92 Commits

Author	SHA1	Message	Date
Dan Brown	7cc17934a8	Made MD editor display a sandboxed iframe ... - Also added escaping of srcdoc elements in escape logic. Related to #1531	2019-08-26 12:16:50 +01:00
Dan Brown	2dfe6c2d56	Fixed failing test and added more accessibility improvements ... - Updated linked images to have obvious focus styles - Added proper role to notifications - Made dropdown list focus styles a bit nicer. - Updated book list chapter child slide down to be keyboard activatable. Related to #1320	2019-08-25 17:21:25 +01:00
Dan Brown	20c36d58a6	Merge pull request #1527 from BookStackApp/129-page-templates ... Page Templates Implementation	2019-08-11 20:21:17 +01:00
Dan Brown	5fdab3b8af	Updated template test to be more stable	2019-08-11 20:10:27 +01:00
Dan Brown	de3e9ab094	Added ability to use templates ... - Added replace, append and prepend actions for template content into both the WYSIWYG editor and markdown editor. - Added further testing to cover.	2019-08-11 20:04:43 +01:00
Dan Brown	421dd93ffd	Merge branch 'v0.26'	2019-08-06 21:50:56 +01:00
Dan Brown	2955f414dd	Added iframe JS and data url escaping ... Related to #1531	2019-08-06 21:08:24 +01:00
Dan Brown	2ebbc6b658	Merge branch 'master' into 129-page-templates	2019-08-04 16:26:38 +01:00
Dan Brown	1e7df28238	Set export service to set correct svg image mimetype ... For #1538	2019-07-17 22:37:19 +01:00
Dan Brown	c732970f6e	Hardened page content script escaping ... Increased range of tests to cover. Fixes #1531	2019-07-10 20:17:22 +01:00
Dan Brown	71167426bb	Started implementation of page template	2019-07-07 13:45:46 +01:00
Dan Brown	35e6635379	Fixed chapter description not showing in book exports ... Closes #1465	2019-05-25 15:21:02 +01:00
Dan Brown	ad542f0407	Prevented potential inline JS event usage ... - Removes 'on*' attributes from elements. - Also updated script logic to remove scripts instead of escaping. - All JS injection removal now uses DomDocument + xpath parsing.	2019-05-05 13:53:37 +01:00
Dan Brown	2bb06463d5	Added deeper content id de-duplication ... Closes #1393	2019-04-21 12:22:41 +01:00
Dan Brown	0bc5ccba32	Add revision restore confirm and changed http method ... Closes #1321	2019-04-20 13:25:16 +01:00
Dan Brown	6c66a8935a	Added test to check page HTML id de-duplication ... Relates to #1393	2019-04-20 13:01:56 +01:00
Dan Brown	c380c10d54	Prevented bad duplicate IDs causing major exception ... Related to #1393	2019-04-15 21:20:32 +01:00
Dan Brown	7f3f6e65b9	Aligned item creation wording and updated shelf-book-add logic	2019-04-15 20:45:04 +01:00
Christopher Wilkinson	50a9c71de0	Add tests for creating a book and adding directly to a shelf	2019-04-15 09:27:17 +01:00
Christopher Wilkinson	faa3a8b842	Add button to add a book directly from a shelf view	2019-04-15 09:27:17 +01:00
Dan Brown	b12ae6d11b	Added bookshelves to breadcrumbs ... - Updated breadcrumb dropdown switchers and back-end sibling code to handle new breadcrumbs. - Added breadcrumb view composer and EntityContext system to mangage tracking if in the context of a bookshelf.	2019-04-07 18:28:11 +01:00
Dan Brown	7cda9b026e	Updated tests to suit layout changes, Updated 404 page ... - Also replaced 'or' usage in templates with null coalescing operator	2019-04-06 18:36:17 +01:00
Dan Brown	042a6f9760	Updated shelf menu item to show on custom permission ... - Extended new 'userCanOnAny' helper to take a entity class for filtering. Closes #1201	2019-03-09 21:15:45 +00:00
Dan Brown	5c9b528517	Abstracted userCanCreatePage helper to work for any permisison ... - Added test to cover scenario where someone with create-own permission would want to copy a viewable item into a container entity that they own.	2019-03-09 16:50:22 +00:00
