Commit Graph

18908 Commits

Author SHA1 Message Date
zotlabs b03cd330e5 begin the process of using the relevant attach directory/path for photo albums instead of an album basename which may not be unique. Created an 'ellipsify()' function to shorten long names and keep the beginning and end intact 2017-03-29 14:09:19 +02:00
zotlabs 542fa4a08c more markdown purification 2017-03-29 14:05:12 +02:00
zotlabs 515f1e76b0 perform attach_upgrade() 2017-03-29 14:04:44 +02:00
zotlabs d95f7efea7 after all of this, I would be very hesitant to use any multi-user system which uses markdown and which doesn't have a large security budget. 2017-03-29 14:04:04 +02:00
zotlabs e97dd48b4c even more fine tuning of the markdown purifier - especially when used with the wiki 2017-03-29 14:03:24 +02:00
zotlabs 5915f31950 add function attach_syspaths to calculate the contents of os_path and display_path; add this to the rename function. We will also need it to populate existing file/photo structures as an upgrade task. 2017-03-29 13:57:15 +02:00
zotlabs 8caa4d9e37 attach_folder_rpaths() providing incorrect results 2017-03-29 13:56:43 +02:00
zotlabs d5525a38f1 various input filter fixes 2017-03-29 13:56:31 +02:00
zotlabs e9a5af6109 simplify the message signing spaghetti 2017-03-29 13:50:27 +02:00
zotlabs fd6b32758e namespace error 2017-03-29 13:47:24 +02:00
zotlabs 4387fb715b ensure z_input_filter is called exactly once, since we now depend on the number of htmlspecialchars operations for
markdown content. Also ensure that the content is escaped the correct number of times on imported items.
2017-03-29 13:45:42 +02:00
zotlabs d7aaca6947 more work related to attach/photo and os_path, display_path and general code cleanup 2017-03-29 13:44:55 +02:00
zotlabs fa5115b3ed add os_path and display_path to photos, fix some issues with multiple path separators after cloud/nickname in the content field of attach and photos 2017-03-29 13:44:17 +02:00
zotlabs ec5e1067bc store os_path and display_path with files 2017-03-29 13:43:13 +02:00
zotlabs ee46faff1a dim class was un-themed 2017-03-29 13:42:17 +02:00
zotlabs fa629841bd input filter updates 2017-03-29 13:39:36 +02:00
zotlabs 155b57c2de fix group by item query 2017-03-29 13:38:29 +02:00
zotlabs 6ea32a8ba3 class MarkdownSoap to safely store markdown by purifying and preserving (escaped) what may be unsafe code in codeblocks. The stored item needs to be unescaped just prior to calling the markdown-to-html processor 2017-03-29 13:37:36 +02:00
zotlabs 8d72cea2d1 get rid of some cruft in boot.php 2017-03-29 13:35:26 +02:00
zotlabs 3ee4dd0d52 remove the unimplemented upload limit site settings 2017-03-29 13:33:15 +02:00
zotlabs 0f7832dc30 code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource. 2017-03-29 13:32:23 +02:00
Mario Vavti 107083e3e4 fix widgets for bs4 again 2017-03-29 12:43:27 +02:00
Mario Vavti d7a9d22a15 namespace error 2017-03-29 12:09:45 +02:00
zotlabs ecfbb10326 widget file update 2017-03-29 12:07:13 +02:00
zotlabs 6c92a240cc remove include/widgets.php 2017-03-29 12:04:44 +02:00
zotlabs 0bad26e116 the rest of the standard widgets converted 2017-03-29 12:02:09 +02:00
Mario Vavti cd57483ed9 namespace error 2017-03-29 11:59:20 +02:00
zotlabs 0908da9529 widgets cont. 2017-03-29 11:57:00 +02:00
zotlabs 6e101e4582 widgets cont. 2017-03-29 11:50:52 +02:00
zotlabs f60309efa1 more widget migrations 2017-03-29 11:50:03 +02:00
zotlabs 47f4007951 more widgets 2017-03-29 11:49:32 +02:00
zotlabs 74f58818d6 filename issue 2017-03-29 11:49:03 +02:00
zotlabs 17977effe7 more widgets 2017-03-29 11:48:35 +02:00
zotlabs 477ed97c2f convert more widgets to classes 2017-03-29 11:47:58 +02:00
zotlabs 242ef70a77 use absolute namespace 2017-03-29 11:47:07 +02:00
zotlabs 755b751614 Comanche: allow widgets to be class based and stored appropriately in Zotlabs 2017-03-29 11:45:54 +02:00
Mario Vavti 5564b47dbc minor bs4 fixes 2017-03-28 23:44:50 +02:00
Mario Vavti 28ad60f892 some fixes for latest bs-dev 2017-03-28 19:29:42 +02:00
Mario Vavti 171b6a222d fixes for latest bootstrap 2017-03-28 15:41:12 +02:00
Mario Vavti f05181322c update to latest bs-dev 2017-03-28 13:29:59 +02:00
Mario Vavti 33d23a4a61 links in wall-item-title must have white colour if the background is bg-primary 2017-03-28 11:11:01 +02:00
Klaus 6375401e0a Merge pull request #701 from dawnbreak/HTMLpurifier
HTMLPurifier library update
2017-03-27 21:39:02 +02:00
Mario Vavti b6b62506c5 adjust comment box 2017-03-27 13:22:15 +02:00
Mario Vavti f66aa336ac fix app rendering 2017-03-27 12:55:11 +02:00
Mario Vavti 779cab047a Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev 2017-03-27 12:08:55 +02:00
Mario Vavti cd575e80dd remove apps which we have access to from the leftside menu in nav 2017-03-27 12:08:26 +02:00
git-marijus 060cc15f81 Merge pull request #704 from zotlabs/doppleclone
remove redundant and non-functional/broken check for successfully clo…
2017-03-27 11:30:49 +02:00
git-marijus 6ed5784491 Merge pull request #707 from dawnbreak/docu
Import Module documentation and @-sign replacement.
2017-03-27 11:30:16 +02:00
Mario Vavti eab9040ee7 unify css classes 2017-03-27 11:20:59 +02:00
Mario Vavti 099b30afbf css fixes 2017-03-27 10:29:26 +02:00