(Redmine issue: #3361)

When searching events, timeline, reports or hosts upper time interval threshold will be set to enable result caching and link sharing. (Redmine issue: #6308)

(Redmine issue: #1017)

(Redmine issue: #1017)

(Redmine issue: #3387)

When displaying flash messages or link tooltips it was possible to perform stored CSRF attack by crafting malicious object properties (group name, filter name, etc.)

(Redmine issue: #3443)

The auth_dev authentication module was accidentaly enabled by default in configuration file shipped with Mentat packages. It was changed at some point locally during development and the change was accidentally committed. The documentation was missing the warning about disabling it during installation in production deployment. This is fixed now.

(Redmine issue: #6308)

(Redmine issue: #3387)

(Redmine issue: #6308)

Additional changes to commit:afde506f. (Redmine issue: #6308)

(Redmine issue: #6308)

To enable search result caching. (Redmine issue: #6308)

(Redmine issue: #6237)

Needs polishing, implemented quickly to perform performance benchmarking. (Redmine issue: #6308)

According to notes in attached issue, pie charts, grand total and shares do not make much sense for multivalue statistics. This commit replaces these visualisations with simple horizontal bar charts with absolute counts, shares in data table are calculated against event total. I have stumbled upon hideous gotcha when working with NVD3 library. For some reason authors choose 'values' as a dictionary subkey containing data series. This however collides with built-in values javascript method. I have spent quite some time trying to figure out why am I not able generate the data structure for bar chart programmatically. (Redmine issue: #6308)

To be more comparable and reduce tha amount of data transfered to the browser. (Redmine issue: #6308)

(Redmine issue: #6308)

There were issues with sorting and toplisting, when different data types were used to describe ports or protocols. (Redmine issue: #6308)

(Redmine issue: #6308)

Particularly painfull was missing truncation when calculating port statistics.

(Redmine issue: #6308)

(Redmine issue: #6127)

(Redmine issue: #3387)

Something weird is going on when tests are executed under nosetests. They seem not to be executed in clean environment. When executed separately, they pass. This needs further inspection, but I do not have to do this right now and I need the build to pass. I am sure the tests are working, so I will disable them for the moment.

(Redmine issue: #1017)

Quite funny error, discovered only after installing from WHL package to different host.

(Redmine issue: #3387)

Following new timeline aggregation were added:
* source and target port
* source and target type/tag
* detector type/tag
* protocols

I have implemented means for comparing 'aggregate' calculations within database with in memory calculations from timeline data, so that we can choose the best option.

For better performance it is now possible to restrict set of calculations in search form.

(Redmine issue: #6308)

* auth
* auth_api
* auth_dev
* auth_env
* auth_pwd
* users
* groups
* changelogs
* devtools
* home

(Redmine issue: #3443)

Custom CSS, JS and image files were moved to application`s static folder. (Redmine issue: #3443)