El RIDO
4076a831eb
Merge branch 'master' into keyboard-trap
2025-01-05 07:23:41 +01:00
El RIDO
5936dbbb10
Merge branch 'master' into Ribas160-ux_adjustments_delete_link
2025-01-05 07:07:54 +01:00
ribas160
7b57d7b289
- trash icon added to bootstrap-icons.svg
...
- made delete link a separate button
- unit tests updated
2025-01-04 22:53:32 +02:00
El RIDO
eaa60e3a81
Merge branch 'master' into purify-3.2.3
2025-01-04 08:58:00 +01:00
El RIDO
45b38770db
Merge branch 'master' into keyboard-trap
2025-01-04 08:48:08 +01:00
ribas160
b86eb93dbe
Added the button to copy the paste link to the clipboard
2025-01-03 18:19:12 +02:00
ribas160
0462da6e8e
- used bootstrap 5 CSS icon named copy, bootstrap 3 CSS glyphicon named duplicate
...
- keyboard-shortcuts made more accessible by wrapping the keys into kbd-tags
- translate messages may contain allowed HTML tags
- added the record to the CHANGELOG.md
2025-01-02 15:13:44 +02:00
ribas160
a6a7df9a72
Merge remote-tracking branch 'upstream/master' into copy_to_clipboard_btn
...
# Conflicts:
# i18n/ar.json
# i18n/bg.json
# i18n/ca.json
# i18n/co.json
# i18n/cs.json
# i18n/de.json
# i18n/el.json
# i18n/en.json
# i18n/es.json
# i18n/et.json
# i18n/fi.json
# i18n/fr.json
# i18n/he.json
# i18n/hi.json
# i18n/hu.json
# i18n/id.json
# i18n/it.json
# i18n/ja.json
# i18n/jbo.json
# i18n/ko.json
# i18n/ku.json
# i18n/la.json
# i18n/lt.json
# i18n/nl.json
# i18n/no.json
# i18n/oc.json
# i18n/pl.json
# i18n/pt.json
# i18n/ro.json
# i18n/ru.json
# i18n/sk.json
# i18n/sl.json
# i18n/sv.json
# i18n/th.json
# i18n/tr.json
# i18n/uk.json
# i18n/zh.json
# lib/Configuration.php
2024-12-29 22:19:35 +02:00
ribas160
6c39a1441c
Copy paste to clipboard button added. Copy paste to clipboard shortcut added
2024-12-28 18:42:46 +02:00
El RIDO
be18dcb838
upgrading DOMpurify library to 3.2.3
2024-12-22 11:17:34 +01:00
El RIDO
3d59d3da50
change focus order for accessibility
...
tabbing out of the textarea jumps to the "Create" button, then the tab-toggle
2024-11-24 16:17:45 +01:00
El RIDO
c7195aaf9a
replicate template changes, fix bugs
...
- fixes QR code height introducing space even when hidden in page layout
- fix modals in bootstrap 5 (modal syntax changed heavily, no longer jQuery integrated)
- hide and show tab-toggle depending on application state
- don't encode HTML entities in translated messages containing kbd tags (in addition to links)
2024-11-24 15:42:38 +01:00
rugk
6876e14679
Merge remote-tracking branch 'origin/master' into fix-webkit
2024-10-22 22:32:32 +00:00
rugk
628b60dcb4
refactor: deferring everything including all potential deps
...
Also works on Safari…
2024-10-22 22:29:42 +00:00
El RIDO
07aeed1c4c
Merge branch 'master' into fix-webkit
2024-10-19 11:35:57 +02:00
El RIDO
ec2e981984
upgrading DOMpurify library to 3.1.7
2024-10-19 11:17:53 +02:00
parthiv-m
788146012e
Fix failing tests, update button icon and text according to feedback
2024-10-17 21:56:27 -04:00
theProton
922971590e
Merge branch 'PrivateBin:master' into navigate-after-delete
2024-10-17 21:22:29 -04:00
rugk
8d435d7c14
Fix style by removing optional parameter
...
Co-authored-by: El RIDO <elrido@gmx.net>
2024-10-18 02:59:20 +02:00
rugk
64ed6e96ee
fix: load in WebKit again by loading jquery, base and deflate libs non-async'ly
2024-10-16 22:46:18 +00:00
parthiv-m
773c56fc94
Fix conditional display of 'New' paste button on alert
2024-10-14 12:54:36 -04:00
parthiv-m
f2b60d3765
Add _is_deleted status message to Controller and prompt for button click after paste delete
2024-10-13 17:45:05 -04:00
El RIDO
aafc143a5a
strict types in templates
2024-10-11 07:14:18 +02:00
parthiv-m
d69d29f3a9
Fix: Once a paste is deleted, navigate to
...
the home page after 5 seconds; change type
of the corresponding alert to alert-success
2024-10-07 17:42:37 -04:00
El RIDO
ab2d2f2477
upgrading DOMpurify library to 3.1.6
2024-08-03 09:52:30 +02:00
El RIDO
d27e7e8ee3
make scriptTag parameter a string for flexibility and clarity
2024-07-09 21:38:41 +02:00
El RIDO
8b3b16be44
SRI hashes are now configurable, no longer hardcoded in templates
...
