614 Commits

Author	SHA1	Message	Date
Dan Brown	f417675b1d	Prevented normal users from changing own email ... To address #1542 Updates to only allow email changes by users with the users-manage role permission.	2019-08-06 21:29:42 +01:00
Dan Brown	2955f414dd	Added iframe JS and data url escaping ... Related to #1531	2019-08-06 21:08:24 +01:00
Dan Brown	c732970f6e	Hardened page content script escaping ... Increased range of tests to cover. Fixes #1531	2019-07-10 20:17:22 +01:00
Dan Brown	3ad1b42a74	Updated page delete to handle inactive custom homepage correctly ... Fixes #1447	2019-05-27 12:40:19 +01:00
Dan Brown	13c0386e84	Updated string functions to use mulitbyte versions where needed ... Fixes #816	2019-05-25 16:15:19 +01:00
Dan Brown	8ae35f645a	Fixed faulty baseUrl rewrites ... Fixes #1452 May help #1377	2019-05-19 16:25:05 +01:00
Dan Brown	0a0ceb382e	Doubled image upload display thumb size ... Related to #1108	2019-05-19 14:52:17 +01:00
Dan Brown	896f88174a	Updated page navigation logic to ignore empty headers ... Fixes #1429	2019-05-15 21:02:11 +01:00
Dan Brown	d62d2384cb	Updated guest settings system to format value as per non-guest ... Fixes #1431	2019-05-07 22:56:48 +01:00
Dan Brown	97ffbaa740	Fixed issue where books titles could be leaked via shelf home view ... - Also added test to cover Fixes #1425	2019-05-07 22:42:48 +01:00
Dan Brown	ba09dad1fe	Fixed shelf activity display & updated book sort operation	2019-05-05 15:54:22 +01:00
Dan Brown	3f83c548f8	Ran phpcbf	2019-05-05 14:54:37 +01:00
Dan Brown	ad542f0407	Prevented potential inline JS event usage ... - Removes 'on*' attributes from elements. - Also updated script logic to remove scripts instead of escaping. - All JS injection removal now uses DomDocument + xpath parsing.	2019-05-05 13:53:37 +01:00
Dan Brown	8c190324ac	Updated existing image tests to reflect changes ... - Also added some new tests	2019-05-04 18:11:19 +01:00
Dan Brown	79f6dc00a3	Change image-selector to not use manager ... - Now changes the images directly for user, system & cover. - Extra permission checks added to edit & delete actions.	2019-05-04 15:50:29 +01:00
Dan Brown	cb832a2c10	Started diversion to not using image manager for cover/system/user	2019-04-27 14:55:23 +01:00
Dan Brown	a87ae16010	Started extraction of image controller to separate controllers	2019-04-27 14:18:00 +01:00
Dan Brown	aeb1fc4d49	Started rewriting back-end image managment	2019-04-21 15:52:29 +01:00
Dan Brown	4e49d06182	Merge branch 'fix/registraion-form-validation' of git://github.com/cw1998/BookStack into cw1998-fix/registraion-form-validation	2019-04-21 12:24:39 +01:00
Dan Brown	2bb06463d5	Added deeper content id de-duplication ... Closes #1393	2019-04-21 12:22:41 +01:00
Dan Brown	6c66a8935a	Added test to check page HTML id de-duplication ... Relates to #1393	2019-04-20 13:01:56 +01:00
Dan Brown	c24764018a	Updated ldap server option parsing to work with protocol and port ... - Aligns with PHP behaviour where ports is ignore for full LDAP URI. - Added tests to check format being passed to LDAP is as expected. - May be related to #1220 - Related to #1386 and #1278	2019-04-16 22:47:53 +01:00
Christopher Wilkinson	c8cf6731e2	Add min length validation on name on register form & add sign up link	2019-04-16 12:18:51 +01:00
Dan Brown	c380c10d54	Prevented bad duplicate IDs causing major exception ... Related to #1393	2019-04-15 21:20:32 +01:00
