GitHub/WoltLab/WCF.git
3 years agoRelease 3.0.26 3.0.26
Alexander Ebert [Mon, 1 Feb 2021 11:50:17 +0000 (12:50 +0100)]
Release 3.0.26

3 years agoMissing check for accessible user groups
Alexander Ebert [Mon, 1 Feb 2021 11:47:09 +0000 (12:47 +0100)]
Missing check for accessible user groups

3 years agoNotify users of the expiring support
Alexander Ebert [Mon, 1 Feb 2021 11:38:49 +0000 (12:38 +0100)]
Notify users of the expiring support

3 years agoIgnore top-level node_modules/
Tim Düsterhus [Fri, 16 Oct 2020 11:57:29 +0000 (13:57 +0200)]
Ignore top-level node_modules/

4 years agoPreparing the release 3.0.25 3.0.25
Alexander Ebert [Sat, 27 Jun 2020 09:52:48 +0000 (11:52 +0200)]
Preparing the release 3.0.25

4 years agoIncorrect encoding of conditions
Alexander Ebert [Sat, 27 Jun 2020 09:39:05 +0000 (11:39 +0200)]
Incorrect encoding of conditions

4 years agoMerge pull request #3342 from Krymonota/remove-obsolete-user-signature-properties
Tim Düsterhus [Tue, 2 Jun 2020 17:02:42 +0000 (19:02 +0200)]
Merge pull request #3342 from Krymonota/remove-obsolete-user-signature-properties

Remove obsolete signature properties documentation

4 years agoRemove obsolete signature properties documentation
Niklas (Krymonota) [Sat, 30 May 2020 17:31:46 +0000 (19:31 +0200)]
Remove obsolete signature properties documentation

See bc7adcda6be815367889eaa8cdecf851119009e4 and 291e9fe55c71023bdf3f18565be1c3ae098f77c6

4 years agoBackport of CVE-2019-11358
Alexander Ebert [Sat, 23 May 2020 20:10:54 +0000 (22:10 +0200)]
Backport of CVE-2019-11358

See #3159

4 years agoFixed incorrect title when editing menu entries
Marcel Werk [Tue, 14 Apr 2020 22:45:31 +0000 (00:45 +0200)]
Fixed incorrect title when editing menu entries

4 years agoThumbnails created with imagick had wrong image size
Marcel Werk [Tue, 14 Apr 2020 22:15:13 +0000 (00:15 +0200)]
Thumbnails created with imagick had wrong image size

4 years agoFixed PHP 7.4 issue
Marcel Werk [Tue, 14 Apr 2020 16:58:43 +0000 (18:58 +0200)]
Fixed PHP 7.4 issue

4 years agoToo long text entries when saving media lead to an error message
Marcel Werk [Mon, 13 Apr 2020 12:15:04 +0000 (14:15 +0200)]
Too long text entries when saving media lead to an error message

4 years agoFixed incorrect detection of numerics
Marcel Werk [Thu, 9 Apr 2020 20:01:28 +0000 (22:01 +0200)]
Fixed incorrect detection of numerics

4 years agoMerge pull request #3205 from WoltLab/revert-3203-purifier-doctype 3.0.24
Tim Düsterhus [Wed, 8 Apr 2020 18:19:22 +0000 (20:19 +0200)]
Merge pull request #3205 from WoltLab/revert-3203-purifier-doctype

Revert "Specify HTML.Doctype as HTML 4 Strict for HTML Purifier"

4 years agoRevert "Specify HTML.Doctype as HTML 4 Strict for HTML Purifier"
Tim Düsterhus [Wed, 8 Apr 2020 18:17:40 +0000 (20:17 +0200)]
Revert "Specify HTML.Doctype as HTML 4 Strict for HTML Purifier"

4 years agoPreparing the release 3.0.24
Alexander Ebert [Wed, 8 Apr 2020 14:56:44 +0000 (16:56 +0200)]
Preparing the release 3.0.24

