

Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-08-30 18:02:59 +05:30
Aditya Hase
f3b959b1fe frappe: refactor async to realtime (#6015)
* frappe: refactor async to realtime

* frappe: refactor async to is_async
2018-08-28 15:31:20 +05:30
Faris Ansari
3be33b8854 fix(handler): check if data is None explicitly (#5982)
If the returned data is empty list or string it was a failed response.
But these are all valid responses, so now we check explicitly for None.
2018-08-20 10:39:24 +05:30
Prateeksha Singh
ef6f160961 [handler] Raise exceptions in request in dev_mode (#5949) 2018-08-08 22:52:39 +05:30
Shridhar Patil
c4fac7a09c syntax error in whitelisted function throws 404 (#5743) 2018-06-29 15:55:19 +05:30
Achilles Rasquinha
806e0f18be
Update handler.py 2018-03-28 16:26:15 +05:30
Achilles Rasquinha
1d82f56660 [ENH #5021] Allow guest during server ping 2018-02-16 12:32:19 +05:30
Achilles Rasquinha
14924620dc replaced raw_input to input 2018-02-15 15:38:06 +05:30
Rushabh Mehta
efe88591c2 Merge branch 'master' into staging 2017-08-24 16:51:28 +05:30
Rushabh Mehta
16129ce785 [fix] catch error in data import 2017-08-24 16:05:47 +05:30
Aditya Hase
769338f136 Replaced all instances of basestring with six.string_types 2017-08-11 00:10:11 +05:30
Makarand Bauskar
24c13a9996 [hotfix] local veriable data reference before assignment fixes (#3185) 2017-04-28 10:26:34 +05:30
Rushabh Mehta
65730d7bcf [minor] allow method object to return its own response object 2017-04-27 16:14:28 +05:30
Rushabh Mehta
042e2b09cb [design] Redesign, cleanup Login, Message pages (#2564)
* [cleanup] login, message pages

* [style] cleanups

* [cleanup]

* [cleanup] update password

* [fix] name for web form (fixes edit-profile)
2017-01-10 14:44:42 +05:30
Rushabh Mehta
68e14d40c2 [security] fixed 2016-12-21 11:17:24 +05:30
Rushabh Mehta
22c3f7966d [enhance] run actions in background doc.queue_action("submit") 2016-07-19 17:12:37 +05:30
Valmik Jangla
a2ad631754 Removed / Replaced Celery related code 2016-04-11 17:39:06 +05:30
Anand Doshi
353e8a9d1f [fix] Sanitize form_dict and doc values to prevent XSS 2016-02-23 12:11:28 +05:30
Rushabh Mehta
9e2ba37823 [minor] add hook for website user home page by function 2016-01-25 15:10:44 +05:30
Anand Doshi
506d268143 [fix] whitelisted upload methods 2015-11-18 13:06:14 +05:30