Commit graph

10716 commits

Author SHA1 Message Date
Kijin Sung
7e018573b9 Fix RVE-2023-5 2023-09-26 19:57:22 +09:00
Kijin Sung
7cac909435 Fix unnecessary semicolon 2023-09-25 22:40:33 +09:00
Kijin Sung
3c415e18d5 Fix #1204 #407 display more helpful error message when a post cannot be upvoted/downvoted/reported for whatever reason 2023-09-25 22:32:17 +09:00
Kijin Sung
a6f918fbf9 Fix undefined variable 2023-09-25 22:06:55 +09:00
Kijin Sung
2fc94f55aa Ensure that CKEditor.timestamp is string 2023-09-25 10:33:39 +09:00
Kijin Sung
283380ed0f Replace CKEditor default LESS file with SCSS, and clean up related code in editor.html
- LESS 컴파일러 라이브러리 유지보수 중단으로, 모든 LESS는 SCSS로 변환 필요
- CKEditor 쪽에서 PHP 변수, JS 변수, CSS 변수 서로 전달하는 방식은 추가 개선 필요
2023-09-25 02:07:28 +09:00
Kijin Sung
5530a879cc Clean up unnecessary files in krzip module (it should follow the copyright and license of Rhymix core as a whole) 2023-09-25 00:19:14 +09:00
Kijin Sung
b6cb499dac Fix #1975 Remove deprecated notice from getLayoutList() 2023-09-25 00:11:34 +09:00
Kijin Sung
290367a87c Treat webp as image in integration search module 2023-09-24 21:54:08 +09:00
Kijin Sung
97705e75f4 Fix undefined variable in integration search module 2023-09-24 21:53:27 +09:00
Kijin Sung
8b9b00652c Fix #2057 add option to change or disable search division count 2023-09-24 21:50:53 +09:00
Kijin Sung
33b2c79891 Fix 2056 add trigger before moving document/comment to trash 2023-09-22 02:07:53 +09:00
Kijin Sung
565cfad15f Clean up trash handling logic 2023-09-22 02:05:14 +09:00
Kijin Sung
10123a86a8 Fix incorrect aspect ratio after converting a vertical video
https://xetown.com/questions/1775808
2023-09-21 21:20:01 +09:00
Kijin Sung
b02582c890 Fix unused or undeclared variables in moveFile() 2023-09-16 18:53:16 +09:00
Kijin Sung
e5bea38a9e Fix #2183 inconsistent return type comments in File controller and model classes 2023-09-16 18:51:57 +09:00
Kijin Sung
ec4d5f07df Add friendly help message for "unexpected end of file" errors (fix #2180) 2023-09-16 18:45:17 +09:00
Kijin Sung
31253cdb43 Fix #2181 regexp assertion compatibility with older browsers 2023-09-16 01:14:05 +09:00
Kijin Sung
62f04a1e02 Fix regression from 26f923d when anonymous comment is deleted 2023-09-16 01:05:18 +09:00
Kijin Sung
26f923d64b Fix #2145 rename $is_admin to more descriptive variable name in some controller actions 2023-09-13 11:15:13 +09:00
Kijin Sung
71e4118bd5 Merge branch 'security/rve-2023-3-4' into develop 2023-09-13 11:02:59 +09:00
Kijin Sung
c8638d2548 Change cache-busting query string format from ?YYYYMMDDHHMMSS to ?t=UnixTime
- 날짜, 유닉스 타임스탬프, 16진수(CKEditor) 등 여러 가지 포맷을 혼용하고 있던
  캐시 방지용 쿼리스트링의 형태를 "유닉스 타임스탬프"로 통일
- 표준 시간대 처리 등 은근히 많은 자원을 소모하는 date() 함수를 사용하지 않음
- t=를 붙여서 정상적인 쿼리스트링 구조가 나오도록 하여, 웹방화벽이나 CDN
  등에서 문제를 일으킬 가능성을 줄임
- 덤으로, 길이도 2바이트씩 짧아짐
2023-09-12 23:15:26 +09:00
Kijin Sung
68ee78f1f8 Update CKEditor timestamp if editor module config is updated #2173 2023-09-12 23:03:12 +09:00
Kijin Sung
ec674dc25f Fix double encoding of special characters in document tags 2023-09-12 22:52:26 +09:00
Kijin Sung
3ddf1392f9 Fix #2070 add class support to menu items 2023-09-12 22:01:28 +09:00
Kijin Sung
1ec0d74e77 Fix #2062 delete references to themes in skin config 2023-09-12 21:25:06 +09:00
Kijin Sung
08ce7b18a8 Fix #2179 missing document/comment controls when counter addon is not active 2023-09-12 00:45:37 +09:00
Kijin Sung
f2c58a0a14 Fix missing layout when you click "Full settings" for a (document, widget, or external) page in the sitemap editor 2023-09-12 00:36:46 +09:00
Kijin Sung
e60ffb4e8d Add option to control partial page rendering (layout drop)
XE 시절부터 layout=none 또는 isLayoutDrop=1 파라미터로 레이아웃이 없는
부분적인 페이지 렌더링을 허용하는 기능이 있었습니다. 관리자 화면에서
팝업이나 iframe을 표시하는 용도로도 사용하고, AJAX로 페이지 일부 내용만
새로고침할 때 불필요한 데이터를 주고받지 않도록 하는 데도 유용합니다.

