mirror/Plan
2
0
Fork 0
mirror of https://github.com/plan-player-analytics/Plan.git synced 2024-12-21 05:50:18 +08:00
Code Issues Packages Projects Releases Wiki Activity
4,423 Commits 32 Branches 234 Tags 130 MiB
4871d524f7
Commit Graph

4423 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot-preview[bot]
4871d524f7 Bump HikariCP from 3.4.5 to 4.0.0 in /Plan 
Bumps [HikariCP](https://github.com/brettwooldridge/HikariCP) from 3.4.5 to 4.0.0.
- [Release notes](https://github.com/brettwooldridge/HikariCP/releases)
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](https://github.com/brettwooldridge/HikariCP/compare/HikariCP-3.4.5...HikariCP-4.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-25 09:36:18 +00:00
Risto Lahtela
e26a272e60 Fixed TPS Storage test 2021-01-25 11:26:30 +02:00
Risto Lahtela
4085ae310a Fixed TPS Storage test 2021-01-25 11:12:41 +02:00
Risto Lahtela
ccd492c052 Reduced the performance graph size 
Reduced resolution of data:
- Last 30 days: Full resolution (1 per minute)
- Last 60 - 30 days: 1 per 5 minutes
- 60+ days old: 1 per 20 minutes
Effect:
- Reduced /v1/graphs?type=performance size from 21 MB to 9.15 MB (126k rows in database)

Added new endpoint /v1/graphs?type=optimizedPerformance that doesn't parse series separately
- Sends a single array of arrays instead of one array for each series
  - Added a parseDataSeries to graphs.js that translates the data
Effect:
- Reduced from 9.15 MB to 3.35 MB
- Moved some workload to the browser

Affects issues:
- Fixed #1622
 2021-01-24 17:40:30 +02:00
Risto Lahtela
f14dfe7a7c Added a setting to allow X-Forwarded-For to be used for IP security 
Affects following features:
- IP Whitelist
- Password bruteforce guard

Affects issues:
- Close #1716
 2021-01-24 15:59:50 +02:00
Risto Lahtela
bd754c4445 Prevent redirection to another website on login 
Affects issues:
- Fixed #1717
 2021-01-24 12:21:02 +02:00
Risto Lahtela
c44d3d7a7e Prevented a future accidental XSS vulnerability in Register endpoint error 
The username parameter was passed to an exception that is currently turned into
json, but in the future the way this exception is handled could have changed.
 2021-01-24 11:15:38 +02:00
Risto Lahtela
a6c286b0f2 Prevented a future accidental XSS vulnerability in Graph type selection 
The type parameter was passed to an exception that is currently turned into
json, but in the future the way this exception is handled could have changed.
 2021-01-24 11:15:37 +02:00
Risto Lahtela
8544e5a904 Prevented a future accidental XSS vulnerability in Player UUID parsing 
The server parameter was passed to an exception that is currently turned into
json, but in the future the way this exception is handled could have changed.
 2021-01-24 11:15:37 +02:00
Risto Lahtela
d64a967497 Prevented a future accidental XSS vulnerability in Server UUID parsing 
The server parameter was passed to an exception that is currently turned into
json, but in the future the way this exception is handled could have changed.
 2021-01-24 11:15:37 +02:00
Risto Lahtela
5c49e95c7d Fixed XSS in Internal Error page 
Adding a </pre><xss> to an URL that triggered an internal error could be used
to facilitate an XSS attack
 2021-01-24 11:15:37 +02:00
Risto Lahtela
d8626f37a7
Create security_vuln.md 2021-01-24 10:22:49 +02:00
Risto Lahtela
3b52cc5f0c Stop differentiating between wrong pass and user not existing 2021-01-23 21:54:27 +02:00
Risto Lahtela
5fae224ef6 Fixed ErrorContext of some errors being omitted 2021-01-23 21:53:07 +02:00
Risto Lahtela
46e486e00c
Update versions.txt 2021-01-22 21:49:57 +02:00
Risto Lahtela
94abd68086 Don't register the currently running task again inside the task 
Affects issues:
- Fixed #1715
 2021-01-22 21:44:27 +02:00
Risto Lahtela
97096948dc
Update versions.txt 2021-01-22 15:48:14 +02:00
Risto Lahtela
70b9ac1104 Set FullCalendar to use UTC as timezone 
Affects issues:
- Possibly fixed #1239
 2021-01-22 11:32:10 +02:00
Risto Lahtela
97bc28e2b4 Updated ProtocolSupport Extension 
Ignored Access to implementation before detect Exception

Affects issues:
- Fixed #1665
 2021-01-22 11:14:30 +02:00
Risto Lahtela
8423e392bb Don't close DataSource with bad connection 
- Attempt to recursively obtain a valid connection.
  This could lead to StackOverFlowException if db goes
  down, so that is caught.

