a28aebae7d
make key size and authentication tag size explicit instead of trusting on defaults
2016-08-09 13:16:15 +02:00
97ed1a5cf4
found a better JS html entity escape function and use it to fix regression introduced by the preview feature, resolves #43
2016-07-19 16:12:11 +02:00
002046cc62
some minor cleanups
2016-07-19 14:44:17 +02:00
bbad92a161
Minor JS code improvments
2016-07-19 14:13:52 +02:00
38ab755733
Replace HTTP links with HTTPS
...
Using this regexp: https://regex101.com/r/rZ2dE2/1
2016-07-19 13:56:52 +02:00
6b20836461
upgrading SJCL library to 1.0.4: https://github.com/bitwiseshiftleft/sjcl/releases/tag/1.0.4
2016-07-18 16:54:33 +02:00
615777ffd9
clarifying some code
2016-07-11 16:09:38 +02:00
df5150c7f2
found another
2016-07-11 15:55:23 +02:00
90a26d8fcb
removing some code smells, found in the various code checker tools
2016-07-11 15:47:42 +02:00
3b3b5277eb
refactoring to improve code quality
2016-07-11 14:15:20 +02:00
79509ad48a
renaming the fork to PrivateBin
2016-07-11 11:58:15 +02:00
6a663ba07f
adding preview feature, resolves #4
2016-07-11 11:09:41 +02:00
ad9fdf8892
switching from CCM to GCM, resolves #27
2016-07-09 21:11:39 +02:00
8e11f0873c
small code style improvements, trying to get phpunit with hhvm to work in travis
2016-07-05 17:23:25 +02:00
1625aac798
updating showdown library, adding support for tables and strikethrough,
...
fixing issue with double escaping HTML entities that was causing
blockquotes to be ignored, fixes #75
2016-05-22 16:18:57 +02:00
3ec7002f63
Don't strip space characters of beginning or end of password, while
...
still ignoring passwords consisting of just spaces, resolves #69
2016-04-26 20:41:15 +02:00
4918bef4dc
Although there usually are no plurals in chinese, there's an exception
...
for words related to persons, when not preceeded by a numeric word.
Sources:
- http://localization-guide.readthedocs.org/en/latest/l10n/pluralforms.html#f3
- https://answers.yahoo.com/question/index?qid=20110606153553AAAW5zX
2016-04-26 20:21:30 +02:00
4565b72a7d
Adding Chinese Translation ( #73 )
2016-04-26 20:08:35 +02:00
a4ebdbc606
re-introducing (optional) URL shortener support, resolves #58
2016-01-31 09:56:06 +01:00
a459c6d836
translated to slowene
...
Conflicts:
js/zerobin.js
2015-12-26 22:14:10 +01:00
ce107c928e
supporting disabled password option in the JS part, fixes #55
2015-11-16 19:58:45 +01:00
24a4328c55
incrementing version, updating changelog, added missing phpdoc comments
2015-11-09 21:39:42 +01:00
740d62005e
small CSS improvement, partially resolves #48
2015-10-19 19:39:45 +02:00
40019624fd
wrap long lines in plaintext format but force horizontal scroll on
...
syntaxhighlighting, resolves #45
2015-10-18 22:16:15 +02:00
14d08ec56d
working on JSON-LD validity, added CORS headers preparing external API
...
call support
2015-10-18 14:37:58 +02:00
22d0b1ec22
updating comment format to match defined JSON-LD API context
2015-10-18 11:38:48 +02:00
f21567133c
changing paste read output for API refactoring
2015-10-18 11:08:28 +02:00
87b41a0c3d
implemented tab input support from #40 , thank you azlux!
