Suraj Shetty
16ef2d3b13
ci(Mergify): Configuration update ( #15968 )
2022-02-14 17:48:20 +05:30
Wolfram Schmidt
954b932c10
added menu translations ( #15879 )
...
added menu translations when navigating over avater
2022-02-14 10:48:17 +00:00
mergify[bot]
04bf47f117
Merge pull request #14593 from gavindsouza/dynamic-docfields
...
feat: Virtual DocFields
2022-02-14 05:31:35 +00:00
mergify[bot]
786acdcbba
Merge pull request #15833 from shadrak98/refactor-xss-method
...
fix: Added regex for alerts
2022-02-14 05:08:26 +00:00
Suraj Shetty
733718abf3
Merge pull request #15918 from resilient-tech/report_fix
2022-02-11 13:30:06 +05:30
mergify[bot]
9f2b015d87
Merge pull request #15832 from resilient-tech/fix-validate-links-table-fieldnames
...
fix: `AttributeError` in `validate_links_table_fieldnames`
2022-02-11 06:03:27 +00:00
Pruthvi Patel
c4060d4230
fix: enumerate from 1
2022-02-11 11:24:11 +05:30
mergify[bot]
919a78e39d
Merge pull request #15892 from hrwX/try_except_for_comm
...
fix: add try except for splitting email
2022-02-11 05:44:28 +00:00
Suraj Shetty
246d4674b1
Merge pull request #15938 from frappe/dependabot/npm_and_yarn/node-sass-7.0.0
2022-02-11 09:37:38 +05:30
dependabot[bot]
26d802737f
build(deps): bump node-sass from 4.14.1 to 7.0.0
...
Bumps [node-sass](https://github.com/sass/node-sass ) from 4.14.1 to 7.0.0.
- [Release notes](https://github.com/sass/node-sass/releases )
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sass/node-sass/compare/v4.14.1...v7.0.0 )
---
updated-dependencies:
- dependency-name: node-sass
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-02-10 16:37:00 +00:00
hrwx
6fc87fb0e7
Merge branch 'develop' of github.com:frappe/frappe into try_except_for_comm
2022-02-10 12:06:16 +00:00
hrwx
e4ba46ae0d
fix: add test cases for email parsing
2022-02-10 12:06:00 +00:00
Suraj Shetty
29f98f52db
Merge pull request #15756 from shariquerik/hide-notification-on-click
2022-02-10 17:24:59 +05:30
Suraj Shetty
4fa20f862a
Merge pull request #15757 from nextchamp-saqib/fix-form-tour
2022-02-10 11:25:36 +05:30
mergify[bot]
f94168034e
Merge pull request #15800 from shadrak98/html-css-injection
...
fix: filter html tags in blog comments
2022-02-09 11:12:04 +00:00
mergify[bot]
80243d5e85
Merge pull request #15897 from Alchez/dev-chart-options
...
fix: append chart options before render
2022-02-09 10:44:04 +00:00
Sagar Vora
976c3bedc3
fix: use correct indicator
2022-02-09 15:45:30 +05:30
mergify[bot]
67409a6880
Merge pull request #15745 from shariquerik/workspace-ui-fixes
...
fix: Minor workspace fixes
2022-02-09 10:13:34 +00:00
mergify[bot]
a2c6ff2fd0
Merge pull request #15769 from alyf-de/msgprint-title-backend
...
fix: translate default msgprint title in backend
2022-02-09 09:57:33 +00:00
Raffael Meyer
4750ff69e6
Merge branch 'develop' into msgprint-title-backend
2022-02-09 10:34:05 +01:00
Sagar Vora
e21275f060
style: add missing semicolon
2022-02-09 14:05:40 +05:30
Sagar Vora
a18703a0b1
fix: access to this and better UX
2022-02-09 13:52:37 +05:30
gavin
3277c16554
Merge pull request #15919 from gavindsouza/bump-requirements-sec
...
chore: Bump pip requirements
2022-02-09 13:44:31 +05:30
Sagar Vora
c3009392d8
Merge pull request #15887 from resilient-tech/werkzeug
...
chore(deps): bump werkzeug to latest version
2022-02-09 13:27:07 +05:30
Sagar Vora
f777700372
test: create new user
2022-02-09 13:14:11 +05:30
Sagar Vora
d8fc39659a
fix: docstring
2022-02-09 12:37:41 +05:30
Sagar Vora
a49a07e419
fix: sider issues
2022-02-09 12:35:44 +05:30
Saqib Ansari
05bb38ea46
chore: fetch name only if first_document is checked
2022-02-09 12:32:26 +05:30
Gavin D'souza
adc69cb3ec
build: Upgrade Pillow dependency
...
