Alexander Ebert [Mon, 1 Feb 2021 11:50:17 +0000 (12:50 +0100)]
Release 3.0.26
Alexander Ebert [Mon, 1 Feb 2021 11:47:09 +0000 (12:47 +0100)]
Missing check for accessible user groups
Alexander Ebert [Mon, 1 Feb 2021 11:38:49 +0000 (12:38 +0100)]
Notify users of the expiring support
Tim Düsterhus [Fri, 16 Oct 2020 11:57:29 +0000 (13:57 +0200)]
Ignore top-level node_modules/
Alexander Ebert [Sat, 27 Jun 2020 09:52:48 +0000 (11:52 +0200)]
Preparing the release 3.0.25
Alexander Ebert [Sat, 27 Jun 2020 09:39:05 +0000 (11:39 +0200)]
Incorrect encoding of conditions
Tim Düsterhus [Tue, 2 Jun 2020 17:02:42 +0000 (19:02 +0200)]
Merge pull request #3342 from Krymonota/remove-obsolete-user-signature-properties
Remove obsolete signature properties documentation
Niklas (Krymonota) [Sat, 30 May 2020 17:31:46 +0000 (19:31 +0200)]
Alexander Ebert [Sat, 23 May 2020 20:10:54 +0000 (22:10 +0200)]
Backport of CVE-2019-11358
See #3159
Marcel Werk [Tue, 14 Apr 2020 22:45:31 +0000 (00:45 +0200)]
Fixed incorrect title when editing menu entries
Marcel Werk [Tue, 14 Apr 2020 22:15:13 +0000 (00:15 +0200)]
Thumbnails created with imagick had wrong image size
Marcel Werk [Tue, 14 Apr 2020 16:58:43 +0000 (18:58 +0200)]
Fixed PHP 7.4 issue
Marcel Werk [Mon, 13 Apr 2020 12:15:04 +0000 (14:15 +0200)]
Too long text entries when saving media lead to an error message
Marcel Werk [Thu, 9 Apr 2020 20:01:28 +0000 (22:01 +0200)]
Fixed incorrect detection of numerics
Tim Düsterhus [Wed, 8 Apr 2020 18:19:22 +0000 (20:19 +0200)]
Merge pull request #3205 from WoltLab/revert-3203-purifier-doctype
Revert "Specify HTML.Doctype as HTML 4 Strict for HTML Purifier"
Tim Düsterhus [Wed, 8 Apr 2020 18:17:40 +0000 (20:17 +0200)]
Revert "Specify HTML.Doctype as HTML 4 Strict for HTML Purifier"
Alexander Ebert [Wed, 8 Apr 2020 14:56:44 +0000 (16:56 +0200)]
Preparing the release 3.0.24
woltlab.com [Wed, 8 Apr 2020 13:23:22 +0000 (13:23 +0000)]
Updating minified JavaScript files
Alexander Ebert [Wed, 8 Apr 2020 13:21:01 +0000 (15:21 +0200)]
Unique id for the share content dialog
Closes #3181
Alexander Ebert [Wed, 8 Apr 2020 13:15:47 +0000 (15:15 +0200)]
Merge pull request #3202 from SoftCreatR/patch-12
Set font cache control to public
Alexander Ebert [Wed, 8 Apr 2020 13:14:21 +0000 (15:14 +0200)]
Merge pull request #3203 from WoltLab/purifier-doctype
Specify HTML.Doctype as HTML 4 Strict for HTML Purifier
joshuaruesweg [Tue, 7 Apr 2020 11:31:10 +0000 (13:31 +0200)]
Validate file extensions for remote avatars in UserAvatarAction
Alexander Ebert [Wed, 8 Apr 2020 13:01:18 +0000 (15:01 +0200)]
Explicitly set the stream timeout
Tim Düsterhus [Wed, 8 Apr 2020 12:47:30 +0000 (14:47 +0200)]
Specify HTML.Doctype as HTML 4 Strict for HTML Purifier
Not setting a Doctype defaults to HTML 4 Transitional, allowing legacy
tags. HTML 4 Strict will attempt to convert them into a standards compliant
format.
HTML Purifier does not support the HTML 5 Doctype as a readily available
configuration.