2015-10-15 22:06:01 +02:00
2e3bacb699
fixing deletion issue in request refactoring, starting work on API read
...
refactoring
2015-10-15 22:04:57 +02:00
1d6cfb7f3b
refactoring delete API, added external JSON-LD context
2015-10-11 21:22:00 +02:00
7ec94e0db5
implementing request refactoring, beginning JS changes for JSON API, but
...
discovered that DELETE and PUT are not available on all webservers by
default
2015-09-27 20:34:39 +02:00
9f68658106
incrementing version number, updating changelog
2015-09-21 22:43:00 +02:00
0686087cfd
fixing mobile navbar triggered issue and slight adjustement to bootstrap
...
template for using full width of browser for navbar
2015-09-20 20:05:48 +02:00
608605cd54
incrementing version number, updating docs
2015-09-19 17:23:10 +02:00
844c4d15e9
fixes #30
2015-09-19 14:19:42 +02:00
a111357fae
add optional (since it uses a session cookie) language selection
2015-09-19 11:21:13 +02:00
39e865ca64
if the uploaded file is an image mime type, display it
2015-09-18 21:41:50 +02:00
50075ea948
fixing issue with attachment, empty paste & empty password
2015-09-18 20:25:53 +02:00
ed9c4f45f4
adding file name support for #20 , solving issue with unencryptable file
2015-09-18 12:33:10 +02:00
e144739dec
implement file upload UI on bootstrap templates
2015-09-18 10:49:39 +02:00
106141efa4
merging @vikstrous file upload feature for #20 from
...
8a6d268278
2015-09-16 22:51:48 +02:00
61903665df
logic cleanup
2015-09-16 20:49:28 +02:00
0e53d1ee86
added markdown support and a dropdown for the format selection. The
...
options other then markdown are plain text and source code (syntax
highlighting). Resolves #25
2015-09-12 17:33:16 +02:00
9dde7f034a
moving remaining time / for your eyes only message from nav bar into
...
status alert in bootstrap theme, to ensure it is seen even with a
collapsed nav bar as in the mobile view
2015-09-12 10:38:04 +02:00
428a9d9c41
toggling mobile nav bar after tap on buttons "New", "Clone" and "Send"
...
to ensure any messages are visible for #21 .
2015-09-12 10:23:12 +02:00
b26fb08732
Fixing issues with en translation, thanks @wware for spotting it
2015-09-08 20:48:18 +02:00
b060d57524
- implemented php side of plural translation
...
- using it to generate labels dynamically for the expire options
(deprecating the [expire_labels] configuration).
- added translation of the human readable data sizes to support the
french octet
- fixed IEC label for kibibytes
2015-09-06 19:21:17 +02:00
c83ba8256f
implementing a plural translation solution, currently only the JS part
2015-09-06 15:54:43 +02:00
eee7b0144a
covering JS side of translations ( #7 ), added the messages to the
...
translation files and translated the german ones
2015-09-06 13:07:46 +02:00
b883d5eb4c
Merge branch 'master' of git@github.com:elrido/ZeroBin.git
...
Conflicts:
js/zerobin.js
2015-09-05 17:21:05 +02:00
3099e10dfa
refactored JS:
...
- moved from global namespace into anonymous function
- as onclick has no direct access to the zerobin methods, the events are
now bound in the init() method via bindEvents()
- to simplify maintenance, the functions were wrapped into 3 objects:
zerobin (display logic, event handling), filter (compression,
encryption) and helper (stateless utilities)
- some CSS and template adjustements were also done
2015-09-05 17:12:11 +02:00
d74172064b
Hide error message when paste is posted correctly
2015-09-05 14:45:50 +02:00
9687144c92
Error messages are now replaced and not appended
...
Error messages are now replaced and not appended in the #errormessage div, without removing the glyphicon (which a .text() would have done).
This way, we don't have HTML code in the JS (which would be ugly). But it's still not a really elegant solution.
2015-09-05 14:38:53 +02:00
2d79ba8243
updating docs, bumping version to 0.20
2015-09-03 22:22:59 +02:00
b25022e403
refactored JSON API, its now possible to retrieve pastes as JSON, which
...
is now used when posting comments, eliminating the need to store the
password in sessionStorage
2015-09-01 22:33:07 +02:00
802a0b26b9
burn after reading messages are only deleted after callback by JS when
...
successfully decrypted, resolves #11
2015-08-31 22:10:41 +02:00
9fdbba76ce
working on password function for #15 :
...
