Commit graph

2578 commits

Author SHA1 Message Date
Kijin Sung
3e38515c23 Remove unnecessary CSS for old browsers and IE 2023-08-31 00:35:11 +09:00
Kijin Sung
6e38b440ea Convert popup menu AJAX actions from XML to JSON 2023-08-30 23:36:26 +09:00
Kijin Sung
f5997b642a Make Router::parseURL() return a consistent type and format for all action properties 2023-08-30 22:58:05 +09:00
Kijin Sung
79dd9ae45e Use console.warn for JS deprecation notices so that the user can see a stack trace 2023-08-30 22:38:41 +09:00
Kijin Sung
0d8b8a51dd Improve parser logic for action attributes 2023-08-30 01:53:55 +09:00
Kijin Sung
ec36839303 Add options in module.xml to disable session and Cache-Control headers for individual actions 2023-08-30 01:45:37 +09:00
Kijin Sung
a1ce3ccaf2 Fix missing array key in session 2023-08-29 23:55:40 +09:00
Kijin Sung
4af7354bf0 Add options to control autologin cookie lifetime and refresh function 2023-08-29 23:42:01 +09:00
Kijin Sung
87300c9944 Resend autologin key periodically to maintain useful lifetime 2023-08-29 23:21:20 +09:00
Kijin Sung
31fd79c71e Fix default value handling for #2169 2023-08-27 23:43:22 +09:00
Kijin Sung
3fbb1327d2 Fix #2169 allow simple expressions as default values for table columns 2023-08-27 23:38:29 +09:00
Kijin Sung
06e736178b Support sending all _rx_* POST fields as HTTP headers instead
하위호환성, 부가기능 등을 위한 _rx_* POST 필드가 점점 많아짐에 따라
모두 헤더로 대체할 수 있도록 지원하고, 앞으로 점점 헤더로 바꿀 예정

CSRF 토큰은 예전부터 X-CSRF-Token 헤더를 지원했음
2023-08-27 23:32:31 +09:00
Kijin Sung
dc492345da Fix custom query caller location being shown as DB.php in debug info 2023-08-27 22:57:56 +09:00
Kijin Sung
2b55d8cc91 Update Korean IP ranges 2023-08-21 22:44:23 +09:00
Kijin Sung
42d09bde65 Provide a single entry point for all command-line scripts
Core example:

php index.php common.clean_empty_dirs
  -> executes common/scripts/clean_empty_dirs.php

Third-party example:

php index.php module_name.script_name
  -> executes modules/module_name/scripts/script_name.php

This should be the preferred method of executing PHP scripts included with
any third-party module, because it ensures that the working environment is
correct. For example, it will set the current working directory to Rhymix root,
check that the UID matches the usual web user, include all core libraries and
initialize the Context properly.