Before:
string '<p><font size="6">This is some text!</font></p>' (length=47)
After:
string '<p><span style="font-size:xx-large;">This is some text!</span></p>' (length=66)
Sascha Greuel [Fri, 3 Apr 2020 23:08:45 +0000 (01:08 +0200)]
Set font cache control to public
resolves #3186
Alexander Ebert [Tue, 31 Mar 2020 15:29:01 +0000 (17:29 +0200)]
Bind the style changer to all matching buttons
Joshua Rüsweg [Tue, 31 Mar 2020 08:53:48 +0000 (10:53 +0200)]
Merge pull request #3201 from Krymonota/patch-3
Fix incorrect check in UserGroupOptionForm whether the option exists
Niklas [Sun, 29 Mar 2020 22:01:30 +0000 (00:01 +0200)]
Fix incorrect check whether the option exists
Marcel Werk [Fri, 27 Mar 2020 12:30:38 +0000 (13:30 +0100)]
User online lookup for the article page was using the article id instead of the content id
Alexander Ebert [Thu, 26 Mar 2020 12:03:08 +0000 (13:03 +0100)]
Additional safeguards against abuses of the mail form
Alexander Ebert [Tue, 24 Mar 2020 13:57:56 +0000 (14:57 +0100)]
Incorrect array access
Marcel Werk [Tue, 10 Mar 2020 10:34:22 +0000 (11:34 +0100)]
Fixed typo
Tim Düsterhus [Mon, 9 Mar 2020 21:58:52 +0000 (22:58 +0100)]
Fix PHP 7.4 compatibility of phpline.phar
Alexander Ebert [Sat, 22 Feb 2020 17:59:47 +0000 (18:59 +0100)]
Preparing the release 3.0.23
woltlab.com [Sat, 22 Feb 2020 16:29:40 +0000 (16:29 +0000)]
Updating minified JavaScript files
Alexander Ebert [Fri, 21 Feb 2020 13:04:04 +0000 (14:04 +0100)]
Safeguard against malformed domain paths caused by direct database manipulations
Matthias Schmidt [Thu, 20 Feb 2020 16:53:25 +0000 (17:53 +0100)]
Fix exception when printing stacktraces with closed resources
Alexander Ebert [Thu, 20 Feb 2020 16:50:58 +0000 (17:50 +0100)]
Removed the unsupported `pointerOffset` for `Ui/Alignment`
The position of the pointer element is determined by CSS classes that also open up the ability to add relativ positioning.
Alexander Ebert [Wed, 19 Feb 2020 17:40:34 +0000 (18:40 +0100)]
Updated the repository README
See #3134
Alexander Ebert [Wed, 19 Feb 2020 17:35:00 +0000 (18:35 +0100)]
Merge branch '2.1' into 3.0
Alexander Ebert [Wed, 19 Feb 2020 17:34:20 +0000 (18:34 +0100)]
Updated the repository README
See #3134
Marcel Werk [Thu, 13 Feb 2020 10:13:21 +0000 (11:13 +0100)]
older error logs were sometimes not deleted at the appropriate time
filectime may differ from filemtime
Tim Düsterhus [Sun, 9 Feb 2020 14:15:14 +0000 (15:15 +0100)]
Change empty phrase name exception type
WoltLab Suite 5.2 already has a check for a category mismatch
that throws an Exception of type InvalidArgumentException. Change
this one for consistency.
see
9e280cb5c1dd3e398a3096b55f6d88be4baa6923
see
e3d24f95b721e38ab205c89769c3b015aa43d75c
Tim Düsterhus [Sun, 9 Feb 2020 14:00:47 +0000 (15:00 +0100)]
Merge pull request #3158 from Krymonota/fix-veoh-privacy-policy-link-text
Fix Veoh privacy policy link text
Tim Düsterhus [Sun, 9 Feb 2020 13:53:28 +0000 (14:53 +0100)]
Merge pull request #3155 from SoftCreatR/patch-10
Improve WhatsApp Message Sharing
Niklas (Krymonota) [Sat, 8 Feb 2020 20:47:01 +0000 (21:47 +0100)]
Fix Veoh privacy policy link text
Related to
b6a668a61612802c098ceeb8070786a732607254.
