El RIDO
cebc9acce6
enable strict types in PHP
2024-06-04 07:13:55 +02:00
El RIDO
05402ef304
remove version from doc blocs
...
- @version in file header level isn't used on code docs, it is intended
for API versions at class or method level
- avoids needing to update all these files on version increment
- avoids needing to regenerate SRI hashes for privatebin.js through
extra phpunit run
- simplifies VERSION_FILES list
- avoids having to filter above list during loop
- adds a few missing doc bloc headers
2024-05-28 21:03:22 +02:00
El RIDO
22419cd68a
incrementing version
2024-05-13 19:18:30 +02:00
El RIDO
5067e9222c
incrementing version
2024-05-05 20:43:33 +02:00
El RIDO
b00528388f
Merge branch 'master' into chrono-privacy
2024-05-05 10:25:31 +02:00
El RIDO
0f9158b37b
allow disabling comment date display using discussiondatedisplay configuration option
2024-05-04 14:38:41 +02:00
El RIDO
491ed9a521
bootstrap 5 template function complete
...
current status:
- got expiration and format selections to work
- fixed modals (password, QR-code, etc.)
- replaced glyphicons with Bootstrap icons (needs CSP relaxation to work)
- tested the different settings and combinations
- got editor tabs to change active status
to be done:
- add "Dark Mode" to translation strings
- figure out how to change prettify theme when dark mode gets selected
- check tab alignment in HTML source
2024-04-18 21:36:43 +02:00
El RIDO
aad975a721
incrementing version
2024-02-11 15:31:11 +01:00
El RIDO
a3ee624d3a
incrementing version
2024-02-11 14:17:27 +01:00
El RIDO
d0420fb418
1.6.2 release
2023-12-15 07:20:20 +01:00
El RIDO
3bd570bd6a
incrementing version
2023-12-04 21:07:17 +01:00
El RIDO
f56907bd38
increment version
2023-09-11 19:36:45 +02:00
Sergio Giraldo
c665385ff6
feat: make the email button optional. Issue #1031
...
::by sergio giraldo
@ 20230909T2226CEST, gpg signed
2023-09-09 22:26:11 +02:00
El RIDO
01afe7d481
incrementing version
2023-07-09 08:44:22 +02:00
El RIDO
e84a8694e4
incrementing version
2022-12-24 05:52:07 +01:00
El RIDO
b5602dd1ae
incrementing version
2022-12-11 05:02:15 +01:00
El RIDO
b53df70227
Merge pull request #1008 from PrivateBin/jdenticons-test
...
Jdenticons size and speed test results
2022-11-10 07:28:13 +01:00
El RIDO
66600e5eb3
Merge pull request #1003 from PrivateBin/yourls-cleanup
...
improve configuration wording, adjust self check
2022-11-03 19:54:56 +01:00
El RIDO
987ead2719
ensure the basepath ends in a slash, if one is set
2022-11-03 07:47:50 +01:00
El RIDO
89d575ace3
in light of the perf/size test results of Jdenticons, switch back to Identicons as the default
2022-10-30 09:24:35 +01:00
El RIDO
8ac69590cf
add new Jdenticon comment icon library, set it as default, fixes #793
2022-10-26 06:53:56 +02:00
Jens-U. Mozdzen
dce8b8d352
updated code formatting
2022-10-23 01:07:43 +02:00
Jens-U. Mozdzen
3115cb8883
added parameters for server-side YOURLS shortener call
2022-10-23 00:19:43 +02:00
Felix J. Ogris
ee212b1a33
implemented S3 storage backend
...
added sample configuration + aws php sdk version
coding style cleanup
2022-10-22 18:30:24 +02:00
Ra'Jiska
8dded4e8e4
GCS Support for Uniform ACL Buckets
2022-10-06 12:19:06 +08:00
El RIDO
456ced37c2
incrementing version
2022-04-05 07:30:51 +02:00
El RIDO
11b16fc6fd
removed directive needed for the PDF preview in FireFox < 78
...
