Commit graph

20440 commits

Author SHA1 Message Date
Kijin Sung
83a42081fa Fix fatal error when some important variables contain non-scalar values 2025-03-08 14:29:25 +09:00
Kijin Sung
7fce9fcc39 Fix fatal error when "lang" URL parameter is given on an external page 2025-03-08 14:07:44 +09:00
Kijin Sung
9429c7fbc8 Don't even touch point cache file if system-wide cache is enabled 2025-03-06 23:42:39 +09:00
Kijin Sung
400d3bcec4 Fix implicitly nullable parameters in last version of scssphp that supports PHP 7.4 2025-03-05 20:37:01 +09:00
Kijin Sung
b5823e97e4 Update HTMLPurifier, Guzzle and scssphp 2025-03-05 20:32:15 +09:00
Kijin Sung
074873d844 Fix deprecation warning in PHP 8.4 2025-03-05 20:24:09 +09:00
Kijin Sung
823b83b3da Change menu description input to textarea #2506 2025-03-05 19:01:31 +09:00
Kijin Sung
6cc9511243 Simplify check for mbstring #2507 2025-03-05 18:53:50 +09:00
Kijin Sung
6aac58eddb Fix repeated variable in condition #2511 2025-03-05 18:52:54 +09:00
Kijin Sung
d615a42d7f Fix unresolved lang code in page edit screen #2512 2025-03-05 18:52:04 +09:00
Kijin Sung
fed2af3d13 Fix fatal error in CLI scripts in PHP 8.4 #2513 2025-03-05 18:48:38 +09:00
Kijin Sung
5656189a19 Fix warnings in PHP 8.x 2025-03-01 16:33:06 +09:00
Kijin Sung
5e6b3483e2 Increase reCAPTCHA and Turnstile timeouts 2025-03-01 15:57:18 +09:00
Kijin Sung
187157cfcd Fix warning that E_STRICT is deprecated in PHP 8.4 2025-03-01 15:56:17 +09:00
Kijin Sung
bbd33e53ca Fix fatal error when parent comment is not defined 2025-03-01 12:07:24 +09:00
Kijin Sung
7fe2523f0e Use simple, hidden toolbar on mobile for sending messages, even if mobile view setting is off 2025-02-28 18:03:52 +09:00
Kijin Sung
c5e13d3cf7 Fix member module config and mid config out of sync #2496 2025-02-19 18:14:00 +09:00
Kijin Sung
9e41e9d6cd Version 2.1.21 2025-02-18 11:25:20 +09:00
Kijin Sung
5f5cd81f1b Merge branch 'security/rve-2025-1' 2025-02-18 11:23:19 +09:00
Kijin Sung
ecef7326f9 Add notice about SSO being removed soon 2025-02-17 22:08:01 +09:00
Kijin Sung
f4e5a0f21c Fix type error when referer is null #2493 2025-02-17 22:05:24 +09:00
Kijin Sung
97762fa43d Fix incorrect relative path in concatenated files #2492 2025-02-17 20:57:27 +09:00
Kijin Sung
d3dcb03a01 Prepend layout header script for backward compatibility 2025-02-17 20:10:09 +09:00
Kijin Sung
7d8c09750b Add option to prepend header/footer to existing content 2025-02-17 20:09:51 +09:00
Kijin Sung
a66b036dd5 Limit SMS verification attempts to 10 at a time #2480 2025-02-16 16:00:03 +09:00
Kijin Sung
2b8656eaf0 Add unit tests for RVE-2025-1 2025-02-16 14:55:50 +09:00
Kijin Sung
a208e0dbbc Fix RVE-2025-1 potential SQL injection via third-party program 2025-02-16 14:55:40 +09:00
Kijin Sung
ae0e13eca9 Add unit tests for if="var" support in XML query 2025-02-15 22:42:11 +09:00
Kijin Sung
658a28dfd8 Support "if" attribute in navigation elements of XML query 2025-02-15 22:32:42 +09:00
Kijin Sung
fd0491cb0d Reorder return values of VariableBase::getValue() so that the value can be quickly accessed 2025-02-15 22:25:25 +09:00
Kijin Sung
0d14aca1c0 Add unit test for type="module" and fix broken tests 2025-02-15 22:13:35 +09:00
Kijin Sung
5b575f9c30 Support type="module" for JS files loaded from template v2 #2482 2025-02-15 22:04:50 +09:00
Kijin Sung
4bf4aca762 Hide extra vars with no value #2486 2025-02-15 21:49:36 +09:00
Kijin Sung
7d6565766a Hide unnecessary fields in extravar config screen #2486 2025-02-15 21:43:27 +09:00
Kijin Sung
65918f67ea Fix incorrect checkbox handling in document_category.js #2486 2025-02-15 21:31:23 +09:00
Kijin Sung
ef751041dd Fix incorrect header script if member module uses its own layout #2474 2025-02-15 21:24:06 +09:00
Kijin Sung
a478127c61 Fix duplicate phone_number field in signup and modify pages #2472 2025-02-15 21:08:23 +09:00
Kijin Sung
5b22e22543 Hide identifier from non-admin member form #2472 2025-02-15 21:04:10 +09:00
Kijin Sung
2fe39a37dd Remove special treatment for identifierForm in admin insert_member template #2472 2025-02-15 21:00:38 +09:00
Kijin Sung
9c4212ddc3 Clean up admin insert_member form 2025-02-15 20:47:54 +09:00
Kijin Sung
a5b9e11831 Fix no autologin after signup if phone number is the only available identifier #2485 2025-02-14 21:14:58 +09:00
Kijin Sung
b5a16dad5e Show edit button for users who have modify permissions on an article page #2458 2025-02-14 21:05:08 +09:00
Kijin Sung
3fd2fad70e Clean up article page edit method #2458 2025-02-14 20:59:30 +09:00
Kijin Sung
63e2e9c681 Fix manager group not being given any scopes 2025-02-14 20:45:18 +09:00
Kijin Sung
08d6db7657 Don't convert Cloudflare IP if CF-Worker header is set 2025-02-13 22:43:46 +09:00
Kijin Sung
00db2ab402 Fix broken emoji and other HTML entities when using cut_str()
https://xetown.com/questions/1855257
2025-02-13 22:39:13 +09:00
Kijin Sung
651fa56c4f Add close button to document manage popup #2478 2025-02-13 22:32:18 +09:00
Kijin Sung
1aac6f8a41 Allow space in user name #2466 2025-02-13 22:19:22 +09:00
Kijin Sung
eccc337d44 Remove ogv from list of directly playable video formats #2469 2025-02-13 22:08:28 +09:00
Kijin Sung
8eb306e472 Make SMS auth codes expire after 10 minutes #2480 2025-02-13 22:05:43 +09:00