1
0
mirror of https://github.com/bitwarden/server.git synced 2024-11-25 12:45:18 +01:00
bitwarden-server/src/Core/Models
Rui Tomé 9d59e4dc9e
[AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302)
* [AC-1637] Added HtmlEncodingStringConverter to encode/decode special chars on JSON serialization/deserialization

* [AC-1637] Added unit tests for HtmlEncodingStringConverter

* [AC-1637] Moved expected values on unit tests to the arrange phase

* [AC-1637] Added HtmlEncodingStringConverter to properties that are for input/output of Org Name and Business name

* [AC-1637] Modified views in Admin project to decode values to display

* [AC-1637] Replaced Html.Raw with HttpUtility.HtmlDecode

* [AC-1637] Added JsonConverter to Provider DTOs

* [AC-1637] Modified HandlebarsMailService to decode organization name before sending emails

* Revert "[AC-1637] Added JsonConverter to Provider DTOs"

This reverts commit 94d507cf93.

* [AC-1637] Fixed Admin panel organization search

* [AC-1637] Sanitizing Organization name and business name on creation in Admin panel

* [AC-1637] Sanitizing organization name and business name on creation by a provider

* [AC-1637] Sanitizing provider name on creation and on viewing in admin panel

* [AC-1637] Added sanitization to more places where Org name is used

* [AC-1637] Swapped using HttpUtility for WebUtility since the later is part of the dotnet framework

* [AC-1637] Updated error messages

* [AC-1637] Decoding on Admin panel add existing organization

* [AC-1637] Fix HTML decoding issues

* [AC-1637] Refactor HTML decoding in View and Model classes on Admin panel

* [AC-1637] Refactor provider name and business name usages to use methods that output decoded values

* [AC-1637] Fixed typo

* [AC-1637] Renamed Provider methods to retrieve Decoded Name and BusinessName

* [AC-1637] Renamed Organization methods to retrieve Decoded Name and BusinessName

* [AC-1637] Update the display name method in the `ProviderOrganizationOrganizationDetails` class to `DisplayName()`
2024-03-05 10:56:48 +00:00
..
Api [AC-1287] AC Team code ownership moves: Policies (1/2) (#3383) 2023-11-22 16:07:37 -05:00
Business Resolve RisksSubscriptionFailure bugs (#3790) 2024-02-29 08:15:18 -05:00
Data [AC-1283] AC Team code ownership moves: Organization (pt 2) (#3486) 2023-11-29 15:31:15 -06:00
Mail [AC-1637] Sanitize Business and Organization Names from html script injection prior to storing in db (#3302) 2024-03-05 10:56:48 +00:00
OrganizationConnectionConfigs [AC-1201] refactor: move all SCIM related files into the AdminConsole scope (#2841) 2023-04-19 09:31:00 +10:00
StaticStore [AC-1754] Provide upgrade flow for paid organizations (#3468) 2023-12-27 09:30:23 -05:00
Stripe Retrieve all Stripe invoices (#3431) 2023-11-09 09:05:05 -05:00
IExternal.cs Run formatting (#2230) 2022-08-29 16:06:55 -04:00
PushNotification.cs [SG-167] Implement Passwordless Authentication via Notifications (#2276) 2022-09-26 13:21:13 -04:00