Kijin Sung
6f124472bb
Merge branch 'security/rve-2023-5' into develop
2023-09-27 09:52:55 +09:00
Kijin Sung
ea9f469513
Convert potentially problematic parameters to string before passing from legacy function to Rhymix Framework
2023-09-26 20:34:30 +09:00
Kijin Sung
9ca2c94fe4
Fix #2186 type error when unexpected values are passed to columnList
2023-09-26 20:08:08 +09:00
Kijin Sung
c23dcd6cf5
General cleanup of receiver_srl verification logic
2023-09-26 20:00:17 +09:00
Kijin Sung
cbb5e3a582
Throw exception if RVE-2023-5 is violated
2023-09-26 19:59:30 +09:00
Kijin Sung
7e018573b9
Fix RVE-2023-5
2023-09-26 19:57:22 +09:00
Kijin Sung
a4b49048f3
Fix uppercase scripts not working as CLI command
2023-09-26 15:02:09 +09:00
Kijin Sung
5d78d114a7
Remove deprecated argument $errcontext from default error handler
2023-09-26 12:06:20 +09:00
Kijin Sung
1de83747de
Fix missing type declarations in Debug class
2023-09-26 11:27:30 +09:00
Kijin Sung
a1537bafe3
Fix incorrect or missing type declarations in Cache and DB classes
2023-09-26 11:09:55 +09:00
Kijin Sung
23c5f66479
Fix undeclared variable $rss when parsing atom feed
2023-09-25 22:42:41 +09:00
Kijin Sung
7cac909435
Fix unnecessary semicolon
2023-09-25 22:40:33 +09:00
Kijin Sung
3c415e18d5
Fix #1204 #407 display more helpful error message when a post cannot be upvoted/downvoted/reported for whatever reason
2023-09-25 22:32:17 +09:00
Kijin Sung
a6f918fbf9
Fix undefined variable
2023-09-25 22:06:55 +09:00
Kijin Sung
2fc94f55aa
Ensure that CKEditor.timestamp is string
2023-09-25 10:33:39 +09:00
Kijin Sung
283380ed0f
Replace CKEditor default LESS file with SCSS, and clean up related code in editor.html
...
- LESS 컴파일러 라이브러리 유지보수 중단으로, 모든 LESS는 SCSS로 변환 필요
- CKEditor 쪽에서 PHP 변수, JS 변수, CSS 변수 서로 전달하는 방식은 추가 개선 필요
2023-09-25 02:07:28 +09:00
Kijin Sung
5530a879cc
Clean up unnecessary files in krzip module (it should follow the copyright and license of Rhymix core as a whole)
2023-09-25 00:19:14 +09:00
Kijin Sung
b6cb499dac
Fix #1975 Remove deprecated notice from getLayoutList()
2023-09-25 00:11:34 +09:00
Kijin Sung
234ba6c5c6
Fix some potentially misleading comments about constants
2023-09-24 23:01:54 +09:00
Kijin Sung
c48eb3a169
Add missing return type declarations
2023-09-24 22:57:37 +09:00
Kijin Sung
2fe3837f07
Mark changeValueInUrl() as deprecated
2023-09-24 22:57:24 +09:00
Kijin Sung
d8fcb3cc70
Add proper comments and some _rx_ variables to getDestroyXeVars()
2023-09-24 22:49:48 +09:00
Kijin Sung
caa80f8d97
Move deprecated functions to the end of legacy.php
2023-09-24 22:45:36 +09:00
Kijin Sung
29ea470f56
Mark more legacy functions as deprecated
2023-09-24 22:36:30 +09:00
Kijin Sung
6434a18b06
Add return types to legacy global functions
...
오래된 함수들은 서드파티 자료들이 예상치 못한 자료형의 변수를 넘기는 경우가
많으므로, 파라미터의 타입은 강제하지 않고 반환 타입만 선언함.