Alexander Ebert [Sat, 8 Feb 2020 19:39:06 +0000 (20:39 +0100)]
Safeguard against phrases with empty names
Alexander Ebert [Sat, 8 Feb 2020 18:45:48 +0000 (19:45 +0100)]
Remove some dangling attributes
Alexander Ebert [Mon, 27 Jan 2020 15:32:16 +0000 (16:32 +0100)]
Deprecated string offset in Net_IDNA2 (PHP 7.4)
Sascha Greuel [Sat, 8 Feb 2020 13:04:22 +0000 (14:04 +0100)]
Improved WhatsApp Message Sharing
Alexander Ebert [Fri, 7 Feb 2020 11:26:01 +0000 (12:26 +0100)]
Merge pull request #3153 from SoftCreatR/patch-9
Remove Typehint
Sascha Greuel [Fri, 7 Feb 2020 01:39:29 +0000 (02:39 +0100)]
Update CLIWCF.class.php
Tim Düsterhus [Thu, 6 Feb 2020 17:14:51 +0000 (18:14 +0100)]
Merge pull request #3150 from Krymonota/fix-github-primary-email
Fix GitHub primary email not correctly being detected
Niklas (Krymonota) [Thu, 6 Feb 2020 17:01:13 +0000 (18:01 +0100)]
Fix GitHub primary email not correctly being detected
Tim Düsterhus [Thu, 6 Feb 2020 16:41:48 +0000 (17:41 +0100)]
Merge pull request #3149 from Krymonota/update-github-auth
Update GitHub authorization to use headers instead of query parameters
Niklas (Krymonota) [Thu, 6 Feb 2020 16:36:13 +0000 (17:36 +0100)]
Update GitHub authorization to use headers instead of query parameters
Using query parameters for access_token has been deprecated.
For further information, check out:
- https://community.woltlab.com/thread/281366-github-api-deprecation-notice-for-authentication-via-url-query-parameters/
- https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters
Marcel Werk [Tue, 28 Jan 2020 12:00:11 +0000 (13:00 +0100)]
fixed issue that embedded videos were not aligned to the left
Alexander Ebert [Thu, 16 Jan 2020 17:52:17 +0000 (18:52 +0100)]
Attempting to access an element that is not always present
Alexander Ebert [Thu, 16 Jan 2020 17:30:51 +0000 (18:30 +0100)]
`WCF::getAnchor()` already encodes HTML entities
Matthias Schmidt [Sat, 4 Jan 2020 12:44:22 +0000 (13:44 +0100)]
Fix handling of default box limit/sorting if not explicitly set
If a box is created via the box package installation plugin and if no limit, sort field, or sort order is given, the default value should be used instead of leaving the values `null`.
Is also fixed the problem that simply submitting the box edit form without change for a box supporting a limit but not actually having a limit causes an error message because the limit field is empty.
Marcel Werk [Fri, 3 Jan 2020 15:58:42 +0000 (16:58 +0100)]
Fixed wrong menu item title
Marcel Werk [Thu, 28 Nov 2019 07:55:02 +0000 (08:55 +0100)]
Merge pull request #3112 from Krymonota/fix-veoh-privacy-policy-link
Fix link to Veoh's privacy policy
Niklas [Wed, 27 Nov 2019 20:12:18 +0000 (21:12 +0100)]
Fix link to Veoh's privacy policy
Alexander Ebert [Tue, 26 Nov 2019 12:40:06 +0000 (13:40 +0100)]
Upgraded HTMLPurifier to 4.12.0 for compatibility with PHP 7.4
Matthias Schmidt [Sun, 24 Nov 2019 16:57:34 +0000 (17:57 +0100)]
Add missing `visibilityExceptions` definition in `menu.xsd`
Close #3104
Alexander Ebert [Fri, 22 Nov 2019 15:29:24 +0000 (16:29 +0100)]
Compatibility with PHP 7.4
Alexander Ebert [Fri, 22 Nov 2019 14:58:54 +0000 (15:58 +0100)]
Compatibility with PHP 7.4
Marcel Werk [Wed, 30 Oct 2019 14:17:41 +0000 (15:17 +0100)]
Block access-token usage for banned users
Alexander Ebert [Tue, 29 Oct 2019 11:33:50 +0000 (12:33 +0100)]
Missing reset of the language cache after copying style phrases
Marcel Werk [Fri, 27 Sep 2019 14:24:58 +0000 (16:24 +0200)]
