Kijin Sung
|
f9ea115c19
|
Fix some minor bugs in global functions and add unit tests
|
2016-03-16 10:09:48 +09:00 |
|
Kijin Sung
|
7298adf855
|
Include visitor IP address in debug output
|
2016-03-15 10:57:57 +09:00 |
|
Kijin Sung
|
a6a1b25f2d
|
Always allow debugging from localhost
|
2016-03-15 10:21:40 +09:00 |
|
Kijin Sung
|
93b045fa17
|
Fix incorrect use of global constant in Debug class
|
2016-03-15 09:59:38 +09:00 |
|
Kijin Sung
|
4f015f7bbc
|
Merge pull request #366 from kijin/pr/security-refactor
보안관련 클래스 전반적 정리 및 기능 개선 프로젝트
|
2016-03-14 22:19:59 +09:00 |
|
Kijin Sung
|
3e728dc6c2
|
Exclude more attributes from widget and editor component detection
|
2016-03-14 22:13:19 +09:00 |
|
Kijin Sung
|
cb229c2d66
|
Clean up namespaces
|
2016-03-14 21:04:27 +09:00 |
|
Kijin Sung
|
4407af2b0f
|
Use utf8_check to check variables in Security class
|
2016-03-14 20:54:27 +09:00 |
|
Kijin Sung
|
251b43cd00
|
Always format media filter prefixes in exactly the same way
|
2016-03-14 16:07:40 +09:00 |
|
Kijin Sung
|
6944b64643
|
Add wildcard support and customization method to media filter
|
2016-03-14 16:02:21 +09:00 |
|
Kijin Sung
|
26138c25da
|
Perform more thorough unit test of HTMLFilter
|
2016-03-14 15:33:07 +09:00 |
|
Kijin Sung
|
804fd0515b
|
Also apply embed filter to <audio> and <video> tags
|
2016-03-14 15:32:39 +09:00 |
|
Kijin Sung
|
13a67f3496
|
Implement URL::modifyURL()
|
2016-03-14 11:51:32 +09:00 |
|
Kijin Sung
|
9d6284faad
|
Update all references to old Password class
|
2016-03-13 23:39:31 +09:00 |
|
Kijin Sung
|
f4dc7e6b21
|
Move all functionality of old Password class to new Password class
|
2016-03-13 23:23:48 +09:00 |
|
Kijin Sung
|
642f048f64
|
Improve encoding and decoding of widget and editor component attributes
|
2016-03-13 23:01:49 +09:00 |
|
Kijin Sung
|
647bc7c112
|
Implement new Password class and related unit tests
|
2016-03-13 22:08:56 +09:00 |
|
Kijin Sung
|
90dcc4a2e8
|
Implement encryption, decryption, and CSPRNG in Security class
|
2016-03-13 20:40:23 +09:00 |
|
Kijin Sung
|
544170b530
|
Move IpFilter class to Security namespace
|
2016-03-13 10:24:52 +09:00 |
|
Kijin Sung
|
0adb13ca30
|
Add inRanges() and validateRanges() methods to IpFilter class
|
2016-03-13 10:18:52 +09:00 |
|
Kijin Sung
|
2effbea06f
|
Update all other places to use new MediaFilter class
|
2016-03-13 09:59:26 +09:00 |
|
Kijin Sung
|
7ecd9230c2
|
Add MediaFilter class to absorb most EmbedFilter functionality
|
2016-03-13 09:51:15 +09:00 |
|
MinSoo Kim
|
d1a7dfca7e
|
Merge pull request #369 from misol/color-of-no-color
input type=color can not be empty
|
2016-03-13 00:42:13 +09:00 |
|
MinSoo Kim
|
f41e3f5907
|
input type=color can not be empty
https://www.w3.org/TR/2012/WD-html5-20120329/states-of-the-type-attribute.html#color-state-type-color
|
2016-03-13 00:37:04 +09:00 |
|
MinSoo Kim
|
64ce9520e7
|
Merge pull request #301 from misol/lets-date
