180 commits

Author	SHA1	Message	Date
Kijin Sung	8ca0ca4a47	Fix Context::loadLang() compatibility when lang.xml is specified	2017-05-05 11:47:22 +09:00
Kijin Sung	2822191271	Fix CSRF check for GET requests	2017-04-23 14:51:41 +09:00
Kijin Sung	8147044802	Fix toBool() and add more test cases	2017-04-08 22:02:03 +09:00
Kijin Sung	97047d1279	Add list of reserved words #763	2017-03-23 19:43:49 +09:00
Kijin Sung	a3ef122b57	Merge branch 'develop' into pr/csrf-token	2017-03-13 16:35:24 +09:00
Kijin Sung	fc77980c39	Merge branch 'develop' into pr/multidomain	2017-03-07 15:43:25 +09:00
Kijin Sung	d62756dcd5	Fix unit tests to ignore user warnings during CSRF test	2017-03-06 16:02:50 +09:00
Kijin Sung	89255d0281	Initial implementation of CSRF token enforcement in Security class	2017-03-06 15:54:56 +09:00
Kijin Sung	a0f2388842	Add Session::getGenericToken() for general-purpose token handling	2017-03-06 11:24:09 +09:00
Kijin Sung	387dd1f78b	Fix #741 do not allow empty HTML content in document and comment	2017-03-06 10:50:06 +09:00
Kijin Sung	f1608ad3a9	Fix unit test for Session::checkSSO()	2017-03-04 22:09:07 +09:00
Kijin Sung	990876515b	Don't dump error log to screen during unit test of Debug class	2017-02-27 22:47:02 +09:00
Kijin Sung	72d25872cd	Fix randomly failing unit test for Session class	2017-02-27 15:57:45 +09:00
Kijin Sung	aa879e7326	Improve HTMLFilter handling of editor component properties	2017-02-25 17:37:58 +09:00
Kijin Sung	77282401e3	Add even more unit tests for malformed filter detection	2017-02-23 22:25:25 +09:00
Kijin Sung	c4c5fa9e0d	Add more unit tests for edge cases	2017-02-23 22:15:03 +09:00
Kijin Sung	5638207fb0	Change behavior of 'autoescape' filter to always escape (but not double-escape)	2017-02-22 21:29:15 +09:00
Kijin Sung	7fd0f5df7b	Add unit tests for template filters	2017-02-22 21:24:26 +09:00
Kijin Sung	58a3b47246	Add unit test to ensure that data-file-srl is not deleted	2017-02-17 21:48:52 +09:00
Kijin Sung	205180a632	Fix unit tests	2017-02-17 20:23:10 +09:00
Kijin Sung	4f774bb460	Fix unit tests	2017-02-15 11:47:43 +09:00
Kijin Sung	782caa966a	Fix unit tests	2017-02-13 17:55:05 +09:00
Kijin Sung	ba925150a3	Quash www subdomain to prevent duplicate sessions	2017-02-13 13:55:47 +09:00
Kijin Sung	054c0d23a3	Fix unit tests for HHVM	2017-02-12 23:58:34 +09:00
Kijin Sung	c5e6adb03f	Fix unit tests	2017-02-12 23:21:19 +09:00
Kijin Sung	1a0e49dcfb	Change method for storing and caching session validity information	2017-02-12 23:00:53 +09:00
Kijin Sung	fd02fa968c	Fix #702 Punycode error on attempting to handle long URLs	2017-02-11 17:48:52 +09:00
Kijin Sung	4b237f6057	Fix unit tests	2017-02-11 14:25:09 +09:00
Kijin Sung	4b26db9932	Fix unit tests, and add tests for Session::isValid()	2017-02-09 00:42:34 +09:00
Kijin Sung	af41f36bf7	Move checkSSO() from Context class to Session class	2017-02-07 23:26:43 +09:00
Kijin Sung	483ac84796	Merge branch 'develop' into pr/session-class	2017-02-07 22:13:08 +09:00
Kijin Sung	e1ffe39a2e	Use Rhymix Framework to decide whether a file can be directly downloaded ... xpressengine/xe-core#1997	2017-02-06 15:58:10 +09:00
Kijin Sung	2cb5c460f9	Merge branch 'develop' into pr/delete-empty-folders	2017-01-31 13:54:38 +09:00
Kijin Sung	0f9b8cc3d6	Allow controlling allowed classes in HTMLPurifier	2017-01-31 11:45:46 +09:00
Kijin Sung	3dc736817d	Add Storage::deleteEmptyDirectory() to recursively clear empty directories	2017-01-26 18:01:27 +09:00
Kijin Sung	91ff3c6323	Add array_escape() function to escape all keys and values of an array or object	2017-01-26 14:41:03 +09:00
Kijin Sung	61a6c01d26	Do not remove @, #, & from attached file names	2017-01-18 00:01:49 +09:00
Kijin Sung	3feccd3bcb	Update unit tests for PHP 7.1 and Codeception 2.1.11	2016-12-15 21:45:57 +09:00
Kijin Sung	79fb297948	Add unit tests for HTMLFilter changes	2016-12-15 21:06:42 +09:00
Kijin Sung	5cab16418e	Add more unit tests for IpFilter	2016-12-13 22:04:14 +09:00
Kijin Sung	e9bfb0e298	Disallow classes in user-submitted content	2016-12-08 17:45:03 +09:00
Kijin Sung	f4c4ec5ec6	Allow adding arbitrary extra vars to SMS	2016-12-03 16:41:02 +09:00
Kijin Sung	39757ea3db	Implement force sender for SMS	2016-11-12 16:21:58 +09:00
Kijin Sung	e12dd2d540	Add unit tests for SMS class	2016-11-06 21:55:51 +09:00
Kijin Sung	c1b932d360	Add unit tests for Session::checkStart()	2016-10-05 20:26:56 +09:00
Kijin Sung	a1618c236f	Merge branch 'develop' into pr/session-class	2016-10-05 17:26:12 +09:00
Kijin Sung	a0bcb92847	Add unit tests for TemplateHandler changes	2016-10-01 22:19:47 +09:00
Kijin Sung	bc6907dccf	Update unit test for Security::checkCSRF()	2016-09-25 12:37:34 +09:00
Kijin Sung	cf6c5f727e	Add option to control error logging	2016-09-14 13:13:29 +09:00
Kijin Sung	f3b30d8afc	Fix unit tests	2016-08-19 23:14:33 +09:00