19057 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
zotlabs	542fa4a08c	more markdown purification	2017-03-29 14:05:12 +02:00
zotlabs	515f1e76b0	perform attach_upgrade()	2017-03-29 14:04:44 +02:00
zotlabs	d95f7efea7	after all of this, I would be very hesitant to use any multi-user system which uses markdown and which doesn't have a large security budget.	2017-03-29 14:04:04 +02:00
zotlabs	e97dd48b4c	even more fine tuning of the markdown purifier - especially when used with the wiki	2017-03-29 14:03:24 +02:00
zotlabs	5915f31950	add function attach_syspaths to calculate the contents of os_path and display_path; add this to the rename function. We will also need it to populate existing file/photo structures as an upgrade task.	2017-03-29 13:57:15 +02:00
zotlabs	8caa4d9e37	attach_folder_rpaths() providing incorrect results	2017-03-29 13:56:43 +02:00
zotlabs	d5525a38f1	various input filter fixes	2017-03-29 13:56:31 +02:00
zotlabs	e9a5af6109	simplify the message signing spaghetti	2017-03-29 13:50:27 +02:00
zotlabs	fd6b32758e	namespace error	2017-03-29 13:47:24 +02:00
zotlabs	4387fb715b	ensure z_input_filter is called exactly once, since we now depend on the number of htmlspecialchars operations for ... markdown content. Also ensure that the content is escaped the correct number of times on imported items.	2017-03-29 13:45:42 +02:00
zotlabs	d7aaca6947	more work related to attach/photo and os_path, display_path and general code cleanup	2017-03-29 13:44:55 +02:00
zotlabs	fa5115b3ed	add os_path and display_path to photos, fix some issues with multiple path separators after cloud/nickname in the content field of attach and photos	2017-03-29 13:44:17 +02:00
zotlabs	ec5e1067bc	store os_path and display_path with files	2017-03-29 13:43:13 +02:00
zotlabs	ee46faff1a	dim class was un-themed	2017-03-29 13:42:17 +02:00
zotlabs	fa629841bd	input filter updates	2017-03-29 13:39:36 +02:00
zotlabs	155b57c2de	fix group by item query	2017-03-29 13:38:29 +02:00
zotlabs	6ea32a8ba3	class MarkdownSoap to safely store markdown by purifying and preserving (escaped) what may be unsafe code in codeblocks. The stored item needs to be unescaped just prior to calling the markdown-to-html processor	2017-03-29 13:37:36 +02:00
zotlabs	8d72cea2d1	get rid of some cruft in boot.php	2017-03-29 13:35:26 +02:00
zotlabs	3ee4dd0d52	remove the unimplemented upload limit site settings	2017-03-29 13:33:15 +02:00
zotlabs	0f7832dc30	code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.	2017-03-29 13:32:23 +02:00
Mario Vavti	107083e3e4	fix widgets for bs4 again	2017-03-29 12:43:27 +02:00
Mario Vavti	d7a9d22a15	namespace error	2017-03-29 12:09:45 +02:00
zotlabs	ecfbb10326	widget file update	2017-03-29 12:07:13 +02:00
zotlabs	6c92a240cc	remove include/widgets.php	2017-03-29 12:04:44 +02:00
zotlabs	0bad26e116	the rest of the standard widgets converted	2017-03-29 12:02:09 +02:00
Mario Vavti	cd57483ed9	namespace error	2017-03-29 11:59:20 +02:00
zotlabs	0908da9529	widgets cont.	2017-03-29 11:57:00 +02:00
zotlabs	6e101e4582	widgets cont.	2017-03-29 11:50:52 +02:00
zotlabs	f60309efa1	more widget migrations	2017-03-29 11:50:03 +02:00
zotlabs	47f4007951	more widgets	2017-03-29 11:49:32 +02:00
zotlabs	74f58818d6	filename issue	2017-03-29 11:49:03 +02:00
zotlabs	17977effe7	more widgets	2017-03-29 11:48:35 +02:00
zotlabs	477ed97c2f	convert more widgets to classes	2017-03-29 11:47:58 +02:00
zotlabs	242ef70a77	use absolute namespace	2017-03-29 11:47:07 +02:00
zotlabs	755b751614	Comanche: allow widgets to be class based and stored appropriately in Zotlabs	2017-03-29 11:45:54 +02:00
Mario Vavti	5564b47dbc	minor bs4 fixes	2017-03-28 23:44:50 +02:00
Mario Vavti	28ad60f892	some fixes for latest bs-dev	2017-03-28 19:29:42 +02:00
Mario Vavti	171b6a222d	fixes for latest bootstrap	2017-03-28 15:41:12 +02:00
Mario Vavti	f05181322c	update to latest bs-dev	2017-03-28 13:29:59 +02:00
Mario Vavti	33d23a4a61	links in wall-item-title must have white colour if the background is bg-primary	2017-03-28 11:11:01 +02:00
Klaus	6375401e0a	Merge pull request #701 from dawnbreak/HTMLpurifier ... HTMLPurifier library update	2017-03-27 21:39:02 +02:00
Mario Vavti	b6b62506c5	adjust comment box	2017-03-27 13:22:15 +02:00
Mario Vavti	f66aa336ac	fix app rendering	2017-03-27 12:55:11 +02:00
Mario Vavti	779cab047a	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev	2017-03-27 12:08:55 +02:00
Mario Vavti	cd575e80dd	remove apps which we have access to from the leftside menu in nav	2017-03-27 12:08:26 +02:00
git-marijus	060cc15f81	Merge pull request #704 from zotlabs/doppleclone ... remove redundant and non-functional/broken check for successfully clo…	2017-03-27 11:30:49 +02:00
git-marijus	6ed5784491	Merge pull request #707 from dawnbreak/docu ... Import Module documentation and @-sign replacement.	2017-03-27 11:30:16 +02:00
Mario Vavti	eab9040ee7	unify css classes	2017-03-27 11:20:59 +02:00
Mario Vavti	099b30afbf	css fixes	2017-03-27 10:29:26 +02:00
Mario Vavti	c327b00efa	fix app-icon color and use bs class for w100	2017-03-26 13:45:27 +02:00