Commit Graph

4765 Commits

Author SHA1 Message Date
Risto Lahtela
8544e5a904 Prevented a future accidental XSS vulnerability in Player UUID parsing
The server parameter was passed to an exception that is currently turned into
json, but in the future the way this exception is handled could have changed.
2021-01-24 11:15:37 +02:00
Risto Lahtela
d64a967497 Prevented a future accidental XSS vulnerability in Server UUID parsing
The server parameter was passed to an exception that is currently turned into
json, but in the future the way this exception is handled could have changed.
2021-01-24 11:15:37 +02:00
Risto Lahtela
5c49e95c7d Fixed XSS in Internal Error page
Adding a </pre><xss> to an URL that triggered an internal error could be used
to facilitate an XSS attack
2021-01-24 11:15:37 +02:00
Risto Lahtela
d8626f37a7
Create security_vuln.md 2021-01-24 10:22:49 +02:00
Risto Lahtela
3b52cc5f0c Stop differentiating between wrong pass and user not existing 2021-01-23 21:54:27 +02:00
Risto Lahtela
5fae224ef6 Fixed ErrorContext of some errors being omitted 2021-01-23 21:53:07 +02:00
Risto Lahtela
46e486e00c
Update versions.txt 2021-01-22 21:49:57 +02:00
Risto Lahtela
94abd68086 Don't register the currently running task again inside the task
Affects issues:
- Fixed #1715
2021-01-22 21:44:27 +02:00
Risto Lahtela
97096948dc
Update versions.txt 2021-01-22 15:48:14 +02:00
Risto Lahtela
70b9ac1104 Set FullCalendar to use UTC as timezone
Affects issues:
- Possibly fixed #1239
2021-01-22 11:32:10 +02:00
Risto Lahtela
97bc28e2b4 Updated ProtocolSupport Extension
Ignored Access to implementation before detect Exception

Affects issues:
- Fixed #1665
2021-01-22 11:14:30 +02:00
Risto Lahtela
8423e392bb Don't close DataSource with bad connection
- Attempt to recursively obtain a valid connection.
  This could lead to StackOverFlowException if db goes
  down, so that is caught.

Affects issues:
- Possibly fixed #1458
2021-01-22 11:06:12 +02:00
dependabot-preview[bot]
3335765fa2 Bump dagger from 2.31.1 to 2.31.2 in /Plan
Bumps [dagger](https://github.com/google/dagger) from 2.31.1 to 2.31.2.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31.1...dagger-2.31.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-22 05:36:31 +00:00
dependabot-preview[bot]
4d9ad6a8c9 Bump RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT in /Plan
Bumps RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-22 05:29:27 +00:00
dependabot-preview[bot]
2630aa3e08 Bump dagger-compiler from 2.31.1 to 2.31.2 in /Plan
Bumps [dagger-compiler](https://github.com/google/dagger) from 2.31.1 to 2.31.2.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31.1...dagger-2.31.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-22 05:28:11 +00:00
dependabot-preview[bot]
2898378016 Bump mockito-junit-jupiter from 3.7.0 to 3.7.7 in /Plan
Bumps [mockito-junit-jupiter](https://github.com/mockito/mockito) from 3.7.0 to 3.7.7.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v3.7.0...v3.7.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-22 05:27:14 +00:00
Risto Lahtela
2b737c9973 Fixed offset for graphs with minutes in timezones
Timezone offset is now a double.

This fix seems very simple, and it kinda is.

HighCharts represents offset in minutes.
Java gives offset in milliseconds, and that was
incorrectly to be assumed as full hours, so the offset
was rounded to an integer. Using a double will allow
all kinds of offsets that still work with highcharts.

Fixes timezones like
- Nepal (GMT+05:45)
- Newfoundland Time (GMT-03:30)

Affects issues:
- Fixed #1652
2021-01-20 18:12:56 +02:00
Risto Lahtela
6758a56167 Fixed build errors 2021-01-20 17:59:45 +02:00
Risto Lahtela
edddccf329 Updated AAC Extension
- Disable AAC Extension if using v5 or newer

The event that is used for data gathering in Plan
for AAC is no longer present as an API in AAC past
version 5.0.0.

Because of this there is no data available for AAC,
and the extension is disabled.

