This repository has been archived on 2024-08-19. You can view files and clone it. You cannot open issues or pull requests or push a commit.

zotlabs bcd02edd80 ensure z_input_filter is called exactly once, since we now depend on the number of htmlspecialchars operations for ...

markdown content. Also ensure that the content is escaped the correct number of times on imported items.

2017-03-15 15:53:03 -07:00

..

dba

db issues

2017-03-12 15:50:47 -07:00

Import

move diaspora account import to the diaspora plugin

2017-01-31 16:01:47 -08:00

photo

add os_path and display_path to photos, fix some issues with multiple path separators after cloud/nickname in the content field of attach and photos

2017-03-14 22:02:28 -07:00

account.php

…

acl_selectors.php

testing and bug fixes virtual profile groups

2017-02-12 17:40:18 -08:00

activities.php

…

api_auth.php

…

api_zot.php

channel export - use a selected list of functional data categories to export; this allows one to export single data sets instead of always exporting everything we know about

2017-01-31 15:28:25 -08:00

api.php

…

attach.php

add os_path and display_path to photos, fix some issues with multiple path separators after cloud/nickname in the content field of attach and photos

2017-03-14 22:02:28 -07:00

auth.php

fix immediate issue with multiple login forms until I can figure out an elegant way to "popup" the modal login form already on the page. We still may need this fix for the actual login module which should always be callable and present a login form even if the nav is completely borked.

2017-02-08 11:24:21 -08:00

bbcode.php

some event work

2017-03-05 14:47:20 -08:00

bookmarks.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

channel.php

code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.

2017-03-13 16:19:47 -07:00

cli_startup.php

…

config.php

…

connections.php

move some functions to more appropriate places

2017-02-23 14:52:36 -08:00

contact_widgets.php

…

conversation.php

yet one more place to use chanlink_hash() instead of chanlink_url()

2017-02-23 12:24:42 +01:00

crypto.php

…

datetime.php

…

dir_fns.php

…

environment.php

remove include/probe.php which has never completed development and has never been used

2017-03-05 20:45:21 -08:00

event.php

some event work

2017-03-05 14:47:20 -08:00

features.php

bringer - all basic functionality is implemented

2017-02-08 17:21:32 -08:00

feedutils.php

minor feed issue

2017-03-04 11:56:59 -08:00

follow.php

more work on permcats and consolidating calls that try to discover connect permissions, also create lowlevel store functions for abook and profile - since these currently may have issues with sql strict mode.

2017-02-09 17:29:24 -08:00

group.php

Create virtual privacy groups for private profile member lists

2017-02-12 15:56:33 -08:00

help.php

grrr. stop making branding assumptions.

2017-03-12 17:32:45 -07:00

html2bbcode.php

…

html2plain.php

…

hubloc.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

import.php

code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.

2017-03-13 16:19:47 -07:00

items.php

ensure z_input_filter is called exactly once, since we now depend on the number of htmlspecialchars operations for

2017-03-15 15:53:03 -07:00

js_strings.php

…

language.php

…

markdown.php

move all the diaspora content hacks to the diaspora plugin

2017-03-08 17:35:19 -08:00

menu.php

…

message.php

…

nav.php

Take me home instead of get me home

2017-03-09 20:43:16 -05:00

network.php

remove more hardwired branding

2017-03-12 20:54:48 -07:00

oauth.php

…

oembed.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

page_widgets.php

…

perm_upgrade.php

…

permissions.php

…

photos.php

ensure z_input_filter is called exactly once, since we now depend on the number of htmlspecialchars operations for

2017-03-15 15:53:03 -07:00

plugin.php

set minversion and maxversion for themes in view/theme/themename/php/theme.php instead of separate file.

2017-02-27 10:13:08 +01:00

poller.php

…

queue_fn.php

queue optimisations for sites that have lingered in the queue for more than a couple of days.

2017-01-29 17:16:06 -08:00

security.php

Create virtual privacy groups for private profile member lists

2017-02-12 15:56:33 -08:00

selectors.php

…

sharedwithme.php

…

socgraph.php

…

statistics_fns.php

…

system_unavailable.php

…

taxonomy.php

…

text.php

input filter updates

2017-03-14 17:07:29 -07:00

widgets.php

activity widget - turns out the owner is not relevant.

2017-03-02 18:10:23 -08:00

xchan.php

…

zid.php

consolidate hubloc storage

2017-01-30 15:01:22 -08:00

zot.php

We've passed the deadline for allowing unsigned zot finger tokens. It is now a protocol requirement.

2017-02-24 13:53:49 -08:00