Commit graph

3130 commits

Author SHA1 Message Date
Kijin Sung
465248a7a4 Update jQuery Migrate to 3.6.0 2026-02-26 13:10:47 +09:00
Kijin Sung
d0d1505367 Enable secure session and cookies by default if installed or upgraded in an HTTPS site 2026-02-26 01:25:36 +09:00
Kijin Sung
7ce40653d7 Use jQuery 3.x by default 2026-02-26 01:23:10 +09:00
Kijin Sung
f0f73c6ac8 Update jQuery to 3.7.1 and recommend updating 2026-02-26 01:21:19 +09:00
Kijin Sung
74b9533281 Merge branch 'security/rve-2026-2' 2026-02-25 20:39:06 +09:00
Kijin Sung
bf2df84d0f Use enshrined\svgSanitize to clean SVG file content 2026-02-20 21:55:29 +09:00
Kijin Sung
a18b45f0f8 Strip namespace prefixes before checking dangerous tags in SVG 2026-02-20 21:40:37 +09:00
Kijin Sung
f131a616eb Fix RVE-2026-1 arbitrary file association by extra var 2026-02-16 21:56:44 +09:00
Kijin Sung
c5d453a2df #2675 보완 및 최적화 2026-02-11 21:02:50 +09:00
Kijin Sung
5834a3c18a Fix fatal error in some environments when relative URL is passed to encodeIdna() or decodeIdna() #2675 2026-02-11 20:54:00 +09:00
Kijin Sung
1199095e7f Version 2.1.30 2026-02-10 12:23:00 +09:00
Kijin Sung
26c59c251c Fix incorrect conversion of JS template variable containing path #2657 2026-02-05 23:05:19 +09:00
Kijin Sung
9d1738e21d Add trigger before auto-login #2665 #2666 2026-02-05 22:14:06 +09:00
Kijin Sung
078c07d9f5 Add confirmation dialog before deleting or trashing document in admin dashboard #2653 2026-01-28 21:33:27 +09:00
Kijin Sung
70a25057f0 Fix incorrect redirect when loading saved document from another module #2659 2026-01-28 21:04:12 +09:00
Kijin Sung
bb6eeb926e Add delay before closing window in doDocumentSelect() 2026-01-28 20:51:29 +09:00
Kijin Sung
09919944a7 Prevent type error when non-integer input passed to getNumberingPath() 2026-01-28 20:46:30 +09:00
Kijin Sung
c1942080e7 Fix incorrect identification of DaumApps webview as robot 2026-01-19 19:44:25 +09:00
Lastorder
1811cfee39
Fix error title localization in Debug.php 2026-01-08 22:56:16 -08:00
Kijin Sung
26d645da4d Fix nested JS contexts in template v2 #2646 2026-01-06 23:43:21 +09:00
Kijin Sung
8b1da6a98a Fix incorrect handling of nested context switches (CSS inside HTML inside JS) in template v2 #2646 2026-01-06 21:36:10 +09:00
Kijin Sung
d6b7cb52b8 Fix deprecations in PHP 8.5 #2639 2026-01-01 18:39:20 +09:00
Kijin Sung
aaf3791a78 Version 2.1.29 2025-12-18 13:40:08 +09:00
Kijin Sung
620fee05cf Fix duplicate hidden input when a form includes mid or act as a <select> 2025-12-17 21:32:03 +09:00
Kijin Sung
f3ff338711 Return more information from DB::getColumnInfo() and DB::getIndexInfo() 2025-12-17 16:43:18 +09:00
Kijin Sung
0c8aa306ec Fix incorrect timestamp display when timestamp is zero #2621 2025-12-17 11:32:37 +09:00
Kijin Sung
8e5480674d Exclude functions and closures from scope conversion #2617 2025-11-29 11:50:43 +09:00
Kijin Sung
50dd010e2d Remove empty class and style attributes when compiling template v2 2025-11-29 11:07:15 +09:00
Kijin Sung
dd2b5aecb3 Version 2.1.28 2025-10-29 10:19:07 +09:00
Kijin Sung
bc6eaae544 Remove old Flash-based uploader plugin 2025-10-23 13:42:21 +09:00
Kijin Sung
2a7eeebcbd Add numeric value column to extra vars, and add option to mark extra var as sortable #2604 #2559 2025-10-23 11:17:24 +09:00
Kijin Sung
978aecd7a8 Support SQL expressions in the "default" attribute of XML query 2025-10-23 10:53:12 +09:00
Kijin Sung
ad293fa4d0 Add empty paragraph after <video> tag in CKEditor 2025-10-22 23:02:15 +09:00
Kijin Sung
e2124ed1c0 Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers
- 최근 브라우저에서 지원하는 헤더를 사용하여 더 정확하게 체크
- Sec-Fetch-Site, Origin 헤더를 지원하지 않는 경우 기존처럼 Referer 체크
- CSRF 토큰은 더이상 기본 방법보다 보안이 더 뛰어나다고 말하기 힘듬
2025-10-22 22:53:45 +09:00
Kijin Sung
653ca4f697 Add "TABLE" to list of keywords to recognize in addPrefixes() 2025-09-30 22:27:36 +09:00
Kijin Sung
4869d4384d Remove unnecessary <br> tag from uploader error messages 2025-09-30 22:07:57 +09:00
Kijin Sung
16b6544f9d Fix null return value when regexp replace fails on invalid input 2025-09-20 11:34:54 +09:00
Kijin Sung
60552ba96b Throw error in filterValue() if an unstringable object is given 2025-09-15 00:30:00 +09:00
Kijin Sung
40067c0b53 Support generated columns #2596 2025-09-09 17:18:31 +09:00
Kijin Sung
5e4b48f19b Prevent direct access to cron.php on CLI 2025-09-09 15:30:29 +09:00
Kijin Sung
173bed7c2a Version 2.1.27 2025-09-06 13:45:10 +09:00
Kijin Sung
c643e80447 Fix implicitly nullable type declarations in SwiftMailer
SwiftMailer는 지원이 종료되었으므로 차기 버전에서 Symfony Mailer로 교체 예정
2025-09-05 15:46:49 +09:00
Kijin Sung
ee13ce551e Fix fatal error when preg_split() fails on a legacy template 2025-09-02 23:18:01 +09:00
Kijin Sung
51762315de Support "if" in <group> inside <groups> #2595 2025-09-01 00:31:20 +09:00
Kijin Sung
771dbfe114 Experimental method to clear APC cache from PHP-CLI #2554 #1943 2025-08-24 22:16:39 +09:00
Kijin Sung
23190bd2f5 Remove all use of global variables as debug timers 2025-08-20 00:34:57 +09:00
Kijin Sung
f91bd86fb1 Consolidate a few timers into an array in the Debug class 2025-08-20 00:25:20 +09:00
Kijin Sung
e7d14be6bb Fix inappropriate quoting of "distinct" in XML query
https://rhymix.org/qna/1914711
2025-08-19 00:22:02 +09:00
Kijin Sung
451d0b95ac Disable all conversion inside verbatim section of template v2 2025-08-18 22:24:48 +09:00
Kijin Sung
f7543e4c9a In template v2, process escape filters before other filters 2025-08-18 22:09:31 +09:00