Commit graph

15976 commits

Author SHA1 Message Date
Kijin Sung
72d25872cd Fix randomly failing unit test for Session class 2017-02-27 15:57:45 +09:00
Kijin Sung
d074e5e9b5 Increase security of autologin keys 2017-02-27 15:55:04 +09:00
Kijin Sung
fc63b2e9b8 Properly initialize user object even when not logged in 2017-02-27 15:45:25 +09:00
Kijin Sung
78540fbc13 Fix potential caching of partial module info 2017-02-26 15:37:41 +09:00
Kijin Sung
e823ce045b Fix potential problem caused by caching of partial member info 2017-02-26 15:32:31 +09:00
Min-Soo Kim
5140047b5f 네모의 꿈/ 컨텐츠 위젯 스킨 (#712)
## 컨텐츠 모듈 스킨

- 사이트 테마를 따르지 않고 다른 색을 선택할 수 있도록 네모의 꿈 회원 스킨 컬러셋 추가.
- 탭이 많을 때 터치 환경이 아니면 좌우로 넘기기 어려운 점을 고려하여서 메뉴를 펼침.
- 작은 화면에서 화면을 최대한 활용하도록, 레이아웃 햄버거 메뉴를 부드럽게 나타내고 감춥니다.

## 위젯에서 LESS/SCSS 의 사용
- 변수를 위젯 캐시에도 전달할 수 있도록 해서 LESS 나 SCSS 에 값 전달이 가능하도록 함.
- LESS 나 SCSS 를 사용한 경우에 위젯 코드 캐싱 코드가 적절하게 기록되도록 해서 LESS나 SCSS 를 사용
가능하도록 수정.

## 그 외 변화
- Reduce the number of regular expressions.
2017-02-26 01:05:57 +09:00
Kijin Sung
01ca005cf5 Fix editor module to prevent modification of editor config by non-admins 2017-02-26 00:07:48 +09:00
Kijin Sung
f3871e5cd3 Fix exposure of other members' point and level info via getMembersPointInto API call 2017-02-25 23:35:52 +09:00
Kijin Sung
1c45a5fc1c Fix unauthorized modification and deletion of documents via widget controller 2017-02-25 23:01:16 +09:00
conory
b1ba031117 알림센터 구버전의 활성화 설정을 가져와서 셋팅하도록 개선 2017-02-25 21:15:54 +09:00
conory
8843f8b05d 업데이트시 발생할 수 있는 오류 수정
Uncaught TypeError: Argument 1 passed to array first() must be of the type array
2017-02-25 20:46:38 +09:00
Kijin Sung
aa879e7326 Improve HTMLFilter handling of editor component properties 2017-02-25 17:37:58 +09:00
Kijin Sung
24c29cfbdb Version 1.8.31 2017-02-25 15:35:16 +09:00
Kijin Sung
f3a43d071e Fix vulnerability in procMemberDeleteSavedDocument 2017-02-25 15:08:42 +09:00
Kijin Sung
6df32746c3 Refresh isAccessible() if document or comment is updated
https://www.xetown.com/qna/510717
2017-02-24 15:47:01 +09:00
Kijin Sung
3d16272d01 Merge pull request #727 from kijin/pr/template-filters
템플릿 필터 지원
2017-02-23 22:37:28 +09:00
Kijin Sung
77282401e3 Add even more unit tests for malformed filter detection 2017-02-23 22:25:25 +09:00
Kijin Sung
f338d38538 Improve regexp for template filters 2017-02-23 22:25:13 +09:00
Kijin Sung
c4c5fa9e0d Add more unit tests for edge cases 2017-02-23 22:15:03 +09:00
Kijin Sung
d03c64d069 Make the test for filters more strict to prevent unintended parsing 2017-02-23 22:14:51 +09:00
Kijin Sung
1974f21482 Version 1.8.30 2017-02-23 16:11:06 +09:00
bnu
628242a387 Fix #2036 XEVE-17-003 커뮤니케이션 모듈의 쪽지를 임의로 삭제할 수 있는 문제 고침 2017-02-23 16:06:17 +09:00
Kijin Sung
ad21b1e706 Fix warning in fileAdminView when upload target type does not exist 2017-02-22 23:11:29 +09:00
Kijin Sung
5638207fb0 Change behavior of 'autoescape' filter to always escape (but not double-escape) 2017-02-22 21:29:15 +09:00
Kijin Sung
7fd0f5df7b Add unit tests for template filters 2017-02-22 21:24:26 +09:00
Kijin Sung
0c4dbc34ff Add 'trim' filter and adjust some other settings 2017-02-22 21:24:10 +09:00
Kijin Sung
0c20794219 Implement several template filters 2017-02-22 20:58:37 +09:00
Kijin Sung
8ad6f40abd Enable ztime() function to process Unix timestamps 2017-02-22 20:20:55 +09:00
Kijin Sung
4ee115e4f3 Improve server environment display 2017-02-22 19:49:49 +09:00
bnu
954d2c7ec6 Fix #2035 XEVE-17-002 쉬운 설치 페이지에서 발생하는 보안 취약점 고침
- 제보자 : 최봉환(stayp05)
2017-02-22 16:46:34 +09:00
Kijin Sung
a5c2783cf5 Implement domain management screen in admin module 2017-02-22 16:46:05 +09:00
Kijin Sung
b88bedf9fd Return more data from getAllDomains() 2017-02-22 16:45:45 +09:00
Kijin Sung
e5126c7f98 Fix domain handling in getUrl() 2017-02-22 16:45:25 +09:00
Kijin Sung
37a0aa0f13 Implement moduleModel::getAllDomains() 2017-02-22 14:52:48 +09:00
Kijin Sung
94c45958c4 Refactor domain info loading functions 2017-02-22 14:31:16 +09:00
Kijin Sung
254e6910d0 Fill in missing fields in getSiteInfo() and getSiteInfoByDomain() 2017-02-20 22:49:32 +09:00
Kijin Sung
bad9fe5d98 Add deleteDomain query 2017-02-20 22:46:28 +09:00
Kijin Sung
5b182ab4b3 Simplify getDomainInfo query 2017-02-20 22:45:32 +09:00
Kijin Sung
5dba5f2015 Make some site-related changes to general config screen 2017-02-20 22:43:24 +09:00
Kijin Sung
beb2bf346e Add updateDomain query 2017-02-20 22:30:41 +09:00
Kijin Sung
19cfef17d1 Fix install script to update domain, not site 2017-02-20 22:13:18 +09:00
Kijin Sung
5757fec7a6 Use current URL to fill initial domain info 2017-02-20 22:06:44 +09:00
Kijin Sung
fdf568bbb2 Update URL::isInternalURL() 2017-02-20 21:53:00 +09:00
Kijin Sung
4e4ef2f762 Fix missing DB object in module::migrateDomains() 2017-02-20 21:51:16 +09:00
Kijin Sung
aae4d884c1 Add homepage (CafeXE) module to blacklist 2017-02-20 21:23:31 +09:00
Kijin Sung
c82c2f307a Various changes to URL handling routines 2017-02-20 21:22:38 +09:00
Kijin Sung
726220d3eb Load site_module_info from 'domains' table instead of 'sites' table 2017-02-20 20:43:30 +09:00
Kijin Sung
a69bac6e2b Implement migration of site info from 'sites' table and multidomain module (if installed) 2017-02-20 18:14:15 +09:00
Kijin Sung
fbe47e0610 Remove temporary list of override domains in Session class 2017-02-18 22:57:39 +09:00
Kijin Sung
6bb0f71beb Add 'domains' table to module module 2017-02-18 17:14:02 +09:00