9 Commits (mr10.5.7)

Author	SHA1	Message	Date
Kirill Solomko	53f28f4b93	MT#58157 escape uri refs in body.tt ... * URI that comes from c.req.uri must be escaped as Catalyst provides c.req.uri unescaped. * new Catalyst::NGCP::Plugin::EscapeURI with escape_uri() function * new NGCP::Panel::Utils::Generic::escape_uri() that uses URI::Escape::uri::escape_utf8() * c.req.uri and c.req.path occurrences in layout/body.tt are now escaped with c.escape_uri() Change-Id: Id0483fa6e570a0ff8db84b1d470caf5405cc0886 (cherry picked from commit c826fccb29)	2 years ago
Kirill Solomko	61fc16dec8	TT#122000 split session cookies per realm ... * new Plugin Catalyst/Plugin/NGCP/RealmCookie.pm that extends Catalyst::Plugin::Session::State::Cookie and overloads methods responsible for cookie_name creation. It uses NGCP_REALM fastcgi header to append it to the cookie name. Empty cookie with name "appprefix"_session is suppressed on Session pre-setup. * Base cookie_name is now set to 'ngcp-panel' Change-Id: I6b4c10c5e1728d0dd7a6398bf5191925d5b904f6	4 years ago
Rene Krenn	f66435c837	TT#75114 javascript support for prov templates ... Change-Id: I6f173ba6dd814f9be84bc3f077e8595e56d993c5	5 years ago
Guillem Jover	993f9ce7bb	TT#69900 Unbundle Catalyst::Plugin::Session::Store::Redis modules ... This is a separate upstream distribution which we should not be bundling. Change-Id: I8fab1de494e885063214957ef1ff35a82702f586	6 years ago
Guillem Jover	651a581812	TT#68012 Namespace NGCP-specific Catalyst plugins ... Ideally we'd not pollute the Catalyst namespace, and instead would use our base NGCP namespace, but at least for the EscapeJs module having it there makes loading it easier as it requires integration with the Template::Toolkit engine. Change-Id: Ide3f723fb3becbf49c405d9b34eb464fa7f8adbd	6 years ago
Rene Krenn	05958e4e68	TT#63402 escape localized strings used in js arguments ... Change-Id: I61f3c77e7bd1fd4ac9e9b952ceecfa233bdbdbf1	6 years ago
Rene Krenn	cae5270af5	TT#56340 panel logline obfuscation ... adds gdpr obfuscation quoting for: + subscriber numbers + subscriber ip addresses + subscriber usernames + any logmessage "DATA": query parameters, form data, response data + subscriber uuid's + call id's + callforward sip uri's the quoting is centralized by $c->qs() ("quote sensitive"), using catalyst plugin mechanism. escape symbols are set to « (\x{ab}) and » (\x{bb}). generate_logfile_data_inventory.pl was modified to mark loglines with "gdpr affected" status, if $c->qs() was used in a log message. Change-Id: I0f42d7992594232ae33e5666b0a64009211c5b76	6 years ago
Alexander Lutay	cdbc01978c	TT#29620 Clean TAP test warning: Missing AUTHOR/DESCRIPTION/LICENSE section in POD ... Change-Id: I522f20e6966253933d98766d0b3a51f43768be82	7 years ago
Andreas Granig	bfdf68ea40	TT#35523 Persist sessions in redis ... This will allow to apply changes or fail-over without re-login on the panel. Change-Id: Ie3dca1ea4ecfac75b1ffa939c3bba92afcc90db7	7 years ago