Commit graph

68 commits

Author SHA1 Message Date
Saurabh
a0086db9b6
fix(frappe client): validate http method for frappe.client api (#11228) 2020-09-14 12:30:30 +05:30
Shivam Mishra
1426b2d4b9
refactor: translate error message 2020-04-30 15:56:34 +05:30
Chinmay D. Pai
d7e9ef60b8
fix: add support for more document mimetypes
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2020-04-16 14:31:25 +05:30
Chinmay D. Pai
23b3f65b3b
fix: limit file upload mimetype if user has no desk access
limits file upload mimetype to jpg, png, and pdf in case the user does
not have desk access, to prevent abuse of the servers as a file storage
system

Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
2020-04-16 14:09:59 +05:30
prafful1234
e19b712e23
fix(api): Fix api for user oauth validations (#9676)
* fix(api): Fix api for user oauth validations

* fix: add auth exceptions + format functions

* fix: Moved exceptions and a validation check

* Fix: Reqested changes

Co-authored-by: prafful1234 <prafful@mntechnique.com>
Co-authored-by: Rohan Bansal <rohan@digithinkit.com>
Co-authored-by: Suraj Shetty <13928957+surajshetty3416@users.noreply.github.com>
2020-04-11 10:27:00 +05:30
Rucha Mahabal
fa6a29ff37 fix: conflicts 2019-11-13 11:23:30 +05:30
Rushabh Mehta
6d6f575904 feat(server scripts): add server scripts! 2019-10-11 14:16:49 +05:30
Rucha Mahabal
4cfe9eed79 fix: authentication in handler.py 2019-10-11 02:16:31 +05:30
Shivam Mishra
82cb2d0cbb refactor: improved permission logic 2019-09-02 17:33:42 +05:30
Shivam Mishra
652483c225 Merge branch 'upload-guest-fix' of github.com:scmmishra/frappe into upload-guest-fix 2019-09-02 16:33:03 +05:30
Shivam Mishra
72228946e5 refactor: explicitly set ignore_permissions for file upload 2019-09-02 16:32:38 +05:30
Shivam Mishra
bc3e4f6a1d
Update handler.py 2019-08-28 09:28:31 +05:30
Shivam Mishra
c9cad5aa7f refactor: check mimetype for uplaod 2019-08-27 18:10:47 +05:30
Shivam Mishra
630e67c25e feat: config option for allowing guests to upload 2019-08-16 08:36:08 +05:30
Shivam Mishra
09e6ae03d9 refactor: allow guests to upload files 2019-08-12 18:00:11 +05:30
Faris Ansari
b4ae975313 feat: Introduce new upload dialog 2019-04-11 01:41:07 +05:30
Chinmay Pai
75c7992557
file-api: add new test, fix minor bugs and code indentation
Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-09-21 13:40:25 +05:30
Chinmay Pai
5bd66f134d
file-api: add improvements to save() api
file can now be saved by calling save() on the file object instance

Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-09-13 09:46:48 +05:30
Chinmay Pai
22ba310aaf
[2/3] file-api: code migration
migrate api from file_manager.py to file.py

Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-09-03 18:04:45 +05:30
Chinmay Pai
ff03d8d0fe
file-api: major refactor
migrate from file_manager.py to file.py

Signed-off-by: Chinmay Pai <chinmaydpai@gmail.com>
2018-08-30 18:02:59 +05:30
Aditya Hase
f3b959b1fe frappe: refactor async to realtime (#6015)
* frappe: refactor async to realtime

