Commit graph

618 commits

Author SHA1 Message Date
Kijin Sung
e2124ed1c0 Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers
- 최근 브라우저에서 지원하는 헤더를 사용하여 더 정확하게 체크
- Sec-Fetch-Site, Origin 헤더를 지원하지 않는 경우 기존처럼 Referer 체크
- CSRF 토큰은 더이상 기본 방법보다 보안이 더 뛰어나다고 말하기 힘듬
2025-10-22 22:53:45 +09:00
Kijin Sung
653ca4f697 Add "TABLE" to list of keywords to recognize in addPrefixes() 2025-09-30 22:27:36 +09:00
Kijin Sung
40067c0b53 Support generated columns #2596 2025-09-09 17:18:31 +09:00
Kijin Sung
51762315de Support "if" in <group> inside <groups> #2595 2025-09-01 00:31:20 +09:00
Kijin Sung
e7d14be6bb Fix inappropriate quoting of "distinct" in XML query
https://rhymix.org/qna/1914711
2025-08-19 00:22:02 +09:00
Kijin Sung
451d0b95ac Disable all conversion inside verbatim section of template v2 2025-08-18 22:24:48 +09:00
Kijin Sung
f7543e4c9a In template v2, process escape filters before other filters 2025-08-18 22:09:31 +09:00
Kijin Sung
64ca8e775a Fix incorrect prefixing when CTE has an alias #2587 2025-07-23 01:07:25 +09:00
Kijin Sung
796ecec247 Fix incorrect prefixing of CTE names and ON DUPLICATE KEY UPDATE ... #2587 2025-07-21 00:57:47 +09:00
Kijin Sung
dd4d4fe979 Treat pattern attribute of form elements as JS context in Template v2 2025-06-17 17:15:49 +09:00
Kijin Sung
e3f08ef322 Fix broken unit test 2025-06-02 22:44:57 +09:00
Kijin Sung
6e325526c8 Add notnull property to <group> tag in conditions 2025-05-29 23:08:05 +09:00
Kijin Sung
8291cd671e Remove double extensions from filenames #2556 2025-05-22 23:10:19 +09:00
Kijin Sung
2af43ee6a7 Remove md5 from list of acceptable hashes in unit test 2025-05-22 22:48:42 +09:00
Kijin Sung
e0ba5aa5b6 Prevent undefined property errors in XEXMLParser use cases 2025-05-17 13:02:29 +09:00
Kijin Sung
52f106968a Add unit test for XEXMLParser 2025-05-17 12:54:47 +09:00
Kijin Sung
2ddf5aa8d8 Update unit tests to cover situations like #2550 2025-05-11 13:47:47 +09:00
Kijin Sung
e192bc0ff6 Add widget directive for Template v2 2025-03-20 14:01:56 +09:00
Kijin Sung
3e052d2d00 Improve detection of template v1-style syntax in CSS/JS contexts 2025-03-19 12:44:17 +09:00
Kijin Sung
04a7734b2e Add unit test for contextual escape 2025-03-19 11:23:56 +09:00
Kijin Sung
49f57980dd Add unit test for inline styles in template v2 2025-03-19 00:16:08 +09:00
Kijin Sung
0bc3635b6c Update unit tests for improved contextual escape 2025-03-19 00:12:57 +09:00
Kijin Sung
baadb36e37 Improve escape_css() to accept most common CSS expressions 2025-03-18 23:53:06 +09:00
Kijin Sung
62eb6b2aae Add more context switches for inline scripts and styles 2025-03-18 23:17:42 +09:00
Kijin Sung
800eb2f444 Change behavior of \@mobile directive in template v2 #2510 2025-03-18 22:51:22 +09:00
Kijin Sung
82195c3e14 #2527 보완: 유닛 테스트 추가 2025-03-18 22:38:07 +09:00
Kijin Sung
2b8656eaf0 Add unit tests for RVE-2025-1 2025-02-16 14:55:50 +09:00
Kijin Sung
ae0e13eca9 Add unit tests for if="var" support in XML query 2025-02-15 22:42:11 +09:00
Kijin Sung
0d14aca1c0 Add unit test for type="module" and fix broken tests 2025-02-15 22:13:35 +09:00
Kijin Sung
08d6db7657 Don't convert Cloudflare IP if CF-Worker header is set 2025-02-13 22:43:46 +09:00
Kijin Sung
00db2ab402 Fix broken emoji and other HTML entities when using cut_str()
https://xetown.com/questions/1855257
2025-02-13 22:39:13 +09:00
Kijin Sung
d7f2201905 Fix unit test for external media #2476 2025-02-07 18:02:08 +09:00
Kijin Sung
f5c1d095c9 Fix unit test for external media #2476 2025-02-07 17:59:40 +09:00
Kijin Sung
746afdacb3 Fix queue config interfering with unit tests 2024-12-12 21:37:53 +09:00
Kijin Sung
eebd9a0005 Modify current queue config for unit testing 2024-12-12 21:31:31 +09:00
Kijin Sung
50974a325e Add unit tests for scheduled tasks 2024-12-12 21:28:43 +09:00
Kijin Sung
a2cdd3d897 Update unit tests for dummy queue driver 2024-12-12 01:58:05 +09:00
Kijin Sung
c7d7cdda8b Remove APISTORE from unit tests 2024-10-25 02:21:55 +09:00
Kijin Sung
4b0b485a13 Add basic unit tests for Queue class using Dummy driver 2024-10-11 23:19:53 +09:00
Kijin Sung
405b047054 Add unit tests for new robots 2024-10-07 22:06:46 +09:00
Kijin Sung
8a012a5847 Add R\F\URL::getCurrentDomain() 2024-05-27 01:43:04 +09:00
Kijin Sung
5f47ddeb53 Fix #2352 automatically convert relative paths in CSS url() function, only in template v2 2024-05-25 01:34:47 +09:00
Kijin Sung
1dbf601bab Fix #2342 incorrectly placed context switch markers inside raw PHP code block 2024-05-07 23:02:09 +09:00
Kijin Sung
e57c6c5c25 Improve relative path handling in Template v2 #2310 2024-04-30 23:45:17 +09:00
Kijin Sung
848a45cabe Fix #2313 inconsistent email validation rules 2024-04-17 23:15:24 +09:00
Kijin Sung
ab5a2c4f5f Disable debug output during template parser tests 2024-04-08 22:56:19 +09:00
Kijin Sung
0b9131e664 Remove unnecessary encoding of /, &, ' in template v2 JSON output 2024-03-24 21:29:54 +09:00
Kijin Sung
ee9a1a2b20 Fix #2272 unintended conversion of v1 echo statements inside verbatim section of v2 template 2024-01-16 21:43:38 +09:00
Kijin Sung
2d1ff01688 Fix #2271 data-file-srl attribute of <video> and <audio> tags 2024-01-16 21:30:27 +09:00
Kijin Sung
e2cfa524d0 Fix TemplateParserV1 and FrontEndFileHandler not recognizing Google webfonts '.../css2?...' URL as CSS 2024-01-10 13:09:01 +09:00