Jan Vonka 123e67a055 REPO-2110 / MNT-17477: CMIS: SXSS+CSRF vulnerability (browser binding) ...

- force download=attachment (Content-Disposition headers) for all content types, except those white-listed (eg. pdf & specific img types)

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/BRANCHES/DEV/5.2.N/root@135606 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261

2017-03-06 10:19:02 +00:00

..

client

REPO-1306: Delete group membership

2017-01-27 14:14:50 +00:00

util

Merged HEAD (5.2) to 5.2.N (5.2.1)

2016-06-10 13:48:27 +00:00

AbstractBaseApiTest.java

Merged 5.2.N-LAST-T-MOD (5.2.1) to 5.2.N (5.2.1)

2017-01-23 14:04:10 +00:00

AbstractEnterpriseOpenCMIS10TCKTest.java

…

AbstractEnterpriseOpenCMIS11TCKTest.java

Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)

2016-06-27 09:04:59 +00:00

AbstractEnterpriseOpenCMISTCKTest.java

Merged HEAD (5.2) to 5.2.N (5.2.1)

2016-06-03 15:18:03 +00:00

AbstractTestApi.java

REPO-908: V1 REST API - minor test fwk improvement

2016-12-14 10:09:53 +00:00

AbstractTestFixture.java

REPO-908: V1 REST API - minor test fwk improvement

2016-12-14 10:09:53 +00:00

ActivitiesPostingTest.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:57 +00:00

ApiTest.java

Merged WEBAPP-API (5.2.1) to 5.2.N (5.2.1)

2017-01-20 12:56:01 +00:00

AuthenticationsTest.java

REPO-1773: Validate ticket API call returns incorrect body with 404 status code

2017-01-04 15:39:39 +00:00

BaseCustomModelApiTest.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:41 +00:00

BulkUpdatePropertiesCustomTest.java

Merged 5.1.N (5.1.2) to 5.2.N (5.2.1)

2016-06-27 07:05:50 +00:00

Cleanup.java

…

CloudPersonInfo.java

…

CMISTCKJettyComponent.java

…

CMMApiTestSuite.java

…

DiscoveryApiTest.java

REPO-1438: Add thumbnail generation status to discoverability response - implement

2016-10-18 11:04:11 +00:00

EnterpriseJettyComponent.java

…

EnterprisePublicApiTestFixture.java

REPO-908: V1 REST API - minor test fwk improvement

2016-12-14 10:09:53 +00:00

EnterpriseTestApi.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:53 +00:00

EnterpriseTestFixture.java

…

GroupsTest.java

REPO-1878: Support GROUP_EVERYONE in all endpoints

2017-01-30 15:49:50 +00:00

ModulePackagesApiTest.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:41 +00:00

ModulePackageTest.java

…

NodeApiTest.java

REPO-1684: We should not return properties that are empty

2017-01-05 08:24:09 +00:00

NodeAssociationsApiTest.java

REPO-1780: always use the primary parent ID regardless of context

2017-01-09 15:50:56 +00:00

NodeVersionsApiTest.java

REPO-1666: V1 REST API - minor update to "testDeleteVersion" only

2016-12-16 14:35:13 +00:00

PersonInfo.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:49:15 +00:00

PublicApiDateFormat.java

…

PublicApiJettyComponent.java

…

PublicApiTestContext.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:37 +00:00

QueriesNodesApiTest.java

REPO-1079 Rename "Live Search" API endpoints

2016-08-09 09:33:20 +00:00

QueriesPeopleApiTest.java

REPO-1646: V1 REST API - cannot unset optional fields (eg. when updating person / site details ...)

2016-11-30 15:51:00 +00:00

QueriesSitesApiTest.java

REPO-1069 Review live search sort order / sort type (sites and also people)

2016-08-09 10:09:49 +00:00

RenditionsTest.java

Merged 5.2.N-LAST-T-MOD (5.2.1) to 5.2.N (5.2.1)

2017-01-23 14:04:42 +00:00

RepoService.java

REPO-1543: Refactor tests for list site filtering

2016-11-09 09:20:07 +00:00

RestApiHttpClient.java

…

SharedLinkApiTest.java

Merged WEBAPP-API (5.2.1) to 5.2.N (5.2.1)

2017-03-03 11:41:58 +00:00

TestActivities.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:53 +00:00

TestCMIS.java

REPO-2110 / MNT-17477: CMIS: SXSS+CSRF vulnerability (browser binding)

2017-03-06 10:19:02 +00:00

TestCMISAPI.java

REST API Tests: minor

2016-09-29 10:36:05 +00:00

TestCustomConstraint.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:33 +00:00

TestCustomModel.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:33 +00:00

TestCustomModelExport.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:33 +00:00

TestCustomProperty.java

Merged WEBAPP-API (5.2.1) to 5.2.N (5.2.1)

2016-11-09 10:45:19 +00:00

TestCustomTypeAspect.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:33 +00:00

TestDownloads.java

Merged WEBAPP-API (5.2.1) to 5.2.N (5.2.1)

2017-01-20 12:57:32 +00:00

TestEnterpriseAtomPubTCK.java

…

TestFavourites.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:53 +00:00

TestFavouriteSites.java

…

TestFixture.java

REPO-908: V1 REST API - minor test fwk improvement

2016-12-14 10:09:53 +00:00

TestNetworks.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:53 +00:00

TestNodeComments.java

ACE-5463: 500 error: GET /nodes/{nodeId}/comments?skipCount=XXX

2016-10-17 10:55:17 +00:00

TestNodeRatings.java

ACE-5453: 500 error: GET /nodes/{nodeId}/ratings?skipCount=XXX

2016-10-13 06:52:01 +00:00

TestPeople.java

REPO-1813: 500 Response Code when creating a person without id

2017-01-23 11:39:01 +00:00

TestPersonSites.java

REPO-1360 - Filter sites by visibility - add automated test for NOT in where clause

2016-10-10 15:23:47 +00:00

TestPublicApi128.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:53 +00:00

TestPublicApiAtomPub10TCK.java

REPO-1529: Ignore tests that fail recurrently on certain DBs for now

2016-11-04 16:20:22 +00:00

TestPublicApiAtomPub11TCK.java

REPO-1529: Ignore tests that fail recurrently on certain DBs for now

2016-11-04 16:20:22 +00:00

TestPublicApiBrowser11TCK.java

REPO-1529: Ignore tests that fail recurrently on certain DBs for now

2016-11-04 16:20:22 +00:00

TestPublicApiCaching.java

…

TestRemovePermissions.java

…

TestSiteContainers.java

Merged RETURN-OF-THE-API (5.2.0) to 5.2.N (5.2.1)

2016-08-05 13:47:53 +00:00

TestSiteMembers.java

REPO-1027: V1 REST API - minor: tweak TestSiteMembers

2016-09-26 15:26:57 +00:00

TestSiteMembershipRequests.java

REPO-1027: V1 REST API - fix error handling (get site membership request)

2016-09-22 08:49:27 +00:00

TestSites.java

REPO-1646: V1 REST API - cannot unset optional fields (eg. when updating person / site details ...)

2016-11-30 12:03:30 +00:00

TestTags.java

…

TestUserPreferences.java

Added somes tests for invalid paging parameters. REPO-1061, REPO-890

2016-08-22 13:24:38 +00:00

WherePredicateApiTest.java

REPO-484: [REST API] Added more comprehensive tests for the 'where' predicate - covered most of the endpoints, except the workflow ones.

2016-09-27 12:03:34 +00:00