1420 Commits

Author	SHA1	Message	Date
Dan Brown	a6a78d2ab5	Refactored app service providers ... Removed old pagination provider as url handling now achieved in a better way. Removed unused broadcast service provider. Moved view-based tweaks into specific provider. Reorganised provider config list.	2022-09-27 02:48:05 +01:00
Dan Brown	dce6a82954	Added reason, if existing, into SAML acs error ... Closes #3731	2022-09-20 12:52:44 +01:00
Dan Brown	050d69ea27	Added extra setlocale format to help windows support ... Related to #3650	2022-09-20 12:00:14 +01:00
Dan Brown	8a749c6acf	Added and ran PHPCS	2022-09-18 01:25:20 +01:00
Dan Brown	623ccd4cfa	Removed old thai files, added romanian as lang option ... Also applied styleci changes	2022-09-06 17:41:32 +01:00
Dan Brown	6955b2fd5a	Widened svg content attribute xss filtering ... Takes care of additional cases that can occur. Closes #3705	2022-09-06 17:01:56 +01:00
Dan Brown	24f82749ff	Updated OIDC group attr option name ... To match the existing option name for display names. Closes #3704	2022-09-06 16:33:17 +01:00
Dan Brown	7101ce3050	Added "page_include_parse" theme event ... For custom control of include tag parsing.	2022-09-05 16:40:42 +01:00
Dan Brown	fbef0d06f2	Added permission visiblity control to image-delete button ... Includes test to cover. For #3697	2022-09-05 15:52:12 +01:00
Dan Brown	2d7552aa09	Addressed setlocale issue caught by phpstan ... setlocale could be called with no second param if the language given to the modified function was empty.	2022-09-05 13:33:05 +01:00
Dan Brown	ee1e936660	Applied styleci changes, updated composer deps	2022-09-05 13:18:37 +01:00
Dan Brown	9158a66bff	Updated & improved language locale handling ... Extracted much of the language and locale work to a seperate, focused class. Updated php set_locale usage to prioritise UTF8 usage. Added locale options for windows. Clarified what's a locale and a bookstack language string. For #3590 and maybe #3650	2022-09-02 19:19:01 +01:00
Dan Brown	7f8b3eff5a	Fixed failing tests due to shelf text changes, applied styleci changes	2022-09-02 14:47:44 +01:00
Dan Brown	c76b5e2ec4	Fixed local_secure_restricted preventing attachment uploads ... Due to option name change and therefore lack of handling. Added test case to cover.	2022-09-02 14:40:17 +01:00
Dan Brown	092b6d6378	Added test and handling for local_secure_restricted in exports	2022-09-02 14:21:43 +01:00
Dan Brown	f28ed0ef0b	Fixed shelf covers being stored as 'cover_book' ... Are now stored as 'cover_bookshelf' as expected. Added a migrate to alter existing shelf cover image types.	2022-09-02 12:54:54 +01:00
Dan Brown	27ac122502	Started work on local_secure_restricted image option	2022-09-01 16:17:14 +01:00
Dan Brown	34c63e1c30	Added test & update to prevent page creation w/ empty slug ... Caused by changes to page repo in reference work, This adds back in the slug generate although at a more central place. Adds a test case to cover the problematic scenario.	2022-09-01 12:53:34 +01:00
Dan Brown	f092c97748	Fixed lack of url reference updating on book child move	2022-08-30 22:12:52 +01:00
Dan Brown	9153be963d	Added book child reference handling on book url change ... Closes #3683	2022-08-30 22:00:32 +01:00
Dan Brown	1cc7c649dc	Applied StyleCi changes, updated php deps	2022-08-29 17:46:41 +01:00
Dan Brown	e537d0c4e8	Merge pull request #3656 from BookStackApp/x_linking ... Link reference tracking & updating	2022-08-29 17:45:05 +01:00
Dan Brown	961e418cb7	Fixed phpstan wanring about usage of static	2022-08-29 17:39:50 +01:00
Dan Brown	6edf2c155d	Added maintenance action to regenerate references	2022-08-29 17:30:26 +01:00
Dan Brown	401c156687	Merge pull request #3616 from BookStackApp/oidc_group_sync ... Added OIDC group sync functionality	2022-08-25 11:17:18 +01:00
Dan Brown	d134639eca	Doubled default revision limit ... Due to potential increase of revision entries due to auto-changes.	2022-08-23 16:32:07 +01:00
Dan Brown	b86ee6d252	Rolled out reference link updating logic usage ... Added test to cover updating of content on reference url change	2022-08-21 18:05:19 +01:00
Dan Brown	0dbf08453f	Built out cross link replacer, not yet tested	2022-08-21 11:29:34 +01:00
Dan Brown	26ccb7b644	Started work on reference on-change-updates ... Refactored out revision-specific actions within PageRepo for organisition and re-use for cross-linking work.	2022-08-20 21:09:07 +01:00
