Kijin Sung
4d03f70d0a
Prevent direct access to cache files under files/member_extra_info
2017-02-27 16:24:35 +09:00
Kijin Sung
beb67dc5c5
Merge branch 'pr/security-fixes' into develop
2017-02-27 16:16:33 +09:00
Kijin Sung
72d25872cd
Fix randomly failing unit test for Session class
2017-02-27 15:57:45 +09:00
Kijin Sung
d074e5e9b5
Increase security of autologin keys
2017-02-27 15:55:04 +09:00
Kijin Sung
fc63b2e9b8
Properly initialize user object even when not logged in
2017-02-27 15:45:25 +09:00
Kijin Sung
78540fbc13
Fix potential caching of partial module info
2017-02-26 15:37:41 +09:00
Kijin Sung
e823ce045b
Fix potential problem caused by caching of partial member info
2017-02-26 15:32:31 +09:00
Min-Soo Kim
5140047b5f
네모의 꿈/ 컨텐츠 위젯 스킨 ( #712 )
...
## 컨텐츠 모듈 스킨
- 사이트 테마를 따르지 않고 다른 색을 선택할 수 있도록 네모의 꿈 회원 스킨 컬러셋 추가.
- 탭이 많을 때 터치 환경이 아니면 좌우로 넘기기 어려운 점을 고려하여서 메뉴를 펼침.
- 작은 화면에서 화면을 최대한 활용하도록, 레이아웃 햄버거 메뉴를 부드럽게 나타내고 감춥니다.
## 위젯에서 LESS/SCSS 의 사용
- 변수를 위젯 캐시에도 전달할 수 있도록 해서 LESS 나 SCSS 에 값 전달이 가능하도록 함.
- LESS 나 SCSS 를 사용한 경우에 위젯 코드 캐싱 코드가 적절하게 기록되도록 해서 LESS나 SCSS 를 사용
가능하도록 수정.
## 그 외 변화
- Reduce the number of regular expressions.
2017-02-26 01:05:57 +09:00
Kijin Sung
01ca005cf5
Fix editor module to prevent modification of editor config by non-admins
2017-02-26 00:07:48 +09:00
Kijin Sung
f3871e5cd3
Fix exposure of other members' point and level info via getMembersPointInto API call
2017-02-25 23:35:52 +09:00
Kijin Sung
1c45a5fc1c
Fix unauthorized modification and deletion of documents via widget controller
2017-02-25 23:01:16 +09:00
conory
b1ba031117
알림센터 구버전의 활성화 설정을 가져와서 셋팅하도록 개선
2017-02-25 21:15:54 +09:00
conory
8843f8b05d
업데이트시 발생할 수 있는 오류 수정
...
Uncaught TypeError: Argument 1 passed to array first() must be of the type array
2017-02-25 20:46:38 +09:00
Kijin Sung
aa879e7326
Improve HTMLFilter handling of editor component properties
2017-02-25 17:37:58 +09:00
Kijin Sung
24c29cfbdb
Version 1.8.31
2017-02-25 15:35:16 +09:00
Kijin Sung
f3a43d071e
Fix vulnerability in procMemberDeleteSavedDocument
2017-02-25 15:08:42 +09:00
Kijin Sung
6df32746c3
Refresh isAccessible() if document or comment is updated
...
https://www.xetown.com/qna/510717
2017-02-24 15:47:01 +09:00
Kijin Sung
3d16272d01
Merge pull request #727 from kijin/pr/template-filters
...