4 years agoUpdating minified JavaScript files
woltlab.com [Wed, 8 Apr 2020 13:23:22 +0000 (13:23 +0000)]
Updating minified JavaScript files

4 years agoUnique id for the share content dialog
Alexander Ebert [Wed, 8 Apr 2020 13:21:01 +0000 (15:21 +0200)]
Unique id for the share content dialog

Closes #3181

4 years agoMerge pull request #3202 from SoftCreatR/patch-12
Alexander Ebert [Wed, 8 Apr 2020 13:15:47 +0000 (15:15 +0200)]
Merge pull request #3202 from SoftCreatR/patch-12

Set font cache control to public

4 years agoMerge pull request #3203 from WoltLab/purifier-doctype
Alexander Ebert [Wed, 8 Apr 2020 13:14:21 +0000 (15:14 +0200)]
Merge pull request #3203 from WoltLab/purifier-doctype

Specify HTML.Doctype as HTML 4 Strict for HTML Purifier

4 years agoValidate file extensions for remote avatars in UserAvatarAction
joshuaruesweg [Tue, 7 Apr 2020 11:31:10 +0000 (13:31 +0200)]
Validate file extensions for remote avatars in UserAvatarAction

4 years agoExplicitly set the stream timeout
Alexander Ebert [Wed, 8 Apr 2020 13:01:18 +0000 (15:01 +0200)]
Explicitly set the stream timeout

4 years agoSpecify HTML.Doctype as HTML 4 Strict for HTML Purifier
Tim Düsterhus [Wed, 8 Apr 2020 12:47:30 +0000 (14:47 +0200)]
Specify HTML.Doctype as HTML 4 Strict for HTML Purifier

Not setting a Doctype defaults to HTML 4 Transitional, allowing legacy
tags. HTML 4 Strict will attempt to convert them into a standards compliant
format.

HTML Purifier does not support the HTML 5 Doctype as a readily available
configuration.

Before:

    string '<p><font size="6">This is some text!</font></p>' (length=47)

After:

    string '<p><span style="font-size:xx-large;">This is some text!</span></p>' (length=66)

4 years agoSet font cache control to public
Sascha Greuel [Fri, 3 Apr 2020 23:08:45 +0000 (01:08 +0200)]
Set font cache control to public

resolves #3186

4 years agoBind the style changer to all matching buttons
Alexander Ebert [Tue, 31 Mar 2020 15:29:01 +0000 (17:29 +0200)]
Bind the style changer to all matching buttons

4 years agoMerge pull request #3201 from Krymonota/patch-3
Joshua Rüsweg [Tue, 31 Mar 2020 08:53:48 +0000 (10:53 +0200)]
Merge pull request #3201 from Krymonota/patch-3

Fix incorrect check in UserGroupOptionForm whether the option exists

4 years agoFix incorrect check whether the option exists
Niklas [Sun, 29 Mar 2020 22:01:30 +0000 (00:01 +0200)]
Fix incorrect check whether the option exists

4 years agoUser online lookup for the article page was using the article id instead of the conte...
Marcel Werk [Fri, 27 Mar 2020 12:30:38 +0000 (13:30 +0100)]
User online lookup for the article page was using the article id instead of the content id

4 years agoAdditional safeguards against abuses of the mail form
Alexander Ebert [Thu, 26 Mar 2020 12:03:08 +0000 (13:03 +0100)]
Additional safeguards against abuses of the mail form

4 years agoIncorrect array access
Alexander Ebert [Tue, 24 Mar 2020 13:57:56 +0000 (14:57 +0100)]
Incorrect array access

4 years agoFixed typo
Marcel Werk [Tue, 10 Mar 2020 10:34:22 +0000 (11:34 +0100)]
Fixed typo

4 years agoFix PHP 7.4 compatibility of phpline.phar
Tim Düsterhus [Mon, 9 Mar 2020 21:58:52 +0000 (22:58 +0100)]
Fix PHP 7.4 compatibility of phpline.phar

