675 Commits

Author SHA1 Message Date
Garvin Hicking
2bedc9243e next version 2017-04-08 18:47:50 +02:00
Garvin Hicking
a385c10890 bump version 2017-04-08 18:23:46 +02:00
Garvin Hicking
7832c364d7 IteratorIteratorIteratorIterator iterated iteration fix. To understand iteration, you first need to understand recursion and iteration and iteration and iteration and iteration. 2017-04-08 17:38:47 +02:00
Garvin Hicking
c2cebad52b issue #442 2017-01-30 14:58:37 +01:00
Garvin Hicking
2b5de12b38 Issue #437 2017-01-26 08:25:06 +01:00
Garvin Hicking
97277cfd1a issue #430 2017-01-26 08:23:17 +01:00
Garvin Hicking
5bf0cf9fea Merge branch 'master' of github.com:s9y/Serendipity 2017-01-26 08:16:22 +01:00
Garvin Hicking
69d8a34c90 document 2017-01-26 08:16:14 +01:00
Garvin Hicking
c62d667287 * [Security] Fix missing integer casting for inserting new categories
(thanks to cdxy)
2017-01-16 11:29:15 +01:00
Garvin Hicking
6285933470 * [Security] Redirection of comment.php now checks the referrer
and only allows the blog's host (thanks to Lee Sheldon Victor)
2017-01-12 12:02:27 +01:00
Garvin Hicking
a48708021c * [Security] Reject %0D/%0A in exit tracking and other places
(Issue #434)
2017-01-03 09:21:25 +01:00
Garvin Hicking
edfc8bcff1 disable selenium test files 2017-01-02 09:42:37 +01:00
Garvin Hicking
4e8c310156 Issue #435, fix missing escaping of HTTP referer to prevent XSS 2017-01-02 09:37:45 +01:00
Garvin Hicking
6b1348a7f1 improve hidding password from recent chrome 2016-12-23 10:13:40 +01:00
Garvin Hicking
e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
Garvin Hicking
dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
Garvin Hicking
26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00
Matthias Mees
a81c480d5e Document my recent changes, oops 2016-10-26 11:35:31 +02:00
Garvin Hicking
929fe9ade7 bump version, prep release 2016-09-26 10:28:20 +02:00
Garvin Hicking
06e33c5421 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-25 15:30:10 +02:00
Garvin Hicking
1bb335dc17 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-22 12:51:41 +02:00
Garvin Hicking
cfd75ec877 Security patch, see docs/NEWS 2016-09-22 12:51:00 +02:00
Garvin Hicking
c1e4f4c533 Add serendipity_request_url() 2016-09-22 12:35:48 +02:00
Matthias Mees
40d4dc986e Document (re)moving outdated themes
Closes #422
2016-09-21 19:12:36 +02:00
Matthias Mees
16c98885b7 Document adding Skeleton theme
Oops, I forgot. /o\
2016-09-21 12:54:28 +02:00
onli
2797bfdf02 Document preview_iframe cleanup + cache IE fix 2016-09-12 17:36:37 +02:00
onli
f15cb17755 Document recent changes
fallback chain changes, preview fixes, getFile function in plugin api,
frontend-param in smarty {getFile}
2016-09-09 15:12:13 +02:00
Garvin Hicking
fb7896b2bd prepare release 2016-06-08 09:15:07 +02:00
Don Chambers
4b39011d69 Theme Timeline added 2016-05-31 21:40:04 -05:00
Garvin Hicking
72f555d9a6 port cors 2016-05-19 14:27:16 +02:00
onli
4619ce1e03 document modern themes section 2016-04-14 16:23:49 +00:00
onli
668363eb1b Merge event and sidebar update page into one (#383) 2016-03-20 14:40:08 +00:00
onli
1fb1a6647f Add color picker as plugin/theme config item 2016-03-01 00:14:15 +01:00
Ian
2cc8655ed2 fix typo 2016-02-08 15:12:10 +01:00
onli
2fb79a5961 document #390 2016-02-08 13:40:51 +01:00
Ian
227d115d71 Fix missing perm checks for a "standard user" in MediaLibrary
We still have the issue that we have set authorID 0 as the standard authorid in ML. This prevents us being more strict than this.
We will have to re-think this, maybe...

References #385
2016-02-03 15:47:04 +01:00
Ian
d8edd18c10 Fix show Dashboard entries by authors entries
References #385
and http://board.s9y.org/viewtopic.php?f=10&t=20639

We might need to extend this with user group policies (userlevel) - it depends on what we want to have here.
@garvinhicking
2016-01-22 19:47:09 +01:00
Ian
97c43af83e Fix Dashboard comments by authors entries
Closes #385
2016-01-22 18:29:49 +01:00
onli
148e644590 Use CDATA for content in ATOM feed (#354) 2016-01-15 13:33:30 +01:00
onli
0003150796 Ajax ML upload died on non-images (fixes #353) 2016-01-15 13:28:49 +01:00
Don Chambers
6001a9aaf4 Remove Bootstrap reference to Twitter in news 2016-01-13 19:51:35 -06:00
Don Chambers
1935ae6979 Document addition of Clean Blog theme 2016-01-12 21:12:09 -06:00
Garvin Hicking
d4be55a236 update 2016-01-04 11:14:58 +01:00
Garvin Hicking
c16e034f7c XSS fix 2016-01-04 10:53:52 +01:00
Ian
cfa8d8ff6e document 2015-12-11 17:10:26 +01:00
Ian
7fd42fde05 fix typo
there are more.... of this
2015-12-01 11:39:13 +01:00
Ian
04104a3e4d Fixed media item delete handler
References #371
Closes #371
2015-10-31 14:10:52 +01:00
onli
3391f5946e Document index.php refactoring
see 4f2ea4de8a70825b15e357fb3bbf5a76cb178c5d
2015-10-28 13:54:27 +01:00
Ian
715d8cafa6 Optimize scaleImage returns 2015-10-19 13:21:19 +02:00
Ian
3030b80c2b fix rename media file reload issue
References #370

and allow better umlaut conversion

This is a plain javascript event, therefore the message and reload stuff had to move into the JS caller.
2015-10-17 15:03:15 +02:00