Commit graph

3164 commits

Author SHA1 Message Date
Lastorder
25f6d02677
Merge branch 'rhymix:master' into master 2026-02-27 18:04:35 +09:00
Kijin Sung
840a9adac8 Version 2.1.31 2026-02-26 13:18:24 +09:00
Kijin Sung
465248a7a4 Update jQuery Migrate to 3.6.0 2026-02-26 13:10:47 +09:00
Kijin Sung
d0d1505367 Enable secure session and cookies by default if installed or upgraded in an HTTPS site 2026-02-26 01:25:36 +09:00
Kijin Sung
7ce40653d7 Use jQuery 3.x by default 2026-02-26 01:23:10 +09:00
Kijin Sung
f0f73c6ac8 Update jQuery to 3.7.1 and recommend updating 2026-02-26 01:21:19 +09:00
Kijin Sung
74b9533281 Merge branch 'security/rve-2026-2' 2026-02-25 20:39:06 +09:00
Kijin Sung
bf2df84d0f Use enshrined\svgSanitize to clean SVG file content 2026-02-20 21:55:29 +09:00
Kijin Sung
a18b45f0f8 Strip namespace prefixes before checking dangerous tags in SVG 2026-02-20 21:40:37 +09:00
Kijin Sung
f131a616eb Fix RVE-2026-1 arbitrary file association by extra var 2026-02-16 21:56:44 +09:00
Lastorder
aba6016986
Merge branch 'rhymix:master' into master 2026-02-12 14:03:54 +09:00
Kijin Sung
c5d453a2df #2675 보완 및 최적화 2026-02-11 21:02:50 +09:00
Kijin Sung
5834a3c18a Fix fatal error in some environments when relative URL is passed to encodeIdna() or decodeIdna() #2675 2026-02-11 20:54:00 +09:00
Kijin Sung
1199095e7f Version 2.1.30 2026-02-10 12:23:00 +09:00
Lastorder
bbd62dbea3
Merge branch 'rhymix:master' into master 2026-02-06 09:51:56 +09:00
Kijin Sung
26c59c251c Fix incorrect conversion of JS template variable containing path #2657 2026-02-05 23:05:19 +09:00
Kijin Sung
9d1738e21d Add trigger before auto-login #2665 #2666 2026-02-05 22:14:06 +09:00
Lastorder
ba8bbda74b
Merge branch 'rhymix:master' into master 2026-01-30 14:57:37 +09:00
Kijin Sung
078c07d9f5 Add confirmation dialog before deleting or trashing document in admin dashboard #2653 2026-01-28 21:33:27 +09:00
Kijin Sung
70a25057f0 Fix incorrect redirect when loading saved document from another module #2659 2026-01-28 21:04:12 +09:00
Kijin Sung
bb6eeb926e Add delay before closing window in doDocumentSelect() 2026-01-28 20:51:29 +09:00
Kijin Sung
09919944a7 Prevent type error when non-integer input passed to getNumberingPath() 2026-01-28 20:46:30 +09:00
Kijin Sung
c1942080e7 Fix incorrect identification of DaumApps webview as robot 2026-01-19 19:44:25 +09:00
Lastorder-DC
1ee8ba0ca9 server error message 2026-01-11 11:14:17 +09:00
Lastorder
91dea83b9f
Merge branch 'rhymix:master' into master 2026-01-10 18:12:14 -08:00
Lastorder
1811cfee39
Fix error title localization in Debug.php 2026-01-08 22:56:16 -08:00
Lastorder
2efe733d5f
Merge branch 'rhymix:master' into master 2026-01-08 20:28:49 -08:00
Kijin Sung
26d645da4d Fix nested JS contexts in template v2 #2646 2026-01-06 23:43:21 +09:00
Kijin Sung
8b1da6a98a Fix incorrect handling of nested context switches (CSS inside HTML inside JS) in template v2 #2646 2026-01-06 21:36:10 +09:00
Kijin Sung
d6b7cb52b8 Fix deprecations in PHP 8.5 #2639 2026-01-01 18:39:20 +09:00
Lastorder
881b0fbac1 Merge remote-tracking branch 'upstream/master' 2025-12-24 03:07:48 +00:00
Kijin Sung
aaf3791a78 Version 2.1.29 2025-12-18 13:40:08 +09:00
Kijin Sung
620fee05cf Fix duplicate hidden input when a form includes mid or act as a <select> 2025-12-17 21:32:03 +09:00
Kijin Sung
f3ff338711 Return more information from DB::getColumnInfo() and DB::getIndexInfo() 2025-12-17 16:43:18 +09:00
Kijin Sung
0c8aa306ec Fix incorrect timestamp display when timestamp is zero #2621 2025-12-17 11:32:37 +09:00
Kijin Sung
8e5480674d Exclude functions and closures from scope conversion #2617 2025-11-29 11:50:43 +09:00
Kijin Sung
50dd010e2d Remove empty class and style attributes when compiling template v2 2025-11-29 11:07:15 +09:00
Kijin Sung
dd2b5aecb3 Version 2.1.28 2025-10-29 10:19:07 +09:00
Lastorder-DC
1c8ae0d766 Merge remote-tracking branch 'upstream/master' into master 2025-10-27 23:09:27 +09:00
Kijin Sung
bc6eaae544 Remove old Flash-based uploader plugin 2025-10-23 13:42:21 +09:00
Kijin Sung
2a7eeebcbd Add numeric value column to extra vars, and add option to mark extra var as sortable #2604 #2559 2025-10-23 11:17:24 +09:00
Kijin Sung
978aecd7a8 Support SQL expressions in the "default" attribute of XML query 2025-10-23 10:53:12 +09:00
Kijin Sung
ad293fa4d0 Add empty paragraph after <video> tag in CKEditor 2025-10-22 23:02:15 +09:00
Kijin Sung
e2124ed1c0 Refactor checkCSRF() to use Sec-Fetch-Site and Origin headers
- 최근 브라우저에서 지원하는 헤더를 사용하여 더 정확하게 체크
- Sec-Fetch-Site, Origin 헤더를 지원하지 않는 경우 기존처럼 Referer 체크
- CSRF 토큰은 더이상 기본 방법보다 보안이 더 뛰어나다고 말하기 힘듬
2025-10-22 22:53:45 +09:00
Lastorder
a5c3dc8ae5
Merge branch 'rhymix:master' into master 2025-10-13 20:09:50 +09:00
Kijin Sung
653ca4f697 Add "TABLE" to list of keywords to recognize in addPrefixes() 2025-09-30 22:27:36 +09:00
Kijin Sung
4869d4384d Remove unnecessary <br> tag from uploader error messages 2025-09-30 22:07:57 +09:00
Kijin Sung
16b6544f9d Fix null return value when regexp replace fails on invalid input 2025-09-20 11:34:54 +09:00
Kijin Sung
60552ba96b Throw error in filterValue() if an unstringable object is given 2025-09-15 00:30:00 +09:00
Kijin Sung
40067c0b53 Support generated columns #2596 2025-09-09 17:18:31 +09:00