im-mi
a49c5745b0
Use html_escape instead of htmlspecialchars
2016-09-14 18:08:12 -04:00
im-mi
c1083bbea1
Fixed comment-delete code-injection vulnerability
2016-09-14 17:42:32 -04:00
Shish
7efff25dcc
Merge pull request #585 from im-mi/pool-placeholder-text
...
Don't use javascript for pool search placeholder
2016-09-07 23:49:19 +01:00
im-mi
e8c6f655b0
Don't use javascript for pool search placeholder
2016-09-07 08:43:34 -04:00
Shish
d36338d4c4
Merge pull request #582 from im-mi/minor-html-fixes
...
Minor html fixes
2016-09-07 10:31:25 +01:00
im-mi
73ff0e669d
Use generic NavBlock instead of "Index" block on pool pages
2016-09-06 09:25:08 -04:00
im-mi
e5cfea028a
Fixed mass source set's broken dialog
2016-09-03 14:43:56 -04:00
im-mi
91fea63319
Removed stray end tag
2016-09-03 14:26:24 -04:00
im-mi
ac53fe52de
Removed obsolete language specification from <script>
2016-09-03 14:26:24 -04:00
im-mi
10d47409ad
Added doctype to home page
2016-09-03 14:26:24 -04:00
im-mi
d39b084537
Properly end attribute list of tag on upload form
2016-09-03 14:26:24 -04:00
Shish
3051334d8f
be explicit that variables are variables
2016-09-02 16:19:02 +01:00
Shish
e96a5e1109
Merge pull request #579 from im-mi/fix-ico-256-256
...
Fix .ico when size is 256 x 256
2016-09-02 15:50:46 +01:00
im-mi
15ffdff387
Fix .ico when size is 256 x 256
2016-09-02 05:33:16 -04:00
im-mi
d2540a9619
Use CSS for mass tagger button styling
2016-09-02 05:30:00 -04:00
im-mi
49d6fa99da
Clear the mass tagger's selection on load
...
.. in case it was autocompleted by the browser.
2016-09-02 05:29:59 -04:00
Shish
29bdc5da22
Merge pull request #576 from im-mi/fix-pool-description-code-injection
...
Update pool description formatter (code injection vulnerability)
2016-09-01 11:18:37 +01:00
im-mi
10e8fc50d3
Fix "starts-with" header in tag list when escaping required
...
This fixes the "starts-with" headers* on the tags/alphabetic page. Before, the headers would be wrong if they started with an escaped character.
This also escapes the resulting header so that it no longer generates invalid HTML in such cases.
* Note that these headers are only visible when paged tag lists is disabled.
2016-09-01 03:33:17 -04:00
im-mi
bb64d12d9d
Use TextFormattingEvent instead of raw BBCode formatter
2016-09-01 00:35:52 -04:00
Shish
bcef3fbc8f
have tag sanitisation process ignore tags which are too long, fixes #565
2016-08-29 09:21:23 +01:00
im-mi
84b4ac3893
html_escape tag info link
2016-08-29 01:19:11 -04:00
Shish
a68407e12e
Merge pull request #573 from im-mi/patch-2
...
Fix log info section name
2016-08-20 14:57:35 +01:00
Shish
98254ef5bd
Merge pull request #572 from im-mi/video-playback-options
...
Added video playback options for autoplay and loop
2016-08-20 14:57:16 +01:00
im-mi
980e3b686b
Fix log info section name
2016-08-19 21:52:48 -04:00
im-mi
cce24f9e80
Added video playback options for autoplay and loop
2016-08-19 21:25:58 -04:00
im-mi
8fe9212882
Fixed assertion failure upon upload due to incorrect type check
2016-08-19 15:55:18 -04:00
Shish
89dffd569a
and mass tagger
2016-07-30 23:41:42 +01:00
Shish
26b2cd5c16
derp
2016-07-30 23:06:42 +01:00
Shish
bed04a1230
assert that metadata['tags'] is an array
2016-07-30 23:02:14 +01:00
Shish
ffce1a4683
more hinting
2016-07-30 22:54:42 +01:00
Shish
b81e8a2db8
also explode tags on transload input
2016-07-30 22:45:44 +01:00
Shish
7be951b271
Convert tags from user-supplied string to array once, on input
...
This results in a fuckton of refactoring and code cancelling out
other code -- we no longer have a whole bunch of places trying
to support string params and array params, and doing their own
esaping and unescaping, never being quite sure if the data they've
been passed is escaped or not.
Also adds a bunch of type hinting, since we can now know what
data we're dealing with better.
2016-07-30 22:11:49 +01:00
Shish
bc3e482247
more image report display options
2016-07-30 15:04:34 +01:00
Shish
8c8106c6a9
fix index var access
2016-07-03 11:48:08 +01:00
Shish
bb35421b05
Load AutoComplete before Home, so that the headers show up
2016-06-26 18:57:53 +01:00
Shish
6febdec7b5
more explicit variable types
2016-06-19 23:05:57 +01:00
Shish
f8b7909426
ExtensionInfo isn't private
2016-06-19 22:15:46 +01:00
Shish
333c74ba35
typo
2016-06-19 17:48:10 +01:00
Shish
dc10a18086
lots of minor doc tweaks, type hints, etc
2016-06-19 17:41:40 +01:00
Shish
edd3e49a2f
mark wildcard test incomplete on pgsql / sqlite
2016-06-19 14:06:26 +01:00
Daku
a8d9f8ce5b
make sure prev/next links aren't clipped outside the box
2016-06-19 11:56:41 +01:00
Daku
f973fcc9fa
basic autocomplete support for metatags
2016-06-19 10:07:56 +01:00
Daku
03240220d4
make sure to get proper tag value + use selected tag if possible
2016-06-19 09:49:55 +01:00
Daku
862a84677f
add docs column, showing what extensions have documentation
...
previously it made every ext name into a link to /ext_doc, regardless if it had docs or not
2016-06-19 05:05:12 +01:00
Daku
c0601640bf
only show link if extension actually has documentation
2016-06-19 05:04:59 +01:00
Daku
5ae10473e3
closing tag is unneeded
2016-06-19 05:01:13 +01:00
Daku
6486a4757f
js scrutinizer fixes
2016-06-19 05:00:09 +01:00
Daku
b75638cace
get_last_insert_id requires param for pgsql support
2016-06-19 04:57:14 +01:00
Shish
4577ff70ef
more linty bits
2016-06-18 19:26:56 +01:00
Shish
cfd3a9d248
lint fixes
2016-06-18 19:00:56 +01:00
