149 commits

Author	SHA1	Message	Date
zotlabs	a7bf4366ce	use the same host macro for sender address as for reply_to address	2017-03-21 21:00:48 -07:00
zotlabs	82631c3413	more markdown purification	2017-03-21 00:40:19 -07:00
zotlabs	8821986d87	after all of this, I would be very hesitant to use any multi-user system which uses markdown and which doesn't have a large security budget.	2017-03-20 19:50:09 -07:00
zotlabs	35fc7328de	even more fine tuning of the markdown purifier - especially when used with the wiki	2017-03-20 19:41:03 -07:00
zotlabs	4afeefb5ce	various input filter fixes	2017-03-18 16:41:43 -07:00
zotlabs	2c73b457ef	input filter updates	2017-03-14 17:07:29 -07:00
zotlabs	1244b0e36a	class MarkdownSoap to safely store markdown by purifying and preserving (escaped) what may be unsafe code in codeblocks. The stored item needs to be unescaped just prior to calling the markdown-to-html processor	2017-03-14 00:23:44 -07:00
zotlabs	fc533107ed	better handling of mimetype security	2017-03-12 21:55:24 -07:00
zotlabs	c39c925d8d	grrr. stop making branding assumptions.	2017-03-12 17:32:45 -07:00
zotlabs	1a49f0d164	one role.	2017-03-09 18:54:10 -08:00
zotlabs	a18e8e1ede	add public_policy to the nwiki container also. This should not affect the recent bug as presented, but is being added for consistency.	2017-03-06 17:59:34 -08:00
zotlabs	595cb13d8f	correct fix for wiki anonymous read issue (items_permissions_sql checks item.public_policy which was set for posts, not wikis)	2017-03-06 15:33:10 -08:00
Mario Vavti	9e44b07275	allow unauthenticated access to public wiki pages	2017-03-06 22:32:05 +01:00
Mario Vavti	eaefb36212	we need item edited for wiki page history, not item created	2017-03-04 16:56:52 +01:00
zotlabs	d7e24b2494	make system.expire_delivery_reports default setting consistent (10 days)	2017-03-01 20:05:52 -08:00
zotlabs	96fdb88690	nativewiki: only apply markdown filter to markdown input	2017-02-23 15:15:19 -08:00
Mario Vavti	5012baba15	one more place to use chanlink_hash() instead of chanlink_url()	2017-02-23 11:41:03 +01:00
Mario Vavti	c75852455b	use chanlink_hash() instead of chanlink_url() for $profile_link	2017-02-23 09:53:24 +01:00
Mario Vavti	55924f5c5b	apps improvements	2017-02-22 11:22:43 +01:00
zotlabs	21e3481810	wiki page permissions issue	2017-02-20 14:07:22 -08:00
zotlabs	1fb37f93cc	more permissions optimisations	2017-02-09 19:52:13 -08:00
zotlabs	91819bfc2d	bringer - all basic functionality is implemented	2017-02-08 17:21:32 -08:00
zotlabs	6ee691e019	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev_merge	2017-02-08 11:29:45 -08:00
zotlabs	28f0833237	fix immediate issue with multiple login forms until I can figure out an elegant way to "popup" the modal login form already on the page. We still may need this fix for the actual login module which should always be callable and present a login form even if the nav is completely borked.	2017-02-08 11:24:21 -08:00
Mario Vavti	eb415fd869	better detection of when to show the feature button and document nav mode for app_render()	2017-02-08 11:17:09 +01:00
Mario Vavti	ace0a1cb75	do not show feature button if the app is shared. css fixes	2017-02-08 10:56:03 +01:00
zotlabs	30659aef50	initial permcat creation ability, in /settings/permcats; functional permcat creation for testing but still needs a lot of UX work before promoting the ability	2017-02-07 20:29:03 -08:00
zotlabs	46d0e23e7b	atokens - we only need one permission column	2017-02-07 19:49:15 -08:00
zotlabs	2d3e20d96e	move permcat initialisation to zlib	2017-02-07 17:51:56 -08:00
zotlabs	a6160e3026	move permcat library functions to Zlib	2017-02-07 16:43:00 -08:00
zotlabs	27cac334e1	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev_merge	2017-02-06 14:12:43 -08:00
zotlabs	947478ca76	don't add zid to app links if they're on this system and we're logged in already. This messes up the null arg detection in mod_network.	2017-02-06 14:10:54 -08:00
Mario Vavti	5d12c56510	only check for mode	2017-02-06 20:30:02 +01:00
Mario Vavti	70edcabca1	move icon stuff back to app_render() and send navapps through app_render()	2017-02-06 20:10:10 +01:00
Mario Vavti	59baf34170	make sure we do not remove other categories on app un-feature	2017-02-06 14:37:33 +01:00
Mario Vavti	cf4cdffcc1	parse icons in get_system_apps()	2017-02-06 10:49:42 +01:00
Mario Vavti	dce9a70ff5	check for app-icons in app_list() instead of app_render()	2017-02-03 12:12:05 +01:00
zotlabs	2daafe80a5	move opensearch to plugins	2017-02-02 14:49:51 -08:00
zotlabs	94290102b6	tested extensible permissions by adding wiki permissions. Discovered a couple of issues that needed attention in the process.	2017-02-01 18:05:02 -08:00
Mario Vavti	a6cbebe03c	hide featured app category in the app category widget	2017-01-31 12:53:33 +01:00
Mario Vavti	d0827dbb3c	provide a feature/unfeature app button	2017-01-30 15:17:46 +01:00
zotlabs	22839e48d0	better handling of html special chars in wiki and wikipage names	2017-01-26 15:16:41 -08:00
Mario Vavti	f7f39cf6c0	missing single quote in query	2017-01-26 14:50:52 +01:00
Mario Vavti	b30e799847	query for item_hidden is not needed anymore	2017-01-26 11:43:21 +01:00
Mario Vavti	02e8058c50	fix renaming of wiki pages	2017-01-26 10:46:44 +01:00
zotlabs	5bc6941b57	resolve the linked item delete issue by declaring what types of linked items cannot be deleted	2017-01-25 14:40:04 -08:00
Mario Vavti	1db57c498d	fixes for wiki create/delete page	2017-01-25 19:41:47 +01:00
zotlabs	54f7cd5302	typo	2017-01-24 20:17:05 -08:00
zotlabs	9e70d54300	always sync parent wiki when syncing pages, just in case the original wiki creation wasn't synced.	2017-01-24 20:14:58 -08:00
zotlabs	0d9e12737a	remnant code that checked for version to see if an app was installed. We do that differently now.	2017-01-23 11:36:28 -08:00