4 years agoPreparing the release 3.0.23 3.0.23
Alexander Ebert [Sat, 22 Feb 2020 17:59:47 +0000 (18:59 +0100)]
Preparing the release 3.0.23

4 years agoUpdating minified JavaScript files
woltlab.com [Sat, 22 Feb 2020 16:29:40 +0000 (16:29 +0000)]
Updating minified JavaScript files

4 years agoSafeguard against malformed domain paths caused by direct database manipulations
Alexander Ebert [Fri, 21 Feb 2020 13:04:04 +0000 (14:04 +0100)]
Safeguard against malformed domain paths caused by direct database manipulations

4 years agoFix exception when printing stacktraces with closed resources
Matthias Schmidt [Thu, 20 Feb 2020 16:53:25 +0000 (17:53 +0100)]
Fix exception when printing stacktraces with closed resources

4 years agoRemoved the unsupported `pointerOffset` for `Ui/Alignment`
Alexander Ebert [Thu, 20 Feb 2020 16:50:58 +0000 (17:50 +0100)]
Removed the unsupported `pointerOffset` for `Ui/Alignment`

The position of the pointer element is determined by CSS classes that also open up the ability to add relativ positioning.

4 years agoUpdated the repository README
Alexander Ebert [Wed, 19 Feb 2020 17:40:34 +0000 (18:40 +0100)]
Updated the repository README

See #3134

4 years agoMerge branch '2.1' into 3.0
Alexander Ebert [Wed, 19 Feb 2020 17:35:00 +0000 (18:35 +0100)]
Merge branch '2.1' into 3.0

4 years agoUpdated the repository README 2.1.final
Alexander Ebert [Wed, 19 Feb 2020 17:34:20 +0000 (18:34 +0100)]
Updated the repository README

See #3134

4 years agoolder error logs were sometimes not deleted at the appropriate time
Marcel Werk [Thu, 13 Feb 2020 10:13:21 +0000 (11:13 +0100)]
older error logs were sometimes not deleted at the appropriate time

filectime may differ from filemtime

4 years agoChange empty phrase name exception type
Tim Düsterhus [Sun, 9 Feb 2020 14:15:14 +0000 (15:15 +0100)]
Change empty phrase name exception type

WoltLab Suite 5.2 already has a check for a category mismatch
that throws an Exception of type InvalidArgumentException. Change
this one for consistency.

see 9e280cb5c1dd3e398a3096b55f6d88be4baa6923
see e3d24f95b721e38ab205c89769c3b015aa43d75c

4 years agoMerge pull request #3158 from Krymonota/fix-veoh-privacy-policy-link-text
Tim Düsterhus [Sun, 9 Feb 2020 14:00:47 +0000 (15:00 +0100)]
Merge pull request #3158 from Krymonota/fix-veoh-privacy-policy-link-text

Fix Veoh privacy policy link text

4 years agoMerge pull request #3155 from SoftCreatR/patch-10
Tim Düsterhus [Sun, 9 Feb 2020 13:53:28 +0000 (14:53 +0100)]
Merge pull request #3155 from SoftCreatR/patch-10

Improve WhatsApp Message Sharing

4 years agoFix Veoh privacy policy link text
Niklas (Krymonota) [Sat, 8 Feb 2020 20:47:01 +0000 (21:47 +0100)]
Fix Veoh privacy policy link text

Related to b6a668a61612802c098ceeb8070786a732607254.

4 years agoSafeguard against phrases with empty names
Alexander Ebert [Sat, 8 Feb 2020 19:39:06 +0000 (20:39 +0100)]
Safeguard against phrases with empty names

4 years agoRemove some dangling attributes
Alexander Ebert [Sat, 8 Feb 2020 18:45:48 +0000 (19:45 +0100)]
Remove some dangling attributes

4 years agoDeprecated string offset in Net_IDNA2 (PHP 7.4)
Alexander Ebert [Mon, 27 Jan 2020 15:32:16 +0000 (16:32 +0100)]
Deprecated string offset in Net_IDNA2 (PHP 7.4)

