thingsboard

Commit Graph

Author	SHA1	Message	Date
Igor Kulikov	ff1a5c7257	Merge branch 'lts-4.2' into feature/iot-hub	4 months ago
Maksym Tsymbarov	b0a42a87a9	Upgrade Angular to one version	4 months ago
Maksym Tsymbarov	851f9c293b	Fixed CVE-2026-9277	4 months ago
Maksym Tsymbarov	24fda42116	Fixed CVE-2026-12143	4 months ago
Maksym Tsymbarov	01f2cc493a	Fixed CVE-2026-53571	4 months ago
Igor Kulikov	475d680d74	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	328f1d6cd7	test(iot-hub): use WIDGET in install-plan dedupe tests so root-entry isAlreadyInstalled check applies	4 months ago
Maksym Tsymbarov	10888e5ead	Fixed CWE-426 and CWE-494	4 months ago
Maksym Tsymbarov	f459e3a0c6	Fixed CVE-2026-54268	4 months ago
Maksym Tsymbarov	7dbbfcc903	Fixed CVE-2026-48779	4 months ago
Maksym Tsymbarov	62783c1ca6	Fixed CVE-2026-54290	4 months ago
Viacheslav Klimov	6653f5570b	Merge branch 'lts-4.3' into rc	4 months ago
Viacheslav Klimov	6d3281da7e	Merge remote-tracking branch 'origin/lts-4.2' into lts-4.3	4 months ago
Viacheslav Klimov	f412309695	Merge pull request #15797 from thingsboard/fix/cves-master Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011	4 months ago
Viacheslav Klimov	39b7bf8946	Merge pull request #15796 from thingsboard/fix/cves-lts-4.3 Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011	4 months ago
Viacheslav Klimov	5dc65be6ab	Merge pull request #15795 from thingsboard/fix/cves-lts-4.2 Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011	4 months ago
Viacheslav Klimov	41e5008383	Merge fix/cves-lts-4.3 into fix/cves-master	4 months ago
Viacheslav Klimov	cf6446d18f	Merge fix/cves-lts-4.2 into fix/cves-lts-4.3	4 months ago
Viacheslav Klimov	d54528ef55	Bump io.netty:netty-bom from 4.1.134.Final to 4.1.135.Final to fix CVE-2026-44249, CVE-2026-44250, and 10 others	4 months ago
Igor Kulikov	3464b7a6e7	Merge branch 'feature/lts-4.3-iot-hub' into feature/4.4-iot-hub	4 months ago
Igor Kulikov	400aab24ee	Merge branch 'master' into feature/4.4-iot-hub	4 months ago
Igor Kulikov	d36abea301	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	9c21f8bcbe	Merge branch 'lts-4.3' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	3c95be4ed9	Merge branch 'lts-4.2' into feature/iot-hub	4 months ago
Vladyslav Prykhodko	479b1cbe7c	Merge pull request #15792 from vvlladd28/merge/160626/rc Merge rc to master	4 months ago
Vladyslav_Prykhodko	94ac17c4ea	Merge remote-tracking branch 'upstream/rc' into merge/160626/rc # Conflicts: # pom.xml # ui-ngx/src/app/modules/home/components/widget/widget-config.component.html	4 months ago
Vladyslav_Prykhodko	bc7f8c6ef4	Merge remote-tracking branch 'upstream/lts-4.3' into rc	4 months ago
Vladyslav_Prykhodko	a1365d0ca3	Merge remote-tracking branch 'upstream/lts-4.2' into lts-4.3 # Conflicts: # ui-ngx/src/app/modules/home/pages/security/security.component.html	4 months ago
Maksym Tsymbarov	9728e2c03d	Fixed device/asset profile import when default rule chain no longer exists (#15718 ) * Fixed device/asset profile import when default rule chain no longer exists * Minor fixes * Code refactorings and optimizations	4 months ago
Maksym Tsymbarov	9c610c4707	Fixed sync highlight overlay scroll on Safari in string-pattern-autocomplete (#15754 ) * Fixed sync highlight overlay scroll on Safari in string-pattern-autocomplete * Minor adjustment * Code improvements	4 months ago
Maksym Tsymbarov	a94381b702	Fixed change Password button stays disabled when form is filled programmatically (#15701 ) * Fixed change Password button stays disabled when form is filled programmatically * Minor fixes	4 months ago
Maksym Tsymbarov	07af9eaf27	Added hint for Unread notifications widget in widget selector	5 months ago
