Anton Georgiev
a9cd4718ba
fix: only allow POST for insertDocument in UrlMappings.groovy [2.7] ( #20432 )
2024-06-06 12:10:28 -04:00
Gustavo Trott
37d6aa0140
introduce-allowPromoteGuestToModerator27
2024-06-04 11:36:46 -03:00
Anton Georgiev
ea6e9461dc
Merge pull request from GHSA-4m48-49h7-f3c4
...
fix(sec): API fix duplicates ghsa-4m48-49h7-f3c4 (2.7)
2024-05-15 10:38:58 -04:00
Paul Trudel
aebb693379
Add message key to insertDocument responses
2024-05-09 19:54:41 +00:00
Paul Trudel
06b7628f61
Restrict supported HTTP method types on endpoints
2024-05-07 20:34:20 +00:00
Paul Trudel
b2b57aca03
Remove support for join POST requests and fix checksum calculation for POST requests
2024-05-06 17:56:59 +00:00
Anton Georgiev
b5fe0ac64c
Merge pull request #20034 from antobinary/port-19814
...
fix(sec): Bump tomcatEmbed to 9.0.86 (#19814 ) (backport)
2024-04-18 13:52:46 -04:00
Anton Georgiev
a184c67e44
fix(sec): Bump org.json:json
2024-04-17 14:30:10 -04:00
Anton Georgiev
3b3e7d840a
fix(sec): Bump tomcatEmbed to 9.0.86 ( #19814 )
2024-04-17 14:24:41 -04:00
Paul
183983be7f
Added request content type validation
2024-04-15 11:29:03 -04:00
Paul
1e9e461f50
Check for pressence of query and body
2024-04-15 11:29:03 -04:00
Anton Georgiev
ca7c2d1589
fix(sec): bump postgresql to 42.7.2 ( #19660 )
2024-03-05 21:08:30 -05:00
Anton Georgiev
78ece5f05c
feat(config): Add option to disabled "Download session data" on Learning Dashboard (backport) ( #19641 )
...
* Add option disabledFeatures=learningDashboardDownloadSessionData
* docs: document learningDashboardDownloadSessionData
---------
Co-authored-by: Gustavo Trott <gustavo@trott.com.br>
2024-02-20 09:21:57 -05:00
Anton Georgiev
f50e10b5ea
fix(sec): filter tags in presentation name
2024-01-10 14:15:56 -05:00
Paul Trudel
374ad5045d
chore: Upgrade Grails to 6.1 ( #19193 )
2023-11-23 09:45:45 -05:00
Paul Trudel
d33a1c028a
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
...
Co-authored-by: Gustavo Trott <gustavo@trott.com.br>
2023-10-20 08:27:15 -04:00
Paul Trudel
3dc4cb28d9
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
...
Co-authored-by: Gustavo Trott <gustavo@trott.com.br>
2023-10-20 08:27:09 -04:00
Paul Trudel
bc7c3143ba
Prevent null error when parent meeting does not exist
2023-10-19 19:54:43 +00:00
Anton Georgiev
d24cdfde6f
Merge pull request #18975 from Ithanil/fix_isbreakout_api
...
fix: check for presence of parentMeetingID if isBreakout is true
2023-10-19 14:35:05 -04:00
Anton Georgiev
eb82bbb6de
Merge pull request #18981 from antobinary/spring-bump
...