* frappe: refactor async to is_async
2018-08-28 15:31:20 +05:30
Faris Ansari
3be33b8854 fix(handler): check if data is None explicitly (#5982)
If the returned data is empty list or string it was a failed response.
But these are all valid responses, so now we check explicitly for None.
2018-08-20 10:39:24 +05:30
Prateeksha Singh
ef6f160961 [handler] Raise exceptions in request in dev_mode (#5949) 2018-08-08 22:52:39 +05:30
Shridhar Patil
c4fac7a09c syntax error in whitelisted function throws 404 (#5743) 2018-06-29 15:55:19 +05:30
Achilles Rasquinha
806e0f18be
Update handler.py 2018-03-28 16:26:15 +05:30
Achilles Rasquinha
1d82f56660 [ENH #5021] Allow guest during server ping 2018-02-16 12:32:19 +05:30
Achilles Rasquinha
14924620dc replaced raw_input to input 2018-02-15 15:38:06 +05:30
Rushabh Mehta
efe88591c2 Merge branch 'master' into staging 2017-08-24 16:51:28 +05:30
Rushabh Mehta
16129ce785 [fix] catch error in data import 2017-08-24 16:05:47 +05:30
Aditya Hase
769338f136 Replaced all instances of basestring with six.string_types 2017-08-11 00:10:11 +05:30
Makarand Bauskar
24c13a9996 [hotfix] local veriable data reference before assignment fixes (#3185) 2017-04-28 10:26:34 +05:30
Rushabh Mehta
65730d7bcf [minor] allow method object to return its own response object 2017-04-27 16:14:28 +05:30
Rushabh Mehta
042e2b09cb [design] Redesign, cleanup Login, Message pages (#2564)
* [cleanup] login, message pages

* [style] cleanups

* [cleanup]

* [cleanup] update password

* [fix] name for web form (fixes edit-profile)
2017-01-10 14:44:42 +05:30
Rushabh Mehta
68e14d40c2 [security] fixed 2016-12-21 11:17:24 +05:30
Rushabh Mehta
22c3f7966d [enhance] run actions in background doc.queue_action("submit") 2016-07-19 17:12:37 +05:30
Valmik Jangla
a2ad631754 Removed / Replaced Celery related code 2016-04-11 17:39:06 +05:30
Anand Doshi
353e8a9d1f [fix] Sanitize form_dict and doc values to prevent XSS 2016-02-23 12:11:28 +05:30
Rushabh Mehta
9e2ba37823 [minor] add hook for website user home page by function 2016-01-25 15:10:44 +05:30
Anand Doshi
506d268143 [fix] whitelisted upload methods 2015-11-18 13:06:14 +05:30
Anand Doshi
1e19f3ddf4 [fix] allow a method to be defined as xss_safe 2015-09-24 18:57:24 +05:30
Anand Doshi
587e43c7b0 [fix] sanitize html for guest methods if guest user 2015-09-23 18:25:36 +05:30
Anand Doshi
7cde7fa507 [minor] Use from_async 2015-08-24 13:35:37 +05:30
Anand Doshi
c9782e23e4 Merge remote-tracking branch 'frappe/develop' into v6-wip
Conflicts:
	frappe/__version__.py
	frappe/core/doctype/communication/communication.json
	frappe/hooks.py
	frappe/model/document.py
	frappe/public/css/form.css
	frappe/public/less/form.less
	requirements.txt
	setup.py
2015-08-17 12:22:02 +05:30
Rushabh Mehta
74bc524416 [test] fix test_async 2015-08-14 15:08:40 +05:30
Anand Doshi
c079e27d3f Moved Backup Manager and Social Login keys to the new Integrations Module, prepared frappe for Mandrill Integration 2015-08-11 12:03:13 +05:30
Pratik Vyas
422668a67f Async 2015-07-24 10:07:24 +05:30
Rushabh Mehta
562b1b2c50 [fixes] cleanup of web from, portal, login page 2015-06-01 17:14:53 +05:30
Rushabh Mehta
93878a9f03 [ping] pong 2015-05-13 08:23:04 +05:30
Rushabh Mehta
5bbe43ff78 [api] /api/resource/version 2015-05-05 17:46:16 +05:30
Anand Doshi
2995f02f3b Web Notes to Frappe, better alerts, css fixes, fixed splash 2015-03-03 15:09:34 +05:30