Maksym Tsymbarov	0072074b0e	Fix no widgets shown in mobile view after state transition from divided layout	5 months ago
Igor Kulikov	6b94053b7f	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	5fa837fb03	fix(iot-hub): restrict installed-items list sort property to a server-side allow-list Unvalidated sortProperty on GET /api/iot-hub/installedItems was passed straight into Spring Data's Sort.by, so a client could trigger a 500 PropertyReferenceException by naming an unknown entity field. Add ALLOWED_SORT_PROPERTIES on IotHubInstalledItemEntity (createdTime, itemName, itemType, version) and call validatePageLink in the service so the failure is a 400 with a clear message.	4 months ago
Maksym Tsymbarov	0d476bfaba	Fixed Switch Control widget hanging on one-way persistent RPC	5 months ago
Maksym Tsymbarov	8ddfab317a	Fixed Advanced Widget Style Editor rendering (#15731 ) * Fixed Advanced Widget Style Editor rendering * Moved styles to class for styles consistency	4 months ago
Igor Kulikov	3571980aaa	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	a4e4f56158	fix(iot-hub): show connection-method selector step even when a single method is available	4 months ago
Igor Kulikov	729cdfc046	test: align DeviceConnectivityUtilTest with new DockerComposeParams signature	4 months ago
dpinkevych	4e2bffa559	add help pages for html container	4 months ago
Igor Kulikov	d0e14521c3	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	77c74d7ccd	fix(iot-hub): compensate orphaned entities when installed-item tracking save fails If iotHubInstalledItemService.save throws after the local entity was already created, the entity was orphaned — visible in the tenant but invisible to IoT Hub update/delete. Extracted the per-type entity-deletion dispatch from deleteInstalledItem into a deleteEntityForDescriptor helper and call it from doInstallVersion and registerDeviceInstall on tracking-save failure. registerDeviceInstall now also wraps reportVersionInstalled best-effort to match doInstallVersion.	4 months ago
Igor Kulikov	3ccb437d94	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	62c1963507	fix(solutions): clamp solution-template installTimeoutMs to a configurable max The post-install Thread.sleep was driven by installTimeoutMs from the uploaded solution.json with no upper bound — a malicious or misconfigured template could pin an HTTP worker thread indefinitely. Cap it at a configurable max (default 60s) exposed as iot-hub.max-install-timeout-ms with an IOT_HUB_MAX_INSTALL_TIMEOUT_MS env override.	4 months ago
Igor Kulikov	d7aa0889ae	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	93b50bdf96	fix(solutions): bound solution-template zip extraction to mitigate zip-bomb attacks Stream entries through a fixed buffer and abort with IOException when the archive crosses any of three configurable thresholds: total uncompressed bytes, per-entry uncompressed bytes, or entry count. Defaults — 200 MiB total, 50 MiB per entry, 10 000 entries — and env-var overrides IOT_HUB_MAX_UNCOMPRESSED_ARCHIVE_BYTES / IOT_HUB_MAX_UNCOMPRESSED_ENTRY_BYTES / IOT_HUB_MAX_ARCHIVE_ENTRY_COUNT are exposed under iot-hub in thingsboard.yml.	4 months ago
Igor Kulikov	5c577a391b	Merge branch 'feature/iot-hub' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	f264c123f8	Merge branch 'lts-4.3' into feature/lts-4.3-iot-hub	4 months ago
Igor Kulikov	d839f1b465	Merge branch 'lts-4.2' into feature/iot-hub	4 months ago

1 2 3 4 5 ...

28102 Commits (28db33ba26eca26ca7bd865c7710e7bea0bc28af) All Branches Search

28102 Commits (28db33ba26eca26ca7bd865c7710e7bea0bc28af)

All Branches