날짜 선택기 개선 작업
|
2016-03-12 23:50:43 +09:00 |
|
Kijin Sung
|
ef6f0c839f
|
Absorb core functionality of stripEmbedTagForAdmin() into HTMLFilter class
|
2016-03-12 23:17:37 +09:00 |
|
Kijin Sung
|
616d894021
|
Clean up deprecated functions in common/legacy.php
|
2016-03-12 22:48:05 +09:00 |
|
Kijin Sung
|
93629d1311
|
Refactor widget and editor component encoding with preg_replace_callback()
|
2016-03-12 22:44:09 +09:00 |
|
Kijin Sung
|
6f53a3f068
|
Check object whitelist in HTMLFilter class, not EmbedFilter class
|
2016-03-12 22:35:43 +09:00 |
|
Kijin Sung
|
143b65e840
|
Perform tag filtering after HTMLPurifier is done with the content
|
2016-03-12 22:18:33 +09:00 |
|
Kijin Sung
|
f577b456ec
|
Absorb removeSrcHack() into HTMLFilter postprocessing method
|
2016-03-12 22:15:55 +09:00 |
|
Kijin Sung
|
598722b0cd
|
Remove checkXmpTag() and blockWidgetCode() because HTMLPurifier does it better
|
2016-03-12 21:33:42 +09:00 |
|
Kijin Sung
|
1302d77cec
|
Remove duplicate code from checkCSRF()
|
2016-03-12 21:05:09 +09:00 |
|
Kijin Sung
|
5d7853645a
|
Remove all calls to checkUploadedFile()
|
2016-03-12 21:03:26 +09:00 |
|
Kijin Sung
|
b693c8cdad
|
Add unit tests for Security and URL classes
|
2016-03-12 19:44:05 +09:00 |
|
Kijin Sung
|
b962409652
|
Use new Security and URL classes in other places
|
2016-03-12 17:26:41 +09:00 |
|
Kijin Sung
|
28da8948d7
|
Initial implementation of Security and URL classes
|
2016-03-12 17:26:12 +09:00 |
|
Kijin Sung
|
f4e3d5762e
|
Support more CSS2 and CSS3 properties
|
2016-03-12 14:37:54 +09:00 |
|
Kijin Sung
|
5b7952c786
|
Add filename filter class
|
2016-03-11 19:56:04 +09:00 |
|
Kijin Sung
|
b89818e13d
|
Update HTMLPurifier configuration and allow HTML5
|
2016-03-11 15:29:42 +09:00 |
|
Kijin Sung
|
c09a759ace
|
Do not write debug entries to error log if debugging is disabled
|
2016-03-09 15:19:22 +09:00 |
|
Kijin Sung
|
0f46ae0d31
|
Update version to 1.8.18
|
2016-03-09 09:37:21 +09:00 |
|
Kijin Sung
|
5debdea06f
|
Fix #357 incorrect redirect to insecure URL when using setQuery() in JS
|
2016-03-08 18:10:29 +09:00 |
|
Kijin Sung
|
f51d4af2b6
|
Fix incorrect unit display in English
|
2016-03-07 10:45:48 +09:00 |
|
Kijin Sung
|
f40ea2e05d
|
Merge pull request #324 from kijin/pr/redirect-after-board-write
#323 게시판에서 글이나 댓글을 작성 또는 삭제한 후 짧은 주소로 redirect하도록 변경
|
2016-03-07 08:39:48 +09:00 |
|
Kijin Sung
|
9b5a17fb59
|
Clean up repeating code and add redirect() function
|
2016-03-07 08:34:06 +09:00 |
|
conory
|
0e99f8eb44
|
lang() 함수의 langType 기능 제거
|
2016-03-06 23:42:06 +09:00 |
|
Kijin Sung
|
658ee85f7b
|
Merge pull request #340 from kijin/pr/autolang
언어 자동 선택 옵션 추가
|
2016-03-06 20:43:27 +09:00 |
|
CONORY
|
cf26f20461
|
Merge pull request #338 from conory/pr/add_function
lang() 함수 추가
|
2016-03-06 17:09:30 +09:00 |
|
conory
|
90400e2b5f
|
모두 lang() 함수로 변경
|
2016-03-06 17:01:15 +09:00 |
|