Commit graph

19458 commits

Author SHA1 Message Date
Kijin Sung
62f04a1e02 Fix regression from 26f923d when anonymous comment is deleted 2023-09-16 01:05:18 +09:00
Kijin Sung
585ea0f1d3 Version 2.1.5 2023-09-13 11:19:03 +09:00
Kijin Sung
26f923d64b Fix #2145 rename $is_admin to more descriptive variable name in some controller actions 2023-09-13 11:15:13 +09:00
Kijin Sung
71e4118bd5 Merge branch 'security/rve-2023-3-4' into develop 2023-09-13 11:02:59 +09:00
Kijin Sung
14f3704215 Update unit tests for new cache-busting querystring format 2023-09-12 23:20:40 +09:00
Kijin Sung
c8638d2548 Change cache-busting query string format from ?YYYYMMDDHHMMSS to ?t=UnixTime
- 날짜, 유닉스 타임스탬프, 16진수(CKEditor) 등 여러 가지 포맷을 혼용하고 있던
  캐시 방지용 쿼리스트링의 형태를 "유닉스 타임스탬프"로 통일
- 표준 시간대 처리 등 은근히 많은 자원을 소모하는 date() 함수를 사용하지 않음
- t=를 붙여서 정상적인 쿼리스트링 구조가 나오도록 하여, 웹방화벽이나 CDN
  등에서 문제를 일으킬 가능성을 줄임
- 덤으로, 길이도 2바이트씩 짧아짐
2023-09-12 23:15:26 +09:00
Kijin Sung
68ee78f1f8 Update CKEditor timestamp if editor module config is updated #2173 2023-09-12 23:03:12 +09:00
Kijin Sung
ec674dc25f Fix double encoding of special characters in document tags 2023-09-12 22:52:26 +09:00
Kijin Sung
fead32337e Fix incorrect debug comment for outer templates in a deeply nested include tree 2023-09-12 22:42:30 +09:00
Kijin Sung
7f7e0a099d Fix incorrect display of SCSS variable in meta debug info 2023-09-12 22:18:29 +09:00
Kijin Sung
efd06ff447 Use HTML classes specified in menu #2070 2023-09-12 22:01:56 +09:00
Kijin Sung
3ddf1392f9 Fix #2070 add class support to menu items 2023-09-12 22:01:28 +09:00
Kijin Sung
1ec0d74e77 Fix #2062 delete references to themes in skin config 2023-09-12 21:25:06 +09:00
Kijin Sung
08ce7b18a8 Fix #2179 missing document/comment controls when counter addon is not active 2023-09-12 00:45:37 +09:00
Kijin Sung
f2c58a0a14 Fix missing layout when you click "Full settings" for a (document, widget, or external) page in the sitemap editor 2023-09-12 00:36:46 +09:00
Kijin Sung
e60ffb4e8d Add option to control partial page rendering (layout drop)
XE 시절부터 layout=none 또는 isLayoutDrop=1 파라미터로 레이아웃이 없는
부분적인 페이지 렌더링을 허용하는 기능이 있었습니다. 관리자 화면에서
팝업이나 iframe을 표시하는 용도로도 사용하고, AJAX로 페이지 일부 내용만
새로고침할 때 불필요한 데이터를 주고받지 않도록 하는 데도 유용합니다.

