jgen
c379420a1f
#597 : Fix for XSS issue in chatbox extension.
2017-03-08 01:14:11 -08:00
Shish
e43b1b3aed
Merge branch 'tag-tables' of git://github.com/im-mi/shimmie2 into im-mi-tag-tables
2016-10-10 14:19:57 +01:00
Shish
4b9278d09b
Merge branch 'develop' of https://github.com/shish/shimmie2 into develop
2016-10-09 22:33:25 +01:00
Shish
623d34f20b
Merge pull request #589 from im-mi/searchable-random-list
...
Searchable random list
2016-10-09 22:26:28 +01:00
Shish
7548c66a0b
Merge pull request #578 from im-mi/enhance-zoom
...
Enhance zoom
2016-10-09 22:21:39 +01:00
im-mi
d5fd6f6821
url_escape tag info link tag
2016-09-28 10:26:13 -04:00
Shish
3daa83223e
Merge pull request #588 from im-mi/arrow-key-nav-ignore-modifiers
...
Ignore arrow key navigation when modifier keys held
2016-09-26 15:22:06 -05:00
Shish
af0aa98649
Merge pull request #586 from im-mi/image-info-tweaks
...
Image info tweaks
2016-09-26 15:21:46 -05:00
im-mi
8805f0dd18
Remove get_ico page
...
It's no longer needed because ICO now uses Image->get_image_link()
2016-09-26 11:18:06 -04:00
im-mi
e6dd1b492c
Sanitize ratings
2016-09-25 15:26:36 -04:00
im-mi
d4fda00dd9
Check for existence of POST var tag_edit__owner before using it
2016-09-25 15:26:36 -04:00
im-mi
05da5d0b4f
Use Image->get_image_link() on ICO files
2016-09-25 15:26:36 -04:00
im-mi
1dd0dfc591
Read ICO header with proper sign
...
Fixes width/height being read incorrectly when >= 128
2016-09-25 10:17:46 -04:00
Shish
9c062f3385
case-insensitive wiki pages
2016-09-24 16:17:14 +01:00
im-mi
f763fc1356
React appropriately when there are no random list search results
2016-09-23 12:31:02 -04:00
im-mi
3bebe77add
Made the random list searchable
2016-09-23 12:21:40 -04:00
im-mi
891e52f4b9
Ignore arrow key navigation when modifier keys held
2016-09-23 12:09:40 -04:00
im-mi
a49c5745b0
Use html_escape instead of htmlspecialchars
2016-09-14 18:08:12 -04:00
im-mi
c1083bbea1
Fixed comment-delete code-injection vulnerability
2016-09-14 17:42:32 -04:00
im-mi
3e52e332de
Only show image rater if user can rate
2016-09-13 02:10:48 -04:00
im-mi
4dcee0eede
Removed trailing period from "Parent: None." for consistency
2016-09-11 23:42:34 -04:00
im-mi
001a1176cc
Show image rating in image info box even when not logged in
2016-09-11 23:42:34 -04:00
im-mi
e110b558b8
Hide the rating editor outside of edit mode
2016-09-11 23:42:34 -04:00
Shish
7efff25dcc
Merge pull request #585 from im-mi/pool-placeholder-text
...
Don't use javascript for pool search placeholder
2016-09-07 23:49:19 +01:00
im-mi
e8c6f655b0
Don't use javascript for pool search placeholder
2016-09-07 08:43:34 -04:00
Shish
d36338d4c4
Merge pull request #582 from im-mi/minor-html-fixes
...
Minor html fixes
2016-09-07 10:31:25 +01:00
im-mi
58096e10c8
Fix tag list clipboard spacing
...
This brings back the original behavior of having spaces between the columns when the tag list gets copied to the clipboard (tested in Chrome, Edge, and Firefox).
One caveat: Edge now adds multiple spaces.
