709 Commits

Author	SHA1	Message	Date
Dan Brown	5f7cd735ea	Added content filtering of tags with javascript or data in values attr ... Case would be blocked by CSP but adding for cases where CSP may not be active when content taken externally. For #3636	2022-08-11 10:28:32 +01:00
Dan Brown	16eedc8264	Fixed failed permission checks due to non-loaded fields ... Added additional exceptions to prevent such cases in the future, so that they are caught in dev ideally. Added test case specifically for reported favourite scenario.	2022-08-10 08:06:48 +01:00
Dan Brown	97ec560282	Added test to cover export body start/end partial usage	2022-08-09 13:49:42 +01:00
Dan Brown	45dc28ba2a	Applied latest styleci changes	2022-08-09 13:26:45 +01:00
Dan Brown	6e0a7344fa	Added revision activity types to system and audit log ... Closes #3628	2022-08-09 13:25:18 +01:00
Dan Brown	89ec9a5081	Sprinkled in some user language validation ... For #3615	2022-08-04 17:24:04 +01:00
Dan Brown	0bb5654f80	Updated composer deps, applied StyleCI changes	2022-07-27 11:07:41 +01:00
Dan Brown	bd14dc067b	Added 'Sort Book' action to chapters ... Related to #2335	2022-07-26 12:36:17 +01:00
Dan Brown	d4a119b2aa	Fixed disabling of avatar urls, Removed id from gravatar image name ... Included test to cover avatar url disabling. Related to #1835	2022-07-26 12:10:19 +01:00
Dan Brown	7fdc7c68b9	Added test to cover code favourite pref. endpoint	2022-07-25 18:48:40 +01:00
Dan Brown	975ba4f8d8	Added content-view body classes generated from tags ... Included tests to cover. Closes #3583	2022-07-23 18:29:04 +01:00
Dan Brown	840a1ea011	Applied latest styleci changes	2022-07-23 15:11:06 +01:00
Dan Brown	72c8b138e1	Updated tests to use ssddanbrown/asserthtml package ... Closes #3519	2022-07-23 15:10:18 +01:00
Dan Brown	4e8995c3d0	Added ability to adjust stored IP address precision ... Included tests to cover. For #3560	2022-07-23 13:41:29 +01:00
Dan Brown	67d12cc1df	Fixed failing license test	2022-07-23 12:08:55 +01:00
Dan Brown	f573e09004	Applied styleci changes, updated dev version & readme roadmap	2022-07-23 11:36:37 +01:00
Dan Brown	56da25b07a	Fixed failing tests from dompdf chanages	2022-07-17 14:32:09 +01:00
Dan Brown	5f5b6ff0be	Added "ACTIVITY_LOGGED" theme event ... Closes #3572	2022-07-17 13:28:56 +01:00
Dan Brown	9cf05944f6	Applied StyleCI changes	2022-07-17 10:32:16 +01:00
Dan Brown	e6e6d25974	Removed test web route, extracted text, added test	2022-07-17 10:18:24 +01:00
Dan Brown	8f90996cef	Dropped use of non-view joint permissions	2022-07-16 21:50:42 +01:00
Dan Brown	2989852520	Added simple data model for faster permission generation	2022-07-12 21:13:02 +01:00
Dan Brown	b0a4d3d059	Renamed and cleaned up existing permission service classes use	2022-07-12 20:15:41 +01:00
Dan Brown	2d4f708c79	Extracted permission building out of permission service	2022-07-12 19:38:11 +01:00
Dan Brown	0bcd1795cb	Auth group sync: Fixed unintential mapping behaviour change ... Due to change in how casing was handled when used in the "External Auth ID" role field. Likely related to #3535. Added test to cover.	2022-06-27 14:18:46 +01:00
Dan Brown	107df6c28f	Applied StyleCI changes	2022-06-25 14:27:32 +01:00
Dan Brown	3ed1ffdbeb	Fixed issue blocking tags on book update ... For #3527	2022-06-25 13:46:55 +01:00
Dan Brown	46d71a181e	Updated php deps and applied styleci changes	2022-06-22 12:49:58 +01:00
Dan Brown	8d8da31fdd	Added base template convenience partials for theme system users ... Included test to cover usage and paths. Closes #894	2022-06-22 12:47:31 +01:00
Dan Brown	0d9b5a9d90	Merge branch 'login-auto-redirect' into development	2022-06-21 15:38:01 +01:00
