Conversation
|
Semgrep found 1 Risk: Affected versions of rollup are vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Manual Review Advice: A vulnerability from this advisory is reachable if you use Rollup to bundle JavaScript with Fix: Upgrade this library to at least version 4.22.4 at core/core-web/yarn.lock:20607. Reference(s): GHSA-gcx4-mw62-g8wm, CVE-2024-47068 |
| '/api/vtl', | ||
| '/tinymce' | ||
| ], | ||
| target: 'http://localhost:8080', |
|
Please use a Conventional Commit title format for this PR. For more information, see https://www.conventionalcommits.org/en/v1.0.0/ |
The /dA syntax is: /dA/[content's id]/[binary file field variable name] The /contentAsset syntax is: /contentAsset/image/[content's id]/[binary file field variable name] before the change we were just taking the Content's id I am going to create a new issue for the /dotAsset/... url ### Proposed Changes * No we are taking the content's id and the field name to look for the right Content to be track https://github.com/dotCMS/core/pull/31451/files#diff-9a756a0cf33f2fc28cfef619e51e6943ece96c251f3f7c98a77d3bb9e76b126aL88-R141
Removing unnecessary restore keys property from cache action call.
### Proposed Changes * The Old TimeMachineFilter is blocking requests in Live Mode when the tm_date is set in session * I am deprecating this Filter in the hope it can be removed soon * As for now I am disconnecting its execution with another session variable to avoid breaking UX * Also in this PR goes the fix that homologates the response in the **urlContentMap** attribute
… manager (#31468) ### Issue Parent #31384 ### Proposed Changes This pull request focuses on improving the error handling in the `DotHttpErrorManagerService` by updating the way `null` values are handled in tests and by adding new methods for extracting error messages. The most important changes include replacing `null` with `undefined` in test cases and adding new private methods to handle error message extraction. ### Error Handling Improvements: * Updated test cases in `dot-http-error-manager.service.spec.ts` to replace `null` with `undefined` in the `mockResponseView` function calls. This change ensures consistency in how undefined values are handled across the tests. [[1]](diffhunk://#diff-06156a7fee1fe9027dab834d15ba8d8908e9a12555e462c05e28e38d4ef03abdL104-R104) [[2]](diffhunk://#diff-06156a7fee1fe9027dab834d15ba8d8908e9a12555e462c05e28e38d4ef03abdL169-R169) [[3]](diffhunk://#diff-06156a7fee1fe9027dab834d15ba8d8908e9a12555e462c05e28e38d4ef03abdL189-R189) [[4]](diffhunk://#diff-06156a7fee1fe9027dab834d15ba8d8908e9a12555e462c05e28e38d4ef03abdL213-R213) [[5]](diffhunk://#diff-06156a7fee1fe9027dab834d15ba8d8908e9a12555e462c05e28e38d4ef03abdL236-R236) [[6]](diffhunk://#diff-06156a7fee1fe9027dab834d15ba8d8908e9a12555e462c05e28e38d4ef03abdL258-R258) [[7]](diffhunk://#diff-06156a7fee1fe9027dab834d15ba8d8908e9a12555e462c05e28e38d4ef03abdL280-R280) ### Codebase Enhancements: * Added a new private method `getErrorMessage` in `dot-http-error-manager.service.ts` to extract a readable error message from an `HttpErrorResponse`. This method improves the readability and maintainability of the code by centralizing the error message extraction logic. * Introduced another private method `extractMessageFromErrorObject` to handle different error object structures and trim messages if they contain a colon. This method further refines the error message extraction process. ### Checklist - [x] Tests - [x] Translations - [x] Security Implications Contemplated (add notes if applicable) ### Screenshots Original | Updated :-------------------------:|:-------------------------: <img width="1510" alt="Screenshot 2025-02-25 at 2 18 43 PM" src="https://github.com/user-attachments/assets/dd1c0de1-b21f-415e-b256-5fba2ccdf393" /> | <img width="1660" alt="Screenshot 2025-02-25 at 2 18 17 PM" src="https://github.com/user-attachments/assets/91a1c034-da08-4b28-ad79-d318788bc4f5" />
Traditional: https://github.com/user-attachments/assets/57df3ca3-1536-46ba-bf4c-540898c53887 Headless: https://github.com/user-attachments/assets/85fba492-e541-44ba-a95f-0c7894476aae --------- Co-authored-by: Kevin Davila <56242609+kevindaviladev@users.noreply.github.com>
…tomer name, and environment name to Content Analytics events (#31459) ### Proposed Changes * Adding four more attributes to a Customer Analytics Event: * Customer category. * Customer name. * Environment name. * Environment version. * The schema and database table was updated in order to reflect this. * The code changes were added to the `BasicProfileCollector` class. This means that absolutely all Data Collectors will have access to these new attributes, no matter where they're being triggered from.
This scripts calculates and reports the time between issues are included in a Sprint all the way until they get the "Customer Deployed" label.
now the dateTool support toTimeStamp
|
This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
PrimeNG Components Modernization and UI Improvements
Summary
This PR includes a comprehensive update to modernize our PrimeNG implementation, improve component accessibility, and clean up legacy code. The changes focus on updating deprecated modules, enhancing UI consistency, and improving the overall developer experience.
Changes
p-tabsclasses across componentsInputTextareaModule→TextareaModuleDynamicDialogModule→DynamicDialogChipsModule→Chipin autocomplete tagsAdditional Notes
These changes are part of our ongoing effort to modernize our UI components and maintain consistency with PrimeNG's latest best practices. The updates should improve both the developer experience and end-user accessibility.