aboutsummaryrefslogtreecommitdiffstats
path: root/perllib/FixMyStreet/App/Controller
Commit message (Collapse)AuthorAgeLines
* Fix CSRF issue with new login during process.Matthew Somerville2016-07-06-0/+3
| | | | | | If you had no session cookie, started reporting a problem, logged in through that process, you would then get a CSRF error as the token had been created before the session was.
* Improve CSRF tokens and add to more forms.Matthew Somerville2016-07-06-55/+71
|
* Improve auth flow taken when return key used.Matthew Somerville2016-07-06-5/+6
|
* Redirect correctly if filter used sans JavaScript.Matthew Somerville2016-07-06-2/+5
| | | | | It was being treated as a new report and showing errors, rather than showing you the same page with updated filters. Fixes #1422.
* Handle reports/updates by logged in abuse entries.Matthew Somerville2016-05-27-0/+10
|
* Add search boxes to admin index page, move stats.Matthew Somerville2016-05-20-28/+41
| | | | Move most index page statistics to their own pages.
* Merge branch '1286-catching-gaze'Matthew Somerville2016-05-18-10/+7
|\
| * Fallback if request to Gaze fails.Matthew Somerville2016-05-18-10/+7
| | | | | | | | Fixes #1286.
* | Improve in-place moderation UIZarino Zappia2016-05-18-0/+11
|/ | | | | | | | | | | This rearranges the moderation UI into logical chunks, and improves the 'revert to original' checkboxes by: - hiding them unless there's some original text to revert to - displaying the text that will be reverted to in the appropriate input fields when checked. Part of mysociety/FixMyStreet-Commercial#731
* Don't allow photo IDs to be prepended with 0s.Matthew Somerville2016-05-18-1/+1
|
* Fix removal of cached update photos.Matthew Somerville2016-05-18-2/+2
| | | | | It was possible that rotating an update photo did not remove its cached copy.
* Allow change of email in admin to existing entry.Matthew Somerville2016-04-27-3/+15
|
* Merge branch '1383-remove-dead-projects'Matthew Somerville2016-04-22-88/+29
|\
| * Remove final web/fixmystreet templates.Matthew Somerville2016-04-20-1/+1
| | | | | | | | And associated, e.g. nothing references fixmystreet-old-box.js any more.
| * Remove some unused cobrands.Matthew Somerville2016-04-20-87/+28
| |
* | Send unresponsive body data per category to app.Matthew Somerville2016-04-22-2/+11
| | | | | | | | | | | | The app doesn't currently use the unresponsive body data returned via /report/new/ajax, so make sure it's returned via the category look up it does make.
* | Merge remote-tracking branch 'origin/twitter-login'Matthew Somerville2016-04-22-16/+99
|\ \
| * | Add Twitter social login.Matthew Somerville2016-04-08-16/+99
| | |
* | | Ignore empty entries in the image upload IDs.Matthew Somerville2016-04-20-1/+1
| |/ |/|
* | Merge remote-tracking branch 'origin/1302-support-pngs'Matthew Somerville2016-04-20-9/+16
|\ \
| * | Add PNG image support.Matthew Somerville2016-04-08-9/+16
| |/ | | | | | | | | | | | | Store image type along with hash in photo column, and use that when outputting images / generating URLs. Make sure all public photo URL generation goes through appropriate functions, and change temp URLs so the filename can be output directly from the list.
* / Use better link to reports on admin body page.Matthew Somerville2016-04-20-18/+0
|/ | | | Remove unused body/area ID URL code.
* Merge remote-tracking branch 'mysociety/refactor-email'Matthew Somerville2016-03-31-2/+1
|\
| * Refactor email handling to use Email::MIME alone.Matthew Somerville2016-03-30-2/+1
| |
* | [fixmystreet.com] Move country lookup client side.Matthew Somerville2016-03-31-16/+0
| | | | | | | | | | There's no need for the IP->country lookup, only used in JavaScript to display a banner, to require a call to the FixMyStreet server.
* | [fixmystreet.com] Fix for two-tier unresponsive.Matthew Somerville2016-03-29-1/+3
|/ | | | | | Make sure the unresponsive message shows, if you're in a two-tier area and one of the areas is marked as unresponsive, for all the categories of that area.
