Helder Sepulveda
87bbb9eb9f
Merge branch 'master' into bug/validation-messages
2017-11-01 09:33:00 -04:00
Kyle Shockey
1aa1907128
Check for input type and string length before sanitizing a URL
2017-10-31 12:35:08 -07:00
Kyle Shockey
afa615e01d
Add URL sanitizer to avoid javascript: XSS attack vector
2017-10-30 17:43:23 -07:00
HelderSepu
ec2179f019
Fix issue with the error messages
...
Many of the errors where incorrectly showing "Required field is not
provided" when the field was provided but not valid.
This was raised by @ron on PR #3825
2017-10-28 16:21:40 -04:00
kyle
ba6e8d14a3
Merge branch 'master' into bug/3818-definitions-to-authorize-cache-invalidation
2017-10-27 23:55:25 -07:00
Kyle Shockey
2157988212
Don't reach into schema for value
2017-10-27 23:31:47 -07:00
Kyle Shockey
109f7ed430
memoize definitionsToAuthorize based on securityDefinitons value
2017-10-27 22:41:27 -07:00
Kyle Shockey
79ddae1526
Pass correct schema values to parameter state builder for OAS3
2017-10-27 22:23:11 -07:00
kyle
2caca555b1
Merge branch 'master' into bug/3816-oas3-authorize-always-showing
2017-10-26 15:49:05 -07:00
Kyle Shockey
7159649501
Return null instead of empty ImmutableMap in OAS3 securityDefinitions selector
2017-10-26 15:32:14 -07:00
Kyle Shockey
26428cd63b
Provide interceptors to SwaggerClient.resolve
2017-10-26 14:51:00 -07:00
Kyle Shockey
7c917325f0
Linter fixes
2017-10-20 19:31:52 -07:00
kyle
6d22e38a04
Merge branch 'master' into ft/oas3-authorization
2017-10-20 19:07:38 -07:00
Kyle Shockey
631e69f6f8
Pass parameter.schema as schema in OAS 3.0
...
Parameters were restructured in OAS 3.0; schemas are no longer at
the top level of parameters. Adjusting to account for the change.
2017-10-20 16:01:26 -07:00
Kyle Shockey
c9674a1fc5
Refactor Auths component flow; create component that supports HTTP auths
2017-10-18 21:23:28 -07:00
Mark H. Wilkinson
e1a7af4c92
Fix regression with rendering links in Markdown.
2017-10-16 14:40:07 +01:00
kyle
897362a301
Merge branch 'master' into bug/auth-display-regression
2017-10-13 21:27:43 -07:00
Kyle Shockey
d677e534c3
WIP
2017-10-13 21:23:45 -07:00
kyle
a03bcbdaf4
Well, it's "authorization" not "authentication".
2017-10-12 14:58:11 -07:00
kyle
6815f1d7bb
Merge branch 'master' into bug/auth-display-regression
2017-10-12 13:18:00 -07:00
Kyle Shockey
6cf6a85637
Capture state in isAuthorized wrapAction
2017-10-12 13:10:56 -07:00
Kyle Shockey
98b36bdbd2
Moar whitespace
...
This was messing up my editor's syntax highlighting
2017-10-12 13:10:10 -07:00
Owen Conti
3ac24da271
Merge branch 'master' of github.com:swagger-api/swagger-ui into bug/3747-oas3-validate-param
2017-10-11 19:19:51 -06:00
Owen Conti
7344315c34
Added tests for isOAS3 in validateParam function.
2017-10-11 18:34:24 -06:00
Kyle Shockey
8b81bcac48
OAS3 Auth MVP
2017-10-11 16:58:24 -07:00
Owen Conti
a0f8f9a05d
Fixes #3747
...
Update `validateParam` to handle OAS3 parameters.
2017-10-11 17:46:38 -06:00
kyle
f32492b4ee
Merge branch 'master' into bug/3730-empty-body-responses
2017-10-10 17:44:58 -07:00
kyle
37aead915e
Merge branch 'master' into ft/spec-download-interception
2017-10-09 18:07:08 -07:00
Kyle Shockey
74165f5292
Pass configuration interceptors to spec download fetch
2017-10-09 12:10:41 -07:00
Owen Conti
60e8091eed
Add unit test for images in markdown
2017-10-08 10:26:32 -06:00
Owen Conti
a5763a56cc
Merge branch 'bug/3734-markdown-headings' into test/3715-xss-unit-tests
2017-10-08 10:08:45 -06:00
Owen Conti
13aa95ff00
Merge branch 'master' of github.com:swagger-api/swagger-ui into test/3715-xss-unit-tests
2017-10-08 09:58:41 -06:00
Owen Conti
ec76e512e2
Fixes #3730
...
Add extra check for missing response content and contentType
2017-10-08 09:38:08 -06:00
Owen Conti
729fd71546
Fixes #3734
...
Add <h1> and <h2> elements to sanitizer options.
2017-10-08 09:09:29 -06:00
Kyle Shockey
8354132915
Fix problems regarding request body display
2017-10-02 14:45:51 -07:00
Owen Conti
559b315d0d
Initial test for Markdown <script> sanitization
2017-10-01 10:30:41 -06:00
Kyle Shockey
e15b4c85c0
ESLint....
2017-09-29 17:51:12 -07:00
Kyle Shockey
7e6f74080f
Disable Swagger2 auth features in OAS3
2017-09-29 17:49:15 -07:00
kyle
ac634c61ce
Merge branch 'master' into feature/request-url
2017-09-29 14:38:42 -07:00
kyle
44882700c2
Merge branch 'master' into array-model-markdown-description
2017-09-29 14:06:01 -07:00
kyle
263f6feb2f
Merge branch 'master' into ft/default_model_rendering
2017-09-29 13:29:04 -07:00
kyle
ef9fe9d755
Merge branch 'master' into bug/swagger-editor-1502
2017-09-29 12:16:01 -07:00
Kyle Shockey
012313e236
Handle cases where maximum and minimum are 0
2017-09-28 17:59:07 -07:00
kyle
27da2a7d3b
Merge branch 'master' into ft/validation
2017-09-28 17:53:14 -07:00
HelderSepu
a408fb1f23
Correction from @shockey
2017-09-28 20:40:22 -04:00
kyle
3a7a8c9c67
Merge branch 'master' into master
2017-09-28 15:58:41 -07:00
kyle
4f1a8abd0d
Merge branch 'master' into bug/3706-enum-param
2017-09-27 19:48:37 -07:00
Owen Conti
590819ad9b
Fixes swagger-editor/#1502.
...
Change logic for markdown rendering to:
1. Convert source markdown to HTML
2. Sanitize HTML
3. Send sanitized HTML to markdown renderer
2017-09-27 18:05:12 -06:00
Elvin Lemmens
ca1a0fa544
Apply conditions for generating download link correctly
...
Invalid application of AND/OR statements prevented file downloads of other types than application/octet-stream from generating a download link
2017-09-27 12:34:46 +02:00
Owen Conti
31e7ce0c5e
Fixes #3706
...
Add missing "in" argument to `getParameter`
2017-09-25 21:26:44 -06:00