2023-09-24 22:33:02 +09:00
Kijin Sung
a7ac14ecbd
Add type declarations to global functions where possible
2023-09-24 22:32:49 +09:00
Kijin Sung
290367a87c
Treat webp as image in integration search module
2023-09-24 21:54:08 +09:00
Kijin Sung
97705e75f4
Fix undefined variable in integration search module
2023-09-24 21:53:27 +09:00
Kijin Sung
8b9b00652c
Fix #2057 add option to change or disable search division count
2023-09-24 21:50:53 +09:00
Kijin Sung
33b2c79891
Fix 2056 add trigger before moving document/comment to trash
2023-09-22 02:07:53 +09:00
Kijin Sung
565cfad15f
Clean up trash handling logic
2023-09-22 02:05:14 +09:00
Kijin Sung
10123a86a8
Fix incorrect aspect ratio after converting a vertical video
...
https://xetown.com/questions/1775808
2023-09-21 21:20:01 +09:00
Kijin Sung
2cb476dc37
Add code that can be uncommented to enable error display for debugging
2023-09-21 20:44:34 +09:00
Kijin Sung
5a61bc62d3
Fix meaningful whitespace being hidden after template compile
2023-09-18 14:26:56 +09:00
Kijin Sung
b02582c890
Fix unused or undeclared variables in moveFile()
2023-09-16 18:53:16 +09:00
Kijin Sung
e5bea38a9e
Fix #2183 inconsistent return type comments in File controller and model classes
2023-09-16 18:51:57 +09:00
Kijin Sung
ec4d5f07df
Add friendly help message for "unexpected end of file" errors ( fix #2180 )
2023-09-16 18:45:17 +09:00
Kijin Sung
31253cdb43
Fix #2181 regexp assertion compatibility with older browsers
2023-09-16 01:14:05 +09:00
Kijin Sung
62f04a1e02
Fix regression from 26f923d when anonymous comment is deleted
2023-09-16 01:05:18 +09:00
Kijin Sung
585ea0f1d3
Version 2.1.5
2023-09-13 11:19:03 +09:00
Kijin Sung
26f923d64b
Fix #2145 rename $is_admin to more descriptive variable name in some controller actions
2023-09-13 11:15:13 +09:00
Kijin Sung
71e4118bd5
Merge branch 'security/rve-2023-3-4' into develop
2023-09-13 11:02:59 +09:00
Kijin Sung
14f3704215
Update unit tests for new cache-busting querystring format
2023-09-12 23:20:40 +09:00
Kijin Sung
c8638d2548
Change cache-busting query string format from ?YYYYMMDDHHMMSS to ?t=UnixTime
...
- 날짜, 유닉스 타임스탬프, 16진수(CKEditor) 등 여러 가지 포맷을 혼용하고 있던
캐시 방지용 쿼리스트링의 형태를 "유닉스 타임스탬프"로 통일
- 표준 시간대 처리 등 은근히 많은 자원을 소모하는 date() 함수를 사용하지 않음
- t=를 붙여서 정상적인 쿼리스트링 구조가 나오도록 하여, 웹방화벽이나 CDN
등에서 문제를 일으킬 가능성을 줄임
- 덤으로, 길이도 2바이트씩 짧아짐
2023-09-12 23:15:26 +09:00
Kijin Sung
68ee78f1f8
Update CKEditor timestamp if editor module config is updated #2173
2023-09-12 23:03:12 +09:00
Kijin Sung
ec674dc25f
Fix double encoding of special characters in document tags
2023-09-12 22:52:26 +09:00
Kijin Sung
fead32337e
Fix incorrect debug comment for outer templates in a deeply nested include tree
2023-09-12 22:42:30 +09:00
Kijin Sung
7f7e0a099d
Fix incorrect display of SCSS variable in meta debug info
2023-09-12 22:18:29 +09:00
Kijin Sung
efd06ff447
Use HTML classes specified in menu #2070
2023-09-12 22:01:56 +09:00
Kijin Sung
3ddf1392f9
Fix #2070 add class support to menu items
2023-09-12 22:01:28 +09:00