템플릿 필터 지원
2017-02-23 22:37:28 +09:00
Kijin Sung
77282401e3
Add even more unit tests for malformed filter detection
2017-02-23 22:25:25 +09:00
Kijin Sung
f338d38538
Improve regexp for template filters
2017-02-23 22:25:13 +09:00
Kijin Sung
c4c5fa9e0d
Add more unit tests for edge cases
2017-02-23 22:15:03 +09:00
Kijin Sung
d03c64d069
Make the test for filters more strict to prevent unintended parsing
2017-02-23 22:14:51 +09:00
Kijin Sung
1974f21482
Version 1.8.30
2017-02-23 16:11:06 +09:00
bnu
628242a387
Fix #2036 XEVE-17-003 커뮤니케이션 모듈의 쪽지를 임의로 삭제할 수 있는 문제 고침
2017-02-23 16:06:17 +09:00
Kijin Sung
ad21b1e706
Fix warning in fileAdminView when upload target type does not exist
2017-02-22 23:11:29 +09:00
Kijin Sung
5638207fb0
Change behavior of 'autoescape' filter to always escape (but not double-escape)
2017-02-22 21:29:15 +09:00
Kijin Sung
7fd0f5df7b
Add unit tests for template filters
2017-02-22 21:24:26 +09:00
Kijin Sung
0c4dbc34ff
Add 'trim' filter and adjust some other settings
2017-02-22 21:24:10 +09:00
Kijin Sung
0c20794219
Implement several template filters
2017-02-22 20:58:37 +09:00
Kijin Sung
8ad6f40abd
Enable ztime() function to process Unix timestamps
2017-02-22 20:20:55 +09:00
Kijin Sung
4ee115e4f3
Improve server environment display
2017-02-22 19:49:49 +09:00
bnu
954d2c7ec6
Fix #2035 XEVE-17-002 쉬운 설치 페이지에서 발생하는 보안 취약점 고침
...
- 제보자 : 최봉환(stayp05)
2017-02-22 16:46:34 +09:00
Kijin Sung
a5c2783cf5
Implement domain management screen in admin module
2017-02-22 16:46:05 +09:00
Kijin Sung
b88bedf9fd
Return more data from getAllDomains()
2017-02-22 16:45:45 +09:00
Kijin Sung
e5126c7f98
Fix domain handling in getUrl()
2017-02-22 16:45:25 +09:00
Kijin Sung
37a0aa0f13
Implement moduleModel::getAllDomains()
2017-02-22 14:52:48 +09:00
Kijin Sung
94c45958c4
Refactor domain info loading functions
2017-02-22 14:31:16 +09:00
Kijin Sung
254e6910d0
Fill in missing fields in getSiteInfo() and getSiteInfoByDomain()
2017-02-20 22:49:32 +09:00
Kijin Sung
bad9fe5d98
Add deleteDomain query
2017-02-20 22:46:28 +09:00
Kijin Sung
5b182ab4b3
Simplify getDomainInfo query
2017-02-20 22:45:32 +09:00
Kijin Sung
5dba5f2015
Make some site-related changes to general config screen
2017-02-20 22:43:24 +09:00
Kijin Sung
beb2bf346e
Add updateDomain query
2017-02-20 22:30:41 +09:00
Kijin Sung
19cfef17d1
Fix install script to update domain, not site
2017-02-20 22:13:18 +09:00
Kijin Sung
5757fec7a6
Use current URL to fill initial domain info
2017-02-20 22:06:44 +09:00
Kijin Sung
fdf568bbb2
Update URL::isInternalURL()
2017-02-20 21:53:00 +09:00
Kijin Sung
4e4ef2f762
Fix missing DB object in module::migrateDomains()
2017-02-20 21:51:16 +09:00
Kijin Sung
aae4d884c1
Add homepage (CafeXE) module to blacklist
2017-02-20 21:23:31 +09:00
Kijin Sung
c82c2f307a
Various changes to URL handling routines
2017-02-20 21:22:38 +09:00
Kijin Sung
726220d3eb
Load site_module_info from 'domains' table instead of 'sites' table
2017-02-20 20:43:30 +09:00
Kijin Sung
a69bac6e2b
Implement migration of site info from 'sites' table and multidomain module (if installed)
2017-02-20 18:14:15 +09:00