ID: 13903
Title: Introduce additional CSRF checks
Component: Setup
Level: 1
Class: Security fix
Version: 2.2.0i1
Previous to this Werk most data changing requests needed a transaction id. This
mechanism was not used in all methods and in some cases the transaction id
mechanism was not a good fit. So now a new CSRF token is introduced and checks
are implemented in various locations.
If you scripted the UI you need to parse the CSRF token from the HTML and send
it with the Post requests.
ID: 14320
Title: Fix KeyError on mknotifyd start after upgrade to 2.1.0
Component: Notifications
Level: 1
Class: Bug fix
Version: 2.2.0i1
If the notification spooler was used on a remote site, after upgrade to 2.1.0
the start of the mknotifyd could fail with the error "KeyError: 'encryption'".
ID: 14032
Title: fix escaping in path parameters
Component: REST API
Level: 1
Class: Bug fix
Version: 2.2.0i1
Previously the REST API sent links containing characters (e.g. ':') which were not properly escaped.
Using them directly without additional escaping could result in a HTTP 404 error.
This is now fixed. No further action is neccessary.
ID: 14033
Title: Correct ruleset links for special agents
Component: REST API
Level: 1
Class: Bug fix
Version: 2.2.0i1
Previously the REST API would report incorrect ruleset names for special agents,
including wrong links to the rulesets.
This has now been fixed. No further action necessary.
ID: 14339
Title: Jira & Jenkins special agents: fix password store usage
Component: agents
Level: 1
Class: Bug fix
Version: 2.2.0i1
The special agents for Jira and Jenkins offered the password store usage in
the user interface, but did not properly retrieve passwords from the store if
used.
ID: 13785
Title: netapp_api_qtree_quota: some instances of Qtree services not discovered
Component: Checks & agents
Level: 1
Class: Bug fix
Version: 2.2.0i1
In the event that a quota with the same name exists both with the quota type
"user" and "tree", the relevant Qtree instance could not be discovered. This
has been fixed.
ID: 14319
Title: Fix error on using folder in rule search
Component: Setup
Level: 1
Class: Bug fix
Version: 2.2.0i1
If the option "Folder" was used in the rule search, submitting the search
button lead to the error "The selected element 'None' is not longer available.
Please select something else.".
ID: 14119
Title: Fix ignored site filter on exporting views as PDF report
Component: Reporting & Availability
Level: 1
Class: Bug fix
Version: 2.2.0i1
If you used site filters in views and the option "Export" -> "This view as
PDF", the generated report contained all site results.
ID: 14120
Title: Fix error while removing event console rule MKPs
Component: Setup
Level: 1
Class: Bug fix
Version: 2.2.0i1
If MKPs with event console rules were removed, the error "list assignment index
out of range" could occur.
ID: 13947
Title: Add blank seperator to dashboard tooltips
Component: Multisite
Level: 1
Class: Bug fix
Version: 2.2.0i1
On some dashboard tooltips there was a space missing between the two words of the tootltip.
It is now correctly sperated.
For example, the tooltip will now display "Namespace my-namespace" instead of "Namespacemy-namespace".