Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge branch 'security-fixes-lfi-xss-open-redirect' into 'dev' | Mario | 2022-03-23 | 1 | -3/+2 |
|\ | | | | | | | | | Security fixes See merge request hubzilla/core!2017 | ||||
| * | CVE-2022-27257: LFI in Redbasic theme. | Harald Eilertsen | 2022-03-20 | 1 | -3/+2 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Limit valid chars in schema names, and discard attempts at loading schemas with invalid names. This prevents a local file inclusion vulnerability where an unauthenticated attacker can include arbitrary php files readable by the server process and potentially obtain remote code execution. Valid schema names may consist of ascii letters, numbers, hyphens and underscores. Should be good enough for most cases, I think. Fixes https://framagit.org/hubzilla/core/-/issues/1665 | ||||
* | | redbasic/dark: Tune button colours a bit. | Harald Eilertsen | 2022-03-13 | 1 | -5/+5 |
| | | | | | | | | Makes buttons a bit less bright so they don't stick out quite as much. | ||||
* | | redbasic/dark: Use schema colour for dropdown item | Harald Eilertsen | 2022-03-13 | 1 | -0/+4 |
| | | |||||
* | | redbasic/dark: Use bootstrap-nightfall for dark schema. | Harald Eilertsen | 2022-03-13 | 2 | -0/+1902 |
|/ | | | | | | | This is a color only stylesheet, modifying the original Bootstrap colors to a dark variant. Insert this as base before the redbasic dark schema modifications, and any custom modifications to have a nicer base for the dark schema. | ||||
* | fix duplicate ids in login form and move login/register buttons into the ↵ | Mario | 2022-03-03 | 3 | -24/+29 |
| | | | | hamburger menu on small screens | ||||
* | enhanced content filters | Mario | 2022-03-01 | 1 | -0/+4 |
| | |||||
* | missing content region for directory | Mario | 2022-02-23 | 1 | -0/+3 |
| | |||||
* | widget descriptions and add content region to all pdl files for convenience | Mario | 2022-02-23 | 55 | -32/+155 |
| | |||||
* | merge branch pdledit_gui into dev - many widgets still miss their ↵ | Mario | 2022-02-20 | 13 | -30/+362 |
| | | | | description and requirements (this is work in progress) | ||||
* | Merge branch 'undefined' into 'dev' | Mario | 2022-02-15 | 1 | -29/+60 |
|\ | | | | | | | | | Replace htconfig.tpl fr See merge request hubzilla/core!2008 | ||||
| * | Replace htconfig.tpl fr | Dan d'Auge | 2022-02-13 | 1 | -29/+60 |
| | | |||||
* | | Merge branch 'dandauge-dev-patch-02109' into 'dev' | Mario | 2022-02-15 | 1 | -30/+32 |
|\ \ | | | | | | | | | | | | | Update lostpass_eml.tpl fr See merge request hubzilla/core!2009 | ||||
| * | | Update lostpass_eml.tpl fr | Dan d'Auge | 2022-02-13 | 1 | -30/+32 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-69038' into 'dev' | Mario | 2022-02-15 | 1 | -0/+1 |
|\ \ | | | | | | | | | | | | | Upload New File : invite.material.subject.tpl fr See merge request hubzilla/core!2010 | ||||
| * | | Upload New File : invite.material.subject.tpl fr | Dan d'Auge | 2022-02-13 | 1 | -0/+1 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-34611' into 'dev' | Mario | 2022-02-15 | 1 | -0/+1 |
|\ \ | | | | | | | | | | | | | Upload New File : invite.material.tpl fr See merge request hubzilla/core!2011 | ||||
| * | | Upload New File : invite.material.tpl fr | Dan d'Auge | 2022-02-13 | 1 | -0/+1 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-30995' into 'dev' | Mario | 2022-02-15 | 1 | -19/+21 |
|\ \ | | | | | | | | | | | | | Update passchanged_eml.tpl fr See merge request hubzilla/core!2012 | ||||
| * | | Update passchanged_eml.tpl fr | Dan d'Auge | 2022-02-13 | 1 | -19/+21 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-92660' into 'dev' | Mario | 2022-02-15 | 1 | -16/+21 |
|\ \ | | | | | | | | | | | | | Update update_fail_eml.tpl fr See merge request hubzilla/core!2013 | ||||