Merge pull request #3077 from SoftCreatR/patch-7
Update breadcrumbs.tpl
Alexander Ebert [Wed, 25 Sep 2019 09:01:00 +0000 (11:01 +0200)]
Incorrect redirect after entering the master password when using multiple subdomains
Alexander Ebert [Tue, 24 Sep 2019 16:44:39 +0000 (18:44 +0200)]
Set `signatureEnableHtml` to `1` for new users
Marcel Werk [Tue, 24 Sep 2019 13:14:57 +0000 (15:14 +0200)]
Fixed typos
Sascha Greuel [Fri, 20 Sep 2019 16:54:49 +0000 (18:54 +0200)]
Update breadcrumbs.tpl
- Hide breadcrumbs that do not expose a visible label
- Added position property in breadcrumbs microdata
Matthias Schmidt [Mon, 16 Sep 2019 16:25:10 +0000 (18:25 +0200)]
Add missing dialog rebuild after window resizing
Close #3072
Marcel Werk [Sun, 15 Sep 2019 16:35:57 +0000 (18:35 +0200)]
Incorrect usage of $this->errorType
Matthias Schmidt [Wed, 11 Sep 2019 16:17:46 +0000 (18:17 +0200)]
Remove birthday and location scope from FacebookAuth
Close #2912
Matthias Schmidt [Tue, 10 Sep 2019 15:27:04 +0000 (17:27 +0200)]
Fix typo in German language item
Matthias Schmidt [Sun, 8 Sep 2019 14:58:38 +0000 (16:58 +0200)]
Add missing import language items
Matthias Schmidt [Sun, 8 Sep 2019 14:36:28 +0000 (16:36 +0200)]
Fix label/description of style selection in user settings
Matthias Schmidt [Sun, 8 Sep 2019 13:57:48 +0000 (15:57 +0200)]
Fix German name of capital of Oman in timezone language item
Matthias Schmidt [Sun, 8 Sep 2019 13:34:08 +0000 (15:34 +0200)]
Fix double clicking on inline editor trigger
See
f5885eb2e46530678df20cbca2603ff202b4231a
Alexander Ebert [Sun, 1 Sep 2019 13:49:37 +0000 (15:49 +0200)]
Preparing the release 3.0.22 pl 2
Alexander Ebert [Sun, 1 Sep 2019 13:48:47 +0000 (15:48 +0200)]
Incorrect check for permitted inline styles
Alexander Ebert [Sun, 1 Sep 2019 10:49:07 +0000 (12:49 +0200)]
Preparing the release 3.0.22 pl 1
Alexander Ebert [Sun, 1 Sep 2019 10:25:52 +0000 (12:25 +0200)]
PHP 5.5 compatibility
`ARRAY_FILTER_USE_KEY` is available since PHP 5.6
Alexander Ebert [Fri, 30 Aug 2019 11:06:30 +0000 (13:06 +0200)]
Preparing the release 3.0.22
woltlab.com [Thu, 29 Aug 2019 09:40:02 +0000 (09:40 +0000)]
Updating minified JavaScript files
Alexander Ebert [Thu, 29 Aug 2019 09:14:53 +0000 (11:14 +0200)]
The swiss flag is a square, not a rectangle
Alexander Ebert [Wed, 28 Aug 2019 17:55:14 +0000 (19:55 +0200)]
Typos
Alexander Ebert [Wed, 28 Aug 2019 17:51:44 +0000 (19:51 +0200)]
Upgrade notice for WSC 3.0
Joshua Rüsweg [Fri, 23 Aug 2019 12:37:42 +0000 (14:37 +0200)]
Merge branch 'SoftCreatR-patch-6' into 3.0
Sascha Greuel [Thu, 22 Aug 2019 15:00:54 +0000 (17:00 +0200)]
Add user agent detection for Firefox on iOS
Alexander Ebert [Mon, 19 Aug 2019 12:17:07 +0000 (14:17 +0200)]
Reject disallowed CSS styles
Fixes #3041
Matthias Schmidt [Sat, 17 Aug 2019 11:15:43 +0000 (13:15 +0200)]
Fix wording in English language item
Alexander Ebert [Wed, 14 Aug 2019 20:54:08 +0000 (22:54 +0200)]
Use the actual `items` value for the list of details of user activity points
Closes #3037
Alexander Ebert [Wed, 14 Aug 2019 20:50:32 +0000 (22:50 +0200)]
Disable the access to the UserMailForm by default
Closes #3034
Marcel Werk [Tue, 6 Aug 2019 10:27:20 +0000 (12:27 +0200)]
fixed datepicker issue if min-date contains a future date
Matthias Schmidt [Wed, 31 Jul 2019 16:04:39 +0000 (18:04 +0200)]
Matthias Schmidt [Wed, 31 Jul 2019 15:55:46 +0000 (17:55 +0200)]
Require master password for UserGroupOptionForm
Close #2996