aboutsummaryrefslogtreecommitdiffstats
path: root/server/src
Commit message (Collapse)AuthorAgeFilesLines
* chore: Add a very visible obsoletion message (#12634)Patrik Lindström2024-11-082-0/+23
| | | Adds a warning banner to the Vaadin startup when not in production mode, warning the user about known security vulnerabilities and encouraging them to upgrade to a supported version.
* feat: Update POMs and bump build dependency versions (#12636)Patrik Lindström2024-11-081-1/+1
| | | | | | | | * Ignores VS code project file and updates to .project * Updates DTD hrefs from HTTP to HTTPS * Updates commons-io, commons-cli, commons-codec, hsqldb and animal-sniffer * Fixes dependency management violations * Includes Maven Flatten Plugin for cleaner release POMs * Updates Atmosphere version
* Update copyright year range (#12507)Anna Koskinen2022-01-11555-555/+555
|
* chore: Add comment in Styles (#12480)Tatu Lund2021-11-171-0/+2
|
* fix: Check if injected CSS String is already in the list of injected styles ↵Tatu Lund2021-11-162-4/+49
| | | | | | | | | | | (#12479) * Check if injected CSS String is already in the list of injected styles * Change to package for unit testing * Unit test * Add missing imports
* feat: Add better API to configure maximum allowed rows (#12466)Tatu Lund2021-11-032-4/+22
| | | | | | | * feat: Add better API to configure maximum allowed rows * Add unit test Co-authored-by: Olli Tietäväinen <ollit@vaadin.com>
* Remove obsolete comment and assert in Binder (#12456)Tatu Lund2021-10-281-3/+1
|
* fix: avoid ConcurrentModificationException in Binder (#12458)Tatu Lund2021-10-272-7/+37
|
* fix: don't update bean property which is read-only bound (#12457)Tatu Lund2021-10-272-1/+72
|
* fix: Ensure that side effects of readBean does not set hasChanges true (#12455)Tatu Lund2021-10-272-1/+23
|
* Fixed JavaDoc for setting page title. (#12433)Anna Koskinen2021-10-171-2/+2
|
* fix: Add row limit to DataCommunicator row data requests (#12415)Tatu Lund2021-09-303-0/+42
| | | | | | | | | | | * Add row limit to DataCommunicator row data requests * Add missing constant * Add unit test * Add test for extending Grid * Fixed test
* fix: Add MPR UI id request parameter (#12412)Mikhail Shabarov2021-09-281-0/+6
| | | | | | | | | | | | | * fix: Add MPR UI id request parameter Related-to https://github.com/vaadin/multiplatform-runtime/issues/85 * test: Remove redundant non-empty param test * test: Remove leftovers * fix: Init window.mprUiId earlier than window.vaadin * Add missing '='
* fix: set Vaadin session attribute using lock in reinitializeSession (#12401)Tatu Lund2021-09-162-4/+58
| | | | | | | | | * Cherry picked unit test from Flow See https://github.com/vaadin/flow/pull/11538 * Fix missing import * Cherry pick fix from Flow
* Cleaned out old references to removed buildhelpers and widgets modules. (#12383)Anna Koskinen2021-08-251-3/+0
|
* Update to Jsoup 1.14.2 (#12381)Tatu Lund2021-08-244-6/+20
|
* Add detection of HCL Digital Experience rebranding (#12242)Marcello Barnaba2021-08-091-1/+1
| | | | | | | On HCL Digital Experience 8.5.5 CF19, the `getPortalInfo()` method returns "hcl digital experience/8.5", breaking detection of the servlet engine. This ultimately leads to methods such as `getHeader()` to return NULL, as the upstream HTTP request is not retrieved.
* fix: Prevent deadlock in findOrCreateVaadinSession (#12355)Tatu Lund2021-08-091-11/+30
| | | | | It is possible findOrCreateVaadinSession leaves session locked if HTTP session is invalidated in an another thread between lockSession and unlockSession calls. This PR changes the implementation so that this can no longer happen. fixes: #12352
* fix: Avoid processing value change event due writing back of converted value ↵Tatu Lund2021-08-062-1/+35
| | | | | (#12360) This is both a optimization by skipping duplicate validation round and avoids ConcurrentModificationExpectation being thrown certain corner cases.
