Commit Graph

9 Commits (7a533f8b2ec74dbedd80431fb9882d7f44c91645)

Author SHA1 Message Date
laurent.corron 47a012cd7a [MIG] web_notify: Migration to 13.0 2023-04-11 09:53:03 +02:00
laurent.corron 19f059b783 [REF] web_notify: Black python code 2023-04-11 09:53:03 +02:00
Shepilov Vladislav ee19e7fb46 [12.0] web_notify: improve popup UI (#1231)
* [ADD]: all available bootstrap notifications (success/danger/warning/info/default)
* [IMP] use black color for text for default notification.
* [FIX] reverted require string for `bus.Longpolling` and rename `on_message_received` to `on_message` to prevent collisions.
2023-04-11 09:53:03 +02:00
Aitor Bouzas 06a4ec791f [MIG] web_notify: Migration to 12.0
Add self-test buttons in demo environment,
Updated readme to show how to test it.
Add buttons to users form
Do not rely on SUPERUSER_ID and avoid getattr usage
2023-04-11 09:53:03 +02:00
Guewen Baconnier 13d754007b Prevent to send web notifications to other users
Only the admin user (sudo) is allowed to send notifications to other
users. The normal users can only send notifications to themselves.

This is to prevent attackers to craft malicious notifications and send
them to other users using RPC.

Correction based on the idea of @hbrunn
2023-04-11 09:53:03 +02:00
Damien Bouvy 00e4d9c1aa [MIG] web_notify: Migration to 11.0
- Use the 'session' class of the JS Framework (session no lounger bound
to web client)
- Test change: compare emitted & received messages based on content, not
order. Using string comparison raises false positives.
2023-04-11 09:53:03 +02:00
Serpent Consulting Services Pvt Ltd 337bad393b Update web_client.js 2023-04-11 09:53:03 +02:00
Jay Vora(SerpentCS) 09884d74a5 [MIG] Migration started web_notify 2023-04-11 09:53:02 +02:00
Pedro M. Baeza e5492a65d7 [MIG] Make modules uninstallable 2023-04-11 09:53:02 +02:00