3098 commits

Author	SHA1	Message	Date
Kijin Sung	24c8f4bd06	Remove MSIE-specific polyfill	2025-05-20 17:39:24 +09:00
Kijin Sung	6a46c39851	Improve fullscreen iframe handling	2025-05-20 17:38:50 +09:00
Kijin Sung	66e040b3f9	Use RulesetParser instead of XeXmlParser in Validator	2025-05-19 23:52:08 +09:00
Kijin Sung	a77b9a5d3a	Implement RulesetParser	2025-05-19 22:44:32 +09:00
Kijin Sung	278369b70e	Replace widget and widgetstyle XML parsing and caching logic	2025-05-19 21:38:58 +09:00
Kijin Sung	6727b124cd	Always initialize extra_vars attribute	2025-05-19 21:29:25 +09:00
Kijin Sung	86118dbf50	Update XML parsers for more backward compatibility	2025-05-19 20:56:22 +09:00
Kijin Sung	a3d682a294	Rewrite addon info.xml parser and support default values	2025-05-18 21:42:36 +09:00
Kijin Sung	addf4d9972	Fix incorrect type hints	2025-05-17 23:46:58 +09:00
Kijin Sung	8c87d9ee1d	Allow dynamic properties in XEXMLParser	2025-05-17 13:06:54 +09:00
Kijin Sung	e0ba5aa5b6	Prevent undefined property errors in XEXMLParser use cases	2025-05-17 13:02:29 +09:00
Kijin Sung	db72b670d8	Replace XE XML parser with new implementation based on SimpleXML	2025-05-17 12:44:04 +09:00
Kijin Sung	1d558204d1	Also apply iframe solution to dispCommentDeclare etc.	2025-05-14 02:43:04 +09:00
Kijin Sung	bd3e642d37	Also apply iframe solution to dispDocumentDeclare	2025-05-14 02:37:17 +09:00
Kijin Sung	d1d278719c	Also apply iframe solution to dispTempSavedList	2025-05-14 02:32:23 +09:00
Kijin Sung	7157181726	Consolidate popup/iframe handling code in common areas	2025-05-14 02:13:04 +09:00
Kijin Sung	5a867a3a8b	Add overflow-wrap: anywhere to .rhymix_content to prevent excessively long words from breaking layout	2025-05-14 00:24:19 +09:00
Kijin Sung	f55609eac8	Add syndication module to blacklist	2025-05-14 00:23:54 +09:00
Kijin Sung	a1ae74837f	Fix incorrect return type when HTTP::download() cannot write to target file or parent directory	2025-05-12 12:25:52 +09:00
Kijin Sung	b249df71b6	Fix #2550 incorrect handling of absolute URLs in imported SCSS files	2025-05-11 13:46:44 +09:00
Kijin Sung	e2040b881d	Version 2.1.23	2025-04-30 09:50:07 +09:00
Kijin Sung	0a3fa5c77b	Prevent unnecessary length calculation if minlength/maxlength are not set	2025-04-16 12:06:57 +09:00
Kijin Sung	fc2bdd7253	Make _v2_escape() more lenient about types	2025-03-31 15:14:58 +09:00
Kijin Sung	ba74b47a29	Fix matching of partial attribute names #2537	2025-03-31 01:11:51 +09:00
Kijin Sung	f613841a1b	Version 2.1.22	2025-03-27 16:40:40 +09:00
Kijin Sung	3003c31189	Update copyright notice #2436	2025-03-23 20:58:28 +09:00
Kijin Sung	e192bc0ff6	Add widget directive for Template v2	2025-03-20 14:01:56 +09:00
Kijin Sung	3e052d2d00	Improve detection of template v1-style syntax in CSS/JS contexts	2025-03-19 12:44:17 +09:00
Kijin Sung	d7cf825a7d	Use regular escape() for CSS contexts	2025-03-19 11:23:42 +09:00
Kijin Sung	01f34781df	Don't parse template v1 syntax (single braces) in CSS/JS context	2025-03-19 00:42:01 +09:00
Kijin Sung	9689a1ed68	Implement better contextual escape for template v2	2025-03-19 00:12:39 +09:00
Kijin Sung	baadb36e37	Improve escape_css() to accept most common CSS expressions	2025-03-18 23:53:06 +09:00
Kijin Sung	62eb6b2aae	Add more context switches for inline scripts and styles	2025-03-18 23:17:42 +09:00
Kijin Sung	800eb2f444	Change behavior of \@mobile directive in template v2 #2510	2025-03-18 22:51:22 +09:00
Kijin Sung	2c05d3f0c7	#2527 보완: \n 뒤에 공백 남을 수 있는 문제 수정	2025-03-18 22:37:51 +09:00
dewekk	2276110b0f	utf8_normalize_spaces 함수에서 불필요한 공백 문자 추가 제거	2025-03-14 09:46:10 +09:00
Kijin Sung	f980ea58c6	Improve description of mobile view setting, and hide mobile settings if mobile view is disabled #2510	2025-03-08 23:18:11 +09:00
Kijin Sung	b6c444c536	Add $sync parameter to send() method of Mail, SMS and Push classes #2402	2025-03-08 20:50:18 +09:00
Kijin Sung	18d1ace121	Enforce that values passed to urlencode() are strings	2025-03-08 15:08:42 +09:00
Kijin Sung	f33c52b20f	Cast to string before verifying untrusted input	2025-03-08 14:57:24 +09:00
Kijin Sung	400d3bcec4	Fix implicitly nullable parameters in last version of scssphp that supports PHP 7.4	2025-03-05 20:37:01 +09:00
Kijin Sung	b5823e97e4	Update HTMLPurifier, Guzzle and scssphp	2025-03-05 20:32:15 +09:00
Kijin Sung	6cc9511243	Simplify check for mbstring #2507	2025-03-05 18:53:50 +09:00
Kijin Sung	fed2af3d13	Fix fatal error in CLI scripts in PHP 8.4 #2513	2025-03-05 18:48:38 +09:00
Kijin Sung	187157cfcd	Fix warning that E_STRICT is deprecated in PHP 8.4	2025-03-01 15:56:17 +09:00
Kijin Sung	9e41e9d6cd	Version 2.1.21	2025-02-18 11:25:20 +09:00
Kijin Sung	5f5cd81f1b	Merge branch 'security/rve-2025-1'	2025-02-18 11:23:19 +09:00
Kijin Sung	f4e5a0f21c	Fix type error when referer is null #2493	2025-02-17 22:05:24 +09:00
Kijin Sung	a208e0dbbc	Fix RVE-2025-1 potential SQL injection via third-party program	2025-02-16 14:55:40 +09:00
Kijin Sung	ae0e13eca9	Add unit tests for if="var" support in XML query	2025-02-15 22:42:11 +09:00