* Deprecating Flash component. (#12348)Anna Koskinen2021-07-261-1/+4
| | | Also added missing JavaDocs.
* Checkstyle fixes (#12347)Anna Koskinen2021-07-232-2/+28
| | | | | | | | | | | | - Added, completed, and corrected JavaDocs. - Added an assert to enforce a condition that has always been required. - Added default sections to switch blocks. - Added wildcards. - Deprecated unused methods and variables. - Removed inner assignments. - Removed unused private variables and calls that do nothing. - Updated deprecated calls to use currently recommended versions. - Updated warning suppressions. - ...and some auto-formatting.
* fix: Reuse existing filesystem (#12346)Anna Koskinen2021-07-222-2/+53
| | | Modified cherry-pick of https://github.com/vaadin/flow/pull/11428
* Checkstyle fixes (#12339)Anna Koskinen2021-07-151-3/+0
| | | | | | | | | | | | | | - Added missing default sections to switch blocks. - Added missing JavaDocs and JavaDoc parameters. - Added wildcards where possible. - Deprecated unused method. - Fixed JavaDoc formatting. - Removed inner assignments. - Removed unused imports. - Removed unused variables. - Removed warning suppressions that were unnecessary or about boxing (not tracked by coding conventions). - Suppressed warnings about rawtypes, deprecation, and unchecked where couldn't be avoided.
* Code cleanup (#12333)Anna Koskinen2021-07-0817-121/+188
| | | | | | | | | | | | | | | | - removed unused private methods - removed unused private variables - removed unnecessary initializations - removed unnecessary substring(0) - removed inner assignments - renamed private methods that started with upper case - renamed static final variables to use upper case - converted to use non-deprecated options - suppressed unavoidable warnings - divided long Strings to multiple lines - added missing types - added missing JavaDoc parameters - formatting - updated comments & JavaDocs
* fix: don't serve directories as static files (#12325)Anna Koskinen2021-06-234-9/+793
| | | | | | | Also prevents opening FileSystem for unknown schemes. Modified cherry-picks of https://github.com/vaadin/flow/pull/11072 , https://github.com/vaadin/flow/pull/11147 , and https://github.com/vaadin/flow/pull/11235
* fix: add JavaDoc warning to avoid using ResponseWriter for directories (#12324)Anna Koskinen2021-06-151-0/+7
| | | | | | * fix: add JavaDoc warning to avoid using ResponseWriter for directories Cherry-picked from: https://github.com/vaadin/flow/pull/11112
* Update Atmosphere (#12293)Tatu Lund2021-05-171-1/+1
| | | Fixes concurrency issue with UUIDBroadcasterCache that may lead to loss of packets and thus repeated resynchronizations when using Push.
* Fix validation in non-buffered Grid editor (#12281)Tarek Oraby2021-04-281-0/+5
| | | | | Handle possible race condition by disabling the editor's widget while awaiting validation from the server. Fixes #12270
* Add browser specific handling in setRows (#12141)Tatu Lund2021-04-191-2/+5
| | | | | | | | | | | * Add browser specific handling in setRows Fixes: https://github.com/vaadin/framework/issues/10138 Fixes: https://github.com/vaadin/framework/issues/7878 * Enforced minimum height to 1 rows and added a test. Co-authored-by: Anna Koskinen <anna@vaadin.com>
* feat: Add API to control whether Binder converts back to presentation (#12246)Tatu Lund2021-03-182-3/+55
| | | #12132 fixed an old bug, conversion was not done back, which was a regression from Vaadin 7. However since the bug has been present long time, it has become established behavior, thus there may be need to disable conversion back to presentation sometimes, thus this API as added.
* Add missing 8.13 since tag (#12236)Zhe Sun2021-03-112-3/+3
|
* Fix updating Grid's item set when details rows are open. (#12231)Anna Koskinen2021-03-081-0/+10
| | | | | | | | | | - Old details should close. - New details should open. - If some row has details in both old and new item set, the details row contents should get updated. - Updating details row contents should not break the positioning of the rows and details below. Fixes #12211
* Prevent NPE in comparison (#12218)Tatu Lund2021-03-051-1/+1
| | | Fixes: https://github.com/vaadin/framework/issues/12207
* Update copyright year range. (#12215)Anna Koskinen2021-03-04555-555/+555
| | | | * Update copyright year range.