chore: upgrade Spring to 2.7.17
2023-10-19 14:27:16 -04:00
Gustavo Trott
c026ecc727
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
2023-10-19 14:46:10 -03:00
Gustavo Trott
73b7bded08
Update bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy
2023-10-19 14:45:59 -03:00
Anton Georgiev
a2d7743773
chore: upgrade Spring to 2.7.17
2023-10-19 13:11:21 -04:00
Anton Georgiev
df6da10cea
chore: upgrade Spring to 2.7.17
2023-10-19 12:42:41 -04:00
GuiLeme
d6670a4145
[issue-18924] - changes in review, and added possibility to insert a name along with URL
2023-10-19 10:27:38 -03:00
Jan Kessler
520668632f
fix check for presence of parentMeetingId if isBreakout is true
2023-10-19 10:53:54 +02:00
GuiLeme
a22068be18
[Issue-18924] - Changed parameter name to preUploadedPresentation
2023-10-17 10:38:44 -03:00
GuiLeme
d7d228d047
[Issue-18924]
2023-10-17 10:26:09 -03:00
GuiLeme
0aacb12cc8
[issue-18408-back-end] - added disabled download of converted presentation
2023-08-25 11:37:32 -03:00
GuiLeme
2cf6720b5f
[issue-18408-back-end] - change name of download original pres
2023-08-25 09:27:01 -03:00
Ramón Souza
4b6686ef76
add comment
2023-07-31 17:07:41 -03:00
Anton Georgiev
6b76d9aa66
Merge remote-tracking branch 'bbb/v2.6.x-release' into merge-july-21
2023-07-21 16:24:45 -04:00
Paul Trudel
fea3a6fb1e
Upgraded tomcat to 9.0.78
2023-07-17 11:10:10 +00:00
Anton Georgiev
3610ca53e6
Merge pull request #18154 from paultrudel/java-17-upgrade
...
build: Java 17 support
2023-06-15 07:48:26 -04:00
Anton Georgiev
a962a44c74
Merge branch 'v2.6.x-release' of github.com:bigbluebutton/bigbluebutton into june14merge
2023-06-14 10:07:54 -04:00
Paul Trudel
e6335ae8d0
Upgrade gorm and groovy versions
2023-06-13 15:02:56 +00:00
Paul Trudel
b43d46091c
Fully remove dependency
2023-06-08 17:35:12 +00:00
Paul Trudel
299ffd49fa
Remove commons-fileupload dependency
2023-06-08 17:30:57 +00:00
Anton Georgiev
49d48c0945
Merge pull request #18097 from ramonlsouza/16120
...
feat: Add Lock Setting For Viewer Annotations
2023-06-08 11:12:22 -04:00
Anton Georgiev
411ac84cf7
Merge pull request #18030 from danielpetri1/mime-fixes
...
refactor(bbb-web): Use Tika as MIME type detection tool
2023-06-07 12:41:53 -04:00
Anton Georgiev
b699a46802
Merge pull request #17975 from paultrudel/breakout-room-exception-fix
...
fix: Added check for parentMeetingId if isBreakout is true
2023-06-06 09:35:04 -04:00
Anton Georgiev
1146ab9be9
Merge branch 'v2.6.x-release' of github.com:bigbluebutton/bigbluebutton into merge-26-27-june-6
2023-06-06 09:28:53 -04:00
Ramón Souza
22b02ead28
Merge remote-tracking branch 'upstream/v2.7.x-release' into 16120
2023-06-06 08:45:29 -03:00
Daniel Petri Rocha
d2762657ee
Merge branch 'v2.6.x-release' into mime-fixes
2023-06-06 12:12:13 +02:00
danielpetri1
ffeb8c3acb
Allow multiple MIME types per extension
2023-06-06 10:08:14 +00:00
Paul Trudel
fe43eba452
Allow default presentation to bypass localhost check
2023-06-05 14:32:25 +00:00
Anton Georgiev
748c7a4a0b
Merge branch 'v2.6.x-release' of github.com:bigbluebutton/bigbluebutton into june227
2023-06-02 09:45:34 -04:00
Anton Georgiev
e92862ee00
Merge pull request #17986 from paultrudel/meeting-info-attendee-update
...
fix(Meeting API): Only include online users in attendee list
2023-05-31 18:29:14 -04:00
Anton Georgiev
b18aff32e6
Merge pull request #18045 from paultrudel/ssrf-fix
...
fix(sec): SSRF fix
2023-05-31 18:19:40 -04:00
prlanzarin
4d1aa87a88
feat: only record media while meeting is being actively recorded
...
Only record media (microphone, webcams and screens) while meeting is
being actively recorded (ie an user has enabled recording in the
conference). If the conference's recording is paused, media capture will
stop as well (with appropriate recording events).
A bigbluebutton.properties/API#create parameter called
`recordFullDurationMedia` is added to control this behavior. The default
is false (only capture while recording is active). Setting it to `true`
enables the current (legacy) behavior: always capture media if the
meeting's `recorded` prop is true.
2023-05-31 16:36:11 -03:00