aboutsummaryrefslogtreecommitdiff
path: root/ihatemoney
AgeCommit message (Collapse)AuthorFilesLines
2020-07-26Fix unauthorized access and modification of project data (CVE-2020-15120)Baptiste Jonglez1-2/+2
An authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's private code. With the default configuration, anybody is allowed to create a new project. An attacker can create a new project and then use it to become authenticated and exploit this flaw. As such, the exposure is similar to an unauthenticated attack, because it is trivial to become authenticated. This issue was caused by a wrong database queries in PersonQuery. For more details, see https://github.com/spiral-project/ihatemoney/security/advisories/GHSA-67j9-c52g-w2q9
2020-07-26Relax pin point dependencies (#660)Glandos1-1/+1
* Please don't pin point releases and future releases Fixes #658 * fix expression checked by new flake8 * (really) fix condition * ensure Flask-WTF is ok * don't forget, it's >= not > Co-authored-by: Glandos <bugs-framagit@antipoul.fr>
2020-07-26Improve French translation of email templates (#593)zorun3-11/+11
Co-authored-by: Baptiste Jonglez <git@bitsofnetworks.org> Co-authored-by: Glandos <bugs-github@antipoul.fr>
2020-07-18Add 'pt_BR' and 'ta' to default languages, update changelogBaptiste Jonglez1-0/+2
2020-07-18Change mobile link icon to point to Play Store (#597) (#598)Abo7atm1-1/+1
* Change mobile link icon to point to Play Store (#597) * Link mobile app button to correct page (#597)
2020-07-18Changed @media max-width for .home .card to 450px to make it more responsivekanta1-1/+1
2020-07-18added 'hi' in SUPPORTED_LANGUAGES list in default_settings.pyraghupalash1-0/+1
2020-07-18Translated using Weblate (Tamil)rohitn012-0/+787
Currently translated at 28.1% (65 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/ta/ Added translation using Weblate (Tamil)
2020-07-18Translated using Weblate (Italian)Stefano Mortellaro2-7/+8
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/it/
2020-07-18Translated using Weblate (Portuguese (Brazil))Isabella Rocha de Oliveira2-203/+253
Currently translated at 94.3% (218 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/pt_BR/ Translated using Weblate (Portuguese (Brazil)) Currently translated at 45.4% (105 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/pt_BR/
2020-07-18Added translation using Weblate (Portuguese (Brazil))Rémy Hubscher2-0/+767
2020-07-18Translated using Weblate (German)Milo Ivir2-10/+11
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/de/
2020-07-18Translated using Weblate (Norwegian Bokmål)Allan Nordhøy2-4/+4
Currently translated at 71.4% (165 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/nb_NO/
2020-06-15Translated using Weblate (Chinese (Simplified))Muge Niu2-14/+12
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/zh_Hans/
2020-06-15Translated using Weblate (Hindi)raghupalash2-0/+813
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/hi/ Translated using Weblate (Hindi) Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/hi/ Added translation using Weblate (Hindi)
2020-06-07Translated using Weblate (Norwegian Bokmål)Allan Nordhøy2-7/+7
Currently translated at 71.4% (165 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/nb_NO/
2020-06-07Translated using Weblate (Polish)Szylu2-9/+18
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/pl/
2020-06-02Translated using Weblate (Turkish)Oğuz Ersen2-7/+8
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/tr/
2020-06-02Translated using Weblate (Norwegian Bokmål)Allan Nordhøy2-7/+6
Currently translated at 68.8% (159 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/nb_NO/
2020-06-02Translated using Weblate (French)Glandos2-7/+9
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/fr/ Translated using Weblate (French) Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/fr/
2020-05-30update translations (#641)Glandos15-352/+479
2020-05-30Fix missing format string in norwegian translation (#639)zorun1-1/+1
Co-authored-by: Baptiste Jonglez <git@bitsofnetworks.org>
2020-05-30Rename see to show (#638)Glandos19-49/+48
2020-05-30Translated using Weblate (German)Natalie Jann4-88/+116
