Commit graph

1714 commits

Author SHA1 Message Date
Kijin Sung
3c772bf1cf Separate <p> tests from <br> tests 2017-06-29 18:44:52 +09:00
Kijin Sung
804533222c Add is_html_content() function to detect whether a string is HTML 2017-06-29 18:25:36 +09:00
Kijin Sung
986f532ba5 Fix mail error messages being displayed as 'Array' only 2017-06-29 17:09:55 +09:00
Kijin Sung
2ac65beaa8 Disable autoplay of multimedia thumbnail #677 #843 2017-06-28 16:32:01 +09:00
Kijin Sung
e4d4b42869 Update version to 1.8.42 2017-06-27 20:18:00 +09:00
Kijin Sung
8b9f6fb230 Add editor config for mobile height and additional CSS 2017-06-27 16:10:01 +09:00
Kijin Sung
9f652e422f Add 'textarea' editor skin for simple replacement 2017-06-27 15:20:09 +09:00
bnu
aee7848706 setQuery() 테스트 수정 2017-06-27 14:32:35 +09:00
Kijin Sung
344a843206 Update CKEditor to 4.7.0 2017-06-26 13:36:10 +09:00
Kijin Sung
c6e51cddc9 Fix fatal error when unable to connect to Woorimail server 2017-06-25 21:12:31 +09:00
Kijin Sung
227e1c53d1 Fix no Reply-To header when using Woorimail paid service 2017-06-22 16:19:28 +09:00
Kijin Sung
70577c086d Version 1.8.41 2017-06-09 19:02:59 +09:00
conory
0a5b14e4df VERSION 1.8.40 2017-06-03 14:20:01 +09:00
Kijin Sung
af408a57cc Apply new xml2json from XE 1.8.40
XE 1.8.40에서 업데이트된 xml2json 라이브러리를 가져와 라이믹스에 맞게 수정한다.
라이믹스에서는 exec_xml() 함수를 사용하더라도 실제로는 JSON으로 요청하므로
일부 서드파티 자료에서 XML을 반환하는 경우만 처리해 주면 된다.

평소 거의 사용하지 않는 xml2json을 기본으로 로딩하지 않고
서드파티 자료가 예기치 않게 XML을 반환했을 때만 비동기식으로 로딩하여
처리하도록 한다. 또한 xml2json이 파이어폭스에서 파싱 오류를 발생시키는 문제를
해결하기 위해 github.com/dkdndes/x2js/issues/32 패치를 적용한다.
2017-06-03 00:08:44 +09:00
Kijin Sung
9735ff741b Version 1.8.39 2017-05-31 17:54:56 +09:00
Kijin Sung
e6aae8b834 Version 1.8.38 2017-05-30 13:47:26 +09:00
howtoxe
2441809743 커버이미지 선택 취소 기능
CK에디터 파일업로드의 커버이미지 선택을 취소할 수 있도록 하는 기능
2017-05-30 13:39:45 +09:00
Kijin Sung
5e296e54e2 Fix #813 incorrect language about canceling downvotes 2017-05-07 21:58:00 +09:00
Kijin Sung
8c797aaba1 Pass through crypto exceptions 2017-05-07 15:29:21 +09:00
Kijin Sung
2822191271 Fix CSRF check for GET requests 2017-04-23 14:51:41 +09:00
Kijin Sung
7700709c8f Version 1.8.37 2017-04-17 13:58:15 +09:00
Kijin Sung
0937da9fff Add jquerycdn to blacklist
We cannot allow half-assed attempts to replace scripts that the
rest of the environment heavily depends on.

Similar functionality will be exposed via a more stable API
at some later time.

https://www.xetown.com/square/564456
2017-04-16 10:16:43 +09:00
Kijin Sung
7dd418d379 Version 1.8.36 2017-04-14 16:33:07 +09:00
Kijin Sung
fb4dd4fddc Version 1.8.35 2017-04-14 15:29:34 +09:00
Kijin Sung
a400cc4b40 Remove unused file: redirect.html
https://github.com/xpressengine/xe-core/issues/2069
2017-04-14 15:25:22 +09:00
Kijin Sung
f0d52f8a91 Fix escaped XML content: cf. xpressengine/xe-core#2042 2017-04-10 10:06:34 +09:00
Kijin Sung
8147044802 Fix toBool() and add more test cases 2017-04-08 22:02:03 +09:00
Kijin Sung
f73580945d Remove unnecessary polyfill for hex2bin() 2017-04-08 21:57:34 +09:00
Kijin Sung
0777a66703 Fix incorrect detection of form method if there is an input tag with the name 'method' 2017-04-01 22:07:38 +09:00
Kijin Sung
c41ded3124 Fix #773 no refresh after redirect() when not using mod_rewrite 2017-03-24 16:33:24 +09:00
Kijin Sung
97047d1279 Add list of reserved words #763 2017-03-23 19:43:49 +09:00
Kijin Sung
b0bf971cee Fix default URL and other relative paths when invoked on the CLI 2017-03-23 18:56:46 +09:00
Kijin Sung
df59e541c9 Skip diagnostic CSRF warning if the user is not logged in 2017-03-13 16:41:57 +09:00
Kijin Sung
9a34341759 Populate CSRF token in some non-member requests as well 2017-03-13 16:41:08 +09:00
Kijin Sung
a3ef122b57 Merge branch 'develop' into pr/csrf-token 2017-03-13 16:35:24 +09:00
Kijin Sung
a2e326a419 Always set xeVid to null 2017-03-13 15:40:03 +09:00
Kijin Sung
1feb506b3c Remove vid from URL rewrite list 2017-03-13 14:54:50 +09:00
Kijin Sung
79f29b3372 Implement multidomain settings 2017-03-13 13:47:07 +09:00
Kijin Sung
a984665efc Implement default timezone for domains 2017-03-13 12:51:24 +09:00
Kijin Sung
bb11f2d000 Blacklist multidomain module and add missing explanations 2017-03-13 11:35:58 +09:00
Kijin Sung
beee2165fb Update session class to use getDefaultDomainInfo() for SSO 2017-03-13 11:35:37 +09:00
Kijin Sung
4257edf7fa Implement saving favicon, mobicon, and default image for domain 2017-03-12 22:55:57 +09:00
Kijin Sung
2e5ffa7dea Merge branch 'develop' into pr/multidomain 2017-03-08 20:12:15 +09:00
Kijin Sung
f23d52d94d Version 1.8.34 2017-03-08 19:32:18 +09:00
Kijin Sung
fc77980c39 Merge branch 'develop' into pr/multidomain 2017-03-07 15:43:25 +09:00
Kijin Sung
89255d0281 Initial implementation of CSRF token enforcement in Security class 2017-03-06 15:54:56 +09:00
Kijin Sung
b8569aa5ab Fix missing semicolon 2017-03-06 15:43:40 +09:00
Kijin Sung
11afa4db42 Add CSRF token to all dynamic forms 2017-03-06 15:37:18 +09:00
Kijin Sung
e82e3fb18c Implement isSameOrigin() to simplify origin determination 2017-03-06 15:11:45 +09:00
Kijin Sung
14300cbcc3 Insert CSRF token into every AJAX request 2017-03-06 14:47:42 +09:00