Commit graph

36619 commits

Author SHA1 Message Date
Suraj Shetty
16ef2d3b13
ci(Mergify): Configuration update (#15968) 2022-02-14 17:48:20 +05:30
Wolfram Schmidt
954b932c10
added menu translations (#15879)
added menu translations when navigating over avater
2022-02-14 10:48:17 +00:00
mergify[bot]
04bf47f117
Merge pull request #14593 from gavindsouza/dynamic-docfields
feat: Virtual DocFields
2022-02-14 05:31:35 +00:00
mergify[bot]
786acdcbba
Merge pull request #15833 from shadrak98/refactor-xss-method
fix: Added regex for alerts
2022-02-14 05:08:26 +00:00
Suraj Shetty
733718abf3
Merge pull request #15918 from resilient-tech/report_fix 2022-02-11 13:30:06 +05:30
mergify[bot]
9f2b015d87
Merge pull request #15832 from resilient-tech/fix-validate-links-table-fieldnames
fix: `AttributeError` in `validate_links_table_fieldnames`
2022-02-11 06:03:27 +00:00
Pruthvi Patel
c4060d4230 fix: enumerate from 1 2022-02-11 11:24:11 +05:30
mergify[bot]
919a78e39d
Merge pull request #15892 from hrwX/try_except_for_comm
fix: add try except for splitting email
2022-02-11 05:44:28 +00:00
Suraj Shetty
246d4674b1
Merge pull request #15938 from frappe/dependabot/npm_and_yarn/node-sass-7.0.0 2022-02-11 09:37:38 +05:30
dependabot[bot]
26d802737f
build(deps): bump node-sass from 4.14.1 to 7.0.0
Bumps [node-sass](https://github.com/sass/node-sass) from 4.14.1 to 7.0.0.
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sass/node-sass/compare/v4.14.1...v7.0.0)

---
updated-dependencies:
- dependency-name: node-sass
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-10 16:37:00 +00:00
hrwx
6fc87fb0e7 Merge branch 'develop' of github.com:frappe/frappe into try_except_for_comm 2022-02-10 12:06:16 +00:00
hrwx
e4ba46ae0d fix: add test cases for email parsing 2022-02-10 12:06:00 +00:00
Suraj Shetty
29f98f52db
Merge pull request #15756 from shariquerik/hide-notification-on-click 2022-02-10 17:24:59 +05:30
Suraj Shetty
4fa20f862a
Merge pull request #15757 from nextchamp-saqib/fix-form-tour 2022-02-10 11:25:36 +05:30
mergify[bot]
f94168034e
Merge pull request #15800 from shadrak98/html-css-injection
fix: filter html tags in blog comments
2022-02-09 11:12:04 +00:00
mergify[bot]
80243d5e85
Merge pull request #15897 from Alchez/dev-chart-options
fix: append chart options before render
2022-02-09 10:44:04 +00:00
Sagar Vora
976c3bedc3 fix: use correct indicator 2022-02-09 15:45:30 +05:30
mergify[bot]
67409a6880
Merge pull request #15745 from shariquerik/workspace-ui-fixes
fix: Minor workspace fixes
2022-02-09 10:13:34 +00:00
mergify[bot]
a2c6ff2fd0
Merge pull request #15769 from alyf-de/msgprint-title-backend
fix: translate default msgprint title in backend
2022-02-09 09:57:33 +00:00
Raffael Meyer
4750ff69e6
Merge branch 'develop' into msgprint-title-backend 2022-02-09 10:34:05 +01:00
Sagar Vora
e21275f060 style: add missing semicolon 2022-02-09 14:05:40 +05:30
Sagar Vora
a18703a0b1 fix: access to this and better UX 2022-02-09 13:52:37 +05:30
gavin
3277c16554
Merge pull request #15919 from gavindsouza/bump-requirements-sec
chore: Bump pip requirements
2022-02-09 13:44:31 +05:30
Sagar Vora
c3009392d8
Merge pull request #15887 from resilient-tech/werkzeug
chore(deps): bump werkzeug to latest version
2022-02-09 13:27:07 +05:30
Sagar Vora
f777700372 test: create new user 2022-02-09 13:14:11 +05:30
Sagar Vora
d8fc39659a fix: docstring 2022-02-09 12:37:41 +05:30
Sagar Vora
a49a07e419 fix: sider issues 2022-02-09 12:35:44 +05:30
Saqib Ansari
05bb38ea46 chore: fetch name only if first_document is checked 2022-02-09 12:32:26 +05:30
Gavin D'souza
adc69cb3ec build: Upgrade Pillow dependency
This upgrade handles multiple high severity vulnerabilities. I've not
checked the affected code in great depth but the APIs we use may be
affected. If they could actually be exploited is another matter which
would take a whole lotta effort which I'd rather not test xD