| * | | Update update_fail_eml.tpl fr | Dan d'Auge | 2022-02-13 | 1 | -16/+21 |
| |/ | |||||
* | | fix missing asterisk | Mario | 2022-02-09 | 1 | -1/+1 |
| | | |||||
* | | Merge branch 'dandauge-dev-patch-55065' into 'dev' | Mario | 2022-02-09 | 1 | -24/+20 |
|\ \ | | | | | | | | | | | | | Update register_verify_eml.tpl See merge request hubzilla/core!1998 | ||||
| * | | Update register_verify_eml.tpl | Dan d'Auge | 2022-02-06 | 1 | -24/+20 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-45641' into 'dev' | Mario | 2022-02-09 | 1 | -24/+29 |
|\ \ | | | | | | | | | | | | | Update register_verify_member.tpl See merge request hubzilla/core!1999 | ||||
| * | | Update register_verify_member.tpl | Dan d'Auge | 2022-02-06 | 1 | -24/+29 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-07376' into 'dev' | Mario | 2022-02-09 | 1 | -18/+14 |
|\ \ | | | | | | | | | | | | | Update register_open_eml.tpl See merge request hubzilla/core!2000 | ||||
| * | | Update register_open_eml.tpl | Dan d'Auge | 2022-02-06 | 1 | -18/+14 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-78369' into 'dev' | Mario | 2022-02-09 | 1 | -0/+9 |
|\ \ | | | | | | | | | | | | | Upload New File : cert_bad_eml.tpl fr See merge request hubzilla/core!2001 | ||||
| * | | Upload New File : cert_bad_eml.tpl fr | Dan d'Auge | 2022-02-06 | 1 | -0/+9 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-72709' into 'dev' | Mario | 2022-02-09 | 1 | -0/+13 |
|\ \ | | | | | | | | | | | | | Upload New File : cron_bad_eml.tpl fr See merge request hubzilla/core!2002 | ||||
| * | | Upload New File | Dan d'Auge | 2022-02-06 | 1 | -0/+13 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-59648' into 'dev' | Mario | 2022-02-09 | 1 | -0/+1 |
|\ \ | | | | | | | | | | | | | Upload New File : invite.casual.subject.tpl fr See merge request hubzilla/core!2004 | ||||
| * | | Upload New File : invite.casual.subject.tpl fr | Dan d'Auge | 2022-02-06 | 1 | -0/+1 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-81368' into 'dev' | Mario | 2022-02-09 | 1 | -0/+18 |
|\ \ | | | | | | | | | | | | | Upload New File : invite.casual.tpl fr See merge request hubzilla/core!2005 | ||||
| * | | Upload New File : invite.casual.tpl fr | Dan d'Auge | 2022-02-06 | 1 | -0/+18 |
| |/ | |||||
* | | Merge branch 'dandauge-dev-patch-67694' into 'dev' | Mario | 2022-02-09 | 1 | -0/+1 |
|\ \ | | | | | | | | | | | | | Upload New File : invite.formal.subject.tpl fr See merge request hubzilla/core!2006 | ||||
| * | | Upload New File : invite.formal.subject.tpl fr | Dan d'Auge | 2022-02-06 | 1 | -0/+1 |
| |/ | |||||
* / | Upload New File : invite.formal.tpl fr | Dan d'Auge | 2022-02-06 | 1 | -0/+19 |
|/ | |||||
* | attach iconfig to the activity and adjust ap raw message retrieval to handle ↵ | Mario | 2022-01-30 | 1 | -1/+1 |
| | | | | both cases. also add a possibility to manually redeliver single hubs for debuging | ||||
* | fix for #1659 | Mario | 2022-01-27 | 1 | -2/+2 |
| | |||||
* | make sure to escape the author name for the reply_to button | Mario | 2022-01-24 | 1 | -1/+1 |
| | |||||
* | remove deprecated template | Mario | 2022-01-20 | 2 | -112/+2 |
| | |||||
* | revert background color | Mario | 2022-01-19 | 1 | -3/+0 |
| | |||||
* | prevent duplicate ids and adjust spinner color | Mario | 2022-01-19 | 6 | -10/+18 |
| | |||||
* | provide a spinner for edit connection action in threads | Mario | 2022-01-19 | 6 | -7/+22 |
| | |||||
* | Fix strings translation | Max Kostikov | 2022-01-18 | 1 | -9/+9 |
| | |||||
* | check for existence of vcard | Mario | 2022-01-18 | 1 | -1/+1 |
| | |||||
* | Merge branch 'dev' into 'dev' | Max Kostikov | 2022-01-14 | 2 | -14933/+14722 |
|\ | | | | | | | | | Update Russian translation See merge request hubzilla/core!1996 |