czaks
126ee42b9d
better rules for stripping combined chars, based on 45c0d327619 by @ctrlcctrlv
2016-05-06 14:34:42 +02:00
8chan
7a7574bdca
SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
...
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']
Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.
Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2016-05-06 12:43:25 +02:00
8chan
6b04b3c671
Fix post deletion
2016-05-05 13:21:09 +02:00
czaks
77176faece
enable javascript in mod panel
2016-05-05 09:56:54 +02:00
czaks
a42256b296
locale cache: fix a bug when perms are done wrong
2016-05-05 08:43:34 +02:00
czaks
36b78e5f98
fix for editor highlighting
2016-05-05 08:40:13 +02:00
czaks
7c3126866c
ease the migration process for the previous security patch (by introducing another migration); restore php 5.4 compatibility (introducing a polyfill system)
2016-05-05 06:43:22 +02:00
czaks
706feeddff
fix cache_config: webms were thumbnailed twice and with the latest addition, they couldn`t resize at all
2015-08-11 04:51:27 +02:00
Marcin Łabanowski
4014682882
fileboard support
2015-04-22 06:06:34 +02:00
czaks
197d5f236f
[code] tag support
2015-04-12 01:14:35 +02:00
czaks
094f60d34d
try_smarter: fix two bugs. 1. uncovered by the second, during a bump only the page the thread was on and first page were rebuild, despite threads rearranging their positions on the remaining pages. happening always. 2. during smart build, the page wasn`t ordered to be rebuilt
2015-04-06 18:59:33 +02:00
Marcin Łabanowski
8fcb9195c8
Merge pull request #137 from lewdchan/master
...
made the define_groups function play nice on hhvm
2015-04-05 20:51:51 +02:00
czaks
9831b582fa
groups were not defined
2015-04-05 20:25:57 +02:00
czaks
6fd4eb2add
fix a locale issue
2015-04-05 20:23:57 +02:00
czaks
f053450edf
cache_config: fix debug notice
2015-04-05 20:04:27 +02:00
czaks
45f11d1d78
indent the file (inc/functions.php) after the latest changes
2015-04-05 19:12:41 +02:00
czaks
dc2928a14d
cache_config preliminary release
2015-04-05 18:48:53 +02:00
czaks
758cb94e01
optimization: locale caching, so we don`t have to reparse instance-config every single time
2015-04-05 16:52:35 +02:00
czaks
71ef3430fc
optimization: get rid of one more sql query related to installed themes
2015-04-05 16:38:16 +02:00
czaks
34eeaccea9
optimization: we don`t need bans.php most of the time and bans.php has big dependencies
2015-04-05 16:31:20 +02:00
czaks
cbbebcd20c
optimization: if gettext.so is loaded, we don`t need the fallback implementation
2015-04-05 16:26:32 +02:00
Jayme Brereton
fa2e6cfa80
made the define_groups function play nice on hhvm
2015-04-05 20:14:58 +09:30
czaks
67db118f1e
Revert "Revert "smart_build: buildThread" (for a moment, something b0rks)"
...
This reverts commit b246daa191
2015-04-02 20:30:57 +02:00
czaks
99706835c2
Revert "Revert "smart_build for buildIndex""
...
This reverts commit cfb2f55b7a
2015-04-02 20:29:43 +02:00
czaks
cfb2f55b7a
Revert "smart_build for buildIndex"
...
This reverts commit 55277ce383
2015-04-02 19:36:55 +02:00
czaks
b246daa191
Revert "smart_build: buildThread" (for a moment, something b0rks)
...
This reverts commit f2a74812f0
2015-04-01 18:44:01 +02:00
czaks
f2a74812f0
smart_build: buildThread
2015-04-01 18:43:48 +02:00
czaks
14671e0535
functions.php fix: after_open_board support; so that we may disable smart_build immediately after open_board
2015-04-01 18:13:32 +02:00
czaks
55277ce383
smart_build for buildIndex
2015-04-01 18:11:08 +02:00
czaks
d4892aca12
fix one of the previous commits: fix api_global
2015-04-01 17:30:06 +02:00
czaks
4030c42bb4
add a global_api variable for buildIndex
2015-04-01 17:07:24 +02:00
czaks
deefe8299b
unlink a .gz version of a file if it exists
2015-04-01 16:56:17 +02:00
czaks
7fd8c75450
dont rebuild a page, when not needed, even if it doesnt exist
2015-04-01 16:53:28 +02:00
czaks
5d8e023fc4
remove tinyboard special markup from slugs; thanks stigma for reporting
2015-03-30 06:26:53 +02:00
czaks
10f93d0d43
implement a protection against transparent proxies
2015-03-24 05:19:25 +01:00
czaks
3851087dce
slug size should be configurable
2015-03-12 00:03:22 +01:00
czaks
4bf525599e
...
2015-03-10 14:19:36 +01:00
czaks
a2544bc596
... (cites)
2015-03-10 14:16:27 +01:00
czaks
9f34d334d3
..
2015-03-10 13:52:31 +01:00
czaks
7623de9e2f
... (cache)
2015-03-10 13:42:10 +01:00
czaks
d690567b44
... (minor fix for locales)
2015-03-10 13:16:16 +01:00
czaks
0062125f5c
...
2015-03-10 13:09:53 +01:00
czaks
fe7e9c5103
...
2015-03-10 13:03:47 +01:00
czaks
429c9f890f
...
2015-03-10 13:02:38 +01:00
czaks
f4bba2e9ed
...
2015-03-10 12:57:06 +01:00
czaks
bdb6001f3f
support for slugified links; may introduce a few bugs
2015-03-10 12:48:59 +01:00
czaks
bffe03e651
rearrange config processing a bit
2015-02-27 21:16:03 +01:00
czaks
0ab8890b67
tools/rebuild: show currently rebuilded themes
2015-02-26 21:44:39 +01:00
czaks
3a552e5b76
hopefully fix locales
2014-10-09 04:09:30 +02:00
czaks
dfd05e88f9
possible fix of themes` interactions
2014-10-09 03:57:18 +02:00
