Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fix issue #1687 | Mario | 2022-09-22 | 1 | -2/+2 |
| | |||||
* | fix issue #1690 | Mario | 2022-09-22 | 1 | -6/+6 |
| | |||||
* | php8: fix warnings | Mario | 2022-09-22 | 1 | -5/+4 |
| | |||||
* | fix warnings and regressions | Mario | 2022-09-15 | 2 | -3/+3 |
| | |||||
* | address issue #1688 | Mario | 2022-09-14 | 1 | -1/+1 |
| | |||||
* | php8: warning fixes | Mario | 2022-09-14 | 2 | -1/+5 |
| | |||||
* | php8: fix more warnings | Mario | 2022-09-11 | 1 | -3/+3 |
| | |||||
* | php8: random cleanup and warning fixes | Mario | 2022-09-08 | 2 | -1/+3 |
| | |||||
* | remove debug code | Mario | 2022-09-07 | 1 | -7/+0 |
| | |||||
* | fix random php warnings | Mario | 2022-09-07 | 4 | -24/+10 |
| | |||||
* | Activity: check for other forms of as:Public, Search: make sure to run ↵ | Mario | 2022-08-21 | 1 | -6/+9 |
| | | | | htmlspecialchars_decode on the AP url so that previously encoded chars will be decoded again | ||||
* | check against null | Mario Vavti | 2022-08-07 | 1 | -2/+2 |
| | |||||
* | HQ dashboard - initial checkin | Mario | 2022-07-15 | 2 | -52/+53 |
| | |||||
* | bump php version requirement | Mario | 2022-05-25 | 1 | -2/+2 |
| | |||||
* | implement starring of pubstream items | Mario | 2022-05-18 | 1 | -11/+26 |
| | |||||
* | do not stringify integer value | Mario | 2022-05-11 | 1 | -1/+1 |
| | |||||
* | update queries in mod search - fixes #1677 | Mario | 2022-05-11 | 1 | -27/+23 |
| | |||||
* | more cleanup | Mario | 2022-05-06 | 1 | -10/+3 |
| | |||||
* | some cleanup after moving articles and cards to addons | Mario | 2022-05-06 | 2 | -71/+2 |
| | |||||
* | fix core issue #1676 and a liked/disliked/commented confusion | Mario | 2022-05-06 | 1 | -4/+20 |
| | |||||
* | move wiki to addons | Mario | 2022-05-06 | 1 | -873/+0 |
| | |||||
* | move articles to addon | Mario | 2022-05-04 | 2 | -370/+0 |
| | |||||
* | move cards to addon | Mario | 2022-05-04 | 2 | -354/+0 |
| | |||||
* | whitespace | Mario Vavti | 2022-04-25 | 1 | -1/+1 |
| | |||||
* | if we have not been provided a profile id set the profile id to the default ↵ | Mario Vavti | 2022-04-25 | 1 | -0/+4 |
| | | | | profile - fixes #1671 | ||||
* | fixes in regard to hub re-installs: dismiss deleted hublocs, make sure we ↵ | Mario | 2022-04-01 | 1 | -8/+8 |
| | | | | use the latest hubloc entry for addressing, in Queue::deliver() prefer primaries since their info is probably more accurate | ||||
* | make sure to set comments_closed to the created date if nocomment is set | Mario Vavti | 2022-03-23 | 1 | -1/+1 |
| | |||||
* | CVE-2022-27256: Open redirect via rpath query param. | Harald Eilertsen | 2022-03-20 | 10 | -27/+27 |
| | | | | | | | | Don't follow urls to external sites when submitting forms from the settings modules. This mitigates an Open Redirect vulnerability where an attacker could trick a user to go to an attacker controlled destination. Fixes part of https://framagit.org/hubzilla/core/-/issues/1666 | ||||
* | CVE-2022-27258: XSS via rpath query param. | Harald Eilertsen | 2022-03-20 | 10 | -20/+20 |
| | | | | | | | | | | Escape URLs provided by the rpath query param in settings modules. This prevents a possible Cross-Site scripting vulnerability, where an attacker could inject web scripts and html into the settings form via the rpath query parameter, and have a user execute the script by tricking them to clicking a link. Fixes part of https://framagit.org/hubzilla/core/-/issues/1666 | ||||
* | Merge branch 't0rum-master-patch-68993' into 'master' | Mario | 2022-03-01 | 1 | -2/+2 |
| | | | | | | | | | Typo in Setup.php prevents users from using Postgres See merge request hubzilla/core!2014 (cherry picked from commit 0e2e9321025f87fe9587f3d183adaea6185e4e20) d384f55d Typo in Setup.php prevents users from using Postgres | ||||
* | enhanced content filters | Mario | 2022-03-01 | 2 | -1/+7 |
| | |||||
* | this was required for old style forum posts only and should not be needed ↵ | Mario | 2022-02-21 | 1 | -9/+11 |
| | | | | anymore | ||||
* | merge branch pdledit_gui into dev - many widgets still miss their ↵ | Mario | 2022-02-20 | 1 | -0/+553 |
| | | | | description and requirements (this is work in progress) | ||||
* | thr_parent lost across edits | Mario | 2022-02-18 | 1 | -0/+1 |
| | |||||
* | php8 warnings | Mario | 2022-02-13 | 1 | -1/+4 |
| | |||||
* | address deprecation warnings | Mario | 2022-02-13 | 1 | -6/+6 |
| | |||||
* | allow to override the DB charset via the $db_charset variable in .htconfig.php | Mario | 2022-02-10 | 1 | -2/+12 |
| | |||||
* | whitespace | Mario | 2022-02-04 | 1 | -2/+2 |
| | |||||
* | clean the url from parameters | Mario | 2022-02-04 | 1 | -0/+5 |
| | |||||
* | unpack encoded mid and make sure to goaway to the right message | Mario | 2022-02-03 | 1 | -1/+13 |
| | |||||
* | a like could be stored as item or activity so check both | Mario | 2022-02-02 | 1 | -2/+3 |
| | |||||
* | more work on relaying zap and diaspora, fix mod hcard | Mario | 2022-01-31 | 1 | -19/+19 |
| | |||||
* | PHP 8.1 band-aid | Mario Vavti | 2022-01-31 | 1 | -9/+9 |
| | |||||
* | attach iconfig to the activity and adjust ap raw message retrieval to handle ↵ | Mario | 2022-01-30 | 1 | -1/+13 |
| | | | | both cases. also add a possibility to manually redeliver single hubs for debuging | ||||
* | missing define of variable, remove deprecated zot-info and ofeed from webfinger | Mario | 2022-01-26 | 1 | -12/+1 |
| | |||||
* | fix doc | Mario | 2022-01-23 | 1 | -2/+2 |
| | |||||
* | make sure that if an existing contact role changes we will re-assign the ↵ | Mario | 2022-01-23 | 1 | -69/+98 |
| | | | | permissions to all role members and cleanup | ||||
* | make sure we have an existing default role in any case | Mario | 2022-01-23 | 1 | -2/+5 |
| | |||||
* | string | Mario | 2022-01-21 | 1 | -2/+2 |
| | |||||
* | string update | Mario | 2022-01-20 | 1 | -1/+1 |
| |