4 years agoImproved WhatsApp Message Sharing
Sascha Greuel [Sat, 8 Feb 2020 13:04:22 +0000 (14:04 +0100)]
Improved WhatsApp Message Sharing

4 years agoMerge pull request #3153 from SoftCreatR/patch-9
Alexander Ebert [Fri, 7 Feb 2020 11:26:01 +0000 (12:26 +0100)]
Merge pull request #3153 from SoftCreatR/patch-9

Remove Typehint

4 years agoUpdate CLIWCF.class.php
Sascha Greuel [Fri, 7 Feb 2020 01:39:29 +0000 (02:39 +0100)]
Update CLIWCF.class.php

4 years agoMerge pull request #3150 from Krymonota/fix-github-primary-email
Tim Düsterhus [Thu, 6 Feb 2020 17:14:51 +0000 (18:14 +0100)]
Merge pull request #3150 from Krymonota/fix-github-primary-email

Fix GitHub primary email not correctly being detected

4 years agoFix GitHub primary email not correctly being detected
Niklas (Krymonota) [Thu, 6 Feb 2020 17:01:13 +0000 (18:01 +0100)]
Fix GitHub primary email not correctly being detected

4 years agoMerge pull request #3149 from Krymonota/update-github-auth
Tim Düsterhus [Thu, 6 Feb 2020 16:41:48 +0000 (17:41 +0100)]
Merge pull request #3149 from Krymonota/update-github-auth

Update GitHub authorization to use headers instead of query parameters

4 years agoUpdate GitHub authorization to use headers instead of query parameters
Niklas (Krymonota) [Thu, 6 Feb 2020 16:36:13 +0000 (17:36 +0100)]
Update GitHub authorization to use headers instead of query parameters

Using query parameters for access_token has been deprecated.

For further information, check out:
- https://community.woltlab.com/thread/281366-github-api-deprecation-notice-for-authentication-via-url-query-parameters/
- https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters

4 years agofixed issue that embedded videos were not aligned to the left
Marcel Werk [Tue, 28 Jan 2020 12:00:11 +0000 (13:00 +0100)]
fixed issue that embedded videos were not aligned to the left

4 years agoAttempting to access an element that is not always present
Alexander Ebert [Thu, 16 Jan 2020 17:52:17 +0000 (18:52 +0100)]
Attempting to access an element that is not always present

4 years ago`WCF::getAnchor()` already encodes HTML entities
Alexander Ebert [Thu, 16 Jan 2020 17:30:51 +0000 (18:30 +0100)]
`WCF::getAnchor()` already encodes HTML entities

4 years agoFix handling of default box limit/sorting if not explicitly set
Matthias Schmidt [Sat, 4 Jan 2020 12:44:22 +0000 (13:44 +0100)]
Fix handling of default box limit/sorting if not explicitly set

If a box is created via the box package installation plugin and if no limit, sort field, or sort order is given, the default value should be used instead of leaving the values `null`.

Is also fixed the problem that simply submitting the box edit form without change for a box supporting a limit but not actually having a limit causes an error message because the limit field is empty.

4 years agoFixed wrong menu item title
Marcel Werk [Fri, 3 Jan 2020 15:58:42 +0000 (16:58 +0100)]
Fixed wrong menu item title

4 years agoMerge pull request #3112 from Krymonota/fix-veoh-privacy-policy-link
Marcel Werk [Thu, 28 Nov 2019 07:55:02 +0000 (08:55 +0100)]
Merge pull request #3112 from Krymonota/fix-veoh-privacy-policy-link

Fix link to Veoh's privacy policy

4 years agoFix link to Veoh's privacy policy
Niklas [Wed, 27 Nov 2019 20:12:18 +0000 (21:12 +0100)]
Fix link to Veoh's privacy policy

4 years agoUpgraded HTMLPurifier to 4.12.0 for compatibility with PHP 7.4
Alexander Ebert [Tue, 26 Nov 2019 12:40:06 +0000 (13:40 +0100)]
Upgraded HTMLPurifier to 4.12.0 for compatibility with PHP 7.4