- asking again if password is wrong
- display error if user cancels dialog
- use password to encrypt comments, too (password is "stored" in the
password field)
- store password in sessionStorage when posting a comment so, that it
doesn't have to typed in again, but clear sessionStorage as soon as
password is retrieved
2015-08-31 21:14:12 +02:00
d3c4600806
slight configuration changes, template modifications to make discussions
...
and password configurable, removed generated configuration test as it
grows quite big and a new one can be generated easily if needed
2015-08-31 00:01:35 +02:00
0198371049
Password input id change in zerobin.js
2015-08-30 15:06:32 +02:00
eadcd60e14
Password input id change in zerobin.js
2015-08-30 15:05:50 +02:00
95f1db925b
Merge branch 'master' of https://github.com/elrido/ZeroBin
...
Conflicts:
cfg/conf.ini
js/zerobin.js
2015-08-30 14:33:09 +02:00
be91afa042
- fixing JS errors when syntax highlighting is disabled (point 1. #15 )
...
- fixing missing url conversion in highlighted text (point 2. # 15)
2015-08-27 23:58:28 +02:00
a34cc562e1
optimized bootstrap comment layout
2015-08-23 15:52:25 +02:00
3b537eda40
Added an optional password protection
2015-08-22 17:23:41 +02:00
b299a6e03e
added a bootstrap theme, still needs some work in the comments layout
2015-08-17 23:19:15 +02:00
0c1d5c62d5
updated de/inflate to versions 0.5/0.3, using versions found at
...
a3725d3bee
2015-08-16 13:02:27 +02:00
a0107d7eae
updated prettify to minified versions found at
...
6aa04af68e/loader/prettify.js6aa04af68e/loader/prettify.css
2015-08-16 12:46:01 +02:00
49c6e3c1b6
updated base64.js to version 2.1.9, using minified version found at
...
9192c510f5/base64.min.js
2015-08-16 12:27:06 +02:00
7bc8c14df6
updated sjcl to version 1.0.2, using minified version found at
...
11a673d1d3/sjcl.js
2015-08-16 11:29:01 +02:00
769768d25e
updated jquery to 1.11.3
2015-08-16 11:20:06 +02:00
3aa4911991
Small text message changes
2015-08-16 01:56:39 +02:00
daf5522b1e
Potentiel security bug corrected
...
Bug reproduction: 1) paste texte containing html/javascript. 2) send 3)
clic "Raw text" 4) refresh: The html/javascript is interpreted instead
of just displayed.
Under some versions of Chrome, it happens without refreshing.
This bug was corrected.
(cherry picked from commit 4f8750bbddcb137213529875e45e3ace3be9a769)
2015-08-15 22:24:25 +02:00
bc8b23d35e
XSS flaw correction
...
With a client IE < 10 there was a XSS security flaw. Other browsers were
not affected.
Also corrected spacing display with IE<10.
(cherry picked from commit 28813cd82ae47e556b610da3c7302a6709e27431)
Conflicts:
CHANGELOG.md
index.php
js/zerobin.js
lib/vizhash16x16.php
2015-08-15 22:01:43 +02:00
d9930978ba
Make sure there is enough entropy.
...
This patch will improve key randomness by requiring the user to move the
mouse if there is not enough entropy.
(cherry picked from commit c6e98045aa833dff824f892eb3392744c03a59f7)
2015-08-15 21:52:14 +02:00
e646729b2d
fixing regressions from cherrypicking
2015-08-15 21:39:08 +02:00
5f87ea6843
ZeroBin 0.18
...
(cherry picked from commit 7a8cbee2f99cd74a50bce7e8df8130e2c477d903)
Conflicts:
CHANGELOG.md
index.php
js/zerobin.js
lib/vizhash16x16.php
2015-08-15 21:06:19 +02:00
ecd2e067f8
replaceState() changed to pushState()
...
so that the "Back" button works after clicking on "Raw text".