fixed in https://bugzilla.mozilla.org/show_bug.cgi?id=1582115 and
https://bugzilla.mozilla.org/show_bug.cgi?id=1638826 for FF 78
2022-03-27 08:45:33 +02:00
El RIDO
288cf3f005
Merge branch 'master' into stevenandres-master
2022-02-25 06:42:18 +01:00
El RIDO
0e3a7196f9
set frame-ancestors to none
...
disables embedding the site in any frames, which can bypass some of the security mechanisms reg. cross site scripting
2022-02-20 15:21:47 +01:00
El RIDO
91041d8c59
simplify/unify naming & wording of the two types of IP lists for the traffic limiter
2022-02-20 09:09:20 +01:00
El RIDO
d764c03759
Merge branch 'master' of https://github.com/stevenandres/PrivateBin into stevenandres-master
2022-02-20 08:44:09 +01:00
El RIDO
a200f8875c
php warning in templates, fixes #875
2022-02-15 19:02:44 +01:00
El RIDO
df2f5931cd
improve readability, kudos @rugk
2021-08-19 19:28:52 +02:00
El RIDO
ff3b668958
apply StyleCI recommendation
2021-08-19 11:04:31 +02:00
El RIDO
eb10d4d35e
be more flexible with configuration paths
...
1. only consider CONFIG_PATH environment variable, if non-empty
2. fall back to search in PATH (defined in index.php), if CONFIG_PATH doesn't contain a readable configuration file
2021-08-19 10:21:21 +02:00
El RIDO
3429d293d3
remove configurable dir for traffic & purge limiters
2021-06-08 06:37:27 +02:00
El RIDO
de8f40ac1a
kudos @StyleCI
2021-06-06 19:35:31 +02:00
El RIDO
c758eca0a4
removed automatic .ini configuration file migration, closes #808
2021-06-06 17:53:08 +02:00
Mark van Holsteijn
342270d6dd
added Google Cloud Storage support
2021-05-28 22:39:50 +02:00
LinQhost Managed hosting
63d6816c7c
Merge branch 'api-ip-exempt' of https://github.com/rodehoed/PrivateBin into api-ip-exempt
2021-05-05 08:43:32 +02:00
rodehoed
a806a6455e
QA
2021-05-04 11:20:24 +02:00
LinQhost Managed hosting
7d82c82fd9
Make it possible to exempt ips from the rate-limiter
2021-05-04 10:29:25 +02:00
El RIDO
fcb6422663
re-adding CSP directive sandbox allow-forms, it is needed for the password input form to work on the JS side
2021-04-18 21:05:32 +02:00
rugk
3ca01024fd
feat: disallow form submission alltogether
...
Following the tests and HTTP Observatory, I think we can disable forms altogether.
Fixes https://github.com/PrivateBin/PrivateBin/issues/778
2021-04-18 14:16:39 +02:00
rugk
5809a7cfa7
feat: add form-action CSP restriction
...
This follows a suggestion from HTTP Observatory:
> Restricts where <form> contents may be submitted by using form-action 'none', form-action 'self', or specific URIs
Fixes #778
2021-04-18 14:14:46 +02:00
El RIDO
7b7a32c0a7
apply StyleCI recommendation
2021-04-17 08:20:08 +02:00
rugk
fd7d05e862
Add base URL as default CSP restriction
...
This follows an [HTTP Observatory recommendation](https://observatory.mozilla.org/analyze/privatebin.net ):
> Restricts use of the <base> tag by using base-uri 'none', base-uri 'self', or specific origins.
Given we don't use that anywhere, this safe should be safe. (not tested practically though)
2021-04-16 22:04:28 +02:00
El RIDO
458ebcb321
incrementing version
2021-04-05 17:05:14 +02:00
El RIDO
bb6a44ce7a
remove double translation, avoid unsupported double quotes in INI file
2020-10-13 07:28:35 +02:00
Andreas Schneider
eb32ea1419
Make it possible to change the info text
...
This makes it possible to change the last part of the info text and
replace it with something individual. E.g pointing to the cmdline
client.
Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
2020-10-11 17:04:08 +02:00