Over time, we will expand the command-line functionality similar to
the 'artisan' command in Laravel.
2023-08-16 23:12:25 +09:00
Kijin Sung
ea345ad7e1 Improve filtering of "allow" and "referrerpolicy" attributes of <iframe> 2023-08-16 22:41:14 +09:00
Kijin Sung
91efe04d7d Version 2.1.3 2023-08-15 14:52:11 +09:00
Kijin Sung
2197b0a982 Add option to control whether boards and pages are indexed by search engines, using the X-Robots-Tag header 2023-08-13 02:03:02 +09:00
Kijin Sung
58d6d51e9f Remove unnecessary condition in autoloader for custom namespaces 2023-08-12 21:55:20 +09:00
Kijin Sung
a7954506f6 Use associative array to store custom namespaces 2023-08-12 21:53:52 +09:00
Kijin Sung
911772393a Fix missing Context::init() in common script 2023-08-12 21:17:52 +09:00
Kijin Sung
47996cb294 Prevent Rhymix reserved namespaces from being registered as custom 2023-08-12 09:50:10 +09:00
Kijin Sung
5823253d60 Optimize order of conditions in autoloader 2023-08-12 01:18:59 +09:00
Kijin Sung
3241354872 Support customizing the default (base) class and install class of a module 2023-08-11 22:09:26 +09:00
Kijin Sung
7502b7308b Support custom namespaces in ModuleHandler and related processes 2023-08-11 21:56:42 +09:00
Kijin Sung
9e13c5ee6e Add convenience functions for XML parsing 2023-08-11 02:37:39 +09:00
Kijin Sung
57be6abc9d Make placeholder for custom prefix support in the future 2023-08-11 02:07:28 +09:00
Kijin Sung
32832d1ab2 Support custom namespaces in autoloader 2023-08-11 02:05:23 +09:00
Kijin Sung
4d4d454af0 Fix update_all_modules.php not calling all the update routines of the Install module 2023-08-11 01:38:28 +09:00
Kijin Sung
acc1117d26 Register event handlers and custom namespaces defined in module.xml 2023-08-11 00:16:57 +09:00
Kijin Sung
d0306df095 Add parser logic for new module.xml settings 2023-08-10 23:52:01 +09:00
Kijin Sung
6e7012394e Emphasize NOT in the common script error message 2023-08-10 10:57:02 +09:00
Kijin Sung
a36177d772 Dislay actual error location when a fatal error is caught by Debug class 2023-08-08 00:49:53 +09:00
Kijin Sung
e31704ffc2 Move friendly error message feature to Message module 2023-08-08 00:49:14 +09:00
Kijin Sung
df6ccfc7d4 Show friendly error message for very common error conditions, such as Object class 2023-08-07 15:14:47 +09:00
Kijin Sung
3ea1567fda Stop allowing access to .php files under files/cache/
files/cache/document_category/<module_srl>.xml.php 파일에 직접 접근할 필요가
없게 되었으므로, files/cache/ 폴더 전체의 .php 파일 접근을 금지해도 무방함.
2023-08-07 00:35:40 +09:00
Kijin Sung
a609478db4 Fix "allow" attribute being removed from YouTube iframe code #2159 2023-08-06 18:32:04 +09:00
Kijin Sung
2dbdfbaadb Fix #2161 incorrect timestamp when seconds are missing or negative time zone is given 2023-08-04 12:13:09 +09:00
Kijin Sung
f1a898ea50 Fix #2160 undefined constant _XE_LOCATION_ (also _XE_PACKAGE_) 2023-08-04 11:41:20 +09:00
Kijin Sung
00159407f4 Fix #1933 enable sending FCM message without the "notification" field 2023-08-03 22:44:27 +09:00
Kijin Sung
fc932747e9 Use alias to refer to classes outside of Push namespace 2023-08-03 22:44:21 +09:00
Kijin Sung
7799aa77a3
Merge pull request #2156 from mariko-f/master
일본어 번역 추가 및 수정
2023-07-24 16:59:11 +09:00
Kijin Sung
7efd6c4b18 Remove unnecessary code in Session class 2023-07-24 02:57:39 +09:00
Kijin Sung
899f65981d Destroy conflicting cookies before, not after, setting own cookie 2023-07-24 02:57:08 +09:00
Kijin Sung
8cf68ec9f1 Resend autologin key if the client has not received it at first request 2023-07-24 02:55:30 +09:00
Kijin Sung
c41229eb17 Separate variables for backward compatibility into their own lines, to prevent confusion 2023-07-23 20:49:38 +09:00
Kijin Sung
a07b8fef58 Remove unnecessary setting of is_webview before session create 2023-07-23 20:45:34 +09:00
Kijin Sung
a2932ee8c8 Add admin setting to control the httpOnly attribute 2023-07-22 20:17:23 +09:00
Kijin Sung
56b37b7cbc Remove session keys from unit tests 2023-07-22 20:04:54 +09:00
Kijin Sung
60a3edc994 Remove session keys, and always set httpOnly 2023-07-22 19:53:51 +09:00