4 years agoAdd missing `visibilityExceptions` definition in `menu.xsd`
Matthias Schmidt [Sun, 24 Nov 2019 16:57:34 +0000 (17:57 +0100)]
Add missing `visibilityExceptions` definition in `menu.xsd`

Close #3104

5 years agoCompatibility with PHP 7.4
Alexander Ebert [Fri, 22 Nov 2019 15:29:24 +0000 (16:29 +0100)]
Compatibility with PHP 7.4

5 years agoCompatibility with PHP 7.4
Alexander Ebert [Fri, 22 Nov 2019 14:58:54 +0000 (15:58 +0100)]
Compatibility with PHP 7.4

5 years agoBlock access-token usage for banned users
Marcel Werk [Wed, 30 Oct 2019 14:17:41 +0000 (15:17 +0100)]
Block access-token usage for banned users

5 years agoMissing reset of the language cache after copying style phrases
Alexander Ebert [Tue, 29 Oct 2019 11:33:50 +0000 (12:33 +0100)]
Missing reset of the language cache after copying style phrases

5 years agoMerge pull request #3077 from SoftCreatR/patch-7
Marcel Werk [Fri, 27 Sep 2019 14:24:58 +0000 (16:24 +0200)]
Merge pull request #3077 from SoftCreatR/patch-7

Update breadcrumbs.tpl

5 years agoIncorrect redirect after entering the master password when using multiple subdomains
Alexander Ebert [Wed, 25 Sep 2019 09:01:00 +0000 (11:01 +0200)]
Incorrect redirect after entering the master password when using multiple subdomains

5 years agoSet `signatureEnableHtml` to `1` for new users
Alexander Ebert [Tue, 24 Sep 2019 16:44:39 +0000 (18:44 +0200)]
Set `signatureEnableHtml` to `1` for new users

5 years agoFixed typos
Marcel Werk [Tue, 24 Sep 2019 13:14:57 +0000 (15:14 +0200)]
Fixed typos

5 years agoUpdate breadcrumbs.tpl
Sascha Greuel [Fri, 20 Sep 2019 16:54:49 +0000 (18:54 +0200)]
Update breadcrumbs.tpl

- Hide breadcrumbs that do not expose a visible label
- Added position property in breadcrumbs microdata

5 years agoAdd missing dialog rebuild after window resizing
Matthias Schmidt [Mon, 16 Sep 2019 16:25:10 +0000 (18:25 +0200)]
Add missing dialog rebuild after window resizing

Close #3072

5 years agoIncorrect usage of $this->errorType
Marcel Werk [Sun, 15 Sep 2019 16:35:57 +0000 (18:35 +0200)]
Incorrect usage of $this->errorType

5 years agoRemove birthday and location scope from FacebookAuth
Matthias Schmidt [Wed, 11 Sep 2019 16:17:46 +0000 (18:17 +0200)]
Remove birthday and location scope from FacebookAuth

Close #2912

5 years agoFix typo in German language item
Matthias Schmidt [Tue, 10 Sep 2019 15:27:04 +0000 (17:27 +0200)]
Fix typo in German language item

5 years agoAdd missing import language items
Matthias Schmidt [Sun, 8 Sep 2019 14:58:38 +0000 (16:58 +0200)]
Add missing import language items

5 years agoFix label/description of style selection in user settings
Matthias Schmidt [Sun, 8 Sep 2019 14:36:28 +0000 (16:36 +0200)]
Fix label/description of style selection in user settings

5 years agoFix German name of capital of Oman in timezone language item
Matthias Schmidt [Sun, 8 Sep 2019 13:57:48 +0000 (15:57 +0200)]
Fix German name of capital of Oman in timezone language item

5 years agoFix double clicking on inline editor trigger
Matthias Schmidt [Sun, 8 Sep 2019 13:34:08 +0000 (15:34 +0200)]
Fix double clicking on inline editor trigger