(cherry picked from commit 47fae2b2467df2ab017102d82833cb380c286867)
2015-08-15 20:26:25 +02:00
fdc87a7fcf
Added "Raw text" button.
...
(cherry picked from commit 00cfcafc996c55afd069b665ad3875693e22d36d)
Conflicts:
css/zerobin.css
js/zerobin.js
tpl/page.html
2015-08-15 20:25:46 +02:00
09bebae286
Removed dead code.
...
(cherry picked from commit 87e17b36f9b2ec777c14257eb9c8efec0e7bd053)
Conflicts:
css/zerobin.css
js/zerobin.js
tpl/page.html
2015-08-15 20:06:44 +02:00
cff4d99f05
"Burn after reading" as a checkbox
...
"Burn after reading" option has been moved out of Expiration combo to a
separate checkbox.
Reason is: You can prevent a read-once paste to be available ad vitam
eternam on the net.
(cherry picked from commit 190b278402c086ebc4d1a78aae27d1e2666e3e7a)
Conflicts:
css/zerobin.css
index.php
js/zerobin.js
tpl/page.html
2015-08-15 19:01:03 +02:00
1b95d6fff7
base64.js downgraded from 2.6 to 1.7
...
because otherwise it would have broken compatibility with data files.
(cherry picked from commit 75a27b6243b8cffa69f59c068dac61263574dc5b)
2015-08-15 18:39:47 +02:00
eccd4a816a
base64.js updated to 2.6
...
From https://github.com/dankogai/js-base64
(cherry picked from commit 7e5c36ed5b7fc67ba919973834e015ce92b5708b)
2015-08-15 18:33:58 +02:00
315c45ed0c
Auto-select paste URL
...
When creating a paste, we auto-select the resulting URL so that the user
only has to press CTRL+C to copy the link.
So you basically click "SEND" then press CTRL+C.
(cherry picked from commit 3feb4641c7892eeeaff2fe61c6e153919687b9c6)
Conflicts:
css/zerobin.css
2015-08-15 16:56:11 +02:00
5b253cf77c
ZeroBin 0.17
...
* added deletion link.
* small refactoring.
* improved regex checks.
* larger server alt on installation.
2013-11-01 01:15:14 +01:00
6c7de8aca8
Libs upgrade
...
* Upgraded jQuery to 1.9.1
* Upgraded SJCL to Git version 2013-02-22
2013-10-31 22:59:01 +01:00
956b82b825
added functions for placing many parameters in the anchor string
2013-10-31 22:42:20 +01:00
7cb345001a
Change URL on clone
2013-10-31 22:41:30 +01:00
2b69a862ec
moved updated sjcl into place
2012-09-08 16:34:34 +02:00
2d4f155064
had to revert to HTML5 instead of XHTML5 because of compatibility
...
problem with code prettifier, fixed some display bugs
2012-08-28 23:28:41 +02:00
907538875b
removed leftovers from submodule uglifyjs, added credits file,
...
cleaned up CSS, changed template to output clean XHTML 5,
added unit tests for 60% of the code, found a few bugs by doing
that and fixed them
2012-08-26 00:49:11 +02:00
edf95ff56d
added autoloading, configurable paste size limit, changed JS to calculate localized comment times instead of UTC
2012-04-30 22:58:08 +02:00
0057045f51
Add syntax highlighting
...
Syntax highlighting is done with the use of the library:
http://code.google.com/p/google-code-prettify/
Signed-off-by: Alexey Gladkov <gladkov.alexey@gmail.com>
2012-04-29 20:27:00 +04:00
241c75a5d5
Removed the shortening url service button.
2012-04-24 14:29:16 +02:00
5d02750316
Fix : 404 for Shorten URL image
2012-04-23 16:30:02 +02:00
50272a678f
- Minor fixes following previous merge.
...
- Fixed regression: "Clone" button was visible for IE.
2012-04-22 20:43:11 +02:00
6083c7a23c
refactoring files and directory structure
2012-04-22 13:34:17 +02:00
El RIDO