3088 commits

Author	SHA1	Message	Date
Kijin Sung	e0ba5aa5b6	Prevent undefined property errors in XEXMLParser use cases	2025-05-17 13:02:29 +09:00
Kijin Sung	db72b670d8	Replace XE XML parser with new implementation based on SimpleXML	2025-05-17 12:44:04 +09:00
Kijin Sung	1d558204d1	Also apply iframe solution to dispCommentDeclare etc.	2025-05-14 02:43:04 +09:00
Kijin Sung	bd3e642d37	Also apply iframe solution to dispDocumentDeclare	2025-05-14 02:37:17 +09:00
Kijin Sung	d1d278719c	Also apply iframe solution to dispTempSavedList	2025-05-14 02:32:23 +09:00
Kijin Sung	7157181726	Consolidate popup/iframe handling code in common areas	2025-05-14 02:13:04 +09:00
Kijin Sung	5a867a3a8b	Add overflow-wrap: anywhere to .rhymix_content to prevent excessively long words from breaking layout	2025-05-14 00:24:19 +09:00
Kijin Sung	f55609eac8	Add syndication module to blacklist	2025-05-14 00:23:54 +09:00
Kijin Sung	a1ae74837f	Fix incorrect return type when HTTP::download() cannot write to target file or parent directory	2025-05-12 12:25:52 +09:00
Kijin Sung	b249df71b6	Fix #2550 incorrect handling of absolute URLs in imported SCSS files	2025-05-11 13:46:44 +09:00
Kijin Sung	e2040b881d	Version 2.1.23	2025-04-30 09:50:07 +09:00
Kijin Sung	0a3fa5c77b	Prevent unnecessary length calculation if minlength/maxlength are not set	2025-04-16 12:06:57 +09:00
Kijin Sung	fc2bdd7253	Make _v2_escape() more lenient about types	2025-03-31 15:14:58 +09:00
Kijin Sung	ba74b47a29	Fix matching of partial attribute names #2537	2025-03-31 01:11:51 +09:00
Kijin Sung	f613841a1b	Version 2.1.22	2025-03-27 16:40:40 +09:00
Kijin Sung	3003c31189	Update copyright notice #2436	2025-03-23 20:58:28 +09:00
Kijin Sung	e192bc0ff6	Add widget directive for Template v2	2025-03-20 14:01:56 +09:00
Kijin Sung	3e052d2d00	Improve detection of template v1-style syntax in CSS/JS contexts	2025-03-19 12:44:17 +09:00
Kijin Sung	d7cf825a7d	Use regular escape() for CSS contexts	2025-03-19 11:23:42 +09:00
Kijin Sung	01f34781df	Don't parse template v1 syntax (single braces) in CSS/JS context	2025-03-19 00:42:01 +09:00
Kijin Sung	9689a1ed68	Implement better contextual escape for template v2	2025-03-19 00:12:39 +09:00
Kijin Sung	baadb36e37	Improve escape_css() to accept most common CSS expressions	2025-03-18 23:53:06 +09:00
Kijin Sung	62eb6b2aae	Add more context switches for inline scripts and styles	2025-03-18 23:17:42 +09:00
Kijin Sung	800eb2f444	Change behavior of \@mobile directive in template v2 #2510	2025-03-18 22:51:22 +09:00
Kijin Sung	2c05d3f0c7	#2527 보완: \n 뒤에 공백 남을 수 있는 문제 수정	2025-03-18 22:37:51 +09:00
dewekk	2276110b0f	utf8_normalize_spaces 함수에서 불필요한 공백 문자 추가 제거	2025-03-14 09:46:10 +09:00
Kijin Sung	f980ea58c6	Improve description of mobile view setting, and hide mobile settings if mobile view is disabled #2510	2025-03-08 23:18:11 +09:00
Kijin Sung	b6c444c536	Add $sync parameter to send() method of Mail, SMS and Push classes #2402	2025-03-08 20:50:18 +09:00
Kijin Sung	18d1ace121	Enforce that values passed to urlencode() are strings	2025-03-08 15:08:42 +09:00
Kijin Sung	f33c52b20f	Cast to string before verifying untrusted input	2025-03-08 14:57:24 +09:00
Kijin Sung	400d3bcec4	Fix implicitly nullable parameters in last version of scssphp that supports PHP 7.4	2025-03-05 20:37:01 +09:00
Kijin Sung	b5823e97e4	Update HTMLPurifier, Guzzle and scssphp	2025-03-05 20:32:15 +09:00
Kijin Sung	6cc9511243	Simplify check for mbstring #2507	2025-03-05 18:53:50 +09:00
Kijin Sung	fed2af3d13	Fix fatal error in CLI scripts in PHP 8.4 #2513	2025-03-05 18:48:38 +09:00
Kijin Sung	187157cfcd	Fix warning that E_STRICT is deprecated in PHP 8.4	2025-03-01 15:56:17 +09:00
Kijin Sung	9e41e9d6cd	Version 2.1.21	2025-02-18 11:25:20 +09:00
Kijin Sung	5f5cd81f1b	Merge branch 'security/rve-2025-1'	2025-02-18 11:23:19 +09:00
Kijin Sung	f4e5a0f21c	Fix type error when referer is null #2493	2025-02-17 22:05:24 +09:00
Kijin Sung	a208e0dbbc	Fix RVE-2025-1 potential SQL injection via third-party program	2025-02-16 14:55:40 +09:00
Kijin Sung	ae0e13eca9	Add unit tests for if="var" support in XML query	2025-02-15 22:42:11 +09:00
Kijin Sung	658a28dfd8	Support "if" attribute in navigation elements of XML query	2025-02-15 22:32:42 +09:00
Kijin Sung	fd0491cb0d	Reorder return values of VariableBase::getValue() so that the value can be quickly accessed	2025-02-15 22:25:25 +09:00
Kijin Sung	5b575f9c30	Support type="module" for JS files loaded from template v2 #2482	2025-02-15 22:04:50 +09:00
Kijin Sung	08d6db7657	Don't convert Cloudflare IP if CF-Worker header is set	2025-02-13 22:43:46 +09:00
Kijin Sung	00db2ab402	Fix broken emoji and other HTML entities when using cut_str() ... https://xetown.com/questions/1855257	2025-02-13 22:39:13 +09:00
Kijin Sung	eccc337d44	Remove ogv from list of directly playable video formats #2469	2025-02-13 22:08:28 +09:00
Jinhu Baek	d583f3620b	Update whitelist.php ... 공식 제공 embed 서비스들만 추가	2025-02-05 15:02:31 +09:00
Jinhu Baek	c44af2fac9	Update whitelist.php ... typo fix	2025-01-30 22:28:19 +09:00
Jinhu Baek	2cb47d45fc	Update whitelist.php ... 폐쇄/지원되지 않는 서비스들 삭제, 공식적으로 embed를 지원하며 일부 규모가 있는 서비스 위주로 추가	2025-01-30 22:22:03 +09:00
dewekk	be64c9f5da	템플릿 v2에서 load 지시자의 변수가 잘못 전달되는 문제 수정	2025-01-15 20:59:12 +09:00