2016-09-06 22:10:09 -04:00
im-mi
73ff0e669d
Use generic NavBlock instead of "Index" block on pool pages
2016-09-06 09:25:08 -04:00
im-mi
5919112477
Use tables for tag lists
2016-09-06 06:08:33 -04:00
im-mi
e5cfea028a
Fixed mass source set's broken dialog
2016-09-03 14:43:56 -04:00
im-mi
91fea63319
Removed stray end tag
2016-09-03 14:26:24 -04:00
im-mi
ac53fe52de
Removed obsolete language specification from <script>
2016-09-03 14:26:24 -04:00
im-mi
10d47409ad
Added doctype to home page
2016-09-03 14:26:24 -04:00
im-mi
d39b084537
Properly end attribute list of tag on upload form
2016-09-03 14:26:24 -04:00
im-mi
d9903a969d
Added zoom support to svg
2016-09-03 05:36:15 -04:00
im-mi
17f71094f2
Use the size of the outermost svg element
...
... in case there are nested svg elements.
2016-09-03 05:36:14 -04:00
Shish
3051334d8f
be explicit that variables are variables
2016-09-02 16:19:02 +01:00
Shish
e96a5e1109
Merge pull request #579 from im-mi/fix-ico-256-256
...
Fix .ico when size is 256 x 256
2016-09-02 15:50:46 +01:00
im-mi
15ffdff387
Fix .ico when size is 256 x 256
2016-09-02 05:33:16 -04:00
im-mi
d2540a9619
Use CSS for mass tagger button styling
2016-09-02 05:30:00 -04:00
im-mi
49d6fa99da
Clear the mass tagger's selection on load
...
.. in case it was autocompleted by the browser.
2016-09-02 05:29:59 -04:00
im-mi
35d2f8682c
Don't save zoom mode cookie upon window resize
2016-09-02 01:14:53 -04:00
im-mi
84dbc3abff
Re-apply zoom upon window resize
2016-09-02 01:12:35 -04:00
im-mi
f26fc5925b
Added zoom support to ico
2016-09-02 01:12:34 -04:00
im-mi
eeb0c2b974
Only allow click-to-zoom on img
2016-09-02 01:12:33 -04:00
im-mi
b554e7505b
Added zoom support to webm
2016-09-02 00:38:31 -04:00
Shish
29bdc5da22
Merge pull request #576 from im-mi/fix-pool-description-code-injection
...
Update pool description formatter (code injection vulnerability)
2016-09-01 11:18:37 +01:00
im-mi
10e8fc50d3
Fix "starts-with" header in tag list when escaping required
...
This fixes the "starts-with" headers* on the tags/alphabetic page. Before, the headers would be wrong if they started with an escaped character.
This also escapes the resulting header so that it no longer generates invalid HTML in such cases.
* Note that these headers are only visible when paged tag lists is disabled.
2016-09-01 03:33:17 -04:00
im-mi
bb64d12d9d
Use TextFormattingEvent instead of raw BBCode formatter
2016-09-01 00:35:52 -04:00
Shish
bcef3fbc8f
have tag sanitisation process ignore tags which are too long, fixes #565
2016-08-29 09:21:23 +01:00
im-mi
1bab0051f1
html_escape tag info link
2016-08-29 09:11:13 +01:00
im-mi
84b4ac3893
html_escape tag info link
2016-08-29 01:19:11 -04:00
Shish
a68407e12e
Merge pull request #573 from im-mi/patch-2
...
Fix log info section name
2016-08-20 14:57:35 +01:00
Shish
98254ef5bd
Merge pull request #572 from im-mi/video-playback-options
...
Added video playback options for autoplay and loop
2016-08-20 14:57:16 +01:00
im-mi
980e3b686b
Fix log info section name
2016-08-19 21:52:48 -04:00
im-mi
cce24f9e80
Added video playback options for autoplay and loop
2016-08-19 21:25:58 -04:00
im-mi
8fe9212882
Fixed assertion failure upon upload due to incorrect type check
2016-08-19 15:55:18 -04:00
im-mi
85a3cc0a7e
Fall back to file extension from path
2016-08-16 11:34:01 -04:00
im-mi
3323a50ea5
Made a few parts less site-specific
2016-08-16 11:32:34 -04:00
im-mi
adf723ad23
Fixed bookmarklet on Danbooru2
2016-08-16 11:30:34 -04:00
im-mi
91d609a4c6
Make back button go to page bookmarklet was executed on
2016-08-16 11:29:26 -04:00
im-mi
b10144492a
Added supported video file extensions to bookmarklet
2016-08-16 11:28:16 -04:00
im-mi
9ba6e3f7db
Remove trailing variables from image address
2016-08-16 11:27:22 -04:00
im-mi
8f974fba73
Fixed uploading scaled images from Gelbooru when logged in
2016-08-16 11:26:32 -04:00
im-mi
b24977e110
Fixed tag corruption bug
...
