Commit graph

14365 commits

Author SHA1 Message Date
Kijin Sung
f4dc7e6b21 Move all functionality of old Password class to new Password class 2016-03-13 23:23:48 +09:00
Kijin Sung
642f048f64 Improve encoding and decoding of widget and editor component attributes 2016-03-13 23:01:49 +09:00
Kijin Sung
ddab5ce8d8 Fix unit tests for Security::getRandomNumber() 2016-03-13 22:11:30 +09:00
Kijin Sung
647bc7c112 Implement new Password class and related unit tests 2016-03-13 22:08:56 +09:00
Kijin Sung
90dcc4a2e8 Implement encryption, decryption, and CSPRNG in Security class 2016-03-13 20:40:23 +09:00
Kijin Sung
544170b530 Move IpFilter class to Security namespace 2016-03-13 10:24:52 +09:00
Kijin Sung
0adb13ca30 Add inRanges() and validateRanges() methods to IpFilter class 2016-03-13 10:18:52 +09:00
Kijin Sung
2effbea06f Update all other places to use new MediaFilter class 2016-03-13 09:59:26 +09:00
Kijin Sung
7ecd9230c2 Add MediaFilter class to absorb most EmbedFilter functionality 2016-03-13 09:51:15 +09:00
Kijin Sung
3d3fa6d7d3 Use HTMLFilter::clean() directly in unit tests 2016-03-13 00:11:47 +09:00
Kijin Sung
31080ddc04 Add unit tests for removeEmbeddedMedia() 2016-03-12 23:24:00 +09:00
Kijin Sung
ef6f0c839f Absorb core functionality of stripEmbedTagForAdmin() into HTMLFilter class 2016-03-12 23:17:37 +09:00
Kijin Sung
616d894021 Clean up deprecated functions in common/legacy.php 2016-03-12 22:48:05 +09:00
Kijin Sung
93629d1311 Refactor widget and editor component encoding with preg_replace_callback() 2016-03-12 22:44:09 +09:00
Kijin Sung
6f53a3f068 Check object whitelist in HTMLFilter class, not EmbedFilter class 2016-03-12 22:35:43 +09:00
Kijin Sung
143b65e840 Perform tag filtering after HTMLPurifier is done with the content 2016-03-12 22:18:33 +09:00
Kijin Sung
f577b456ec Absorb removeSrcHack() into HTMLFilter postprocessing method 2016-03-12 22:15:55 +09:00
Kijin Sung
598722b0cd Remove checkXmpTag() and blockWidgetCode() because HTMLPurifier does it better 2016-03-12 21:33:42 +09:00
Kijin Sung
be882d0c5c Do not check allowscriptaccess because HTMLPurifier does it better 2016-03-12 21:11:53 +09:00
Kijin Sung
1302d77cec Remove duplicate code from checkCSRF() 2016-03-12 21:05:09 +09:00
Kijin Sung
5d7853645a Remove all calls to checkUploadedFile() 2016-03-12 21:03:26 +09:00
Kijin Sung
37c07f7b6e Rename old SecurityTest class 2016-03-12 19:59:10 +09:00
Kijin Sung
b693c8cdad Add unit tests for Security and URL classes 2016-03-12 19:44:05 +09:00
Kijin Sung
6d13142f30 Use FilenameFilter in file module 2016-03-12 17:44:50 +09:00
Kijin Sung
1c32e993ab Add unit tests for FilenameFilter class 2016-03-12 17:42:28 +09:00
Kijin Sung
b962409652 Use new Security and URL classes in other places 2016-03-12 17:26:41 +09:00
Kijin Sung
28da8948d7 Initial implementation of Security and URL classes 2016-03-12 17:26:12 +09:00
Kijin Sung
21a8e7db6b Try fixing codeception version to 2.1.6 for now 2016-03-12 14:48:44 +09:00
Kijin Sung
f4e3d5762e Support more CSS2 and CSS3 properties 2016-03-12 14:37:54 +09:00
Kijin Sung
5b7952c786 Add filename filter class 2016-03-11 19:56:04 +09:00
Kijin Sung
4594c40321 Disable useless UploadFileFilter 2016-03-11 19:55:41 +09:00
Kijin Sung
e405fc69ac Update unit tests 2016-03-11 15:36:36 +09:00
Kijin Sung
b89818e13d Update HTMLPurifier configuration and allow HTML5 2016-03-11 15:29:42 +09:00
BJRambo
1b8a41b077 Merge pull request #364 from bjrambo/pr/taeyeon0309
관리자페이지에서, 쪽지확인메세지를 뜨지않도록 개선.
2016-03-09 20:45:42 +09:00
BJRambo
686ea0cd04 communication return by admin page. 2016-03-09 18:24:17 +09:00
conory
76adbde9ce content 위젯에서 제목에 있는 따움표가 "으로 그대로 출력되는 문제 수정 2016-03-09 17:14:05 +09:00
Kijin Sung
05e4ec56ac Fix #352 invalid langcode in category config page 2016-03-09 15:24:20 +09:00
Kijin Sung
c09a759ace Do not write debug entries to error log if debugging is disabled 2016-03-09 15:19:22 +09:00
CONORY
68e28b91c5 Merge pull request #362 from conory/pr/seo
SEO에 좋은 301 redirection 으로 변경
2016-03-09 14:34:29 +09:00
conory
fcf7e25858 301 redirection시 무조건 no-cache 설정 2016-03-09 13:50:29 +09:00
conory
3305df35a7 SEO에 좋은 301 redirection 으로 변경 2016-03-09 12:07:44 +09:00
Kijin Sung
0f46ae0d31 Update version to 1.8.18 2016-03-09 09:37:21 +09:00
CONORY
50a6bd5c73 Merge pull request #360 from conory/develop
파일캐시 사용시 위젯 캐시부분이 갱신되지않는 문제수정
2016-03-09 09:27:27 +09:00
Kijin Sung
81c5cf42c3 Merge pull request #359 from kijin/merge/1.8.18
Merge with XE 1.8.18
2016-03-09 09:26:37 +09:00
Kijin Sung
3dc88d1ad7 Fix deanonymization when updating document 2016-03-09 09:00:10 +09:00
conory
7c0c4dd7ba 파일캐시 사용시 위젯 캐시부분이 갱신되지않는 문제수정 2016-03-08 23:35:26 +09:00
Kijin Sung
ebaa4ec110 Remove unnecessary exceptions from .editorconfig 2016-03-08 19:59:20 +09:00
bnu
c7dca3008a fix #1868 임시저장 글을 불러와 등록 시 익명 설정임에도 작성자의 정보가 입력/노출되는 문제 고침
Conflicts:
	modules/board/board.controller.php
	modules/document/document.controller.php
2016-03-08 19:58:41 +09:00
bnu
8969514697 RSS 피드 제출 시 gzip 비활성화 2016-03-08 19:50:31 +09:00
bnu
ee104a55ec editorconfig 설정 추가 2016-03-08 19:50:12 +09:00