Commit Graph

1967 Commits

Author SHA1 Message Date
Anton Georgiev
a9cd4718ba
fix: only allow POST for insertDocument in UrlMappings.groovy [2.7] (#20432) 2024-06-06 12:10:28 -04:00
Gustavo Trott
37d6aa0140 introduce-allowPromoteGuestToModerator27 2024-06-04 11:36:46 -03:00
Anton Georgiev
ea6e9461dc
Merge pull request from GHSA-4m48-49h7-f3c4
fix(sec): API fix duplicates ghsa-4m48-49h7-f3c4 (2.7)
2024-05-15 10:38:58 -04:00
Paul Trudel
aebb693379 Add message key to insertDocument responses 2024-05-09 19:54:41 +00:00
Paul Trudel
06b7628f61 Restrict supported HTTP method types on endpoints 2024-05-07 20:34:20 +00:00
Paul Trudel
b2b57aca03 Remove support for join POST requests and fix checksum calculation for POST requests 2024-05-06 17:56:59 +00:00
Anton Georgiev
b5fe0ac64c
Merge pull request #20034 from antobinary/port-19814
fix(sec): Bump tomcatEmbed to 9.0.86 (#19814) (backport)
2024-04-18 13:52:46 -04:00
Anton Georgiev
a184c67e44 fix(sec): Bump org.json:json 2024-04-17 14:30:10 -04:00
Anton Georgiev
3b3e7d840a fix(sec): Bump tomcatEmbed to 9.0.86 (#19814) 2024-04-17 14:24:41 -04:00
Paul
183983be7f Added request content type validation 2024-04-15 11:29:03 -04:00
Paul
1e9e461f50 Check for pressence of query and body 2024-04-15 11:29:03 -04:00
Anton Georgiev
ca7c2d1589
fix(sec): bump postgresql to 42.7.2 (#19660) 2024-03-05 21:08:30 -05:00
Anton Georgiev
78ece5f05c
feat(config): Add option to disabled "Download session data" on Learning Dashboard (backport) (#19641)
* Add option disabledFeatures=learningDashboardDownloadSessionData