Affects issues:
- Possibly fixed #1458
 2021-01-22 11:06:12 +02:00
dependabot-preview[bot]
3335765fa2 Bump dagger from 2.31.1 to 2.31.2 in /Plan 
Bumps [dagger](https://github.com/google/dagger) from 2.31.1 to 2.31.2.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31.1...dagger-2.31.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-22 05:36:31 +00:00
dependabot-preview[bot]
4d9ad6a8c9 Bump RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT in /Plan 
Bumps RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-22 05:29:27 +00:00
dependabot-preview[bot]
2630aa3e08 Bump dagger-compiler from 2.31.1 to 2.31.2 in /Plan 
Bumps [dagger-compiler](https://github.com/google/dagger) from 2.31.1 to 2.31.2.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31.1...dagger-2.31.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-22 05:28:11 +00:00
dependabot-preview[bot]
2898378016 Bump mockito-junit-jupiter from 3.7.0 to 3.7.7 in /Plan 
Bumps [mockito-junit-jupiter](https://github.com/mockito/mockito) from 3.7.0 to 3.7.7.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v3.7.0...v3.7.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-22 05:27:14 +00:00
Risto Lahtela
2b737c9973 Fixed offset for graphs with minutes in timezones 
Timezone offset is now a double.

This fix seems very simple, and it kinda is.

HighCharts represents offset in minutes.
Java gives offset in milliseconds, and that was
incorrectly to be assumed as full hours, so the offset
was rounded to an integer. Using a double will allow
all kinds of offsets that still work with highcharts.

Fixes timezones like
- Nepal (GMT+05:45)
- Newfoundland Time (GMT-03:30)

Affects issues:
- Fixed #1652
 2021-01-20 18:12:56 +02:00
Risto Lahtela
6758a56167 Fixed build errors 2021-01-20 17:59:45 +02:00
Risto Lahtela
edddccf329 Updated AAC Extension 
- Disable AAC Extension if using v5 or newer

The event that is used for data gathering in Plan
for AAC is no longer present as an API in AAC past
version 5.0.0.

Because of this there is no data available for AAC,
and the extension is disabled.

Affects issues:
- Close #1673
 2021-01-20 17:37:43 +02:00
Risto Lahtela
fd729360c7 Ignored all UnsupportedOperationExceptions from Extensions 
Affects issues:
- Fixed #1667
 2021-01-20 17:22:56 +02:00
Risto Lahtela
d5a6ccc7a3 Updated Nucleus Extension 
- Removed warnings
- Update server data more frequently

Affects issues:
- #1688
 2021-01-20 17:16:42 +02:00
Risto Lahtela
25d528e2f1 Updated mcMMO Extension 
- Ignores IndexOutOfBoundsException

Affects issues:
- Fixed #1662
 2021-01-20 17:05:40 +02:00
Risto Lahtela
15c9325eb4 Added activity index queries and placeholders. 
- Added CommonQueries#fetchActivityIndexOf
- Added CommonQueries#getActivityGroupForIndex

- Added %plan_player_activity_index%
- Added %plan_player_activity_group%

Affects issues:
- Close #1663
 2021-01-20 16:58:46 +02:00
dependabot-preview[bot]
e220e40a8c
Bump paper-api from 1.13.2-R0.1-SNAPSHOT to 1.16.5-R0.1-SNAPSHOT in /Plan (#1697) 
* Bump paper-api in /Plan

Bumps paper-api from 1.13.2-R0.1-SNAPSHOT to 1.16.5-R0.1-SNAPSHOT.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Removed a method call that is no longer used

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: Risto Lahtela <24460436+Rsl1122@users.noreply.github.com>
 2021-01-20 16:49:18 +02:00
dependabot-preview[bot]
63bc4a667a
Bump bstatsVersion from 1.4 to 1.8 in /Plan (#1706) 
* Bump bstatsVersion from 1.4 to 1.8 in /Plan

Bumps `bstatsVersion` from 1.4 to 1.8.