Dan Brown	0e0a17cc30	Prevented page text content includes ... Avoids possible permission issues where included content shown in search or preview where the user would not normally have permission to view the included content. Closes #1178	2019-01-05 17:18:40 +00:00
Dan Brown	a2087fe3ff	Made delete permissions a requirement for move operations ... Closes #1200	2019-01-05 14:39:40 +00:00
Dan Brown	f4ea5f1f55	Updated page exports to use absolute time format ... For #1065	2018-12-22 16:35:04 +00:00
Dan Brown	85f330c79a	Extracted many page-specific repo methods into page-specific repo	2018-10-13 11:27:55 +01:00
Dan Brown	919660678b	Re-structured the app code to be feature based rather than code type based	2018-09-25 12:30:50 +01:00
Dan Brown	9243c635f2	Made search test a little more consistent	2018-09-23 15:15:44 +01:00
Dan Brown	7b32aa163f	Added Bookshelves to search system. ... Also cleaned up and made search indexing system a little more efficient. Closes #1023	2018-09-23 12:34:30 +01:00
Dan Brown	3f58800ed1	Added ability to configure revision limit	2018-09-22 17:30:42 +01:00
Dan Brown	e3e484e561	Added custom head content to exports ... Closes #981 Also fixed incorrect download tests.	2018-09-22 11:53:40 +01:00
Dan Brown	131fcae4c7	Merge pull request #947 from BookStackApp/bookshelves ... Bookshelves	2018-09-21 15:29:52 +01:00
Dan Brown	b59e5942c8	Added testing coverage for Bookshelves ... Created modified TestResponse so we can use DOM operations in new Testcases as we move away from the BrowserKit tests.	2018-09-21 15:15:16 +01:00
Abijeet	08b967607f	Changes as per code review, and fixes failing test cases. ... Signed-off-by: Abijeet <abijeetpatro@gmail.com>	2018-09-16 20:44:09 +05:30
Abijeet	0c8b6b7324	Final tweaks after code review and fixing failing test cases.	2018-09-16 01:12:36 +05:30
Abijeet	54ca4487fa	Adds tests and few fixes. ... Signed-off-by: Abijeet <abijeetpatro@gmail.com>	2018-09-15 21:05:51 +05:30
Dan Brown	eb5069ca66	Attempted to fix failing time-based test	2018-04-22 20:06:46 +01:00
Dan Brown	cdb1c7ef88	Added destination permission checking to entity move	2018-04-14 18:47:13 +01:00
Dan Brown	0f7b0ad45a	Added ability to copy a page ... In 'More' menu alongside move. Allows you to move if you have permission to create within the new target parent. Closes #673	2018-04-14 18:00:16 +01:00
Dan Brown	582158f70e	Added tags to chapters and books ... Closes #121	2018-03-30 14:09:51 +01:00
Dan Brown	1a9f676416	Updated create routes to prevent slug clashes ... Fixes #758	2018-03-25 11:34:42 +01:00
Dan Brown	1ad6fe1cbd	Added togglable script escaping to page content ... Configurable via 'ALLOW_CONTENT_SCRIPTS' env variable. Fixes #575	2018-03-17 15:52:42 +00:00
Dan Brown	96b8c403a8	Fixed failing book view test ... Also ensured setting system localcache is cleared correctly	2017-12-30 16:09:27 +00:00
Dan Brown	359b1b40a2	Fixed broken table/ol/ul page includes ... Fixes #640	2017-12-30 15:50:33 +00:00
Abijeet	d5a2529775	Adds test cases and fixes an issue with the permission checking. ... Signed-off-by: Abijeet <abijeetpatro@gmail.com>	2017-12-26 15:46:20 +05:30
Abijeet	6a54733f2b	Adding testcases for comments disable / enable setting.	2017-11-16 23:32:36 +05:30
Dan Brown	711ba258f1	Prevented mulitple hypens incorrectly in slug ... Added test to check slug format. Fixes #589	2017-11-11 16:27:29 +00:00
Dan Brown	f094837709	Added test to cover multi-byte slugs ... Also removed check for 'mb_' functions since mbstring is a dependancy	2017-11-11 16:15:08 +00:00