472 commits

Author	SHA1	Message	Date
Kijin Sung	5586956fea	Revert "Convert default SCSS stylesheet to LESS" ... This reverts commit 1a98f0974c.	2017-12-01 17:57:30 +09:00
Kijin Sung	1a98f0974c	Convert default SCSS stylesheet to LESS ... 서버단에서 컴파일하는 속도가 SCSS보다 LESS가 훨씬 빠름	2017-12-01 17:32:55 +09:00
Kijin Sung	6f35f5bafc	Fix strict count() behavior in PHP 7.2	2017-12-01 01:42:03 +09:00
Kijin Sung	7c91f3a5e7	Fix unit test for blocking common scripts	2017-09-20 17:32:24 +09:00
Kijin Sung	e734caf7b3	Fix unit tests to accommodate change to trusty in Travis CI	2017-09-04 14:04:41 +09:00
Kijin Sung	73c09ce876	Fix handling of external CSS/JS URLs with query strings ... xpressengine/xe-core#2114	2017-08-16 23:05:45 +09:00
Kijin Sung	21072195c0	Prevent overwriting jQuery and other common scripts ... - Block third-party programs trying to load their own version of jQuery - Block obsolete scripts such as xe.css and xe.js - Block minified versions of the above, too - Increase blocking index threshold from 1,500,000 to 1,500,000,000 - Add unit tests for script blocking	2017-07-02 00:36:19 +09:00
Kijin Sung	464325c6f6	Update Markdown formatter to support footnotes and hard wraps natively	2017-06-29 23:58:20 +09:00
Kijin Sung	8c752b9baf	Add more unit tests for is_html_content()	2017-06-29 19:54:33 +09:00
Kijin Sung	2a023f0854	Also use the <span> tag to determine whether an editor was used	2017-06-29 18:53:46 +09:00
Kijin Sung	3c772bf1cf	Separate <p> tests from <br> tests	2017-06-29 18:44:52 +09:00
Kijin Sung	804533222c	Add is_html_content() function to detect whether a string is HTML	2017-06-29 18:25:36 +09:00
Kijin Sung	8ca0ca4a47	Fix Context::loadLang() compatibility when lang.xml is specified	2017-05-05 11:47:22 +09:00
Kijin Sung	2822191271	Fix CSRF check for GET requests	2017-04-23 14:51:41 +09:00
Kijin Sung	8147044802	Fix toBool() and add more test cases	2017-04-08 22:02:03 +09:00
Kijin Sung	97047d1279	Add list of reserved words #763	2017-03-23 19:43:49 +09:00
Kijin Sung	a3ef122b57	Merge branch 'develop' into pr/csrf-token	2017-03-13 16:35:24 +09:00
Kijin Sung	fc77980c39	Merge branch 'develop' into pr/multidomain	2017-03-07 15:43:25 +09:00
Kijin Sung	d62756dcd5	Fix unit tests to ignore user warnings during CSRF test	2017-03-06 16:02:50 +09:00
Kijin Sung	89255d0281	Initial implementation of CSRF token enforcement in Security class	2017-03-06 15:54:56 +09:00
Kijin Sung	a0f2388842	Add Session::getGenericToken() for general-purpose token handling	2017-03-06 11:24:09 +09:00
Kijin Sung	387dd1f78b	Fix #741 do not allow empty HTML content in document and comment	2017-03-06 10:50:06 +09:00
Kijin Sung	f1608ad3a9	Fix unit test for Session::checkSSO()	2017-03-04 22:09:07 +09:00
Kijin Sung	990876515b	Don't dump error log to screen during unit test of Debug class	2017-02-27 22:47:02 +09:00
Kijin Sung	72d25872cd	Fix randomly failing unit test for Session class	2017-02-27 15:57:45 +09:00
Kijin Sung	aa879e7326	Improve HTMLFilter handling of editor component properties	2017-02-25 17:37:58 +09:00
Kijin Sung	77282401e3	Add even more unit tests for malformed filter detection	2017-02-23 22:25:25 +09:00
Kijin Sung	c4c5fa9e0d	Add more unit tests for edge cases	2017-02-23 22:15:03 +09:00
Kijin Sung	5638207fb0	Change behavior of 'autoescape' filter to always escape (but not double-escape)	2017-02-22 21:29:15 +09:00
Kijin Sung	7fd0f5df7b	Add unit tests for template filters	2017-02-22 21:24:26 +09:00
Kijin Sung	58a3b47246	Add unit test to ensure that data-file-srl is not deleted	2017-02-17 21:48:52 +09:00
Kijin Sung	205180a632	Fix unit tests	2017-02-17 20:23:10 +09:00
Kijin Sung	4f774bb460	Fix unit tests	2017-02-15 11:47:43 +09:00
Kijin Sung	782caa966a	Fix unit tests	2017-02-13 17:55:05 +09:00
Kijin Sung	ba925150a3	Quash www subdomain to prevent duplicate sessions	2017-02-13 13:55:47 +09:00
Kijin Sung	054c0d23a3	Fix unit tests for HHVM	2017-02-12 23:58:34 +09:00
Kijin Sung	c5e6adb03f	Fix unit tests	2017-02-12 23:21:19 +09:00
Kijin Sung	1a0e49dcfb	Change method for storing and caching session validity information	2017-02-12 23:00:53 +09:00
Kijin Sung	fd02fa968c	Fix #702 Punycode error on attempting to handle long URLs	2017-02-11 17:48:52 +09:00
Kijin Sung	4b237f6057	Fix unit tests	2017-02-11 14:25:09 +09:00
Kijin Sung	4b26db9932	Fix unit tests, and add tests for Session::isValid()	2017-02-09 00:42:34 +09:00
Kijin Sung	af41f36bf7	Move checkSSO() from Context class to Session class	2017-02-07 23:26:43 +09:00
Kijin Sung	483ac84796	Merge branch 'develop' into pr/session-class	2017-02-07 22:13:08 +09:00
Kijin Sung	e1ffe39a2e	Use Rhymix Framework to decide whether a file can be directly downloaded ... xpressengine/xe-core#1997	2017-02-06 15:58:10 +09:00
Kijin Sung	2cb5c460f9	Merge branch 'develop' into pr/delete-empty-folders	2017-01-31 13:54:38 +09:00
Kijin Sung	0f9b8cc3d6	Allow controlling allowed classes in HTMLPurifier	2017-01-31 11:45:46 +09:00
Kijin Sung	3dc736817d	Add Storage::deleteEmptyDirectory() to recursively clear empty directories	2017-01-26 18:01:27 +09:00
Kijin Sung	91ff3c6323	Add array_escape() function to escape all keys and values of an array or object	2017-01-26 14:41:03 +09:00
Kijin Sung	61a6c01d26	Do not remove @, #, & from attached file names	2017-01-18 00:01:49 +09:00
Kijin Sung	3feccd3bcb	Update unit tests for PHP 7.1 and Codeception 2.1.11	2016-12-15 21:45:57 +09:00