If there was no newline at the end of the input, then the last tag would get corrupted.
2016-08-16 11:25:04 -04:00
Shish
89dffd569a
and mass tagger
2016-07-30 23:41:42 +01:00
Shish
26b2cd5c16
derp
2016-07-30 23:06:42 +01:00
Shish
bed04a1230
assert that metadata['tags'] is an array
2016-07-30 23:02:14 +01:00
Shish
ffce1a4683
more hinting
2016-07-30 22:54:42 +01:00
Shish
b81e8a2db8
also explode tags on transload input
2016-07-30 22:45:44 +01:00
Shish
7be951b271
Convert tags from user-supplied string to array once, on input
...
This results in a fuckton of refactoring and code cancelling out
other code -- we no longer have a whole bunch of places trying
to support string params and array params, and doing their own
esaping and unescaping, never being quite sure if the data they've
been passed is escaped or not.
Also adds a bunch of type hinting, since we can now know what
data we're dealing with better.
2016-07-30 22:11:49 +01:00
Shish
bc3e482247
more image report display options
2016-07-30 15:04:34 +01:00
Shish
8c8106c6a9
fix index var access
2016-07-03 11:48:08 +01:00
Shish
bb35421b05
Load AutoComplete before Home, so that the headers show up
2016-06-26 18:57:53 +01:00
Shish
6febdec7b5
more explicit variable types
2016-06-19 23:05:57 +01:00
Shish
f8b7909426
ExtensionInfo isn't private
2016-06-19 22:15:46 +01:00
Shish
333c74ba35
typo
2016-06-19 17:48:10 +01:00
Shish
dc10a18086
lots of minor doc tweaks, type hints, etc
2016-06-19 17:41:40 +01:00
Shish
edd3e49a2f
mark wildcard test incomplete on pgsql / sqlite
2016-06-19 14:06:26 +01:00
Daku
a8d9f8ce5b
make sure prev/next links aren't clipped outside the box
2016-06-19 11:56:41 +01:00
Daku
f973fcc9fa
basic autocomplete support for metatags
2016-06-19 10:07:56 +01:00
Daku
03240220d4
make sure to get proper tag value + use selected tag if possible
2016-06-19 09:49:55 +01:00
Daku
862a84677f
add docs column, showing what extensions have documentation
...
previously it made every ext name into a link to /ext_doc, regardless if it had docs or not
2016-06-19 05:05:12 +01:00
Daku
c0601640bf
only show link if extension actually has documentation
2016-06-19 05:04:59 +01:00
Daku
5ae10473e3
closing tag is unneeded
2016-06-19 05:01:13 +01:00
Daku
6486a4757f
js scrutinizer fixes
2016-06-19 05:00:09 +01:00
Daku
b75638cace
get_last_insert_id requires param for pgsql support
2016-06-19 04:57:14 +01:00
Shish
4577ff70ef
more linty bits
2016-06-18 19:26:56 +01:00
Shish
cfd3a9d248
lint fixes
2016-06-18 19:00:56 +01:00
Shish
24973ada17
don't run linter on ext/*/lib/*
2016-06-18 19:00:53 +01:00
Shish
0fd96fcdae
remove incomplete and unmaintained bookmarks ext, see #532
2016-06-18 18:26:11 +01:00
Shish
06ee5347c7
https support for gravatars
2016-06-18 15:56:24 +01:00
Shish
0ff6da6d3c
Merge #555
2016-06-18 15:16:47 +01:00
Daku
b5d56214cd
fix case-insensitive autocomplete on postgres
2016-06-18 14:45:21 +01:00
Shish
20d0edb332
Merge pull request #556 from shish/html-headers
...