Updates `bstats-bukkit` from 1.4 to 1.8
- [Release notes](https://github.com/Bastian/bStats-Metrics/releases)
- [Commits](https://github.com/Bastian/bStats-Metrics/commits)

Updates `bstats-sponge` from 1.4 to 1.8
- [Release notes](https://github.com/Bastian/bStats-Metrics/releases)
- [Commits](https://github.com/Bastian/bStats-Metrics/commits)

Updates `bstats-bungeecord` from 1.4 to 1.8
- [Release notes](https://github.com/Bastian/bStats-Metrics/releases)
- [Commits](https://github.com/Bastian/bStats-Metrics/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Update bStats construction

Affects issues:
- Possibly fixed #1680

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: Risto Lahtela <24460436+Rsl1122@users.noreply.github.com>
 2021-01-20 16:43:37 +02:00
Risto Lahtela
c878e71179 Revert 6db7623037 2021-01-20 10:00:07 +02:00
dependabot-preview[bot]
01a8f5e1d3 Bump dagger from 2.31 to 2.31.1 in /Plan 
Bumps [dagger](https://github.com/google/dagger) from 2.31 to 2.31.1.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31...dagger-2.31.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-20 06:17:02 +00:00
dependabot-preview[bot]
6db7623037 Bump RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT in /Plan 
Bumps RedisBungee from 0.3.8-SNAPSHOT to 0.6-SNAPSHOT.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-20 06:08:39 +00:00
dependabot-preview[bot]
414e82395c Bump Extension-FactionsUUID in /Plan 
Bumps Extension-FactionsUUID from 1.6.9.5-U0.5.16-R0.1 to 1.6.9.5-U0.5.16-R0.2.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-20 06:08:00 +00:00
dependabot-preview[bot]
cc9ee830bb Bump dagger-compiler from 2.31 to 2.31.1 in /Plan 
Bumps [dagger-compiler](https://github.com/google/dagger) from 2.31 to 2.31.1.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.31...dagger-2.31.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-20 05:59:32 +00:00
dependabot-preview[bot]
113c9ccb4b Bump placeholderapi from 2.9.2 to 2.10.9 in /Plan 
Bumps placeholderapi from 2.9.2 to 2.10.9.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-20 05:58:16 +00:00
Risto Lahtela
1f4fdd8830 Added extension data support to /players page 
Affects issues:
- #1222
 2021-01-19 18:18:26 +02:00
dependabot-preview[bot]
e64967f3c7 Bump mockito-core from 3.6.28 to 3.7.7 in /Plan 
Bumps [mockito-core](https://github.com/mockito/mockito) from 3.6.28 to 3.7.7.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v3.6.28...v3.7.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-18 05:48:02 +00:00
dependabot-preview[bot]
c81019ec69 Bump mysql-connector-java from 8.0.22 to 8.0.23 in /Plan 
Bumps [mysql-connector-java](https://github.com/mysql/mysql-connector-j) from 8.0.22 to 8.0.23.
- [Release notes](https://github.com/mysql/mysql-connector-j/releases)
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/8.0/CHANGES)
- [Commits](https://github.com/mysql/mysql-connector-j/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-18 05:46:22 +00:00
dependabot-preview[bot]
f19c5fe5ad Bump org.sonarqube from 3.0 to 3.1 in /Plan 
Bumps org.sonarqube from 3.0 to 3.1.

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-16 17:36:48 +00:00
dependabot-preview[bot]
e35403a4ce Bump dagger from 2.30.1 to 2.31 in /Plan 
Bumps [dagger](https://github.com/google/dagger) from 2.30.1 to 2.31.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.30.1...dagger-2.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-15 05:35:21 +00:00
dependabot-preview[bot]
d3bf6ebdbf Bump dagger-compiler from 2.30.1 to 2.31 in /Plan 
Bumps [dagger-compiler](https://github.com/google/dagger) from 2.30.1 to 2.31.
- [Release notes](https://github.com/google/dagger/releases)
- [Changelog](https://github.com/google/dagger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/dagger/compare/dagger-2.30.1...dagger-2.31)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-15 05:27:15 +00:00
dependabot-preview[bot]
6249d53888 Bump bungeecord-api from 1.16-R0.3 to 1.16-R0.4 in /Plan 
Bumps [bungeecord-api](https://github.com/SpigotMC/BungeeCord) from 1.16-R0.3 to 1.16-R0.4.
- [Release notes](https://github.com/SpigotMC/BungeeCord/releases)
- [Commits](https://github.com/SpigotMC/BungeeCord/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
 2021-01-15 05:27:06 +00:00
Alexander Trost
1224eea893
contributors: fix the contributors list commas (#1685) 
Signed-off-by: Alexander Trost <galexrt@googlemail.com>
 2021-01-06 17:01:42 +02:00
Alexander Trost
aa492be01a
locale: fix color code in german translation (#1684) 
This fixes a broken color code for the "Spielerzeit" (playtime) text.

Signed-off-by: Alexander Trost <galexrt@googlemail.com>
 2021-01-06 16:49:34 +02:00
Risto Lahtela
103649dcf5
Merge pull request #1683 from plan-player-analytics/version-5.2 
Version 5.2
 2021-01-05 12:03:47 +02:00
Risto Lahtela
f9d1794e79 Fixed javadoc errors 2021-01-05 11:59:55 +02:00