Dan Brown	f634b4ea57	Added entity meta link to reference page ... Not totally happy with implementation as is requires extra service to be injected to core controllers, but does the job. Included test to cover. Updated some controller properties to be typed while there.	2022-08-20 12:07:38 +01:00
Dan Brown	d198332d3c	Rolled out reference pages to all entities, added testing ... Including testing to check permissions applied to listed references.	2022-08-19 22:40:44 +01:00
Dan Brown	d5465726e2	Added inbound references listing for pages	2022-08-19 13:14:43 +01:00
Dan Brown	bbe504c559	Added reference handling on page actions ... Page update/create/restore/clone/delete. Added a couple of tests to cover a couple of those.	2022-08-17 17:37:27 +01:00
Dan Brown	3290ab3ac9	Added regenerate-references command test ... Also updated model resolvers to only fetch model ID, to prevent bringing back way more data from database than desired.	2022-08-17 16:59:23 +01:00
Dan Brown	5d29d0cc7b	Added reference storage system, and command to re-index ... Also re-named/orgranized some files for this, to make them "References" specific instead of a subset of "Util".	2022-08-17 14:40:14 +01:00
Dan Brown	344b3a3615	Added system to extract model references from HTML content ... For the start of a managed cross-linking system.	2022-08-16 13:23:53 +01:00
Dan Brown	837fd74bf6	Refactored search-based code to its own folder ... Also applied StyleCI changes	2022-08-16 11:28:05 +01:00
Dan Brown	e02bd5e57e	Added content security section to the api docs ... Related to #3636	2022-08-11 10:49:45 +01:00
Dan Brown	5f7cd735ea	Added content filtering of tags with javascript or data in values attr ... Case would be blocked by CSP but adding for cases where CSP may not be active when content taken externally. For #3636	2022-08-11 10:28:32 +01:00
Dan Brown	375abca1ee	Merge pull request #3632 from BookStackApp/ownable_permission_fix ... Fixed failed permission checks due to non-loaded fields	2022-08-10 17:59:46 +01:00
Dan Brown	031c67ba58	Reduced the memory usage, db queries and cache hits loading revisions ... Updated revision listing to only fetch required fields, massively reducing memory usage by not loading content. This also updates user avatar handling to effectively cache the avatar url within request to avoid re-searching from cache, which may improve performance of others areas of the application. This also upates handling of the revisions list view to extract table row to its own view to break things down a bit. For #3633	2022-08-10 17:50:35 +01:00
Dan Brown	16eedc8264	Fixed failed permission checks due to non-loaded fields ... Added additional exceptions to prevent such cases in the future, so that they are caught in dev ideally. Added test case specifically for reported favourite scenario.	2022-08-10 08:06:48 +01:00
Dan Brown	6e0a7344fa	Added revision activity types to system and audit log ... Closes #3628	2022-08-09 13:25:18 +01:00
Dan Brown	4209f27f1a	Set a fairly sensible limit on user name validation ... Also updated controller properties with types within modified files. Related to #3614	2022-08-09 12:40:59 +01:00
Dan Brown	89ec9a5081	Sprinkled in some user language validation ... For #3615	2022-08-04 17:24:04 +01:00
Dan Brown	b987bea37a	Added OIDC group sync functionality ... Is generally aligned with out SAML2 group sync functionality, but for OIDC based upon feedback in #3004. Neeeded the tangental addition of being able to define custom scopes on the initial auth request as some systems use this to provide additional id token claims such as groups. Includes tests to cover. Tested live using Okta.	2022-08-02 16:56:56 +01:00
Dan Brown	0bb5654f80	Updated composer deps, applied StyleCI changes	2022-07-27 11:07:41 +01:00
Dan Brown	d4a119b2aa	Fixed disabling of avatar urls, Removed id from gravatar image name ... Included test to cover avatar url disabling. Related to #1835	2022-07-26 12:10:19 +01:00
Dan Brown	0df5ae0658	Added core code-lang-favourites JS, PHP & CSS logic ... - Got the functionality now working to favourite items and store that status within the system for the user. - Improved CSS display for usability.	2022-07-25 13:10:27 +01:00
Dan Brown	b0adb74d62	Improved shelf book management interface ... - Added ability to search books list (Local simple text match). - Added handles, hover-states and cursor states for better user interaction and clearer use of drag & drop. - Improved styles for dark mode. - Converted shelf sort component to newer component format. - Modernized shelf controller code a little. Related to #3266	2022-07-24 12:23:25 +01:00