* docs: document learningDashboardDownloadSessionData

---------

Co-authored-by: Gustavo Trott <gustavo@trott.com.br>
2024-02-20 09:21:57 -05:00
Anton Georgiev
f50e10b5ea fix(sec): filter tags in presentation name 2024-01-10 14:15:56 -05:00
Paul Trudel
374ad5045d
chore: Upgrade Grails to 6.1 (#19193) 2023-11-23 09:45:45 -05:00
Paul Trudel
d33a1c028a
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
Co-authored-by: Gustavo Trott <gustavo@trott.com.br>
2023-10-20 08:27:15 -04:00
Paul Trudel
3dc4cb28d9
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
Co-authored-by: Gustavo Trott <gustavo@trott.com.br>
2023-10-20 08:27:09 -04:00
Paul Trudel
bc7c3143ba Prevent null error when parent meeting does not exist 2023-10-19 19:54:43 +00:00
Anton Georgiev
d24cdfde6f
Merge pull request #18975 from Ithanil/fix_isbreakout_api
fix: check for presence of parentMeetingID if isBreakout is true
2023-10-19 14:35:05 -04:00
Anton Georgiev
eb82bbb6de
Merge pull request #18981 from antobinary/spring-bump
chore: upgrade Spring to 2.7.17
2023-10-19 14:27:16 -04:00
Gustavo Trott
c026ecc727
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy 2023-10-19 14:46:10 -03:00
Gustavo Trott
73b7bded08
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy 2023-10-19 14:45:59 -03:00
Anton Georgiev
a2d7743773 chore: upgrade Spring to 2.7.17 2023-10-19 13:11:21 -04:00
Anton Georgiev
df6da10cea chore: upgrade Spring to 2.7.17 2023-10-19 12:42:41 -04:00
GuiLeme
d6670a4145 [issue-18924] - changes in review, and added possibility to insert a name along with URL 2023-10-19 10:27:38 -03:00
Jan Kessler
520668632f fix check for presence of parentMeetingId if isBreakout is true 2023-10-19 10:53:54 +02:00
GuiLeme
a22068be18 [Issue-18924] - Changed parameter name to preUploadedPresentation 2023-10-17 10:38:44 -03:00
GuiLeme
d7d228d047 [Issue-18924] 2023-10-17 10:26:09 -03:00
GuiLeme
0aacb12cc8 [issue-18408-back-end] - added disabled download of converted presentation 2023-08-25 11:37:32 -03:00
GuiLeme
2cf6720b5f [issue-18408-back-end] - change name of download original pres 2023-08-25 09:27:01 -03:00
Ramón Souza
4b6686ef76 add comment 2023-07-31 17:07:41 -03:00
Anton Georgiev
6b76d9aa66 Merge remote-tracking branch 'bbb/v2.6.x-release' into merge-july-21 2023-07-21 16:24:45 -04:00
Paul Trudel
fea3a6fb1e Upgraded tomcat to 9.0.78 2023-07-17 11:10:10 +00:00
Anton Georgiev
3610ca53e6
Merge pull request #18154 from paultrudel/java-17-upgrade
build: Java 17 support
2023-06-15 07:48:26 -04:00
Anton Georgiev
a962a44c74 Merge branch 'v2.6.x-release' of github.com:bigbluebutton/bigbluebutton into june14merge 2023-06-14 10:07:54 -04:00
Paul Trudel
e6335ae8d0 Upgrade gorm and groovy versions 2023-06-13 15:02:56 +00:00
Paul Trudel
b43d46091c Fully remove dependency 2023-06-08 17:35:12 +00:00
Paul Trudel
299ffd49fa Remove commons-fileupload dependency 2023-06-08 17:30:57 +00:00
Anton Georgiev
49d48c0945
Merge pull request #18097 from ramonlsouza/16120
feat: Add Lock Setting For Viewer Annotations
2023-06-08 11:12:22 -04:00
Anton Georgiev
411ac84cf7
Merge pull request #18030 from danielpetri1/mime-fixes
refactor(bbb-web): Use Tika as MIME type detection tool
2023-06-07 12:41:53 -04:00
Anton Georgiev
b699a46802
Merge pull request #17975 from paultrudel/breakout-room-exception-fix
fix: Added check for parentMeetingId if isBreakout is true
2023-06-06 09:35:04 -04:00
Anton Georgiev
1146ab9be9 Merge branch 'v2.6.x-release' of github.com:bigbluebutton/bigbluebutton into merge-26-27-june-6 2023-06-06 09:28:53 -04:00
Ramón Souza
22b02ead28 Merge remote-tracking branch 'upstream/v2.7.x-release' into 16120 2023-06-06 08:45:29 -03:00
Daniel Petri Rocha
d2762657ee
Merge branch 'v2.6.x-release' into mime-fixes 2023-06-06 12:12:13 +02:00
danielpetri1
ffeb8c3acb Allow multiple MIME types per extension 2023-06-06 10:08:14 +00:00
Paul Trudel
fe43eba452 Allow default presentation to bypass localhost check 2023-06-05 14:32:25 +00:00
Anton Georgiev
748c7a4a0b Merge branch 'v2.6.x-release' of github.com:bigbluebutton/bigbluebutton into june227 2023-06-02 09:45:34 -04:00
Anton Georgiev
e92862ee00
Merge pull request #17986 from paultrudel/meeting-info-attendee-update
fix(Meeting API): Only include online users in attendee list
2023-05-31 18:29:14 -04:00
Anton Georgiev
b18aff32e6
Merge pull request #18045 from paultrudel/ssrf-fix
fix(sec): SSRF fix
2023-05-31 18:19:40 -04:00
prlanzarin
4d1aa87a88 feat: only record media while meeting is being actively recorded
Only record media (microphone, webcams and screens) while meeting is
being actively recorded (ie an user has enabled recording in the
conference). If the conference's recording is paused, media capture will
stop as well (with appropriate recording events).

A bigbluebutton.properties/API#create parameter called
`recordFullDurationMedia` is added to control this behavior. The default
is false (only capture while recording is active). Setting it to `true`
enables the current (legacy) behavior: always capture media if the
meeting's `recorded` prop is true.
2023-05-31 16:36:11 -03:00