fix and use get_all_html_headers()
2016-06-18 14:05:44 +01:00
Daku
5d5b1d7059
this should be set to $res
2016-06-18 14:03:37 +01:00
Daku
56e5348470
autocomplete caching
...
see 7dce8da850
2016-06-18 13:20:07 +01:00
Daku
2546621c59
sort autocomplete by score + show score
2016-06-18 13:20:04 +01:00
Shish
cfc1268354
update non-layout.class.php uses of html_headers too
2016-06-18 12:49:46 +01:00
Daku
4bd9ee1c7f
fix autocomplete search not looking correct on home page
2016-06-18 12:25:39 +01:00
Daku
6b6e4f04b6
html_headers should be properly sorted
2016-06-18 12:25:22 +01:00
Daku
2a747c8f2b
move home css to style.css
2016-06-18 12:10:37 +01:00
Daku
559a4c7e40
move autocomplete js to script.js so it's cached
2016-06-18 11:58:41 +01:00
Daku
c59995c807
search button can sometimes be on same line as input
2016-06-18 11:47:04 +01:00
Daku
b6e181efb1
excess whitespace
2016-06-18 11:24:18 +01:00
Daku
a9e3ef26be
space should always create new tag
2016-06-18 08:06:59 +01:00
Daku
1db62901be
disallow spaces in tags
2016-06-18 07:41:59 +01:00
Daku
78c2731a12
move notes libs to ext folder, fix a few bugs
...
it would be nice to take this out of beta, but it still has major issues with image resizing / unable to edit or delete notes
2016-06-18 06:28:33 +01:00
Daku
9e7c318df0
notes ext code cleanup
...
initial prep to fix & take the ext out of beta
2016-06-18 06:27:44 +01:00
Daku
b9893cbbda
$_POST["tags"] isn't always set
2016-06-18 06:27:41 +01:00
Daku
caed53de6a
jQuery.cookie is deprecated so use js-cookie instead (+ composer), some js tweaking too
...
Conflicts:
ext/blotter/script.js
ext/handle_pixel/script.js
ext/index/script.js
ext/pools/script.js
lib/shimmie.js
2016-06-18 06:27:32 +01:00
Daku
951323abcf
default handle_video thumbgen to ffmpeg if ffmpeg in path & is_executable
2016-06-18 06:20:52 +01:00
Daku
b0daab8766
move from Jaris > MediaElement for <video> fallback + use composer
...
also made it so the video element is no longer bigger than parent div
2016-06-18 06:20:49 +01:00
Daku
ba6ab8fb16
move S3.lib to ext folder
...
toggleable exts should really keep any libs they use in their own dir
2016-06-18 06:17:15 +01:00
Daku
d5a58916f7
get recaptcha lib with composer + fixes #498
2016-06-18 06:17:07 +01:00
Daku
57fb4e0a34
grab tablesorter lib with composer
2016-06-18 06:17:04 +01:00
Daku
516488a625
load akismet via composer
...
note: we should probably be using a more recent library for this, but there doesn't seem to be any general ones..
2016-06-18 06:16:31 +01:00
Daku
f17812c64b
working autocomplete
2016-06-18 06:16:21 +01:00
Daku
1bfec55690
tag lib for autocomplete
...
--not added autocomplete yet
2016-06-18 06:16:17 +01:00
Daku
a7021e190e
Merge pull request #554 from shish/js-cookie-update
...
migrate to a non-deprecated (and dependency-free) cookie library
2016-06-18 03:34:12 +01:00
Shish
7dce8da850
caching for autocomplete
2016-06-18 01:19:34 +01:00
Shish
79648b04d2
Merge branch 'develop' of https://github.com/shish/shimmie2 into develop
2016-06-18 01:18:29 +01:00
Shish
7bc9a73357
migrate to a non-deprecated (and dependency-free) cookie library
2016-06-18 00:00:02 +01:00
Shish
dda634b068
Merge branch 'develop' of https://github.com/shish/shimmie2 into develop
2016-06-17 23:42:20 +01:00
Shish
76c2815b2b
unit test bettering
2016-06-17 23:42:12 +01:00
Shish
57fa354842
fnmatch has a string length limit :|
2016-06-17 22:51:30 +01:00
Shish
190d8bd7d7
log api stats seperately
2016-06-17 22:48:28 +01:00
HungryFeline
94ba42fc70
Set ffmpeg's "overwrite output files" switch (-y)
...