This upgrade handles multiple high severity vulnerabilities. I've not
checked the affected code in great depth but the APIs we use may be
affected. If they could actually be exploited is another matter which
would take a whole lotta effort which I'd rather not test xD
Fixes: CWE-74, CWE-125, CWE-120, CWE-125, CWE-400
CVE IDs: CVE-2022-22817, CVE-2022-22816, CVE-2021-34552, CVE-2021-23437
2022-02-09 12:28:04 +05:30
Sagar Vora
f0a10efa62
fix: improved validations
2022-02-09 12:22:54 +05:30
Gavin D'souza
5798cfaf4c
build: Update iPython dependency
...
Updating dependency due to arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another.
ref: https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699
Weaknesses: CWE-250, CWE-269, CWE-279
CVE ID: CVE-2022-21699
2022-02-09 12:19:26 +05:30
Shariq Ansari
088132000d
Merge branch 'develop' into workspace-ui-fixes
2022-02-09 12:16:22 +05:30
Shariq Ansari
9b9956e1ce
fix: blur event was overlapping block list item click event
2022-02-09 12:15:48 +05:30
mergify[bot]
ec5dd79957
Merge pull request #15746 from ruchamahabal/fix-naming-validation
...
fix: validate doc naming when set via prompt or by passing `set_name`
2022-02-09 06:05:16 +00:00
Daizy
ddd45a71bc
feat: Allow users to customize their own reports
2022-02-09 11:07:04 +05:30
Rucha Mahabal
240665940f
fix: remove redundant test record deletions and resetting
2022-02-09 11:01:05 +05:30
Rucha Mahabal
78e606bd0f
Merge branch 'develop' into fix-naming-validation
2022-02-09 10:52:24 +05:30
Shariq Ansari
0cb3e5691f
Merge branch 'develop' into workspace-ui-fixes
2022-02-08 20:17:13 +05:30
Sagar Vora
e5857fa56a
fix: improve setup wizard exception email
2022-02-08 20:02:49 +05:30
Sagar Vora
951ad3f844
chore(deps): bump werkzeug to latest version
2022-02-08 20:02:49 +05:30
Shariq Ansari
f904e8a972
Merge branch 'develop' into hide-notification-on-click
2022-02-08 19:36:57 +05:30
Shariq Ansari
c12c8eb314
style: made links card block pixel perfect
2022-02-08 19:28:08 +05:30
Shariq Ansari
2b12fa880c
fix: UI fix for card block
2022-02-08 17:02:48 +05:30
Gavin D'souza
0482f1362a
Merge branch 'develop' of github.com:frappe/frappe into dynamic-docfields
2022-02-08 16:50:58 +05:30
gavin
71ceb496d1
Merge pull request #15907 from ankush/qb_non_select
...
fix: executing non-select qb code from whitelisted methods
2022-02-08 16:19:02 +05:30
Suraj Shetty
72408c46c9
Merge pull request #15820 from kamaljohnson/fix-imap-folder-append-to-not-working-issue
2022-02-08 13:34:21 +05:30
Ankush Menat
b64c03d83d
test: restricted QB
2022-02-08 13:22:31 +05:30
Ankush Menat
496e5b513b
fix: executing non-select qb code from whitelisted methods
...
Co-Authored-By: Gavin D'souza <gavin18d@gmail.com>
2022-02-08 13:06:24 +05:30
kamaljohnson
cb25d894b4
refactor: code cleanup
2022-02-08 12:54:51 +05:30
Suraj Shetty
b978b5a70b
test: Fix mocked method and formatting issues
2022-02-08 12:01:11 +05:30