See f5885eb2e46530678df20cbca2603ff202b4231a

5 years agoPreparing the release 3.0.22 pl 2 3.0.22_pl_2
Alexander Ebert [Sun, 1 Sep 2019 13:49:37 +0000 (15:49 +0200)]
Preparing the release 3.0.22 pl 2

5 years agoIncorrect check for permitted inline styles
Alexander Ebert [Sun, 1 Sep 2019 13:48:47 +0000 (15:48 +0200)]
Incorrect check for permitted inline styles

5 years agoPreparing the release 3.0.22 pl 1 3.0.22_pl_1
Alexander Ebert [Sun, 1 Sep 2019 10:49:07 +0000 (12:49 +0200)]
Preparing the release 3.0.22 pl 1

5 years agoPHP 5.5 compatibility
Alexander Ebert [Sun, 1 Sep 2019 10:25:52 +0000 (12:25 +0200)]
PHP 5.5 compatibility

`ARRAY_FILTER_USE_KEY` is available since PHP 5.6

5 years agoPreparing the release 3.0.22 3.0.22
Alexander Ebert [Fri, 30 Aug 2019 11:06:30 +0000 (13:06 +0200)]
Preparing the release 3.0.22

5 years agoUpdating minified JavaScript files
woltlab.com [Thu, 29 Aug 2019 09:40:02 +0000 (09:40 +0000)]
Updating minified JavaScript files

5 years agoThe swiss flag is a square, not a rectangle
Alexander Ebert [Thu, 29 Aug 2019 09:14:53 +0000 (11:14 +0200)]
The swiss flag is a square, not a rectangle

5 years agoTypos
Alexander Ebert [Wed, 28 Aug 2019 17:55:14 +0000 (19:55 +0200)]
Typos

5 years agoUpgrade notice for WSC 3.0
Alexander Ebert [Wed, 28 Aug 2019 17:51:44 +0000 (19:51 +0200)]
Upgrade notice for WSC 3.0

5 years agoMerge branch 'SoftCreatR-patch-6' into 3.0
Joshua Rüsweg [Fri, 23 Aug 2019 12:37:42 +0000 (14:37 +0200)]
Merge branch 'SoftCreatR-patch-6' into 3.0

5 years agoAdd user agent detection for Firefox on iOS
Sascha Greuel [Thu, 22 Aug 2019 15:00:54 +0000 (17:00 +0200)]
Add user agent detection for Firefox on iOS

5 years agoReject disallowed CSS styles
Alexander Ebert [Mon, 19 Aug 2019 12:17:07 +0000 (14:17 +0200)]
Reject disallowed CSS styles

Fixes #3041

5 years agoFix wording in English language item
Matthias Schmidt [Sat, 17 Aug 2019 11:15:43 +0000 (13:15 +0200)]
Fix wording in English language item

5 years agoUse the actual `items` value for the list of details of user activity points
Alexander Ebert [Wed, 14 Aug 2019 20:54:08 +0000 (22:54 +0200)]
Use the actual `items` value for the list of details of user activity points

Closes #3037

5 years agoDisable the access to the UserMailForm by default
Alexander Ebert [Wed, 14 Aug 2019 20:50:32 +0000 (22:50 +0200)]
Disable the access to the UserMailForm by default

Closes #3034

5 years agofixed datepicker issue if min-date contains a future date
Marcel Werk [Tue, 6 Aug 2019 10:27:20 +0000 (12:27 +0200)]
fixed datepicker issue if min-date contains a future date

5 years agoFix Travis checks for PHP 5.5
Matthias Schmidt [Wed, 31 Jul 2019 16:04:39 +0000 (18:04 +0200)]
Fix Travis checks for PHP 5.5

See d7409657b2c8bbd3fd10a304b792fa8fdca72db0

5 years agoRequire master password for UserGroupOptionForm
Matthias Schmidt [Wed, 31 Jul 2019 15:55:46 +0000 (17:55 +0200)]
Require master password for UserGroupOptionForm

Close #2996