aboutsummaryrefslogtreecommitdiffstats
path: root/Zotlabs/Module/Settings
Commit message (Collapse)AuthorAgeFilesLines
* CVE-2022-27256: Open redirect via rpath query param.Harald Eilertsen2022-03-2010-27/+27
| | | | | | | | Don't follow urls to external sites when submitting forms from the settings modules. This mitigates an Open Redirect vulnerability where an attacker could trick a user to go to an attacker controlled destination. Fixes part of https://framagit.org/hubzilla/core/-/issues/1666
* CVE-2022-27258: XSS via rpath query param.Harald Eilertsen2022-03-2010-20/+20
| | | | | | | | | | Escape URLs provided by the rpath query param in settings modules. This prevents a possible Cross-Site scripting vulnerability, where an attacker could inject web scripts and html into the settings form via the rpath query parameter, and have a user execute the script by tricking them to clicking a link. Fixes part of https://framagit.org/hubzilla/core/-/issues/1666
* enhanced content filtersMario2022-03-012-1/+7
|
* ux improvementsMario2022-01-121-4/+4
|
* string changeMario2021-12-211-1/+1
|
* string changeMario2021-12-211-1/+1
|
* missing labelMario2021-12-211-1/+1
|
* nag channel owners to select achannel role if they have not yet done so yetMario2021-12-151-4/+10
|
* merge branch perms_ng into devMario2021-12-152-523/+318
|
* add option to mark all notices of a thread read if a notice of the thread is ↵Mario2021-09-181-2/+7
| | | | clicked (default 1) and fix a php error in find_parent() if $act->obj is not an array
* channel_menu is not used anymoreMario2021-08-241-3/+0
|
* more work on notificationsMario2021-06-251-108/+109
|
* melt diff prod fork 4.6.2 air onto 5.2.1 to 5.2.2 DB 1241Hilmar R2021-01-231-15/+19
|
* Do away with auto updates except for our own actions. We might consider to ↵Mario2020-11-181-3/+0
| | | | re-implement this for single thread view like eg /display. Instead of calculating scroll positions during updates, keep track of expanded items and set the expanded state when updating - this fixes issue #1488
* apply channel name changes to all associated xchansnobody2020-09-211-2/+3
| | | (cherry picked from commit f2ac1e4b7d2aa4854ed08ded49b2ed2dd10fab59)
* more itemspage workMario2020-07-161-5/+5
|
* move from build_sync_packet() to Libsync::build_sync_packet()Mario2020-04-0915-15/+34
|
* calendar merge: implement channel calendar import in cdav/calendarMario Vavti2019-05-101-1/+1
|
* affinity tool fixesMario Vavti2019-02-141-42/+0
|
* Make Affinity Slider (optionally) 'sticky' across page loads. (default is ↵DM42.Net (Matt Dent)2018-12-141-0/+8
| | | | current behavior: reset slider with each page load)
* move profile assign selector to profile settings and personal menu selector ↵Mario Vavti2018-10-063-29/+41
| | | | to channel_home settings and get rid of misc channel settings section.
* rename grid to network (for consistency) and activity to stream (as seen in ↵Mario Vavti2018-10-062-2/+2
| | | | osada) because it makes much more sense.
* pubstream appMario Vavti2018-10-061-1/+1
|
* fix displaying of perm cats selectorMario Vavti2018-10-041-2/+4
|
* whitespaceMario Vavti2018-10-041-1/+0
|
* move *_divmore_height setting to the module extra_settings, and fix issue ↵Mario Vavti2018-10-0411-13/+83
| | | | where feature settings were not synced if rpath was provided
* move *_list_mode to featuresMario Vavti2018-10-041-6/+0
|
* indicate locked featuresMario Vavti2018-10-011-1/+1
|
* Remove servicelevel logicM. Dent2018-09-292-21/+1
|
* settings for channel homeMario Vavti2018-09-281-0/+43
|
* Update Channel.phpMax Kostikov2018-09-281-2/+2
|
* implement conversation tools (settings/conversation), remove additional ↵Mario Vavti2018-09-272-34/+61
| | | | features from the settings menu and get rid of skill levels
* guest access appMario Vavti2018-09-261-173/+0
|
* permcats appMario Vavti2018-09-261-120/+0
|
* oauth and oauth2 apps managerMario Vavti2018-09-262-345/+0
|
* appification of the pdl editor and move advanced_theming to theme settings ↵Mario Vavti2018-09-261-9/+1
| | | | where it belongs
* move advanced_theming switch to settings/display for nowMario Vavti2018-09-251-3/+8
|
* move start_menu switch to settings/display for nowMario Vavti2018-09-251-1/+11
|
* add fileMario2018-09-241-0/+43
|
* minor cleanupMario2018-09-231-2/+0
|
* settings for events and cdav calendarMario2018-09-234-1/+130
|
* provide settings for mod photo and make it slightly simpler to create new ↵Mario2018-09-235-32/+57
| | | | module settings
* keep the features in the central array but sort them by module nameMario2018-09-235-232/+20
|
* this should be off by defaultMario2018-09-221-1/+1
|
* add files and settings for channel managerMario2018-09-222-0/+127
|
* appification of sourcesMario Vavti2018-09-221-9/+0
|
* add fileMario Vavti2018-09-211-0/+120
|
* provide a return path from settings pagesMario Vavti2018-09-212-0/+4
|
* remove connection filter from network settingsMario Vavti2018-09-201-8/+0
|
* move connection filtering setting from network to connections, provide a ↵Mario Vavti2018-09-202-12/+53
| | | | link to settings in the navbar if present for a module and some code optimisation