cc637bd3f3
Renew credits
...
Split in active contributors & old contributors.
2016-10-12 18:26:57 +02:00
efffeddc25
Merge branch 'master' of https://github.com/PrivateBin/PrivateBin
2016-09-18 12:23:07 +02:00
2cd4717bd2
Use default csp value by default
...
Otherwise the CSP may break updates if we later change the behaviour of PrivateBin somehow.
We should have done this before the v1.0 release, but well...
2016-09-18 12:21:42 +02:00
8cfcf1c9f5
Adding HTTP headers to address certain XSS attacks, resolves #91
2016-09-18 11:29:37 +02:00
ec7af3a738
Improve formatting
2016-09-14 23:55:55 +02:00
8cb1a0a14d
Improve issue template
2016-09-03 18:23:03 +02:00
23febfc5ca
Remove unintentially submitted test file
2016-09-03 18:14:14 +02:00
1a159c973f
Prevent referrer to be send
...
Uses both CSP and Referrer-Policy
Fixes #96
2016-09-03 18:12:24 +02:00
b7184b92a3
Fix csp config unit tests
2016-08-27 14:47:21 +02:00
7da4723112
Merge pull request #97 from matunixe/master
...
Fix some french translation issues (typo + minor problems).
2016-08-27 13:53:50 +02:00
8cb9e9d871
Fix some french translation issues (typo + minor problems).
2016-08-27 12:33:44 +02:00
b11866a63b
Allow manifest loading via CSP (2)
2016-08-27 00:02:50 +02:00
9ff74e8841
Allow manifest loading via CSP
2016-08-27 00:01:19 +02:00
a13266a784
ensure the server salt path is initialized, instead of relying on the default
2016-08-25 15:02:38 +02:00
e925833090
bumping version number to 1.0
2016-08-25 09:53:31 +02:00
2ee9325f49
Make clear that HTTPS provides basic security...
...
whereas the other things are advantaged security features.
2016-08-24 23:28:54 +02:00
2cde59821a
Add FAQ note to issue template
2016-08-24 17:35:29 +02:00
932c0b573d
More useful links for Libsodium installation
...
Also mentioning one needs to install the PHP extension too.
2016-08-24 16:43:44 +02:00
61f0eaa757
Fix typo
2016-08-23 20:56:45 +02:00
1bc2caf459
Correct order of PRNG
...
As stated in 76e90f747b/ERRATA.md
2016-08-23 20:56:14 +02:00
19e5467b79
Revert "Add PHPv7 to list of "requires /dev/urandom in open_basedir""
...
This reverts commit b229fb6041
2016-08-23 20:44:16 +02:00
b229fb6041
Add PHPv7 to list of "requires /dev/urandom in open_basedir"
2016-08-23 17:24:51 +02:00
91eabd8489
readded /dev/urandom, the primary source for safe randomness in PHP 7, random_compat and mcrypt
2016-08-23 08:54:26 +02:00
226a64d8a4
Clarify randomness & add PDO link
...
* Remove "some disk space" - Everyone knows that files need some place to be stored. Additionally nowadays disk space is not problem in general.
* Add link to PDO.
* Clarify randomness. I am however not sure whether `com_dotnet` needs access to `/dev/urandom` (with open_basedir set).
2016-08-22 19:28:20 +02:00
3d7b35aed4
PSR-2/4 fixes
2016-08-22 16:20:14 +02:00
62dd25b91a
added note for phpdoc with PHP 7
2016-08-22 10:58:01 +02:00
313b5d34d2
updating docs
2016-08-22 10:34:37 +02:00
1907586b39
changing link to project page
2016-08-22 09:50:28 +02:00
6aba39488f
adding check for PATH ending in DIRECTORY_SEPARATOR, fixes #86
2016-08-22 09:46:26 +02:00
47d6bd7a02
Clarifying requirement for safe randomness in installation document
2016-08-22 09:44:49 +02:00
38a185ef22
shrinking icon to avoid renderering glitches
2016-08-21 20:42:58 +02:00
6c49bd09b8
Merge pull request #88 from PrivateBin/iconupdate
...
Readd icon instead of logo for header
2016-08-21 20:03:26 +02:00
5621f32752
Readd icon instead of logo for header
...
Continues #87
2016-08-21 16:51:54 +02:00
c6e71d2972
Add link to info page to logo
...
This overwrites the useless link to the logo.
2016-08-21 15:24:02 +02:00
ba2ce38077
added alt text
2016-08-21 07:34:45 +02:00
057047094d
Merge pull request #87 from PrivateBin/newicon
...
Replace icon with logo with text
2016-08-20 19:10:19 +02:00
f7a75a9d33
Merge branch 'master' into newicon
2016-08-20 19:09:39 +02:00
d7896fbd95
Fix header link in subdir installations
...
Now this does link to PrivateBin and not to the top-root (file) of the webserver
2016-08-20 18:53:07 +02:00
a7c3b6079d
Update logo
2016-08-20 18:25:56 +02:00
8f19045b58
Replace icon with logo with text
2016-08-20 18:01:52 +02:00
f82533f479
Use icon with text for Readme
2016-08-20 17:57:02 +02:00
47646e056b
fixing urlshortening regression caused by CSP introduction, resolves #10
2016-08-18 15:09:58 +02:00
cd02c6e916
Merge pull request #83 from PrivateBin/novendorignore
...
Clever gitignore for vendor dir
2016-08-17 21:00:27 +02:00
e4f615d8be
Exclude doch folder
2016-08-17 20:43:59 +02:00
c6af0ebfce
Fix typo of Composer name
2016-08-17 20:00:29 +02:00
e7d5b34f4f
Also exclude PHP phar builder
2016-08-17 19:56:35 +02:00
47b5d315f6
Delete excluded files & adjsut exlcusion
...
Also add Composer license to LICENSE.md as it is excluded right now
2016-08-17 19:44:03 +02:00
49beb2ff64
Allow PHP files in vendor dir to be committed
2016-08-17 19:37:40 +02:00
a9759f1872
updated changelog
2016-08-16 11:38:52 +02:00
f72e260ee7
adding subresource integrity hashes for all javascript includes, resolves #6
2016-08-16 11:11:03 +02:00
rugk