Dan Brown	7f3f6e65b9	Aligned item creation wording and updated shelf-book-add logic	2019-04-15 20:45:04 +01:00
Christopher Wilkinson	d3cd369247	Fix phpcs issues	2019-04-15 09:27:17 +01:00
Christopher Wilkinson	faa3a8b842	Add button to add a book directly from a shelf view	2019-04-15 09:27:17 +01:00
Dan Brown	ee58bea8b7	Updated user references to be app-default-supporting functions	2019-04-14 13:19:33 +01:00
Dan Brown	9406b4d4c9	Updated view toggle to store date ... Also added test for user list order preferences	2019-04-14 13:01:51 +01:00
Dan Brown	b12ae6d11b	Added bookshelves to breadcrumbs ... - Updated breadcrumb dropdown switchers and back-end sibling code to handle new breadcrumbs. - Added breadcrumb view composer and EntityContext system to mangage tracking if in the context of a bookshelf.	2019-04-07 18:28:11 +01:00
Dan Brown	221a483b40	Standardised view referencing to dot-notation	2019-04-07 12:00:09 +01:00
Dan Brown	0a06e2bce3	Actioned some todo items, Cleaned old grid css	2019-04-07 09:57:48 +01:00
Dan Brown	d9cde4123d	Fixed entity excerpt function signature misalignment	2019-04-06 18:47:27 +01:00
Dan Brown	7cda9b026e	Updated tests to suit layout changes, Updated 404 page ... - Also replaced 'or' usage in templates with null coalescing operator	2019-04-06 18:36:17 +01:00
Dan Brown	745a0bb98d	Updated custom homepage views	2019-04-06 17:31:59 +01:00
Dan Brown	aedff7dc6d	Added book selector to books sort ... Now more efficient rather than listing all books in the system.	2019-04-06 16:59:04 +01:00
Dan Brown	17969c0bbf	Added shelves and search shortcuts to profile page	2019-04-06 16:21:20 +01:00
Dan Brown	37bf7f11e4	Implemented new design in entity selector ... - Also showed entity path in search. - Cleaned popular entity fetch logic. - Cleaned entity selector JS code a little	2019-03-30 16:54:15 +00:00
Dan Brown	53a26a365c	Merge branch 'master' into 2019-design	2019-03-30 13:17:29 +00:00
Dan Brown	193e2ffebe	Prevent dbl exts. on img upload, Randomized attachment upload names	2019-03-24 19:08:21 +00:00
Dan Brown	f5fe524e6c	Added extension whitelist for image uploads ... - A continuation of the security issues addressed in v0.25.3	2019-03-21 19:43:15 +00:00
Dan Brown	37b91b6b0e	Hardened image file validation by removing custom validation ... - Added test to check PHP files cannot be uploaded as an image.	2019-03-20 23:59:55 +00:00
Dan Brown	8b7bee7c67	Updated standard entity lists	2019-03-17 15:07:03 +00:00
Dan Brown	5f2d226f09	Merge branch 'master' into 2019-design	2019-03-10 21:40:02 +00:00
Dan Brown	44c537de1a	Performed some LDAP service/test cleanup	2019-03-10 10:54:19 +00:00
Dan Brown	6bccf0e64a	Merge branch 'feature-ldap-attributes' of git://github.com/dfanara/BookStack into dfanara-feature-ldap-attributes	2019-03-10 10:31:09 +00:00
Dan Brown	042a6f9760	Updated shelf menu item to show on custom permission ... - Extended new 'userCanOnAny' helper to take a entity class for filtering. Closes #1201	2019-03-09 21:15:45 +00:00
Dan Brown	5c9b528517	Abstracted userCanCreatePage helper to work for any permisison ... - Added test to cover scenario where someone with create-own permission would want to copy a viewable item into a container entity that they own.	2019-03-09 16:50:22 +00:00
Dan Brown	6be2d3f28c	Merge branch 'Copy-For-View-Only' of git://github.com/mark-james/BookStack into mark-james-Copy-For-View-Only	2019-03-09 16:12:12 +00:00
Daniel Fanara	502ea608bf	Issue #1306 - Unit Tests for LdapService Changes	2019-03-09 01:08:49 -05:00