Currently translated at 99.1% (229 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/de/ Translated using Weblate (Spanish (Latin America)) Currently translated at 97.8% (226 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/es_419/
2020-05-30Translated using Weblate (Italian)Stefano Mortellaro2-7/+11
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/it/
2020-05-30Translated using Weblate (Turkish)Oğuz Ersen2-202/+242
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/tr/ Translated using Weblate (Turkish) Currently translated at 41.5% (96 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/tr/
2020-05-30Translated using Weblate (Norwegian Bokmål)Allan Nordhøy2-32/+31
Currently translated at 68.3% (158 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/nb_NO/
2020-05-30Translated using Weblate (French)Glandos2-6/+14
Currently translated at 100.0% (231 of 231 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/fr/
2020-05-25fixed bug on tool-tip message (#635)Rajat Singh1-1/+1
Fix #634
2020-05-24Populate the demo project with defaults. (#616)Daniel Atwood3-12/+52
2020-05-24Move Chinese simplified into the right folderAdrien CLERC2-0/+0
2020-05-24Build translationsAdrien CLERC14-0/+0
2020-05-24Translations update from Weblate (#624)Weblate (bot)2-197/+241
Italian 100% Ukrainian 28%
2020-05-24Fix: Change tool-tip message for access code (#623)Rajat Singh1-1/+1
Fix #610
2020-05-21Replace currencyformat_nc with currency filter (#625)Glandos5-8/+12
2020-05-21Improve error handling when sending emails (#595)zorun18-103/+548
In one case, we were not catching a family of possible exceptions (socket.error), and in the two other cases there was no error handling at all. Sending emails can easily fail if no email server is configured, so it is really necessary to handle these errors instead of crashing with a HTTP 500 error. Refactor email sending code and add proper error handling. Show alert messages that tell the user if an email was sent or if there was an error. When sending a password reminder email or inviting people by email, we don't proceed to the next step in case of error, because sending emails is the whole point of these actions.
2020-05-21Add a unified balance table for all sidebar pages (#618)Glandos5-69/+48
2020-05-18Translations update from Weblate (#622)Weblate (bot)2-99/+106
Translated using Weblate (Italian) Currently translated at 36.4% (83 of 228 strings) Translated using Weblate (French) Currently translated at 100.0% (228 of 228 strings)
2020-05-13Translated using Weblate (Polish)Szylu1-15/+14
Currently translated at 100.0% (228 of 228 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/pl/
2020-05-13Translated using Weblate (Chinese (Simplified))Muge Niu1-16/+14
Currently translated at 100.0% (228 of 228 strings) Translation: I Hate Money/I Hate Money Translate-URL: https://hosted.weblate.org/projects/i-hate-money/i-hate-money/zh_Hans/
2020-05-10use currency format everywhere (#619)Glandos3-8/+10
This should unify the number formats, along with #618
2020-05-09Update i18n (#617)Glandos15-201/+616
2020-05-09Translations update from Weblate (#615)Weblate (bot)1-70/+72
Fix #614
2020-05-08update l10n data (#613)Glandos15-1/+14
Add all new localization data from Weblate into main menu: - Chinese - Russian - Polish - Turkish (incomplete) - Ukrainian (incomplete)
2020-05-08Translations update from Weblate (#612)Weblate (bot)2-124/+907
Complete Polish Update Chinese (simplified)
2020-05-07Improve currencies (#604)Glandos8-72/+92
- Rename "No Currency" to ISO4217 "XXX" - Use Babel to render currency symbols and names in currency lists - Improve i18n in bill lists Fix #601 Fix #600
2020-05-07compress jpeg with mozjpeg and png with zopfli (#611)Glandos17-0/+0
2020-05-07Integrate illustrations as a showcase (#544)Jojo14429-23/+1137
Integrate some custom graphics, and a whole comics explanation, only in French for now. Fix #363
2020-05-04Fix order of participants in the statistics page (#608)zorun2-110/+100
This fixes #607 and add a test case for this bug. It also renames participants in test cases to avoid alphabetical ordering. Inserting participants in alphabetical order is a special case, because ordering by ID will be the same as ordering by name. This is a bad idea in test cases, as #607 has shown.
2020-05-03Translations update from Weblate (#606)Weblate (bot)1-67/+89
Fix #605