Marius Balteanu 9b807267ac Add sudo-mode to all 2fa actions ...

The sudo-mode window should ensure this does not impede users
currently setting up 2fa things, but adds protection when not
in 2fa activation/deactivation mode. (#43083).

Patch by Felix Schäfer (user:felix).

git-svn-id: https://svn.redmine.org/redmine/trunk@23918 e93f8b46-1217-0410-a6f0-8f06a7374b81

2025-08-13 05:59:53 +00:00

..

account_controller.rb

Explicitly don't cache sensitive 2FA actions (#43083).

2025-08-13 05:58:49 +00:00

activities_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

admin_controller.rb

Extract project query for admins to a separate ProjectAdminQuery model (#42352).

2025-03-09 23:25:12 +00:00

application_controller.rb

Add OAuth2 provider capability using doorkeeper gem (#24808).

2025-06-12 07:09:03 +00:00

attachments_controller.rb

Fix RuboCop offense Rails/HttpStatus (#39889).

2024-05-18 05:56:55 +00:00

auth_sources_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

auto_completes_controller.rb

Optimize autocomplete issue listing triggered by typing "##" by eager loading trackers (#42574).

2025-04-16 06:50:26 +00:00

boards_controller.rb

Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).

2024-06-12 16:09:37 +00:00

calendars_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

comments_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

context_menus_controller.rb

Add administration setting to allow time logging on closed issues. By default, the setting is enabled (#13596).

2025-03-30 07:48:53 +00:00

custom_field_enumerations_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

custom_fields_controller.rb

Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).

2024-06-12 16:09:37 +00:00

documents_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

email_addresses_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

enumerations_controller.rb

Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).

2024-06-12 16:09:37 +00:00

files_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

gantts_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

groups_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

help_controller.rb

Dynamic generation of supported code highlighting languages in help section (#40681).

2024-05-19 05:07:42 +00:00

imports_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

issue_categories_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

issue_relations_controller.rb

Fix RuboCop offense Rails/HttpStatus (#39889).

2024-05-18 05:56:55 +00:00

issue_statuses_controller.rb

Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).

2024-06-12 16:09:37 +00:00

issues_controller.rb

Optimize IssuesController#show by skipping time tracking queries when disabled (#42144).

2025-01-25 08:18:26 +00:00

journals_controller.rb

Partial quoting feature for Issues and Forums (#41294).

2024-10-09 21:51:52 +00:00

mail_handler_controller.rb

Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).

2024-06-12 16:09:37 +00:00

members_controller.rb

Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).

2024-06-12 16:09:37 +00:00

messages_controller.rb

Introduce reactions feature (so-called "like button") to issues, notes, news, and forums (#42630).

2025-05-11 07:59:16 +00:00

my_controller.rb

Adds @Cache-Control: no-store@ header to login, lost password, change password and sudo pages (#42998).

2025-08-10 13:23:14 +00:00

news_controller.rb

Introduce reactions feature (so-called "like button") to issues, notes, news, and forums (#42630).

2025-05-11 07:59:16 +00:00

oauth2_applications_controller.rb

Add OAuth2 provider capability using doorkeeper gem (#24808).

2025-06-12 07:09:03 +00:00

previews_controller.rb

Fix RuboCop Style/RedundantCondition (#41884).

2025-04-11 09:21:17 +00:00

principal_memberships_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

project_enumerations_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

projects_controller.rb

Avoid unnecessary SQL query for subprojects in ProjectsController#show when project has no children (#42671).

2025-05-06 02:16:37 +00:00

queries_controller.rb

Fixes rubocop offense (#42352).

2025-03-10 00:33:48 +00:00

reactions_controller.rb

Improve method and variable naming for clarity and consistency (#42630).

2025-05-15 05:09:17 +00:00

reports_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

repositories_controller.rb

Downloading .js files from the repository browser fails with a 422 error due to ActionController::InvalidCrossOriginRequest (#42839).

2025-07-05 02:22:30 +00:00

roles_controller.rb

Improve role deletion error message to display projects containing members under the role (#42441).

2025-04-10 10:14:30 +00:00

search_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

settings_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

sys_controller.rb

Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).

2024-06-12 16:09:37 +00:00

timelog_controller.rb

Fix RuboCop offense Rails/HttpStatus (#39889).

2024-05-18 05:56:55 +00:00

trackers_controller.rb

Fix project links in tracker deletion error message to set the status_id filter to "all" (#12521).

2024-11-04 04:50:25 +00:00

twofa_backup_codes_controller.rb

Add sudo-mode to all 2fa actions

2025-08-13 05:59:53 +00:00

twofa_controller.rb

Add sudo-mode to all 2fa actions

2025-08-13 05:59:53 +00:00

users_controller.rb

Add bulk unlock to user list context menu (#40913).

2024-07-13 10:21:49 +00:00

versions_controller.rb

Optimize the rendering of versions on the roadmap by preloading the email addresses of issue assignees (#42682).

2025-05-07 04:39:24 +00:00

watchers_controller.rb

Fix random test failure by ensuring @WatchersController#find_objects_from_params@ returns results in consistent order (#41894).

2024-11-29 07:52:05 +00:00

welcome_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

wiki_controller.rb

Fix N+1 query in Wiki history page by preloading the author of each Wiki content version (#42933).

2025-06-29 04:55:22 +00:00

wikis_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00

workflows_controller.rb

Remove current year from source file copyright headers and update year in footer to 2024 (#40043).

2024-02-26 22:55:54 +00:00