1299 commits

Author	SHA1	Message	Date
Kijin Sung	014e7f13a4	Move string interpolation from __call() to get()	2016-03-17 14:11:33 +09:00
Kijin Sung	09eb7935fa	Refactor default language search routine for better performance	2016-03-17 13:58:57 +09:00
Kijin Sung	5d13c67cae	Merge Lang::getPluginLang() back into Lang::loadDirectory()	2016-03-17 13:29:35 +09:00
Kijin Sung	a33b961c62	Do not display HTML error page if the current SAPI is CLI	2016-03-16 16:31:27 +09:00
Kijin Sung	c23a1949cc	Merge pull request #378 from kijin/pr/url-conversion ... 경로↔URL 변환 및 정리 함수 추가	2016-03-16 16:09:38 +09:00
Kijin Sung	94859b1046	Improve performance of FilenameFilter::cleanPath()	2016-03-16 15:25:32 +09:00
Kijin Sung	d325ef99bc	Add unit tests for some legacy tests, too	2016-03-16 11:36:36 +09:00
Kijin Sung	f9ea115c19	Fix some minor bugs in global functions and add unit tests	2016-03-16 10:09:48 +09:00
Kijin Sung	b088348be2	More explicitly exclude a series of double dots	2016-03-15 18:05:48 +09:00
Kijin Sung	ff0df0a14b	Ensure proper handling of network shares and URLs in cleanPath()	2016-03-15 14:41:21 +09:00
Kijin Sung	139e11df13	Also clean relative paths in cleanPath()	2016-03-15 14:14:50 +09:00
Kijin Sung	f983335833	Add function aliases for URL and path conversion	2016-03-15 13:54:33 +09:00
Kijin Sung	9d2fe0270b	Add URL-to-path and clean path conversion	2016-03-15 13:48:07 +09:00
Kijin Sung	7298adf855	Include visitor IP address in debug output	2016-03-15 10:57:57 +09:00
Kijin Sung	a6a1b25f2d	Always allow debugging from localhost	2016-03-15 10:21:40 +09:00
Kijin Sung	93b045fa17	Fix incorrect use of global constant in Debug class	2016-03-15 09:59:38 +09:00
Kijin Sung	4f015f7bbc	Merge pull request #366 from kijin/pr/security-refactor ... 보안관련 클래스 전반적 정리 및 기능 개선 프로젝트	2016-03-14 22:19:59 +09:00
Kijin Sung	3e728dc6c2	Exclude more attributes from widget and editor component detection	2016-03-14 22:13:19 +09:00
Kijin Sung	cb229c2d66	Clean up namespaces	2016-03-14 21:04:27 +09:00
Kijin Sung	4407af2b0f	Use utf8_check to check variables in Security class	2016-03-14 20:54:27 +09:00
Kijin Sung	251b43cd00	Always format media filter prefixes in exactly the same way	2016-03-14 16:07:40 +09:00
Kijin Sung	6944b64643	Add wildcard support and customization method to media filter	2016-03-14 16:02:21 +09:00
Kijin Sung	26138c25da	Perform more thorough unit test of HTMLFilter	2016-03-14 15:33:07 +09:00
Kijin Sung	804fd0515b	Also apply embed filter to <audio> and <video> tags	2016-03-14 15:32:39 +09:00
Kijin Sung	13a67f3496	Implement URL::modifyURL()	2016-03-14 11:51:32 +09:00
Kijin Sung	9d6284faad	Update all references to old Password class	2016-03-13 23:39:31 +09:00
Kijin Sung	f4dc7e6b21	Move all functionality of old Password class to new Password class	2016-03-13 23:23:48 +09:00
Kijin Sung	642f048f64	Improve encoding and decoding of widget and editor component attributes	2016-03-13 23:01:49 +09:00
Kijin Sung	647bc7c112	Implement new Password class and related unit tests	2016-03-13 22:08:56 +09:00
Kijin Sung	90dcc4a2e8	Implement encryption, decryption, and CSPRNG in Security class	2016-03-13 20:40:23 +09:00
Kijin Sung	544170b530	Move IpFilter class to Security namespace	2016-03-13 10:24:52 +09:00
Kijin Sung	0adb13ca30	Add inRanges() and validateRanges() methods to IpFilter class	2016-03-13 10:18:52 +09:00
Kijin Sung	2effbea06f	Update all other places to use new MediaFilter class	2016-03-13 09:59:26 +09:00
Kijin Sung	7ecd9230c2	Add MediaFilter class to absorb most EmbedFilter functionality	2016-03-13 09:51:15 +09:00
MinSoo Kim	d1a7dfca7e	Merge pull request #369 from misol/color-of-no-color ... input type=color can not be empty	2016-03-13 00:42:13 +09:00
MinSoo Kim	f41e3f5907	input type=color can not be empty ... https://www.w3.org/TR/2012/WD-html5-20120329/states-of-the-type-attribute.html#color-state-type-color	2016-03-13 00:37:04 +09:00
MinSoo Kim	64ce9520e7	Merge pull request #301 from misol/lets-date ... 날짜 선택기 개선 작업	2016-03-12 23:50:43 +09:00
Kijin Sung	ef6f0c839f	Absorb core functionality of stripEmbedTagForAdmin() into HTMLFilter class	2016-03-12 23:17:37 +09:00
Kijin Sung	616d894021	Clean up deprecated functions in common/legacy.php	2016-03-12 22:48:05 +09:00
Kijin Sung	93629d1311	Refactor widget and editor component encoding with preg_replace_callback()	2016-03-12 22:44:09 +09:00
Kijin Sung	6f53a3f068	Check object whitelist in HTMLFilter class, not EmbedFilter class	2016-03-12 22:35:43 +09:00
Kijin Sung	143b65e840	Perform tag filtering after HTMLPurifier is done with the content	2016-03-12 22:18:33 +09:00
Kijin Sung	f577b456ec	Absorb removeSrcHack() into HTMLFilter postprocessing method	2016-03-12 22:15:55 +09:00
Kijin Sung	598722b0cd	Remove checkXmpTag() and blockWidgetCode() because HTMLPurifier does it better	2016-03-12 21:33:42 +09:00
Kijin Sung	1302d77cec	Remove duplicate code from checkCSRF()	2016-03-12 21:05:09 +09:00
Kijin Sung	5d7853645a	Remove all calls to checkUploadedFile()	2016-03-12 21:03:26 +09:00
Kijin Sung	b693c8cdad	Add unit tests for Security and URL classes	2016-03-12 19:44:05 +09:00
Kijin Sung	b962409652	Use new Security and URL classes in other places	2016-03-12 17:26:41 +09:00
Kijin Sung	28da8948d7	Initial implementation of Security and URL classes	2016-03-12 17:26:12 +09:00
Kijin Sung	f4e3d5762e	Support more CSS2 and CSS3 properties	2016-03-12 14:37:54 +09:00