Regenerate thumbnail doesn't work since the output file already exists and ffmpeg expects the user to decide wether to replace the file or not. With the -y switch set, ffmpeg does so without asking.
https://ffmpeg.org/ffmpeg.html#Main-options
2016-06-16 16:40:51 +02:00
Shish
3d05c2896a
expand test cases
2016-06-07 01:56:05 +01:00
Shish
c41c9d680f
search tests
2016-06-06 22:42:40 +01:00
Shish
43eed32958
Merge pull request #551 from shish/contact-link
...
Have contact_link support http: and mailto:
2016-06-06 12:37:27 +01:00
Shish
aeeaabb22e
allow both http: and mailto: contact links
2016-06-06 12:12:25 +01:00
Shish
8326ef631f
Merge pull request #546 from DakuTree/fix-relationships
...
Fix relationships ext checking for TRUE/FALSE instead of Y/N
2016-05-22 18:11:57 +01:00
Daku
44876a58d9
we should be using bool_escape instead...
2016-05-22 16:17:31 +01:00
Shish
3e57f725d3
update ban message
2016-05-22 16:12:43 +01:00
Daku
a3296e18ae
create index for has_children
2016-05-11 14:49:22 +01:00
Daku
32dbdccd00
has_children uses Y/N, not TRUE/FALSE
2016-05-10 21:15:50 +01:00
Matthew Barbour
898bcfae94
Fixes for bulk add results
2016-03-21 18:14:48 -05:00
Daku
9235025165
fix integrity constraint violations when mass-editting an image that already contains the new tag
2016-01-24 09:56:47 +00:00
Daku
6d1c7c414b
mysql < 5.6 has terrible subquery optimization, using EXISTS / JOIN fixes this
2015-12-04 11:38:44 +00:00
Shish
ac9dc1b8d8
Merge pull request #523 from DakuTree/patch-tagevent
...
Move tag sanitization, alias resolving & tag parsing from set_tags > TagSetEvent
2015-10-26 19:22:08 +00:00
William Crandell
7b8d8c2a2d
chatbox bugfix
...
might cause new bugs checking into this now
2015-10-26 11:22:57 -04:00
William Crandell
b7114a142e
Hotfix for better block id character filtering
2015-10-26 09:20:09 -04:00
Daniel Oaks
144ac6bd89
Fix the notes extension to work properly on dbs other than MySQL
2015-10-15 19:31:39 +10:00
Shish
3aed2abec7
don't complain if one image in a bulk revert doesn't exist
2015-10-12 19:17:16 +01:00
Daku
de761c11d7
speed: don't check tag for metatag if doesn't contain : or =
2015-10-08 19:20:40 +01:00
Daku
43d0a297b8
move metatag parsing to after set_tags is sent, rather than before
2015-10-08 18:58:52 +01:00
Daku
6ff80ab2c8
move tag sanitization, alias checking & tag parsing to TagSetEvent
2015-10-08 18:22:20 +01:00
Daku
23b9d7d8da
improved metatag regex
2015-10-08 18:03:45 +01:00
Shish
d30665d274
more deduping
2015-09-27 21:09:27 +01:00
Shish
1ac88e8923
more comments
2015-09-27 12:38:48 +01:00
Shish
80f5a016c2
or else
2015-09-27 11:01:59 +01:00
Shish
cdcd762a52
more comments
2015-09-27 02:17:44 +01:00
Shish
78c44c7067
more tidying shimmie api and user page
2015-09-27 02:00:02 +01:00
Shish
793bc3614b
loooooooads of artists refactoring and tidying
2015-09-27 01:03:58 +01:00
Shish
b9a0278f6e
clean up danbooru api code
2015-09-26 22:50:05 +01:00
Shish
ff13e58f8f
clamp to a valid value
2015-09-26 20:03:30 +01:00
Shish
e482f97955
more clamping
2015-09-26 19:53:15 +01:00
Shish
5a8df90fd9
