version 2.0.0

pre-release. will update release notes when CHANGELOG is updated in 2.0.1+

version 1.8.19 build 4

Merge pull request #753 from OSC/fix-ci

gitlab ci use bash variable expansion instead of grep to remove v

version 1.8.19 build 3

This is a rebuild of 1.8.19

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.19-3.el7

Fixed

• don't use cached cluster value if it's not available #748
• fix accessability of buttons in active jobs table #732

Changed

• use specific versions of packaging repo in #735

version 1.8.19

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.19-1.el7

Fixed

• don't use cached cluster value if it's not available #748
• fix accessability of buttons in active jobs table #732

Changed

• use specific versions of packaging repo in #735

version 1.8.18

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.18-1.el7

Changelog

Fixed

• Fix name of setting security_csp_frame_ancestors in example ood_portal_example.yml file

version 1.7.19

Security

• backport security fix from OnDemand 1.8
  to properly escape user input when creating job template in job composer as
  reported as CVE-2020-27958

version 1.8.17

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.17-1.el7

Changelog

Fixed

• build bin from nginx_stage gemspec which can end up placing the ruby/node/python wrappers in your PATH which causes issues #719

Changed

• replace security_disable_frames with security_csp_frame_ancestors setting that lets you set the value of this header and defaults header to servername instead of none #721

version 1.8.16

Install

Ensure you are using the latest yum repo and then do (for EL7):

yum update ondemand-1.8.16-1.el7

Changelog

Fixed

• accessibility: update html titles of apps to be a little more specific to reduce ambiguity #698

Security

• properly escape user input by using Open3 capture methods #702
• by default, set Content Security Policy frame-ancestors: none for all requests, which can be disabled setting security_disable_frames: false in the ood_portal.yml #697
• by default, set HSTS if SSL is in use, which can be disabled setting security_strict_transport: false in the ood_portal.yml #697

version 1.8.15

Fixed

• replace text "XDMoD" with "Open XDMoD" in Job Composer

Version 1.8.14

Added

• log formatting options for apache and nginx access logs #677.

Changed

• Changed language to 'Open XDMoD' #687.
• Update to 5.2.4.4 and ood_core 0.14.0 #690.

Fixed

• Fixed XDMoD queries for staff users #688.