Commit graph

471 commits

Author SHA1 Message Date
Kijin Sung
8cf3d7b520 Update SSO mechanism to use new domain system 2017-03-04 22:05:16 +09:00
Kijin Sung
210b6b4147 Merge branch 'develop' into pr/multidomain 2017-03-01 21:50:51 +09:00
Kijin Sung
fc63b2e9b8 Properly initialize user object even when not logged in 2017-02-27 15:45:25 +09:00
Kijin Sung
e5126c7f98 Fix domain handling in getUrl() 2017-02-22 16:45:25 +09:00
Kijin Sung
c82c2f307a Various changes to URL handling routines 2017-02-20 21:22:38 +09:00
Kijin Sung
726220d3eb Load site_module_info from 'domains' table instead of 'sites' table 2017-02-20 20:43:30 +09:00
conory
0869e629b9 getUrl 에 rewrite category 추가 2017-02-11 20:27:55 +09:00
Kijin Sung
dfdbc1db85 Add session helper class and move remainder of session validation logic to Session class 2017-02-10 20:50:38 +09:00
Kijin Sung
2af90c8e1d Implement autologin in the Session class 2017-02-08 17:08:31 +09:00
Kijin Sung
af41f36bf7 Move checkSSO() from Context class to Session class 2017-02-07 23:26:43 +09:00
Kijin Sung
483ac84796 Merge branch 'develop' into pr/session-class 2017-02-07 22:13:08 +09:00
Kijin Sung
bef2e35f84 Fix disappearing validator message due to XE 1.8.29 security patch
- xpressengine/xe-core#2020
- https://www.xetown.com/qna/491042
2017-02-02 15:33:58 +09:00
Kijin Sung
079daf8a21 XEVE-16-009 보완 2017-01-12 14:53:04 +09:00
bnu
fe5feddc63 Fix #2006 XEVE-16-009 Form validator에서 사용되는 세션 데이터가 G/P/C 데이터로 대치되어 발생할 수 있는 XSS 취약점 해결
- 제보 : setuid0
2017-01-12 14:42:13 +09:00
Kijin Sung
98b32a2572 Do not apply site lock when called on the CLI 2016-11-22 09:44:07 +09:00
Kijin Sung
b7c558a96f Move session delay feature into Session class 2016-10-05 17:26:05 +09:00
Kijin Sung
d07bd15b80 Integrate session class with Context class and Member module 2016-08-15 21:49:17 +09:00
Kijin Sung
07d97242ec Unify lang and locale config files 2016-07-03 23:58:11 +09:00
Kijin Sung
f8b76b5571 Fix not recognizing POST arguments if Content-Type is wrongly set to application/json 2016-05-16 11:25:37 +09:00
Kijin Sung
503a332f9b Merge pull request #490 from kijin/pr/tablet-as-mobile
태블릿 기기를 모바일로 취급할지 선택할 수 있도록 함
2016-05-11 15:16:23 +09:00
Kijin Sung
3fbf94f630 Fix #491 no display of canonical URL on some pages 2016-05-11 15:15:05 +09:00
Kijin Sung
ad8a07096c Allow tablets to be treated as mobile or not depending on configuration 2016-05-10 23:33:12 +09:00
Kijin Sung
9b374861be Fix #488 extra hyphen when there is no subtitle 2016-05-10 11:15:28 +09:00
Kijin Sung
9bdc30b325 Add options to customize the browser title format 2016-05-09 22:39:19 +09:00
Kijin Sung
f25e685209 Make OpenGraph configurable, and fix canonical URL to include mid 2016-05-09 11:51:11 +09:00
Kijin Sung
da1b69c6b7 Initial implementation of OpenGraph metadata insertion 2016-05-09 01:36:25 +09:00
Kijin Sung
f84715db5b Fix escaping and userlang encoding of site keywords and description 2016-05-08 23:29:47 +09:00
Kijin Sung
d87bbf635c Enable multi-language for site title and subtitle 2016-05-08 21:49:11 +09:00
Kijin Sung
e90f60de22 Add site subtitle 2016-05-08 21:14:50 +09:00
Kijin Sung
4290f5110c Add 'finalize' option to getCSSFileList() and getJSFileList(), to be used only by the final layout 2016-05-06 22:01:58 +09:00
conory
de0b09f4e3 최종단계에서 Set http status message 2016-04-19 17:10:15 +09:00
Kijin Sung
c8abcbbe5e Improve error message formatting 2016-04-16 17:58:51 +09:00
Kijin Sung
88ffabfb7c Improve error handling in AJAX requests 2016-04-16 17:51:31 +09:00
Kijin Sung
71724bb9fa Always save debugging information even if DisplayHandler is not invoked 2016-03-24 08:34:13 +09:00
Kijin Sung
b6083c02fa Remove outdated comment on Context class 2016-03-23 14:25:11 +09:00
Kijin Sung
a0d9e1c6ad Remove outdated checks for old PHP versions 2016-03-22 11:34:36 +09:00
Kijin Sung
770644d114 Improve error handling in MySQL/MySQLi DB drivers 2016-03-20 00:45:20 +09:00
Kijin Sung
37bce0343d Update core classes to refer to UA class for robot detection 2016-03-19 23:32:35 +09:00
Kijin Sung
cb229c2d66 Clean up namespaces 2016-03-14 21:04:27 +09:00
Kijin Sung
19ad1d1ac4 Use encryption and URL functions to improve SSO 2016-03-14 13:16:02 +09:00
Kijin Sung
544170b530 Move IpFilter class to Security namespace 2016-03-13 10:24:52 +09:00
Kijin Sung
0adb13ca30 Add inRanges() and validateRanges() methods to IpFilter class 2016-03-13 10:18:52 +09:00
Kijin Sung
2effbea06f Update all other places to use new MediaFilter class 2016-03-13 09:59:26 +09:00
Kijin Sung
b962409652 Use new Security and URL classes in other places 2016-03-12 17:26:41 +09:00
Kijin Sung
96154c8430 Add option to auto-select the language 2016-03-06 14:50:55 +09:00
Kijin Sung
4a79b5ce25 Merge pull request #306 from kijin/pr/plugin-blacklist
호환되지 않거나 불필요한 애드온과 모듈의 실행을 방지
2016-02-27 14:41:20 +09:00
Kijin Sung
87a3128af6 Fix #303 Unable to disable rewrite 2016-02-24 09:58:47 +09:00
Kijin Sung
e335aa477e Initial implementation of blacklist function 2016-02-23 21:37:44 +09:00
Kijin Sung
ec685c1606 Fix non-ASCII characters being incorrectly escaped in array keys 2016-02-19 16:36:37 +09:00
Kijin Sung
9703b1268d Fix multidimensional array handling in Context::_filterRequestVar() 2016-02-19 15:36:08 +09:00