* Updates to cpanfile and code for perl 5.20/5.22.Matthew Somerville2016-03-23-6/+6
| | | | | | | | | | | | | | | | | | | | The following modules had bugs that have been fixed for working in recent perls: * List::MoreUtils * Guard * PadWalker * aliased * URI * Convert::NLS_DATE_FORMAT The CGI module was removed from core in 5.20, so include it in the snapshot (I don't think it's actually used, but is a dependency). "{" needs to be escaped in regular expressions, and ~~ should not be used. Fix some tests that expect e.g. a certain hash ordering, to use sorted output or better comparisons.
* Don't double-decode geocoded addresses.Matthew Somerville2016-03-15-3/+6
| | | | | | | | | Perl 5.20 introduced a version of Encode that errors on decoding already decoded content (rather than returning the same string). Whilst this can be taken as a bug in our code (although the decoding exists because some versions of FastCGI silently UTF-8 encode the content), in the changelog for Perl the only reference to this change is the line: "Encode has been upgraded from version 2.49 to 2.60.".
* Set page stash variable even if map unused.Matthew Somerville2016-03-11-1/+1
| | | | | This variable can then be used by e.g. extra_name.html to know what form it is on.
* Add cobrand-specific custom reporting fields.Matthew Somerville2016-03-09-6/+9
| | | | | | This adds a new cobrand variable, report_form_extras, which contains a list of extra fields that will be saved in the 'extra' metadata of the report. Fields may optionally be marked as required.
* Rename process_extras to process_open311_extras.Matthew Somerville2016-03-08-4/+4
| | | | | It is currently only used for processing extra fields (the list, not the metadata hash) which is really only of relevance to Open311.
* Helper function for fetching database secret.Matthew Somerville2016-02-19-2/+2
|
* Merge remote-tracking branch 'mysociety/add-osm-link-to-email'Matthew Somerville2016-02-09-3/+2
|\
| * Switch final few JSON uses to JSON::MaybeXS.Matthew Somerville2016-02-09-3/+2
| |
* | Exclude update alerts from summary alert counts.Matthew Somerville2016-02-09-1/+1
|/ | | | | | There might be the odd update alert we are interested in (those not auto-signed up for as part of report or update creation), but they will be rare.
* If app user logged in, perform alert signup.Matthew Somerville2016-01-27-0/+1
| | | | Thanks to @jonkri for spotting.
* Merge branch '1146-social-login'Matthew Somerville2016-01-27-128/+359
|\ | | | | | | | | | | Conflicts: templates/web/base/report/new/fill_in_details_form.html templates/web/base/report/update-form.html
| * Add login by Facebook on generic auth screen.Matthew Somerville2016-01-22-12/+16
| |
| * Add login by Facebook when updating.Matthew Somerville2016-01-22-38/+129
| | | | | | | | Makes the flow more like new reporting.
| * Add login by Facebook when reporting.Matthew Somerville2016-01-22-45/+189
| |
| * Switch to JSON::MaybeXS, remove JSON::XS.Matthew Somerville2016-01-22-33/+25
| | | | | | | | | | | | Travis has Cpanel::JSON::XS preinstalled, which means that the build would fail there, as JSON::MaybeXS would try and upgrade JSON::XS to version 3 which the snapshot did not contain.
* | Improve some error pages.Matthew Somerville2016-01-26-5/+1
|/ | | | | Use design of auth/token in generic error, 404, and token server error pages, and use the same error for too old/ token not found errors.
* Add ability to have multiple update photos.Matthew Somerville2016-01-12-10/+15
| | | | Also adds admin ability to rotate update photos.
* Factor multiple photo details into nicer function.Matthew Somerville2016-01-12-62/+8
| | | | | Remove get_photo_params, which only looked at the first photo, make explicit when we're doing that using `.first`.
* Remove most passing of Catalyst to PhotoSet.Matthew Somerville2016-01-12-5/+5
|
* Handle multiple photo rotation/removal in admin.Matthew Somerville2016-01-08-3/+31
|
* [fixmystreet.com] Don't show app step if used app.Matthew Somerville2016-01-06-0/+1
| | | | Fixes #1305.
* Remove unnecessary code, as ID is always a number.Matthew Somerville2016-01-06-6/+0
|
* Fix bug showing reports on Your Reports.Matthew Somerville2015-12-17-2/+2
| | | | | 92dfeac used an incorrect user column name in the new lookup, and there was no test to catch the regression.
* Add multiple photo upload support.Zarino Zappia2015-12-16-12/+35
| | | | | | | | | | Three file inputs, progressively enhanced with dropzone. This moves the photo input higher up, so that photos can upload while you're filling out the form. It standardises and improves photo error handling. [fixmystreet.com] Guidance for what photos should and shouldn’t include.