Commit graph

20925 commits

Author SHA1 Message Date
Kijin Sung
a92016cf4f Distinguish between vote and blame when setting setPoint() note 2026-04-18 23:30:39 +09:00
Kijin Sung
02ca0450ad Add note when calling setPoint() so that downstream event handlers can tell what the change was for 2026-04-18 23:20:38 +09:00
Kijin Sung
3e4b4a21b3 Fix unnecessary modification of document restored from trash #2697 2026-04-14 23:57:25 +09:00
Kijin Sung
7368773040 Add triggers before/after procMemberCheckValue and procMemberModifyInfo #2698 #2700 2026-04-14 23:36:01 +09:00
Kijin Sung
cc8e256cba Add message after deleting scrap #2694 2026-04-11 20:50:05 +09:00
Kijin Sung
db52c6df4c Fix double-escape of homepage field #2695 2026-04-11 20:46:50 +09:00
Kijin Sung
9eb6931f80 Sort files by regdate in admin list, in case files were imported in arbitrary order 2026-04-05 16:34:52 +09:00
Kijin Sung
2b5620328e Disable login failure notification connected to the wrong configuration item #2691 2026-04-05 16:31:52 +09:00
Kijin Sung
76a6bb56b0 Fix invalid query argument that causes error upon login #2691 2026-04-05 16:26:53 +09:00
Kijin Sung
e30e789586 Actually use modified values from getThumbnail trigger #2693 2026-04-05 16:20:49 +09:00
Kijin Sung
530464289a Version 2.1.32 2026-04-01 10:54:41 +09:00
Kijin Sung
90f1238b23 Use DocumentModel::getBlankDocument() to obtain a dummy document with module_srl in BoardView 2026-03-31 22:28:39 +09:00
Kijin Sung
cbb363671a Add DocumentModel::getBlankDocument() and fix some incorrect return type comments 2026-03-31 22:27:20 +09:00
Kijin Sung
99d6182f89 Update actions/checkout to v5 because github is deprecating node.js 20 2026-03-31 21:08:40 +09:00
Kijin Sung
6be98ff58c Simplify RVE-2026-6 patch using R\F\Security::sanitize() 2026-03-31 21:04:39 +09:00
Kijin Sung
b1f84365a5 Add 'command' type to R\F\Security::sanitize() 2026-03-31 21:02:33 +09:00
Kijin Sung
ae44685306 Merge branch 'security/rve-2026-6' 2026-03-31 20:51:14 +09:00
Kijin Sung
b7489e6e7b Merge branch 'security/rve-2026-5' 2026-03-31 20:51:11 +09:00
Kijin Sung
f3a08ba8f3 Merge branch 'security/rve-2026-4' 2026-03-31 20:51:08 +09:00
Kijin Sung
ea4f116b4c Merge branch 'security/rve-2026-3' 2026-03-31 20:51:05 +09:00
Kijin Sung
1d8718a256 Remove unused methods in menu module 2026-03-31 20:50:58 +09:00
Kijin Sung
01d65dee7f Fix pre-conversion file size limit applying to admins 2026-03-31 19:54:53 +09:00
Kijin Sung
81b32378ca Support timeouts for ffmpeg and magick commands
https://rhymix.org/qna/1935749
2026-03-31 19:53:08 +09:00
Kijin Sung
ba49fe7b70 Fix warnings when migrating XE config to Rhymix format 2026-03-31 19:30:09 +09:00
Kijin Sung
7c30af23c5 Allow admin to delete comment placeholders from list #967 2026-03-29 16:37:23 +09:00
Kijin Sung
5c858806b2 Treat comma as a regular character when parsing search string #2687 2026-03-29 16:26:10 +09:00
Kijin Sung
057507d3d7 Fix member extra field being reset to public after editing 2026-03-29 16:23:38 +09:00
Kijin Sung
7a3d759e62 Fix undefined property when XML query has <navigation> without <page_count> #2688 2026-03-22 15:17:50 +09:00
Kijin Sung
63d2582c8e Fix invalid query when search contains zero conditions #2687 2026-03-22 15:09:45 +09:00
Kijin Sung
e61ccf84b8 Always cast module_srl to int when parsing include_modules 2026-03-22 14:59:01 +09:00
Kijin Sung
4ee0699dea Fix RVE-2026-6 possible command injection via magick 2026-03-19 17:50:44 +09:00
Kijin Sung
c906eae5d3 Disallow GET requests to procMemberFindAccount, and add route to procMemberAuthEmailAddress 2026-03-19 17:35:42 +09:00
Kijin Sung
00c9a5316c Fix RVE-2026-5 unconfigured domain in auth email 2026-03-19 17:33:08 +09:00
Kijin Sung
94008fbe9b Allow larger images/videos to be uploaded if they are going to be converted
- 변환 대상인 이미지나 동영상 파일은 용량 제한을 더 느슨하게 설정할 수 있도록 함
- 변환 후에 다시 용량을 체크하여 각 게시판의 업로드 정책 적용
- https://rhymix.org/qna/1926104
2026-03-10 19:45:38 +09:00
Kijin Sung
44cf008ac7 Allow setting list_count in various admin list pages #2549 2026-03-10 13:32:42 +09:00
Kijin Sung
8901cb6e36 Fix duplicate message content when document is moved #2686 2026-03-09 21:28:51 +09:00
Kijin Sung
3ca12cca6f Always set correct module_srl, even on empty documents 2026-03-09 20:34:34 +09:00
Kijin Sung
8b8dc99431 Replace $oDocument with empty DocumentItem if access is not allowed 2026-03-09 20:29:59 +09:00
Kijin Sung
4fe87edd1d Don't call API class if HTTP status code is 4xx or 5xx 2026-03-09 20:29:18 +09:00
Kijin Sung
a03c33381f Fix error when updating a document with a required file #2685 2026-03-04 18:51:15 +09:00
Kijin Sung
bf0899973a Fix missing validation of xe_run_method 2026-03-03 18:07:56 +09:00
Kijin Sung
cdc713301f Prevent saving layout HTML/CSS if it was not previously edited 2026-03-03 18:02:42 +09:00
Kijin Sung
cdb520d2b1 Preserve module_srl after managing document #2683 2026-03-01 23:32:39 +09:00
Kijin Sung
2392b923b0 Fix reference to potentially undefined config variable 2026-02-27 20:51:30 +09:00
Kijin Sung
6386ddfe27 Fix warnings when user is logged out #2680 2026-02-27 20:51:07 +09:00
Kijin Sung
798b0cd1d6 Fix warnings when user is logged out #2680 2026-02-27 20:46:49 +09:00
Kijin Sung
73e153be60 Fix warnings when logged_info is false #2680 2026-02-27 20:46:32 +09:00
Kijin Sung
840a9adac8 Version 2.1.31 2026-02-26 13:18:24 +09:00
Kijin Sung
2ede904d56 Ensure that the default version of jQuery and jQuery Migrate are always loaded during install 2026-02-26 13:15:12 +09:00
Kijin Sung
465248a7a4 Update jQuery Migrate to 3.6.0 2026-02-26 13:10:47 +09:00