Affects issues:
- Close #1673
2021-01-20 17:37:43 +02:00
Risto Lahtela
fd729360c7 Ignored all UnsupportedOperationExceptions from Extensions
Affects issues:
- Fixed #1667
2021-01-20 17:22:56 +02:00
Risto Lahtela
d5a6ccc7a3 Updated Nucleus Extension
- Removed warnings
- Update server data more frequently

Affects issues:
- #1688
2021-01-20 17:16:42 +02:00
Risto Lahtela
25d528e2f1 Updated mcMMO Extension
- Ignores IndexOutOfBoundsException

Affects issues:
- Fixed #1662
2021-01-20 17:05:40 +02:00
Risto Lahtela
15c9325eb4 Added activity index queries and placeholders.
- Added CommonQueries#fetchActivityIndexOf
- Added CommonQueries#getActivityGroupForIndex

- Added %plan_player_activity_index%
- Added %plan_player_activity_group%

Affects issues:
- Close #1663
2021-01-20 16:58:46 +02:00
dependabot-preview[bot]
e220e40a8c
Bump paper-api from 1.13.2-R0.1-SNAPSHOT to 1.16.5-R0.1-SNAPSHOT in /Plan (#1697)
* Bump paper-api in /Plan

Bumps paper-api from 1.13.2-R0.1-SNAPSHOT to 1.16.5-R0.1-SNAPSHOT.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Removed a method call that is no longer used

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: Risto Lahtela <24460436+Rsl1122@users.noreply.github.com>
2021-01-20 16:49:18 +02:00
dependabot-preview[bot]
63bc4a667a
Bump bstatsVersion from 1.4 to 1.8 in /Plan (#1706)
* Bump bstatsVersion from 1.4 to 1.8 in /Plan

Bumps `bstatsVersion` from 1.4 to 1.8.

Updates `bstats-bukkit` from 1.4 to 1.8
- [Release notes](https://github.com/Bastian/bStats-Metrics/releases)
- [Commits](https://github.com/Bastian/bStats-Metrics/commits)

Updates `bstats-sponge` from 1.4 to 1.8
- [Release notes](https://github.com/Bastian/bStats-Metrics/releases)
- [Commits](https://github.com/Bastian/bStats-Metrics/commits)

Updates `bstats-bungeecord` from 1.4 to 1.8
- [Release notes](https://github.com/Bastian/bStats-Metrics/releases)
- [Commits](https://github.com/Bastian/bStats-Metrics/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Update bStats construction