그러나 사이트에 따라서는 레이아웃을 적용하지 않을 경우 민감한 정보가
노출되는 등의 부작용이 발생할 수도 있으므로, 이 기능을 사용하지 않도록
선택하는 옵션을 제공합니다.
2023-09-12 00:33:54 +09:00
Kijin Sung
e2753300ee Fix inconsistent whitespace in admin dashboard 2023-09-11 23:03:46 +09:00
Kijin Sung
dee273a4f2 Fix incorrect form method in admin dashboard 2023-09-11 23:03:27 +09:00
Kijin Sung
7998adec59 Fix warning in PHP 8.x 2023-09-11 13:42:18 +09:00
Kijin Sung
7bba7732d7 Display relative path in "Template not found" error message 2023-09-09 01:39:07 +09:00
Kijin Sung
28c4a9573c Also remove unnecessary parameters in procDocumentTempSave 2023-09-09 01:23:21 +09:00
Kijin Sung
f9e48fc85c Tentative fix for RVE-2023-3 and RVE-2023-4 2023-09-08 23:43:12 +09:00
Kijin Sung
a5ed417480 Fix warnings in PHP 8.x 2023-09-06 21:10:11 +09:00
Kijin Sung
3138125eab Don't convert krzip data that is already in the standard format #2178 2023-09-06 21:09:59 +09:00
Kijin Sung
4ccfaad75e Fix #2178 incorrect processing of some addresses in krzip module 2023-09-06 16:32:03 +09:00
Kijin Sung
a99f56c7bc Increase size of upload_target_type column, and add missing indexes 2023-09-05 02:34:44 +09:00
Kijin Sung
0f1ea1dbc2 Remove characters in writePHPData() comment that could cause syntax error 2023-09-05 02:07:21 +09:00
Kijin Sung
206f6e706a Encode non ASCII printable characters in cache keys for maximum compatibility with all cache backends 2023-09-05 01:57:26 +09:00
Kijin Sung
8054564b37 Delete dispEditorPreview action that is no longer used 2023-09-05 01:13:19 +09:00
Kijin Sung
a50041007d Remove UTF-8 BOM and CRLF in templates when compiling them 2023-09-05 01:05:53 +09:00
Kijin Sung
55d3dd047c Remove unnecessary MemberModel instance in xedition layout 2023-09-05 01:00:11 +09:00
Kijin Sung
3200b6b227 Remove duplicate meta tag in xedition layout 2023-09-05 00:59:15 +09:00
Kijin Sung
8888840fc4 Remove unnecessary empty lines in xedition layout 2023-09-05 00:56:39 +09:00
Kijin Sung
7a62550c30 Fix incorrect handling of newline in TemplateHandler 2023-09-05 00:56:17 +09:00
Kijin Sung
5b5010a401 Fix <!-- ETC --> comment stuck after body with no newline 2023-09-05 00:42:42 +09:00
Kijin Sung
fd27ec177b Refine empty line handling without changing line numbers 2023-09-05 00:42:12 +09:00
Kijin Sung
cd8e6371c6 Preserve line numbers when compiling templates 2023-09-05 00:17:15 +09:00
Kijin Sung
770cde8b8a Preserve line numbers when compiling SCSS with sourcemap 2023-09-04 23:40:09 +09:00
Kijin Sung
9d4961ff0d Update unit tests to force charset declaration and accommodate sourcemap comment 2023-09-04 23:05:14 +09:00
Kijin Sung
096d841263 Create sourcemaps when compiling SCSS 2023-09-04 23:05:06 +09:00
Kijin Sung
74cc098370 Remove incorrect sourceMap link in concatenated JS output 2023-09-04 22:00:12 +09:00
Kijin Sung
99c905a6f4 Fix warning when session is used on CLI 2023-09-04 15:19:12 +09:00
Kijin Sung
c27a1d803b Fix #2176 error in unnecessary count() 2023-09-01 23:15:53 +09:00
Johnny
69c94a5fd7
Merge pull request #2174 from bjrambo/pr/ncenterlite-trigger
알림센터의 트리거 호출들을 module.xml 에서 이벤트 호출로 개선
2023-09-01 19:18:05 +09:00
BJRambo
7ddecec802 PHP 참조 문자 제거 2023-09-01 12:46:29 +09:00
BJRambo
13601a73b6 트리거 삭제 하는 액션을 제거 2023-09-01 12:45:12 +09:00
Kijin Sung
1241ebbc80 Remove outdated properties in core widget skins 2023-08-31 23:28:23 +09:00
Kijin Sung
eedf4a6e0d Remove outdated properties in some CSS files 2023-08-31 23:13:15 +09:00
Kijin Sung
f3d753c6d0 Remove most references to x.js in core modules 2023-08-31 23:00:10 +09:00
Kijin Sung
0fde7eb7e7 Use console.error() instead of console.warn() in Firefox, because it doesn't show stack trace for warnings 2023-08-31 22:59:15 +09:00