700f8a0ea7
made all php unit tests pass again
2019-05-10 07:55:39 +02:00
59569bf9fc
working on JsonApi tests
2019-05-08 22:11:21 +02:00
76dc01b959
finishing changes in models, removing last md5 test cases, tightening up allowed POST data
2019-05-06 22:15:21 +02:00
06b90ff48e
sticking to arrays to reduce conversions, inversion of control to simplify logic
2019-05-05 21:03:58 +02:00
b7a03cfdb9
enforcing parameter types, avoiding unnecessary metadata in version 2 pastes
2019-05-05 18:22:57 +02:00
6e15903f1e
make DatabaseTest work pass again, support reading & writing version 1 & 2 pastes & comments
2019-05-05 14:36:47 +02:00
bbdcb3fb0f
remove duplicate code
2019-05-05 08:53:40 +02:00
3338bd792e
implement version 2 format validation, changing ID checksum algorithm, resolves #49
2019-05-03 23:03:57 +02:00
e418b083e8
Merge branch 'master' into webcrypto
2019-01-22 20:11:42 +01:00
34c64acb75
Apply StyleCi recommendation
2019-01-22 00:14:31 +01:00
7cb942aca3
Make PHP paste ID function more robust
2019-01-21 23:19:41 +01:00
541fff199a
Put PHP paste request into own function
2019-01-21 23:06:25 +01:00
79a858f176
extracting only the 16 hex characters of the query string as paste ID, addressing #396
2019-01-20 12:20:37 +01:00
cde96d8f24
fixing bug in jsonld processing with certain URL paths
2018-12-17 19:42:26 +01:00
9ce41022cf
correcting namespaces
2018-11-19 13:09:34 +01:00
b5ebc4a3d7
incrementing version
2018-08-11 19:29:58 +02:00
a5e8eeaaf9
StyleCI: Obey the alphabet #342
2018-07-29 16:15:52 +02:00
4a35428499
cleanup of PurgeLimiter #342
2018-07-29 16:05:57 +02:00
3470dcd9a8
more compact ServerSalt #342
2018-07-29 15:50:36 +02:00
5db3412b69
cleanup of TrafficLimiter #342
2018-07-29 15:43:28 +02:00
f9c8441edb
renaming controller #342
2018-07-29 15:17:35 +02:00
720897b902
correct CSP to allow password prompt
2018-07-21 06:45:09 +00:00
cfe60db8fd
increment version number
2018-07-01 13:11:32 +02:00
6225a8ef16
updating translators in credits
2018-06-11 20:29:47 +02:00
9a0318517b
correct PHPdoc, fixes #264
2018-05-27 15:18:25 +02:00
d6f203dc4c
Removed option to hide clone button on expiring pastes, since this requires reading the paste for rendering the template, which leaks information on the pastes state
2018-05-27 15:05:31 +02:00
05c1776ada
ensure ALL read errors are only exposed in the JSON API to avoid information leakage (i.e. beviour for deleted vs expired pastes), updated test cases & removed duplicate test
2018-05-27 14:36:30 +02:00
caf87cc6f1
Merge branch 'master' into burnafterreading-fix, regression in expired paste error
2018-04-30 20:01:38 +02:00
2c82279292
Merge branch 'attachment-handling' of https://github.com/thororm/PrivateBin into thororm-attachment-handling
...
apart from resolving conflicts:
- added missing docs
- inlined functions that were used in only one location
- updated unit test to support all previews
- fixed a regression that displayed the preview even when there was no preview and too early
2018-04-29 11:57:03 +02:00
9c132cd839
Disallow form-action in CSP to limit outgoing connections
...
See https://github.com/PrivateBin/PrivateBin/issues/272
2018-01-06 18:06:06 +01:00
3bca559826
moving access to into Request class
2018-01-06 10:27:58 +01:00
414ab0eb71
Add config and basic page template support
...
* load JS file asyncronously (just HTML5 async attribut)
* add basic support for page template, where it generates the code inside
of a simple div at the top
* added option to turn off QR code support
2017-12-25 14:59:15 +01:00
86ecdb1155
fixing post increment
2017-11-13 22:15:14 +01:00
502e96c129
StyleCI recommendations
2017-10-08 19:23:33 +02:00
a5d5f6066a
refactoring as recommended by Scrutinizer
2017-10-08 19:16:09 +02:00
9f26894b2e
PHP < 5.6 compatibility and StyleCI recommendations
2017-10-08 17:10:51 +02:00
4f06feef81
implemented JSON file conversion on purge and storage in PHP files for data leak protection
2017-10-08 16:59:31 +02:00
4ded4b7f8c
adding correct HTTP error to response, as per @rugk's recommentation
2017-10-08 16:43:46 +02:00
dbfb1e83ba
removing dead code
2017-10-08 16:43:10 +02:00
62f0b95377
making StyleCI happy
2017-10-08 16:42:43 +02:00
6e8eafe129
implemented INI cenversion functionality
2017-10-08 16:42:11 +02:00
6fa2bfe30e
updated documentation, incremented version
2017-10-08 16:40:51 +02:00
f037967820
changes the file extension to php and adds a small one-liner to stop PHP from presenting the file to any website visitor
...
Signed-off-by: El RIDO <elrido@gmx.net>
2017-10-08 16:25:48 +02:00
23f5dfbff8
Merge remote-tracking branch 'remotes/thororm/master' into attachment-handling
...
# Conflicts:
# tpl/bootstrap.php
# tpl/page.php
2017-05-13 19:48:25 +02:00
283873d89a
Fix stupid copy&paste error
2017-04-13 10:52:48 +02:00
9b6748c54d
Adjust requested changes
2017-04-13 10:46:09 +02:00
f54036976a
added instantburnafterreading option to address #174
2017-04-11 17:23:26 +02:00
183ebe518b
Force JSON request for getting paste data
2017-04-11 16:34:13 +02:00
096f07f86e
Merge branch 'master' into attachment-handling
...
# Conflicts:
# js/privatebin.js
# tpl/bootstrap.php
# tpl/page.php
2017-04-02 13:30:52 +02:00
bbcc3e167b
implementing recommendations of scrutinizer
2017-03-25 00:58:59 +01:00
El RIDO