- addresses #1365
- should make upgrades easier for those using custom templates
- if the JS files got customized, the default SRI hashes can be replaced in the conf.php file, added commented section in conf.sample.php
2024-07-07 16:36:52 +02:00
El RIDO
b9d24b74b3
Merge branch 'version-sed'
2024-05-30 18:52:18 +02:00
9401adarsh
750a0adce4
chore: update sri hashes to reflect changes in js/
2024-05-29 16:21:08 +05:30
El RIDO
05402ef304
remove version from doc blocs
...
- @version in file header level isn't used on code docs, it is intended
for API versions at class or method level
- avoids needing to update all these files on version increment
- avoids needing to regenerate SRI hashes for privatebin.js through
extra phpunit run
- simplifies VERSION_FILES list
- avoids having to filter above list during loop
- adds a few missing doc bloc headers
2024-05-28 21:03:22 +02:00
El RIDO
c04c7b0f34
update SRI hashes, npm lock file
2024-05-21 07:14:12 +02:00
El RIDO
22419cd68a
incrementing version
2024-05-13 19:18:30 +02:00
El RIDO
619fbb6653
Merge remote-tracking branch 'origin/dompurify'
2024-05-13 06:57:41 +02:00
El RIDO
ee3b5ec08a
chore: upgrade DOMPurify from v3.1.2 to 3.1.3
2024-05-12 10:18:49 +02:00
El RIDO
2c8b5ed0e4
expiration time selection for bootstrap template, fixes #1309
2024-05-09 15:55:42 +02:00
El RIDO
11c26a7281
update SRI hashes and add missing translation messages
2024-05-06 12:40:48 +02:00
El RIDO
5067e9222c
incrementing version
2024-05-05 20:43:33 +02:00
El RIDO
843aa00473
Merge branch 'chrono-privacy'
2024-05-05 19:34:22 +02:00
El RIDO
6028a1d801
chore: upgrade jQuery from v3.7.0 to 3.7.1
2024-05-05 11:50:12 +02:00
El RIDO
b00528388f
Merge branch 'master' into chrono-privacy
2024-05-05 10:25:31 +02:00
El RIDO
06fb606aa7
Merge branch 'master' into bootstrap
2024-05-04 16:15:07 +02:00
El RIDO
2b87bf3d13
update SRI hashes
2024-05-04 16:14:12 +02:00
El RIDO
0f9158b37b
allow disabling comment date display using discussiondatedisplay configuration option
2024-05-04 14:38:41 +02:00
El RIDO
81fdf8ebfc
re-lax samesite cookie policy
...
As per discussion in code review:
> Cookies are always scoped in browsers. That's not the issue. SameSite attribute just protects against CSRF attacks. But Get requests (aka links) are also "protected" with Strict, which breaks it… and for users that is highly confusing when they (apparently arbitrarily) do not get the language they have set before when clicking a link.
https://github.com/PrivateBin/PrivateBin/pull/1287#discussion_r1589299210
2024-05-04 12:12:31 +02:00
rugk
4500794980
chore: ugrade DOMPurify from v3.0.8 to 3.1.2
...
This incluces v3.1.1, which says:
> Note that this is a security release and should be upgraded to immediately.
https://github.com/cure53/DOMPurify/releases/tag/3.1.1
The release notes of the actual version itself are https://github.com/cure53/DOMPurify/releases/tag/3.1.2
I do not found more information on the vulnerability that apparently is in there.
* [x] manually tested and works
2024-05-03 15:55:53 +00:00
El RIDO
c66d3f05da
semantics
2024-04-23 22:11:58 +02:00
El RIDO
e22da2e0d1
address "oneliner-hell"
2024-04-23 21:15:33 +02:00
El RIDO
658383e6d1
set lang cookie with strict SameSite property
2024-04-21 11:36:31 +02:00
El RIDO
15481290fb
fix tab alignment
2024-04-21 11:02:14 +02:00
El RIDO
545ba7506e
bootstrap 5 - fix password modal display
2024-04-21 11:01:40 +02:00
