Kijin Sung
b8569aa5ab
Fix missing semicolon
2017-03-06 15:43:40 +09:00
Kijin Sung
11afa4db42
Add CSRF token to all dynamic forms
2017-03-06 15:37:18 +09:00
Kijin Sung
e82e3fb18c
Implement isSameOrigin() to simplify origin determination
2017-03-06 15:11:45 +09:00
Kijin Sung
14300cbcc3
Insert CSRF token into every AJAX request
2017-03-06 14:47:42 +09:00
Kijin Sung
b3fb993f73
Insert CSRF token in all AJAX requests via exec_xml(), exec_json(), exec_html()
...
일단 공식적으로 지원하는 AJAX 함수 3종에 CSRF 토큰을 삽입해 본다.
추후 체크 방식을 변경하거나 보안을 더욱 강화할 경우 X-CSRF-Token 헤더와 비교할 수도 있다.
일반 폼 제출이나 임의의 AJAX 요청에도 CSRF 토큰을 삽입하는 것은 다음 커밋에...
2017-03-06 11:51:38 +09:00
Kijin Sung
a305745aa5
Automatically insert video when iframe source is pasted into editor
2017-02-18 17:04:07 +09:00
Kijin Sung
e17c4b9c38
Update CKEditor to 4.6.2
2017-02-16 01:17:15 +09:00
Kijin Sung
5b017affa1
Update String.prototype.trim and add String.prototype.escape
2017-01-26 19:12:18 +09:00
conory
699937a09e
action 없이 실행 할 수 있도록
2017-01-21 21:33:58 +09:00
Kijin Sung
65cde17d7e
Fix #351 automatically remove image from editor if attachment is deleted
2016-12-18 10:58:30 +09:00
Kijin Sung
cd80bcb3a7
Fix #494 add option to control auto-insertion of images in editor
2016-12-18 00:24:59 +09:00
Kijin Sung
d981b649c1
Enforce php.ini limits when not using CKEditor + jQuery File Upload
2016-12-17 23:44:18 +09:00
Kijin Sung
73d4ea842f
Display upload progress more accurately, and don't hide the progress bar until server processing is complete
2016-12-17 23:06:59 +09:00
Kijin Sung
d69007e200
Improve debugging
2016-12-17 21:54:00 +09:00
Kijin Sung
13b14dc7f5
Improve debugging and error handling for chunked file uploads
2016-12-17 21:37:30 +09:00
Kijin Sung
f313e693c4
Remove potentially troublesome symlink js
2016-12-17 19:33:05 +09:00
Kijin Sung
1cfb83da4d
Fix window size not fitting editor when sending message
2016-12-15 00:59:33 +09:00
Kijin Sung
05128b9f4b
When SSL is optional, redirect to http after writing ( #1939 )
2016-08-02 16:05:07 +09:00
bnu
61c54504ef
- invalid_float 메시지 추가
...
- 파일 용량 설정의 룰셋 추가 수정
- XML Filter에서 float를 처리할 수 있도록 룰세 추가
2016-08-02 16:00:47 +09:00
Kijin Sung
aef4797c1c
Update routine for broken symlink detection
2016-06-29 19:20:53 +09:00
Kijin Sung
2d54687a52
Add slow remote requests to debug content
2016-06-08 16:15:32 +09:00
Kijin Sung
8e1b870000
Fix JQMigrate warning in common.js
2016-05-14 16:38:41 +09:00
conory
9e2613e1b7
CK에디터 소스보기 줄바꿈 문제 수정
...
https://www.xetown.com/square/262312
2016-04-20 22:34:25 +09:00
conory
f930ec74f8
시스템 에러 메세지를 출력할 경우 403 HTTP 코드로 설정
2016-04-18 23:43:04 +09:00
MinSoo Kim
c3a0086e6c
Fix typo...
2016-04-14 19:44:57 +09:00
MinSoo Kim
bd482c6881
Fix datepicker date-format as yy-mm-dd
...
XE에서 한국어 언어 파일을 이용해서 사실상 yy-mm-dd 만을 날짜 형식으로 사용했기 때문에, 다국어를 지원하면서 나라마다
다른 형식을 풀어주게 되면, 호환성 문제가 있을 수 있어서 형식을 강제함.
2016-04-14 19:30:52 +09:00
Kijin Sung
d772a8df85
Completely hide debug button when not in use
2016-04-10 15:21:35 +09:00
Kijin Sung
188f55a81e
Fix incorrect redirect when relative path is given
2016-03-27 12:02:55 +09:00
conory
7125cf0e12
본문 삽입시 이미지 URL을 상대경로로 변경
2016-03-18 20:14:52 +09:00
MinSoo Kim
d1a7dfca7e
Merge pull request #369 from misol/color-of-no-color
...
input type=color can not be empty
2016-03-13 00:42:13 +09:00
MinSoo Kim
f41e3f5907
input type=color can not be empty
...
https://www.w3.org/TR/2012/WD-html5-20120329/states-of-the-type-attribute.html#color-state-type-color
2016-03-13 00:37:04 +09:00
MinSoo Kim
64ce9520e7
Merge pull request #301 from misol/lets-date
...
날짜 선택기 개선 작업
2016-03-12 23:50:43 +09:00
Kijin Sung
5debdea06f
Fix #357 incorrect redirect to insecure URL when using setQuery() in JS
2016-03-08 18:10:29 +09:00
Kijin Sung
9b5a17fb59
Clean up repeating code and add redirect() function
2016-03-07 08:34:06 +09:00
Kijin Sung
006474cb98
Fix unnecessary redirect on comment insertion in some skins
2016-03-04 15:07:03 +09:00
Kijin Sung
54fc1da600
Fix no redirect after writing a comment
2016-03-04 10:57:56 +09:00
Kijin Sung
379bed000d
Fix JSON encoding to be fully XE-compatible
2016-02-26 14:58:42 +09:00
Kijin Sung
134c6f6ec1
Fix jshint warnings and also apply patches to exec_json()
2016-02-25 15:34:02 +09:00
Kijin Sung
b94027bf1c
Display more information if an AJAX request fails
2016-02-25 14:52:07 +09:00
MinSoo Kim
81b1fd5752
support i18n jQuery-UI datepicker
2016-02-23 00:56:05 +09:00
Kijin Sung
65517735e0
Clean up common_layout.html and merge with mobile_layout.html
2016-02-17 16:20:57 +09:00
Kijin Sung
edf984aeb5
Fix broken pre-wrap on debug entries
2016-02-16 13:10:41 +09:00
Kijin Sung
04e729776c
Add slow queries, triggers, and widgets to debug panel output
2016-02-16 11:40:37 +09:00
Kijin Sung
3045ac9c42
Improve debug panel styles, and change color to red if there are errors
2016-02-15 15:38:01 +09:00
Kijin Sung
83bf38c245
Fix debug panel style in admin module
2016-02-15 14:46:15 +09:00
Kijin Sung
115738a84b
Display debug panel at fixed position and scroll internally
2016-02-15 14:40:01 +09:00
Kijin Sung
6b4d69bcc2
Remove old debug constants
2016-02-13 11:19:13 +09:00
Kijin Sung
968e25cd6e
Replace hyphen with bullet point
2016-02-13 10:51:11 +09:00
Kijin Sung
e04efdd03e
Do not display meaningless debug information
2016-02-13 10:40:40 +09:00
Kijin Sung
12673a29c6
Also display debug information for previous AJAX request in panel
2016-02-13 10:31:04 +09:00