* update to Atmosphere runtime 2.4.30.vaadin3 (#12214)Olli Tietäväinen2021-03-031-1/+1
|
* Merged column headers should work within declarative Grid. (#12206)Anna Koskinen2021-02-262-10/+15
| | | | | | | | | - null check to prevent NPE from the merged column headers - convert to internal columnIds for merge handling - use correct cell in merge handling - switch away from streams in merge handling for easier readability - regression test Fixes: #10464
* Add API to prevent invalid input when integrated range validator is used ↵Tatu Lund2021-02-191-1/+34
| | | | | | | (#12168) Do not fire DateField's value change event if the new date is not within the range. Fixes: #12163
* Added missing file ending (#12202)Anna Koskinen2021-02-161-0/+0
|
* Clear out ClientCache when UI is detached to prevent a minor memory leak ↵Anna Koskinen2021-02-111-0/+15
| | | | | | | | | | | | | (#12199) * Clear out ClientCache when UI is detached to prevent a minor memory leak Implemented with a listener rather than direct call from UI.detach() in order to avoid new public API, since the whole feature has been marked for removal. This doesn't yet prevent the cache or the type map from getting slightly bloated during the UI's lifetime. See: #3705
* Dead code removal (#12187)Tatu Lund2021-02-041-3/+0
|
* fix: use time-constant comparison for CSRF tokens (#12188)Tatu Lund2021-02-011-1/+5
| | | | | | This hardens the framework against a theoretical timing attack based on comparing how quickly a request with an invalid CSRF token is rejected. Cherry-picked from: https://github.com/vaadin/flow/pull/9875
* fix: use time-constant comparison for security tokens (#12189)Tatu Lund2021-01-293-3/+18
| | | | | | | | | This is the same as https://github.com/vaadin/framework/pull/12188, but also applied for the upload security key and the push id since both of those are also used to protect against cross-site attacks. In addition, documentation for the push id is clarified to point out its role. Cherry-picked from: https://github.com/vaadin/flow/pull/9896
* DateField value should actively adjust to the set resolution. (#12183)7.7.23Anna Koskinen2021-01-226-40/+108
|
* Update Atmosphere vaadin2 patch (#12181)Tatu Lund2021-01-181-1/+1
|
* Add getter for presentationProvider in Grid.Column (#10323) (#12060)jdewaen2020-12-181-0/+12
| | | | | Without access to the presentation provider used for a column, it is often not possible to reconstruct the data as shown on the end-user's screen This commit adds a getter method to Grid.Column to allow access to this provider
* Fix to LayoutManager size calculations during transform. (#12138)Anna Koskinen2020-12-181-0/+34
| | | | | | | | | | | | | | | | | | | | | | | * Fix to LayoutManager size calculations during transform. - ComputedStyle is slower but more reliable than using getBoundingClientRect, which does not work as expected if a transform has been applied to the element or one of its parents. This is a problem e.g. with PopupView, where getBoundingClientRect will return too small size (or even zero size) for all the popup contents while the opening animation is active. ComputedStyle ignores the transform and returns the expected value. - The presence of the element in DOM must be checked before the size is requested from ComputedStyle, if the element has disappeared from DOM without a warning and calculation is attempted anyway, the browser gets stuck. - Possibility to configure LayoutManager to use the less reliable calculations for applications where the slight performance difference is more important than layout issues within elements that have transform animations. - Manual test, problem isn't reproducible by TestBench. Fixes: #11187
* Better error handling trying to enable HTML5 DnD for mobile from thread (#12170)Anna Koskinen2020-12-071-0/+7
| | | | | | | - Informative error message - Reset back to disabled state when enabling fails - Incorrect usage also detectable using non-mobile devices Fixes #12152
* Binder: Also use converter for user-changed values (#12132)Tatu Lund2020-12-032-1/+74
| | | See: https://vaadin.com/forum/thread/15931682
* Replace function reference with anonymous class for serialization (#12137)Tatu Lund2020-11-261-19/+20
| | | | | Lambdas and function references do not serialize See: https://vaadin.com/forum/thread/18462951/vaadin-8-stateful-session
* Make checkAtmosphereSupport() non-static (#12131)Tatu Lund2020-11-241-3/+6
| | | Fixes: https://github.com/vaadin/multiplatform-runtime/issues/77
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-09 00:25:37 +0000