Commit graph

1259 commits

Author SHA1 Message Date
Kijin Sung
93629d1311 Refactor widget and editor component encoding with preg_replace_callback() 2016-03-12 22:44:09 +09:00
Kijin Sung
6f53a3f068 Check object whitelist in HTMLFilter class, not EmbedFilter class 2016-03-12 22:35:43 +09:00
Kijin Sung
143b65e840 Perform tag filtering after HTMLPurifier is done with the content 2016-03-12 22:18:33 +09:00
Kijin Sung
f577b456ec Absorb removeSrcHack() into HTMLFilter postprocessing method 2016-03-12 22:15:55 +09:00
Kijin Sung
598722b0cd Remove checkXmpTag() and blockWidgetCode() because HTMLPurifier does it better 2016-03-12 21:33:42 +09:00
Kijin Sung
1302d77cec Remove duplicate code from checkCSRF() 2016-03-12 21:05:09 +09:00
Kijin Sung
5d7853645a Remove all calls to checkUploadedFile() 2016-03-12 21:03:26 +09:00
Kijin Sung
b693c8cdad Add unit tests for Security and URL classes 2016-03-12 19:44:05 +09:00
Kijin Sung
b962409652 Use new Security and URL classes in other places 2016-03-12 17:26:41 +09:00
Kijin Sung
28da8948d7 Initial implementation of Security and URL classes 2016-03-12 17:26:12 +09:00
Kijin Sung
f4e3d5762e Support more CSS2 and CSS3 properties 2016-03-12 14:37:54 +09:00
Kijin Sung
5b7952c786 Add filename filter class 2016-03-11 19:56:04 +09:00
Kijin Sung
b89818e13d Update HTMLPurifier configuration and allow HTML5 2016-03-11 15:29:42 +09:00
Kijin Sung
c09a759ace Do not write debug entries to error log if debugging is disabled 2016-03-09 15:19:22 +09:00
Kijin Sung
0f46ae0d31 Update version to 1.8.18 2016-03-09 09:37:21 +09:00
Kijin Sung
5debdea06f Fix #357 incorrect redirect to insecure URL when using setQuery() in JS 2016-03-08 18:10:29 +09:00
Kijin Sung
f51d4af2b6 Fix incorrect unit display in English 2016-03-07 10:45:48 +09:00
Kijin Sung
f40ea2e05d Merge pull request #324 from kijin/pr/redirect-after-board-write
#323 게시판에서 글이나 댓글을 작성 또는 삭제한 후 짧은 주소로 redirect하도록 변경
2016-03-07 08:39:48 +09:00
Kijin Sung
9b5a17fb59 Clean up repeating code and add redirect() function 2016-03-07 08:34:06 +09:00
conory
0e99f8eb44 lang() 함수의 langType 기능 제거 2016-03-06 23:42:06 +09:00
Kijin Sung
658ee85f7b Merge pull request #340 from kijin/pr/autolang
언어 자동 선택 옵션 추가
2016-03-06 20:43:27 +09:00
CONORY
cf26f20461 Merge pull request #338 from conory/pr/add_function
lang() 함수 추가
2016-03-06 17:09:30 +09:00
conory
90400e2b5f 모두 lang() 함수로 변경 2016-03-06 17:01:15 +09:00
conory
fc09ea0d47 파라미터없이 lang()함수 사용시 현재 사용하고 있는 언어타입 반환
lang 에 set 메소드를 추가함 (실제로 set이 되지않는 문제수정)
2016-03-06 16:35:01 +09:00
Kijin Sung
96154c8430 Add option to auto-select the language 2016-03-06 14:50:55 +09:00
Kijin Sung
7b0c24e67c Improve debug settings 2016-03-06 14:13:34 +09:00
conory
bd6f7d6542 lang() 함수 추가 2016-03-05 23:05:41 +09:00
CONORY
7b75a103b2 Merge pull request #326 from conory/pr/not_lang
사용하는 언어에 언어코드가 없을 경우 다른 언어에서 찾아 가져오기
2016-03-05 19:43:12 +09:00
Kijin Sung
5a935779cc Add more incompatible addons and modules to blacklist 2016-03-05 14:50:33 +09:00
conory
f13b7bf999 ArrayObject 에러 수정 2016-03-04 16:43:38 +09:00
Kijin Sung
006474cb98 Fix unnecessary redirect on comment insertion in some skins 2016-03-04 15:07:03 +09:00
conory
4c475b5b62 배열로 된 언어인 경우 요소가 하나라도 빠져있으면 영어로 대체하기 2016-03-04 13:16:03 +09:00
conory
b141e69dbc 코드 개선 (한글 대체 포기) 2016-03-04 11:16:54 +09:00
Kijin Sung
54fc1da600 Fix no redirect after writing a comment 2016-03-04 10:57:56 +09:00
conory
9290c53122 #327 언어파일 정리2 2016-03-03 19:46:59 +09:00
conory
9f9fa6e653 #327 언어파일 정리 2016-03-03 18:19:44 +09:00
conory
6a351265ff 변수 충돌 부분 수정 2016-03-03 12:32:31 +09:00
conory
b9a8b15fe9 인스턴스 활용 2016-03-03 11:56:19 +09:00
conory
5f563af984 사용하는 언어에 언어코드가 없을 경우 다른 언어에서 찾아 가져오기
번역되지않은 문장이 있는 경우 달랑 언어코드만을 출력하지말고, 다른 언어로 대체하기 (영어 우선)
2016-03-02 23:53:49 +09:00
Kijin Sung
34a86defb6 Fix #321 incorrect display of objects in debugPrint() 2016-03-02 09:40:14 +09:00
Kijin Sung
4a79b5ce25 Merge pull request #306 from kijin/pr/plugin-blacklist
호환되지 않거나 불필요한 애드온과 모듈의 실행을 방지
2016-02-27 14:41:20 +09:00
Kijin Sung
379bed000d Fix JSON encoding to be fully XE-compatible 2016-02-26 14:58:42 +09:00
Kijin Sung
e4077ad324 Add 'smartphone' add-on to common blacklist 2016-02-26 09:20:35 +09:00
Kijin Sung
134c6f6ec1 Fix jshint warnings and also apply patches to exec_json() 2016-02-25 15:34:02 +09:00
Kijin Sung
b94027bf1c Display more information if an AJAX request fails 2016-02-25 14:52:07 +09:00
Kijin Sung
ac1e86cf39 Fix incorrect passing of SSL action list 2016-02-25 14:26:00 +09:00
Kijin Sung
0b339a9450 Fix #277 Incorrect priority when loading old lang files 2016-02-24 10:37:16 +09:00
Kijin Sung
e335aa477e Initial implementation of blacklist function 2016-02-23 21:37:44 +09:00
Kijin Sung
87f0a258eb Merge with XpressEngine 1.8.17
Conflicts:
	config/config.inc.php
2016-02-19 19:33:35 +09:00
Kijin Sung
6ab309c8c4 Merge branch 'xpressengine/master' into develop
Conflicts:
	classes/context/Context.class.php
	classes/security/Purifier.class.php
	config/config.inc.php
	libs/phpmailer/phpmailer.php
	modules/admin/tpl/_header.html
	modules/admin/tpl/config_ftp.html
	modules/communication/communication.controller.php
	modules/layout/tpl/layout_modify.html
	modules/module/module.model.php
2016-02-18 20:01:52 +09:00