741 Commits

Author SHA1 Message Date
Garvin Hicking
a48708021c * [Security] Reject %0D/%0A in exit tracking and other places
(Issue #434)
2017-01-03 09:21:25 +01:00
Garvin Hicking
edfc8bcff1 disable selenium test files 2017-01-02 09:42:37 +01:00
Garvin Hicking
4e8c310156 Issue #435, fix missing escaping of HTTP referer to prevent XSS 2017-01-02 09:37:45 +01:00
Garvin Hicking
6b1348a7f1 improve hidding password from recent chrome 2016-12-23 10:13:40 +01:00
Garvin Hicking
cb03731e90 release 2016-11-28 15:51:51 +01:00
Garvin Hicking
e2a665e13b Sync changes 2016-11-28 15:34:10 +01:00
Garvin Hicking
dc3eb1e735 Merge branch 'master' of github.com:s9y/Serendipity 2016-11-02 12:18:58 +01:00
Garvin Hicking
26de428c18 Enhanced media upload check to also check redirects for local files, thanks to Xu Yue (again!) 2016-11-02 12:18:49 +01:00
Matthias Mees
f06aeb2340 Update docs files
- Added correct URL to new website to INSTALL
- Adapted body copy in README
- Reformatted both files so they would pass as Markdown if needed
2016-10-28 11:41:53 +02:00
Matthias Mees
a81c480d5e Document my recent changes, oops 2016-10-26 11:35:31 +02:00
Garvin Hicking
d7980e5f94 bump 2016-09-26 10:38:01 +02:00
Garvin Hicking
929fe9ade7 bump version, prep release 2016-09-26 10:28:20 +02:00
Garvin Hicking
06e33c5421 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-25 15:30:10 +02:00
Garvin Hicking
1bb335dc17 Merge branch 'master' of github.com:s9y/Serendipity 2016-09-22 12:51:41 +02:00
Garvin Hicking
cfd75ec877 Security patch, see docs/NEWS 2016-09-22 12:51:00 +02:00
Garvin Hicking
c1e4f4c533 Add serendipity_request_url() 2016-09-22 12:35:48 +02:00
Matthias Mees
40d4dc986e Document (re)moving outdated themes
Closes #422
2016-09-21 19:12:36 +02:00
Matthias Mees
16c98885b7 Document adding Skeleton theme
Oops, I forgot. /o\
2016-09-21 12:54:28 +02:00
onli
2797bfdf02 Document preview_iframe cleanup + cache IE fix 2016-09-12 17:36:37 +02:00
onli
f15cb17755 Document recent changes
fallback chain changes, preview fixes, getFile function in plugin api,
frontend-param in smarty {getFile}
2016-09-09 15:12:13 +02:00
onli
b39bf70345 Enable beta upgrades 2016-06-21 15:28:51 +02:00
Garvin Hicking
fb7896b2bd prepare release 2016-06-08 09:15:07 +02:00
Don Chambers
4b39011d69 Theme Timeline added 2016-05-31 21:40:04 -05:00
Garvin Hicking
72f555d9a6 port cors 2016-05-19 14:27:16 +02:00
onli
4619ce1e03 document modern themes section 2016-04-14 16:23:49 +00:00
onli
668363eb1b Merge event and sidebar update page into one (#383) 2016-03-20 14:40:08 +00:00
onli
1fb1a6647f Add color picker as plugin/theme config item 2016-03-01 00:14:15 +01:00
Ian
2cc8655ed2 fix typo 2016-02-08 15:12:10 +01:00
onli
2fb79a5961 document #390 2016-02-08 13:40:51 +01:00
Ian
227d115d71 Fix missing perm checks for a "standard user" in MediaLibrary
We still have the issue that we have set authorID 0 as the standard authorid in ML. This prevents us being more strict than this.
We will have to re-think this, maybe...

References #385
2016-02-03 15:47:04 +01:00
Ian
d8edd18c10 Fix show Dashboard entries by authors entries
References #385
and http://board.s9y.org/viewtopic.php?f=10&t=20639

We might need to extend this with user group policies (userlevel) - it depends on what we want to have here.
@garvinhicking
2016-01-22 19:47:09 +01:00
Ian
97c43af83e Fix Dashboard comments by authors entries
Closes #385
2016-01-22 18:29:49 +01:00
onli
148e644590 Use CDATA for content in ATOM feed (#354) 2016-01-15 13:33:30 +01:00
onli
0003150796 Ajax ML upload died on non-images (fixes #353) 2016-01-15 13:28:49 +01:00
Don Chambers
6001a9aaf4 Remove Bootstrap reference to Twitter in news 2016-01-13 19:51:35 -06:00
Don Chambers
1935ae6979 Document addition of Clean Blog theme 2016-01-12 21:12:09 -06:00
Garvin Hicking
d4be55a236 update 2016-01-04 11:14:58 +01:00
Garvin Hicking
c16e034f7c XSS fix 2016-01-04 10:53:52 +01:00
Ian
cfa8d8ff6e document 2015-12-11 17:10:26 +01:00
Ian
7fd42fde05 fix typo
there are more.... of this
2015-12-01 11:39:13 +01:00
Ian
04104a3e4d Fixed media item delete handler
References #371
Closes #371
2015-10-31 14:10:52 +01:00
onli
3391f5946e Document index.php refactoring
see 4f2ea4de8a70825b15e357fb3bbf5a76cb178c5d
2015-10-28 13:54:27 +01:00
Ian
715d8cafa6 Optimize scaleImage returns 2015-10-19 13:21:19 +02:00
Ian
3030b80c2b fix rename media file reload issue
References #370

and allow better umlaut conversion

This is a plain javascript event, therefore the message and reload stuff had to move into the JS caller.
2015-10-17 15:03:15 +02:00
Ian
7554623cff Allow strict media directory selection by toggle filter 2015-10-15 18:43:01 +02:00
Ian
2878c154d6 document 2015-10-08 10:41:48 +02:00
Ian
7c21de8aa8 Allow bulk move ML items to Uploads Root too
Fixes many issues like for renaming files and subdir handling, database placements and other issues.
Structures case DIR, FILE and FILE vars for renaming, moving, select and replace.
Touches directoryEdit and mediaproperties related boundaries.
Adds better event messages, which fixes $ob_serendipity_moveMediaDirectory.
Extends and fixes media_items realname issues and changes the length of the item title to be as long as possible.
Added new constants to be executed to the lang files in near future, when some follow up commits have been added.
2015-10-05 18:19:09 +02:00
Ian
44d0be4604 more documentation 2015-09-16 15:56:43 +02:00
Ian
1508a0f53f document 2015-09-16 15:29:21 +02:00
Ian
61fe3e2bf9 Fix MediaLibrary objects not pass through into entryproperties CustomFields
and replaces some old "|@" Smarty 2 array "type hintings" to "|".

Also fixes the default fallback in default/admin/media_choose.tpl, which also missed the serendipity js namespace.

@yellowled Please trigger a default/admin/serendipity_editor.js run to fetch up with all latterly added changes.
2015-09-15 17:28:04 +02:00