Affects issues:
- Possibly fixed #1680

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: Risto Lahtela <24460436+Rsl1122@users.noreply.github.com>
2021-01-20 16:43:37 +02:00
Risto Lahtela
c878e71179 Revert 6db7623037 2021-01-20 10:00:07 +02:00
dependabot-preview[bot]
01a8f5e1d3 Bump dagger from 2.31 to 2.31.1 in /Plan
Bumps [dagger](https://github.com/google/dagger) from 2.31 to 2.31.1.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31...dagger-2.31.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-20 06:17:02 +00:00
dependabot-preview[bot]
6db7623037 Bump RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT in /Plan
Bumps RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-20 06:08:39 +00:00
dependabot-preview[bot]
414e82395c Bump Extension-FactionsUUID in /Plan
Bumps Extension-FactionsUUID from 1.6.9.5-U0.5.16-R0.1 to 1.6.9.5-U0.5.16-R0.2.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-20 06:08:00 +00:00
dependabot-preview[bot]
cc9ee830bb Bump dagger-compiler from 2.31 to 2.31.1 in /Plan
Bumps [dagger-compiler](https://github.com/google/dagger) from 2.31 to 2.31.1.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31...dagger-2.31.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-20 05:59:32 +00:00
dependabot-preview[bot]
113c9ccb4b Bump placeholderapi from 2.9.2 to 2.10.9 in /Plan
Bumps placeholderapi from 2.9.2 to 2.10.9.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-20 05:58:16 +00:00
Risto Lahtela
1f4fdd8830 Added extension data support to /players page
Affects issues:
- #1222
2021-01-19 18:18:26 +02:00
dependabot-preview[bot]
e64967f3c7 Bump mockito-core from 3.6.28 to 3.7.7 in /Plan
Bumps [mockito-core](https://github.com/mockito/mockito) from 3.6.28 to 3.7.7.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v3.6.28...v3.7.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-18 05:48:02 +00:00
dependabot-preview[bot]
c81019ec69 Bump mysql-connector-java from 8.0.22 to 8.0.23 in /Plan
Bumps [mysql-connector-java](https://github.com/mysql/mysql-connector-j) from 8.0.22 to 8.0.23.
- [Release notes](https://github.com/mysql/mysql-connector-j/releases)
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/8.0/CHANGES)
- [Commits](https://github.com/mysql/mysql-connector-j/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-18 05:46:22 +00:00
dependabot-preview[bot]
f19c5fe5ad Bump org.sonarqube from 3.0 to 3.1 in /Plan
Bumps org.sonarqube from 3.0 to 3.1.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-16 17:36:48 +00:00
dependabot-preview[bot]
e35403a4ce Bump dagger from 2.30.1 to 2.31 in /Plan
Bumps [dagger](https://github.com/google/dagger) from 2.30.1 to 2.31.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.30.1...dagger-2.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-15 05:35:21 +00:00
dependabot-preview[bot]
d3bf6ebdbf Bump dagger-compiler from 2.30.1 to 2.31 in /Plan
Bumps [dagger-compiler](https://github.com/google/dagger) from 2.30.1 to 2.31.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.30.1...dagger-2.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-15 05:27:15 +00:00
dependabot-preview[bot]
6249d53888 Bump bungeecord-api from 1.16-R0.3 to 1.16-R0.4 in /Plan
Bumps [bungeecord-api](https://github.com/SpigotMC/BungeeCord) from 1.16-R0.3 to 1.16-R0.4.
- [Release notes](https://github.com/SpigotMC/BungeeCord/releases)
- [Commits](https://github.com/SpigotMC/BungeeCord/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-15 05:27:06 +00:00
Alexander Trost
1224eea893
contributors: fix the contributors list commas (#1685)
Signed-off-by: Alexander Trost <galexrt@googlemail.com>
2021-01-06 17:01:42 +02:00
Alexander Trost
aa492be01a
locale: fix color code in german translation (#1684)
This fixes a broken color code for the "Spielerzeit" (playtime) text.

Signed-off-by: Alexander Trost <galexrt@googlemail.com>
2021-01-06 16:49:34 +02:00
Risto Lahtela
103649dcf5
Merge pull request #1683 from plan-player-analytics/version-5.2
Version 5.2
2021-01-05 12:03:47 +02:00
Risto Lahtela
f9d1794e79 Fixed javadoc errors 2021-01-05 11:59:55 +02:00
dependabot-preview[bot]
5d8efbef3e Bump mockito-junit-jupiter from 3.6.28 to 3.7.0 in /Plan
Bumps [mockito-junit-jupiter](https://github.com/mockito/mockito) from 3.6.28 to 3.7.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v3.6.28...v3.7.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-01-05 05:27:08 +00:00
Risto Lahtela
36011b5ff9 Fix /plan m hotswap -> /plan db hotswap 2021-01-03 12:53:38 +02:00
Risto Lahtela
558e132b6e Replace theme colors in color-selector.js when exported
Affects issues:
- Fixed #1666
2021-01-03 12:51:06 +02:00
Risto Lahtela
7eb194e13f Distributed clean task evenly across servers
Affects issues:
- Fixed #1641
2021-01-03 12:48:36 +02:00
Risto Lahtela
1664199574 Extension Table now handles Optionals
Updated mcMMO Extension to R1.2

Affects issues:
- Fixed #1643
2021-01-03 12:27:49 +02:00
Risto Lahtela
b894656d66 Add instructions to "No servers"
Affects issues
- Close #1644
2021-01-03 12:05:14 +02:00
Risto Lahtela
306e30e21f Made MySQL launch options regex more lenient
Affects issues:
- Fixed #1661
2021-01-01 11:50:47 +02:00
Risto Lahtela
5401aef681 Fixed [object Object] showing when Kill has unknown victim uuid
Improper use of Optional in Map#put

Affects issues
- Close #1675
2021-01-01 11:33:46 +02:00