Fixes: CWE-74, CWE-125, CWE-120, CWE-125, CWE-400
CVE IDs: CVE-2022-22817, CVE-2022-22816, CVE-2021-34552, CVE-2021-23437
2022-02-09 12:28:04 +05:30
Sagar Vora
f0a10efa62 fix: improved validations 2022-02-09 12:22:54 +05:30
Gavin D'souza
5798cfaf4c build: Update iPython dependency
Updating dependency due to arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another.

ref: https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699
Weaknesses: CWE-250, CWE-269, CWE-279
CVE ID: CVE-2022-21699
2022-02-09 12:19:26 +05:30
Shariq Ansari
088132000d
Merge branch 'develop' into workspace-ui-fixes 2022-02-09 12:16:22 +05:30
Shariq Ansari
9b9956e1ce fix: blur event was overlapping block list item click event 2022-02-09 12:15:48 +05:30
mergify[bot]
ec5dd79957
Merge pull request #15746 from ruchamahabal/fix-naming-validation
fix: validate doc naming when set via prompt or by passing `set_name`
2022-02-09 06:05:16 +00:00
Daizy
ddd45a71bc feat: Allow users to customize their own reports 2022-02-09 11:07:04 +05:30
Rucha Mahabal
240665940f fix: remove redundant test record deletions and resetting 2022-02-09 11:01:05 +05:30
Rucha Mahabal
78e606bd0f
Merge branch 'develop' into fix-naming-validation 2022-02-09 10:52:24 +05:30
Shariq Ansari
0cb3e5691f
Merge branch 'develop' into workspace-ui-fixes 2022-02-08 20:17:13 +05:30
Sagar Vora
e5857fa56a fix: improve setup wizard exception email 2022-02-08 20:02:49 +05:30
Sagar Vora
951ad3f844 chore(deps): bump werkzeug to latest version 2022-02-08 20:02:49 +05:30
Shariq Ansari
f904e8a972
Merge branch 'develop' into hide-notification-on-click 2022-02-08 19:36:57 +05:30
Shariq Ansari
c12c8eb314 style: made links card block pixel perfect 2022-02-08 19:28:08 +05:30
Shariq Ansari
2b12fa880c fix: UI fix for card block 2022-02-08 17:02:48 +05:30
Gavin D'souza
0482f1362a Merge branch 'develop' of github.com:frappe/frappe into dynamic-docfields 2022-02-08 16:50:58 +05:30
gavin
71ceb496d1
Merge pull request #15907 from ankush/qb_non_select
fix: executing non-select qb code from whitelisted methods
2022-02-08 16:19:02 +05:30
Suraj Shetty
72408c46c9
Merge pull request #15820 from kamaljohnson/fix-imap-folder-append-to-not-working-issue 2022-02-08 13:34:21 +05:30
Ankush Menat
b64c03d83d test: restricted QB 2022-02-08 13:22:31 +05:30
Ankush Menat
496e5b513b fix: executing non-select qb code from whitelisted methods
Co-Authored-By: Gavin D'souza <gavin18d@gmail.com>
2022-02-08 13:06:24 +05:30
kamaljohnson
cb25d894b4 refactor: code cleanup 2022-02-08 12:54:51 +05:30
Suraj Shetty
b978b5a70b test: Fix mocked method and formatting issues 2022-02-08 12:01:11 +05:30