그러나 사이트에 따라서는 레이아웃을 적용하지 않을 경우 민감한 정보가
노출되는 등의 부작용이 발생할 수도 있으므로, 이 기능을 사용하지 않도록
선택하는 옵션을 제공합니다.
2023-09-12 00:33:54 +09:00
Kijin Sung
e2753300ee Fix inconsistent whitespace in admin dashboard 2023-09-11 23:03:46 +09:00
Kijin Sung
dee273a4f2 Fix incorrect form method in admin dashboard 2023-09-11 23:03:27 +09:00
Kijin Sung
7998adec59 Fix warning in PHP 8.x 2023-09-11 13:42:18 +09:00
Kijin Sung
28c4a9573c Also remove unnecessary parameters in procDocumentTempSave 2023-09-09 01:23:21 +09:00
Kijin Sung
f9e48fc85c Tentative fix for RVE-2023-3 and RVE-2023-4 2023-09-08 23:43:12 +09:00
Kijin Sung
a5ed417480 Fix warnings in PHP 8.x 2023-09-06 21:10:11 +09:00
Kijin Sung
3138125eab Don't convert krzip data that is already in the standard format #2178 2023-09-06 21:09:59 +09:00
Kijin Sung
4ccfaad75e Fix #2178 incorrect processing of some addresses in krzip module 2023-09-06 16:32:03 +09:00
Kijin Sung
a99f56c7bc Increase size of upload_target_type column, and add missing indexes 2023-09-05 02:34:44 +09:00
Kijin Sung
8054564b37 Delete dispEditorPreview action that is no longer used 2023-09-05 01:13:19 +09:00
Johnny
69c94a5fd7
Merge pull request #2174 from bjrambo/pr/ncenterlite-trigger
알림센터의 트리거 호출들을 module.xml 에서 이벤트 호출로 개선
2023-09-01 19:18:05 +09:00
BJRambo
7ddecec802 PHP 참조 문자 제거 2023-09-01 12:46:29 +09:00
BJRambo
13601a73b6 트리거 삭제 하는 액션을 제거 2023-09-01 12:45:12 +09:00
Kijin Sung
eedf4a6e0d Remove outdated properties in some CSS files 2023-08-31 23:13:15 +09:00
Kijin Sung
f3d753c6d0 Remove most references to x.js in core modules 2023-08-31 23:00:10 +09:00
Kijin Sung
4e623b4b56 Convert board_admin.js to Unix line endings 2023-08-31 22:20:42 +09:00
Kijin Sung
f6d23ee13e Replace xGetElementById() with document.getElementById() in various modules 2023-08-31 22:20:07 +09:00
BJRambo
0ad91c06e6 알림센터의 트리거 호출들을 module.xml 에서 이벤트 호출로 개선 2023-08-31 13:48:02 +09:00
Kijin Sung
b65c2b5c29 Replace xGetElementById() with document.getElementById() in CKEditor script
https://xetown.com/questions/1783129#comment_1783270
2023-08-31 13:24:12 +09:00
Kijin Sung
9d44192889 Convert simpleeditor stylesheet to SCSS 2023-08-31 02:44:38 +09:00
Kijin Sung
84bae83d68 Convert remaining LESS files to SCSS 2023-08-31 02:42:34 +09:00