splitting up huge functions in ext/comment
2015-09-26 19:14:11 +01:00
Shish
8c1e3bc92a
mark tests as public
2015-09-26 11:17:13 +01:00
Shish
c54e336695
mark tests as incomplete rather than commenting them out
2015-09-24 23:16:38 +01:00
Shish
c337abe280
skip tests for extensions who don't support the current db
2015-09-21 10:05:32 +01:00
Shish
98d71f527d
test fix
2015-09-20 23:24:26 +01:00
Shish
82ab2a8305
faster tests
2015-09-20 23:10:33 +01:00
Shish
fc2bbefcb9
test all the things
2015-09-20 22:40:04 +01:00
Shish
13dfb8861f
more tests
2015-09-20 21:20:28 +01:00
Shish
2600ef042b
setup tests
2015-09-20 20:44:34 +01:00
Shish
7bfc959547
upload tests
2015-09-20 20:28:27 +01:00
Shish
ff8da5be8e
word filter tests
2015-09-20 20:18:55 +01:00
Shish
90cd823ece
fix liveness testing, and comments tests
2015-09-20 20:05:06 +01:00
Shish
0617079afb
test
2015-09-20 20:04:16 +01:00
Shish
83a1336b76
more test
2015-09-20 20:04:16 +01:00
Shish
ec484c1144
more phpunit-ing
2015-09-20 20:04:13 +01:00
Shish
2d622cf908
put test svg in a file
2015-09-20 20:03:29 +01:00
Shish
9af5995dcc
PHPUnit proof of concept
2015-09-20 20:03:29 +01:00
Shish
e3959e5ec8
remove simpletest
2015-09-20 20:03:29 +01:00
Shish
ba3a61052f
timeout on varnish purger
2015-09-20 20:02:36 +01:00
Shish
ffc636515f
remove dead code
2015-09-20 20:02:34 +01:00
Shish
147b47a78c
add comment style
2015-09-20 20:02:30 +01:00
Shish
1fc5fb755a
handle null in tag_editcloud
2015-09-20 13:20:26 +01:00
Shish
35a4f385b3
phpstorm tidying
2015-09-12 11:43:28 +01:00
Daku
a55306f4be
don't throw no handler error if empty directory / directory doesn't exist
2015-08-12 06:58:44 +01:00
Daku
ebfcf9389e
using links as block title doesn't play nice with .js, so specify ID
...
blocks use title as ID, which will break if the title is a link
2015-08-10 00:45:06 +01:00
Shish
9ff2ef390d
make handle_404 handle blotter
2015-08-09 13:40:34 +01:00
Shish
e415bd3fca
more database support
2015-08-09 12:20:43 +01:00
Shish
0ef8db8371
not all requests have remote_addr
2015-08-09 12:20:37 +01:00
Shish
a70ca33f96
fix typo
2015-08-08 23:04:36 +01:00
Shish
df56213ec3
allow exts to mark themselves as not supporting sqlite
2015-08-08 22:23:27 +01:00
Shish
65289ed9c8
skip to latest db
2015-08-08 22:18:54 +01:00
Shish
45d090054b
set_default_bool should take a bool, always
2015-08-08 22:18:25 +01:00
Shish
fa2f17817e
scrutinizing
2015-08-04 13:53:58 +01:00
Shish
7762b2c703
do InitExtEvent in bootstrap, before user exists
2015-08-03 15:49:38 +01:00
Shish
83435e3266
set cookies on Page object
2015-08-03 15:49:36 +01:00
Shish
eb246ef1ee
count_execs is legacy code from adodb anyway... remove another global
2015-08-02 21:31:55 +01:00
Shish
ec5d9bb6f4
more sensible naming
2015-08-02 21:23:45 +01:00
Shish
18490ed488
more global removal
2015-08-02 20:39:41 +01:00
Shish
c17250b6b9
there is no more purge unused tags
2015-08-02 19:41:06 +01:00
Shish
90e86b99ae
page->set_code() to set HTTP status
2015-08-02 19:40:57 +01:00
Shish
e5e7f891e2
scrutinizer suggestions
2015-07-21 01:20:53 +01:00
Shish
7064e9ffcd
merge
2015-07-20 23:49:33 +01:00