Dan Brown	8b211ed461	Review and update of login auto initiation PR ... For PR #3406 - Updated naming from 'redirect' to 'initate/initation'. - Updated phpunit.xml and .env.example.complete files with the new option. - Cleaned up controller logic a bit. - Added content and design to the new initation view to not leave user on a blank view for a while. - Added non-JS button to initiation view as fallback option for progression. - Moved new test to it's own Test class and expanded with additional scenario tests for better functionality coverage.	2022-06-21 15:32:18 +01:00
Dan Brown	0c6f598d91	Fixed issue where text after line breaks not indexed ... Linebreaks would previously essentially be removed during index and hence joined to adjacent words, breaking prefix matching. Added test to cover. For #3508	2022-06-20 23:47:42 +01:00
Dan Brown	388343aeb0	Fixed failing tests after conversion changes	2022-06-19 18:44:34 +01:00
Dan Brown	ba25dda031	Applied styleci changes for conversion work	2022-06-19 18:14:53 +01:00
Dan Brown	85f59b5275	Added tests for content conversion action permissions ... - Updated 'removePermissionFromUser' test helper to work for entity-permissions that become part of the joint permissions system.	2022-06-19 18:12:36 +01:00
Dan Brown	65d4505079	Added tests and doc updates for shelf/book cover image API abilities	2022-06-19 17:26:23 +01:00
Dan Brown	663f81a2b1	Added tests to cover convert functionality ... Also updated cloner class with typed properties.	2022-06-19 16:57:33 +01:00
Dan Brown	d676e1e824	Started work on hierachy conversion actions ... - Updates book/shelf cover image handling for easier cloning/handling. - Adds core logic for promoting books/chapters up a level. - Enables usage of book/shelf cover image via API. Related to #1087	2022-06-13 17:20:21 +01:00
Dan Brown	c8b123bfac	Updated composer deps, applied styleci changes	2022-06-08 18:00:30 +01:00
Dan Brown	88012449f3	Reorganised and split out export templates & styles ... Moved export templates elements into their own folder for better grouping of logical usage. Within the base export template, added some body classes to allow easier targeted customisation via custom head css. Split content of export templates into smaller partials for easier future customization. Closes #3443	2022-06-08 17:56:59 +01:00
Dan Brown	16e023985d	Prevented inadvertant logging during MFA flow ... - Added StoppedAuthenticationException to dontReport list. - Added test to cover. Closes #3468	2022-05-30 18:31:08 +01:00
Dan Brown	39fcf3a68f	Merge pull request #3416 from BookStackApp/group_sync_comma_escaping ... Added ability to escape role "External Auth ID" commas	2022-05-30 16:55:32 +01:00
Dan Brown	49498cfaf9	Fixed entity-specific tag counts listing ... Was reporting wrong due to use of old polymorphic namespace references. Test was not picking up as assertElementContains had wider scope than expected, looking within the HTML of the element instead of the text which you might expect. Updated test helper to look at text instead.	2022-05-16 14:05:21 +01:00
Dan Brown	3a8a476906	Updated translators, applied styleCI change	2022-05-09 16:09:31 +01:00
Dan Brown	328bc88f02	Fixed LDAP_DUMP_* options when data contains binary ... Dumping details that were binary, such as the jpegphoto data, would cause the dump to fail on the encoding to JSON. This change forces content to be UTF8 before dumping. Updated existing test to cover. Closes #3396	2022-05-09 15:57:50 +01:00
Dan Brown	93ef8c97b6	Applied styleci changes	2022-05-04 21:19:46 +01:00
Dan Brown	d795af04df	Added ability to escape role "External Auth ID" commas ... - Using a backslash in this field before a comma. - Could potentially (Although unlikely) be a breaking change. For #3405	2022-05-04 21:03:13 +01:00
Dan Brown	ebc69a8f2c	Fixed double path slash URL issue in some cases ... - Occurred on system request path usage (Primarily on guest login redirection) when a custom path was not in use. - Added test to cover. For #3404	2022-05-04 20:08:22 +01:00
Robert Meredith	d5ce6b680c	Skip intermediate login page with single provider	2022-05-02 20:35:11 +10:00
Dan Brown	c216a6a210	Applied stylci changes, updated composer deps	2022-04-29 15:38:06 +01:00