zotlabs
0f7832dc30
code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.
2017-03-29 13:32:23 +02:00
zotlabs
6c92a240cc
remove include/widgets.php
2017-03-29 12:04:44 +02:00
zotlabs
0bad26e116
the rest of the standard widgets converted
2017-03-29 12:02:09 +02:00
zotlabs
0908da9529
widgets cont.
2017-03-29 11:57:00 +02:00
zotlabs
6e101e4582
widgets cont.
2017-03-29 11:50:52 +02:00
zotlabs
f60309efa1
more widget migrations
2017-03-29 11:50:03 +02:00
zotlabs
47f4007951
more widgets
2017-03-29 11:49:32 +02:00
zotlabs
17977effe7
more widgets
2017-03-29 11:48:35 +02:00
zotlabs
477ed97c2f
convert more widgets to classes
2017-03-29 11:47:58 +02:00
zotlabs
755b751614
Comanche: allow widgets to be class based and stored appropriately in Zotlabs
2017-03-29 11:45:54 +02:00
Klaus
6375401e0a
Merge pull request #701 from dawnbreak/HTMLpurifier
...
HTMLPurifier library update
2017-03-27 21:39:02 +02:00
git-marijus
060cc15f81
Merge pull request #704 from zotlabs/doppleclone
...
remove redundant and non-functional/broken check for successfully clo…
2017-03-27 11:30:49 +02:00
Klaus Weidenbach
f718e2b0db
⬆️ Update HTML Purifier library.
...
Updated HTML Purifier from 4.6.0 to 4.9.2 with better PHP7 compatibility.
Used composer to manage this library.
2017-03-26 00:41:27 +01:00
Mario Vavti
43a794a905
bs4 fixes for events
2017-03-23 13:11:27 +01:00
Mario Vavti
546867c102
add icon, name and thumb to profile tabs. remove login app - we have login in the panel now.
2017-03-21 13:38:44 +01:00
zotlabs
f252f3efc5
remove redundant and non-functional/broken check for successfully cloned channel record which was left over from an earlier method of creating the table; which was deprecated a few months back.
2017-03-20 15:40:48 -07:00
Mario Vavti
ca14ab3d55
move profile tabs to app-tray
2017-03-20 17:24:48 +01:00
Mario Vavti
cfdf1def2a
since we have the app bin we do not actually need the profile tabs for ourself
2017-03-20 14:09:27 +01:00
Mario Vavti
949ca844c5
open like-modal directly if more than 10 likes
2017-03-19 17:49:07 +01:00
Mario Vavti
b2ad4e8c2a
bs4 fixes
2017-03-18 23:45:55 +01:00
Mario Vavti
d10525a375
fix item_list and item_search templates. make item filer use a bootdtrap modal and some css and class fixes
2017-03-17 14:22:10 +01:00
Mario Vavti
a73ea134cd
re-add spaces between tags
2017-03-15 21:22:16 +01:00
Mario Vavti
aa33cacb62
style hashtags, mentions and categories. hide expand-aside button if not needed. css and class fixes
2017-03-15 16:42:55 +01:00
Mario Vavti
a0a376e95e
hide nav search behind a button, css fixes and cleanup
2017-03-14 18:31:19 +01:00
Mario Vavti
8aabc6bc3d
many dropdown and class fixes. still a long way to go...
2017-03-12 21:11:28 +01:00
Andrew Manning
a2371d56fd
Take me home instead of get me home
2017-03-09 20:43:16 -05:00
zotlabs
a037590ce3
allow post_activity_item to be passed an empty ACL without resetting to channel default
2017-03-06 21:01:17 -08:00
zotlabs
595cb13d8f
correct fix for wiki anonymous read issue (items_permissions_sql checks item.public_policy which was set for posts, not wikis)
2017-03-06 15:33:10 -08:00
zotlabs
4f5e9d77b2
remove include/probe.php which has never completed development and has never been used
2017-03-05 20:45:21 -08:00
zotlabs
4c0c153b8f
move emoji emoticons (not reactions) to plugin
2017-03-05 16:18:09 -08:00
zotlabs
384db9d10d
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev_merge
2017-03-05 11:02:19 -08:00
Klaus Weidenbach
6c79e0c077
⬆️ 🔨 Upgrade Markdownify library.
...
The current version 2.0.0 (alpha) throws deprecated warning with
PHP7.1 and PHPUnit.
Upgrade the HTML to Markdown converter for PHP to the current
Markdownify 2.2.1.
Used composer to manage this library.
2017-03-05 01:14:15 +01:00
zotlabs
47d2467e24
minor feed issue
2017-03-04 11:56:59 -08:00
zotlabs
155844f142
reverse sort order
2017-03-02 23:02:44 -08:00
zotlabs
cee9a20e85
activity widget - turns out the owner is not relevant.
2017-03-02 18:10:23 -08:00
zotlabs
e58dc726c5
activity widget - like the forum widget but represents unseen activity by author. Still experimental until it can be tested with diaspora xchans, which may require additional urlencoding.
2017-03-02 17:32:43 -08:00
zotlabs
1ca0b85196
cleaner integration between the headers and session options of z_fetch_url()
2017-02-28 16:32:24 -08:00
zotlabs
fa02f3a108
Merge pull request #686 from dawnbreak/markdown
...
Upgrade PHP Markdown library.
2017-03-01 09:54:01 +11:00
zotlabs
fa944fc526
provide 'session' option to z_fetch_url to assist with remote fetches requiring magic auth
2017-02-27 23:48:54 -08:00
zotlabs
c49935d91c
remove logging
2017-02-27 22:48:52 -08:00
Klaus Weidenbach
503c368f9e
⬆️ 🔨 Upgrade PHP Markdown library.
...
The current version throws deprecated warning with PHP7.1 and PHPUnit.
Upgrade the Markdown library to the current PHP Markdown Lib 1.7.0.
Used composer to manage this library.
2017-02-27 23:40:29 +01:00
Mario Vavti
0f208fb36b
set minversion and maxversion for themes in view/theme/themename/php/theme.php instead of separate file.
2017-02-27 10:13:08 +01:00
zotlabs
8783ccfd72
move admin permission decision out of the router - it is already provided in the module and the higher level check is causing some oembed redirect issues.
2017-02-25 16:22:09 -08:00
zotlabs
8d0d2015d7
We've passed the deadline for allowing unsigned zot finger tokens. It is now a protocol requirement.
2017-02-24 13:53:49 -08:00
zotlabs
b1ff5367e7
more work on profile vcards - still a lot of work to go
2017-02-23 19:07:01 -08:00
zotlabs
3e992604c7
move some functions to more appropriate places
2017-02-23 14:52:36 -08:00
zotlabs
7b4d0168c0
parse bbcode events which use the "new" vcalendar format. work in progress.
2017-02-23 11:09:02 -08:00
Mario Vavti
3d0c6700db
yet one more place to use chanlink_hash() instead of chanlink_url()
2017-02-23 12:24:42 +01:00
Mario Vavti
55924f5c5b
apps improvements
2017-02-22 11:22:43 +01:00
zotlabs
956f0043fc
change text back to 'add apps'
2017-02-21 23:16:05 -08:00