341 commits

Author	SHA1	Message	Date
conory	44c29e5fd1	Fix unit test	2019-10-03 23:51:27 +09:00
Kijin Sung	d8fa31722c	Allow autoplay attribute of <audio> and <video> tags #1187	2019-08-13 15:11:08 +09:00
Kijin Sung	b284d69760	Try raw output for Android browser, Whale, webview	2019-07-31 16:08:26 +09:00
Kijin Sung	f33c8d9fbe	Fix #1180 download filename issue in Android webview and Naver App	2019-07-30 20:43:27 +09:00
Kijin Sung	d873196aa8	Improve validation and formatting for 0303 and 0505 phone numbers	2019-05-13 15:34:09 +09:00
Kijin Sung	7b9fe8f7f2	Revert "Fix var_export() not working for stdClass in PHP < 7.3" ... This reverts commit 3f7f802585.	2018-12-13 18:59:27 +09:00
Kijin Sung	3f7f802585	Fix var_export() not working for stdClass in PHP < 7.3	2018-12-13 15:22:11 +09:00
Kijin Sung	e98cf03d95	Move upload file filter to Rhymix Framework and add proper unit tests for SVG-based attacks	2018-10-18 14:34:19 +09:00
Kijin Sung	af64ae79c1	Rename checkXEE() to checkXXE()	2018-10-18 14:21:08 +09:00
Kijin Sung	dead538afb	Use egulias/EmailValidator to validate email addresses	2018-10-18 14:16:12 +09:00
Kijin Sung	109203d12b	Remove invalid characters from REQUEST_URI	2018-07-31 19:08:02 +09:00
Kijin Sung	9b12e0a71c	Update unit tests for UA::encodeFilenameForDownload()	2018-07-20 19:21:55 +09:00
Kijin Sung	ca90ac2c8e	Fix unit test for UA class	2018-06-14 14:18:05 +09:00
conory	9e2a09f108	웹 브라우저가 아닌 wget, curl, php를 봇으로 취급	2018-06-14 12:57:00 +09:00
Kijin Sung	2dd549f076	Add methods to clear debug entries (for long-running scripts)	2018-01-16 15:03:36 +09:00
Kijin Sung	d7a3e1bc26	Fix unit tests that don't work in PHP 7.2	2017-12-09 03:00:51 +09:00
Kijin Sung	e734caf7b3	Fix unit tests to accommodate change to trusty in Travis CI	2017-09-04 14:04:41 +09:00
Kijin Sung	464325c6f6	Update Markdown formatter to support footnotes and hard wraps natively	2017-06-29 23:58:20 +09:00
Kijin Sung	8ca0ca4a47	Fix Context::loadLang() compatibility when lang.xml is specified	2017-05-05 11:47:22 +09:00
Kijin Sung	2822191271	Fix CSRF check for GET requests	2017-04-23 14:51:41 +09:00
Kijin Sung	a3ef122b57	Merge branch 'develop' into pr/csrf-token	2017-03-13 16:35:24 +09:00
Kijin Sung	d62756dcd5	Fix unit tests to ignore user warnings during CSRF test	2017-03-06 16:02:50 +09:00
Kijin Sung	89255d0281	Initial implementation of CSRF token enforcement in Security class	2017-03-06 15:54:56 +09:00
Kijin Sung	a0f2388842	Add Session::getGenericToken() for general-purpose token handling	2017-03-06 11:24:09 +09:00
Kijin Sung	f1608ad3a9	Fix unit test for Session::checkSSO()	2017-03-04 22:09:07 +09:00
Kijin Sung	990876515b	Don't dump error log to screen during unit test of Debug class	2017-02-27 22:47:02 +09:00
Kijin Sung	72d25872cd	Fix randomly failing unit test for Session class	2017-02-27 15:57:45 +09:00
Kijin Sung	aa879e7326	Improve HTMLFilter handling of editor component properties	2017-02-25 17:37:58 +09:00
Kijin Sung	58a3b47246	Add unit test to ensure that data-file-srl is not deleted	2017-02-17 21:48:52 +09:00
Kijin Sung	205180a632	Fix unit tests	2017-02-17 20:23:10 +09:00
Kijin Sung	4f774bb460	Fix unit tests	2017-02-15 11:47:43 +09:00
Kijin Sung	782caa966a	Fix unit tests	2017-02-13 17:55:05 +09:00
Kijin Sung	ba925150a3	Quash www subdomain to prevent duplicate sessions	2017-02-13 13:55:47 +09:00
Kijin Sung	054c0d23a3	Fix unit tests for HHVM	2017-02-12 23:58:34 +09:00
Kijin Sung	c5e6adb03f	Fix unit tests	2017-02-12 23:21:19 +09:00
Kijin Sung	1a0e49dcfb	Change method for storing and caching session validity information	2017-02-12 23:00:53 +09:00
Kijin Sung	fd02fa968c	Fix #702 Punycode error on attempting to handle long URLs	2017-02-11 17:48:52 +09:00
Kijin Sung	4b237f6057	Fix unit tests	2017-02-11 14:25:09 +09:00
Kijin Sung	4b26db9932	Fix unit tests, and add tests for Session::isValid()	2017-02-09 00:42:34 +09:00
Kijin Sung	af41f36bf7	Move checkSSO() from Context class to Session class	2017-02-07 23:26:43 +09:00
Kijin Sung	483ac84796	Merge branch 'develop' into pr/session-class	2017-02-07 22:13:08 +09:00
Kijin Sung	e1ffe39a2e	Use Rhymix Framework to decide whether a file can be directly downloaded ... xpressengine/xe-core#1997	2017-02-06 15:58:10 +09:00
Kijin Sung	2cb5c460f9	Merge branch 'develop' into pr/delete-empty-folders	2017-01-31 13:54:38 +09:00
Kijin Sung	0f9b8cc3d6	Allow controlling allowed classes in HTMLPurifier	2017-01-31 11:45:46 +09:00
Kijin Sung	3dc736817d	Add Storage::deleteEmptyDirectory() to recursively clear empty directories	2017-01-26 18:01:27 +09:00
Kijin Sung	61a6c01d26	Do not remove @, #, & from attached file names	2017-01-18 00:01:49 +09:00
Kijin Sung	3feccd3bcb	Update unit tests for PHP 7.1 and Codeception 2.1.11	2016-12-15 21:45:57 +09:00
Kijin Sung	79fb297948	Add unit tests for HTMLFilter changes	2016-12-15 21:06:42 +09:00
Kijin Sung	5cab16418e	Add more unit tests for IpFilter	2016-12-13 22:04:14 +09:00
Kijin Sung	e9bfb0e298	Disallow classes in user-submitted content	2016-12-08 17:45:03 +09:00