0e2ec27033
Avoid privilege for setting the for MariaDB/MySQL, fixes #919
2022-04-19 18:44:00 +02:00
f0d0daffcc
enable and credit new Finnish translation
2022-04-05 07:22:07 +02:00
f2e0c1a701
upgrade to zlib 1.2.12
2022-03-30 06:05:37 +02:00
36cb37c029
prevent error when attachments are disabled, but paste with attachment gets displayed
2022-03-13 20:18:51 +01:00
5617612eb3
upgrade to showdown 2.0.3
2022-03-13 20:05:38 +01:00
2a4d572c1e
Sanitize SVG preview, preventing script execution in instance context, while dropping support for attachment download in IE
2022-03-13 19:56:12 +01:00
6c1f0dde0c
set CSP also as meta tag, to deal with misconfigured webservers mangling the HTTP header
2022-03-13 18:11:13 +01:00
f83f80b5f6
Merge branch 'master' into stevenandres-master
2022-02-26 11:56:58 +01:00
f39934a104
Merge pull request #896 from Patriccollu/PB-in-Corsican
...
Adding Corsican as brand new locale
2022-02-26 11:52:43 +01:00
d73cfb093c
Updating CHANGELOG.md for new locale Corsican
2022-02-25 13:17:50 +01:00
288cf3f005
Merge branch 'master' into stevenandres-master
2022-02-25 06:42:18 +01:00
7a6f36a789
disable failing part of the test
2022-02-23 06:04:05 +01:00
fbf0eae513
update bootstrap JS library to 3.4.1
...
note that this fails one of our unit tests
2022-02-20 16:13:54 +01:00
6b59d4f380
document change
2022-02-20 11:51:41 +01:00
7277d2bb43
update all libraries
2022-02-18 07:36:09 +01:00
8faf0501f4
improve Lojban support
...
- Crowdin has to use the 3 letter language code, since Lojban has no 2 letter code. Added support for this in the PHP backend and renamed the translation file.
- Lojban has no plural cases, updated the plural-formulas accordingly.
- Credited the change and documented it.
- Updated the SRI hashes.
2022-02-12 16:17:09 +01:00
2182cdd44f
generalize OCI handling of queries and results
2022-01-22 08:45:12 +01:00
a203e6322b
implementing key/value store of Persistance in Database storage
2021-06-09 07:47:40 +02:00
3429d293d3
remove configurable dir for traffic & purge limiters
2021-06-08 06:37:27 +02:00
c758eca0a4
removed automatic .ini configuration file migration, closes #808
2021-06-06 17:53:08 +02:00
d355bb87e3
documenting changes
2021-05-30 08:11:45 +02:00
84771d7167
documenting changes
2021-05-22 11:01:16 +02:00
9683c591bb
document change
2021-04-17 08:48:12 +02:00
5f4200c721
document change
2021-04-17 08:39:35 +02:00
1dc8b24665
transmit cookie only over HTTPS, fixes #472
2021-04-16 20:15:12 +02:00
9e6eb50ced
adding new security headers, fixes #765
2021-04-16 19:19:11 +02:00
175d14224e
set plurals for and credit Estonian translation
2021-04-16 18:27:12 +02:00
d65bf02d78
upgraded kjua
2021-04-05 17:33:07 +02:00
458ebcb321
incrementing version
2021-04-05 17:05:14 +02:00
ec022b2db9
documenting fix for #682
2021-04-05 13:51:23 +02:00
3780db627d
update changelog
2021-04-03 08:28:36 +02:00
2e10bdbd22
update DOMpurify to version 2.2.7
2021-04-02 09:09:47 +02:00
da0896fe42
set plurals for and credit Catalan translation
2021-04-02 09:00:27 +02:00
5a9bcea3a9
set plurals for and credit Indonesian translation
2021-03-09 05:54:06 +01:00
b38ebc503e
plural rules and documenting newly added languages
2021-01-07 21:16:03 +01:00
1614342248
update DOMpurify to version 2.0.14
2020-08-30 08:34:38 +02:00
9914c37683
incrementing version
2020-03-22 06:44:04 +01:00
1439bb291f
allow pasting password on paste with attachment - big kudos @rugk for finding it! - fixes #565 , fixes #595
2020-03-21 16:53:55 +01:00
0907ee90e3
documenting change
2020-03-21 16:07:11 +01:00
f05e5c2e29
documenting change
2020-03-01 16:14:19 +01:00
b0800060c2
fix change log
2020-02-16 13:33:48 +01:00
afd82ac34d
Merge branch 'master' into php7.4-ci
2020-02-16 13:23:11 +01:00
e74d786a68
update change log
2020-02-16 07:23:20 +01:00
5d54006c9e
update minimum required PHP version to 5.6 and replace slowEquals() with native hash_equals() function
2020-02-05 19:30:14 +01:00
00438ec1ab
upgrade DOMpurify to 2.0.8
2020-02-04 18:43:35 +01:00
d73f8468d8
documenting changes for 1.2.2
2020-01-08 19:23:33 +01:00
ef8943d838
upgrading base-x library to 3.0.7
2020-01-07 20:11:12 +01:00
2fd649db14
upgrading showdown to released 1.9.1 version
2020-01-07 19:58:05 +01:00
8d0ac336d2
addressing jsverifyRngState 8b8f0d4ec2a67139b5, fixes HTML injection via filename, closes #554
2019-12-25 09:14:32 +01:00
3485922366
documenting change
2019-12-25 08:16:17 +01:00
El RIDO