Commit graph

34 commits

Author SHA1 Message Date
Kijin Sung
2a1aad7c1b Mark old EmbedFilter and Password classes as deprecated 2023-10-04 01:22:30 +09:00
Kijin Sung
dfa1e93c79 Remove unnecessary header and footer from class files
- 아래에 이미 author 언급이 있으므로 중복되는 저작권 표기는 제거
- 클래스 하단에 불필요한 end of file 표시 제거 (파일 하나에 클래스 하나씩이므로
  파일이 중간에 끊겼다면 클래스가 닫히지 않아 쉽게 알 수 있음)
2023-01-30 23:52:23 +09:00
Kijin Sung
c881e73c1d Remove trailing whitespace in legacy class files 2023-01-17 21:07:55 +09:00
Kijin Sung
cb229c2d66 Clean up namespaces 2016-03-14 21:04:27 +09:00
Kijin Sung
7ecd9230c2 Add MediaFilter class to absorb most EmbedFilter functionality 2016-03-13 09:51:15 +09:00
Kijin Sung
6f53a3f068 Check object whitelist in HTMLFilter class, not EmbedFilter class 2016-03-12 22:35:43 +09:00
Kijin Sung
be882d0c5c Do not check allowscriptaccess because HTMLPurifier does it better 2016-03-12 21:11:53 +09:00
Kijin Sung
a1e8d14b0d Move whitelist file to common location 2016-02-16 15:27:41 +09:00
Kijin Sung
e7bacf689a Update embed filter to use Simple HTML DOM Parser 2016-02-16 15:22:12 +09:00
Kijin Sung
f7aad28d2c Remove remaining references to getDBInfo() 2016-02-05 15:18:31 +09:00
Kijin Sung
bd15128e14 embed whitelist를 별도로 캐싱하지 않고 직접 include하여 사용하도록 변경 2016-01-07 10:14:40 +09:00
Kijin Sung
ca3001141c embed whitelist 설정파일에서 XML을 제거하고 http/https를 구분하지 않도록 함 2016-01-07 09:39:55 +09:00
Kijin Sung
15d3ba7ca1 PHP 5 방식의 생성자 (__construct) 사용 2015-04-01 11:30:04 +09:00
bnu
43fd876dfa #331 embed whitelist를 관리페이지에서 설정할 수 있도록 추가 2014-01-24 11:21:35 +09:00
bnu
711cd1ea35 Merge commit '154fc79e99' into develop
Conflicts:
	classes/security/EmbedFilter.class.php
	common/js/common.js
	common/js/xe.min.js
	config/config.inc.php
2014-01-06 11:23:59 +09:00
bnu
072f0ff1ce SECISSUE 2014-01-03 20:19:07 +09:00
bnu
c5845c4758 SECISSUE <object> tag의 XSS 문제 해결. 2014-01-02 20:20:38 +09:00
bnu
5d78cf2300 #64 syntax error 수정. 2013-11-24 15:35:47 +09:00
bnu
932862be1f #64 서버 내 경로를 절대경로로 변경 2013-11-23 11:59:49 +09:00
akasima
736f382b27 #66 install php version check
#16 install rewrite module usable check
#48 htmlspecialchars function params add
2013-11-19 13:32:39 +09:00
khongchi
5693e340fe issue 3645, php5 대응, 함수 대체
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13202 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-11-13 01:40:53 +00:00
akasima
bce0a0b6d4 copyright add to php files
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13186 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-11-08 05:52:51 +00:00
ngleader
2d3f149b5a merge from 1.7.3.5(r13153:r13167)
git-svn-id: http://xe-core.googlecode.com/svn/trunk@13168 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-09-29 23:32:39 +00:00
misol
f70ce644ce Close Connection when there is no connection value.
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13161 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-09-25 15:29:32 +00:00
flyskyko
915cdb3824 issue 2119. supporting php 5.4. object, page and security classes.
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12693 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-02-05 02:33:02 +00:00
flyskyko
0f04bd3f92 merge changes of luminous to maserati (~r12676)
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12680 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-02-04 08:09:07 +00:00
flyskyko
cc47d2b247 merge from branch luminous (version 1.5.4.2, ~r12561)
git-svn-id: http://xe-core.googlecode.com/svn/trunk@12611 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-01-30 05:53:14 +00:00
ovclas
6cf384a37e security defence
git-svn-id: http://xe-core.googlecode.com/svn/branches/luminous@12510 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-01-03 08:23:31 +00:00
ovclas
15fa10dc39 issue 2662 coding convention
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12220 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-11-14 09:59:39 +00:00
ovclas
a6261c58d7 issue 1860 add htmlpurifier to core
support for editor component, widget
check safe iframe in htmlpurifier instead of Embed class


git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@11812 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-10-22 02:45:58 +00:00
flyskyko
5acfe84c14 issue 2494, added a _XE_PATH_ in include statement.
git-svn-id: http://xe-core.googlecode.com/svn/branches/luminous@11500 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-09-25 08:35:35 +00:00
flyskyko
77f5aa2671 merge from 1.5.3.2 (~r11225)
git-svn-id: http://xe-core.googlecode.com/svn/trunk@11226 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-09-13 06:14:45 +00:00
ovclas
a9205610bb issue 2239 chnage empty string to htmlspecialchars
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.3.2@11043 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-08-20 01:45:36 +00:00
ovclas
64192c224c issue 2239 Object, Embed, Iframe source allow by white list
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.3.2@11028 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-08-16 02:11:00 +00:00