1
0
mirror of https://github.com/bitwarden/server.git synced 2024-11-25 12:45:18 +01:00
bitwarden-server/src/Core
Rui Tomé 9d59e4dc9e
[AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302)
* [AC-1637] Added HtmlEncodingStringConverter to encode/decode special chars on JSON serialization/deserialization

* [AC-1637] Added unit tests for HtmlEncodingStringConverter

* [AC-1637] Moved expected values on unit tests to the arrange phase

* [AC-1637] Added HtmlEncodingStringConverter to properties that are for input/output of Org Name and Business name

* [AC-1637] Modified views in Admin project to decode values to display

* [AC-1637] Replaced Html.Raw with HttpUtility.HtmlDecode

* [AC-1637] Added JsonConverter to Provider DTOs

* [AC-1637] Modified HandlebarsMailService to decode organization name before sending emails

* Revert "[AC-1637] Added JsonConverter to Provider DTOs"

This reverts commit 94d507cf93.

* [AC-1637] Fixed Admin panel organization search

* [AC-1637] Sanitizing Organization name and business name on creation in Admin panel

* [AC-1637] Sanitizing organization name and business name on creation by a provider

* [AC-1637] Sanitizing provider name on creation and on viewing in admin panel

* [AC-1637] Added sanitization to more places where Org name is used

* [AC-1637] Swapped using HttpUtility for WebUtility since the later is part of the dotnet framework

* [AC-1637] Updated error messages

* [AC-1637] Decoding on Admin panel add existing organization

* [AC-1637] Fix HTML decoding issues

* [AC-1637] Refactor HTML decoding in View and Model classes on Admin panel

* [AC-1637] Refactor provider name and business name usages to use methods that output decoded values

* [AC-1637] Fixed typo

* [AC-1637] Renamed Provider methods to retrieve Decoded Name and BusinessName

* [AC-1637] Renamed Organization methods to retrieve Decoded Name and BusinessName

* [AC-1637] Update the display name method in the `ProviderOrganizationOrganizationDetails` class to `DisplayName()`
2024-03-05 10:56:48 +00:00
..
AdminConsole [AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302) 2024-03-05 10:56:48 +00:00
Auth [PM-5435] Handle Fido2VerificationException on WebAuthn 2FA (#3615) 2024-03-04 11:43:03 -05:00
Billing [AC-1608] Send offboarding survey response to Stripe on subscription cancellation (#3734) 2024-02-09 11:58:37 -05:00
Context [PM-5424] fix TDE provider user (#3771) 2024-02-09 12:08:22 -08:00
Entities [AC-1608] Send offboarding survey response to Stripe on subscription cancellation (#3734) 2024-02-09 11:58:37 -05:00
Enums [AC-2184] Fix push sync notification on opt-in to Flexible Collections (#3794) 2024-02-13 12:15:07 -06:00
Exceptions [AC-1192] Create endpoints for new Device Approvals page (#2993) 2023-06-15 14:54:08 -07:00
HostedServices Platform/pm 2535/upgrade to azure messaging servicebus (#3102) 2023-08-07 08:57:18 -05:00
Identity [PM-1188] Server owner auth migration (#2825) 2023-04-14 13:25:56 -04:00
IdentityServer [PM-6196] Cleanup distributed cache for identity (#3704) 2024-02-09 07:43:28 -05:00
Jobs Run formatting (#2230) 2022-08-29 16:06:55 -04:00
MailTemplates/Handlebars [AC-2101] Update welcome emails from trial initiation and org creation (#3836) 2024-02-29 09:16:16 +01:00
Models [AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302) 2024-03-05 10:56:48 +00:00
OrganizationFeatures [AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302) 2024-03-05 10:56:48 +00:00
Properties [Business Portal] BUG Fix localization (#1385) 2021-06-09 09:56:29 -05:00
Repositories [PM-5548] Eliminate in-app purchase logic (#3640) 2024-01-11 15:26:32 -05:00
Resources Run formatting (#2230) 2022-08-29 16:06:55 -04:00
SecretsManager [SM-713] Add database support for secret access policies (#3681) 2024-02-22 10:06:39 -06:00
Services [AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302) 2024-03-05 10:56:48 +00:00
Settings [PM-6177] Persistent distributed cache using Cosmos (#3772) 2024-02-08 14:34:53 -05:00
Tokens Auth/PM-3275 - Changes to support TDE User without MP being able to Set a Password + misc refactoring (#3242) 2023-11-02 08:02:25 -07:00
Tools [PM-221] Adding CipherId to the Send table, create/update sprocs, and added mi… (#3646) 2024-03-04 19:31:33 -05:00
Utilities [AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302) 2024-03-05 10:56:48 +00:00
Vault [AC-1124] Restrict admins from accessing items in Collections tab (#3676) 2024-02-08 14:07:58 -08:00
AssemblyInfo.cs Run dotnet format (#1764) 2021-12-16 15:35:09 +01:00
Constants.cs Resolve RisksSubscriptionFailure bugs (#3790) 2024-02-29 08:15:18 -05:00
Core.csproj [deps] Tools: Update MailKit to v4.4.0 (#3868) 2024-03-04 17:29:40 +01:00
licensing_dev.cer Feature/self hosted development (#1921) 2022-03-21 17:13:00 -05:00
licensing.cer prod licensing certs 2017-10-03 16:19:20 -04:00