d5ef65ce01
Update changelog
2021-09-02 21:35:12 +01:00
e0f65c2e65
action-hash: fix potential XSS in string GET param
2021-09-02 21:27:26 +01:00
b6fc5941b7
feature-watchlist: fix format GET parameter
2021-09-02 21:23:31 +01:00
4fdbd9a427
Update changelog
2021-09-02 21:22:03 +01:00
96546184dc
Implement simple slugify function
...
I suspect I may have to fix a number of issues here.....
2021-09-02 21:19:31 +01:00
473e8e1fc9
Update changelog
2021-09-02 21:08:53 +01:00
0a77065c3f
Bugfix: Fix stored XSS attack - ref CVE-2021-38600
...
See https://github.com/hmaverickadams/CVE-2021-38600
For some reason the author did not think ti wise to let me know
privately first - instead publicly announcing it via a GitHub repo.....
sigh.
In addition, is this *really* a vulnerability? Since Pepperminty Wiki
requires the site secret to set it up, I can't see that this has a real
impact.
Still, I'll fix it anyway.....
2021-09-02 20:54:06 +01:00
fab1b52882
Bugfix: fix error handling logic
2021-08-15 21:46:19 +01:00
ba70f74a96
Added automatic system requirements indicator to first run
2021-08-06 01:50:08 +01:00
e7b3f5e0d0
feature-upload: add function / class existence checks where functions from php extensions are required
2021-08-06 01:49:59 +01:00
fb9eec2d33
Fix & improve sidebar
2021-07-21 00:44:31 +01:00
83012a1416
Prefix default value of logo_url with https:
...
...apparently some browsers don't see //example.com as a valid URL
2021-07-21 00:19:26 +01:00
86206195b6
Fix crash when using the search bar in recent versions of php
2021-07-20 23:54:56 +01:00
440b4e9cda
Add sidebar_show to the settings GUI & the configuration guide
2021-07-20 23:22:44 +01:00
2e54a8a4d5
Improve resilience and error output if the PHP Zip extension is not installed on first run
2021-07-20 23:15:48 +01:00
03c7d941e6
fix changelog
2021-04-11 21:49:44 +01:00
26f5838ce0
Add experimental [display text](./Page Name.md) style internal links
...
This is transparently handled by a wrapper around inlineLink, which
conditionally bails by returning the parent if parsing fails. It then
~~ab~~uses inlineInternalLink to provide proper internal link support.
Fixes #190 .
2021-04-11 21:47:41 +01:00
77880d9410
search: properly apply weightings in titlels and tags
2021-02-10 22:17:38 +00:00
b2a783e903
core: Support setting page through either GET or POST
...
Fixes #217 .
2020-11-20 21:25:47 +00:00
d29b87eb6d
Make the statistic update system more resilient
2020-11-20 21:13:31 +00:00
880c9e3796
Send x-robots-tag: noindex,nofollow
with the login page
...
SemrushBot, you better obey this one
2020-10-26 18:59:53 +00:00
e0d5d72f08
Update changelog
2020-10-26 18:28:52 +00:00
7dd9bd74c4
Add support for creating pages whose name is not yet known - fixes #194
2020-10-25 22:50:03 +00:00
73f909141d
configuration guide: update to include count of how many settings we have so far
...
...we've got 114 settings so far - pretty awesome! Also a challenge to
navigate to find the right one that you want, though..... I'm open to
suggestions (and contributions :P).
2020-09-20 01:26:43 +01:00
f02caae2d1
Bump version for next stable release~!
2020-09-11 21:22:57 +01:00
7fe8f1ab02
Bump version ready for next beta release
2020-09-05 00:51:46 +01:00
32c6906a27
Update changelog
2020-08-31 21:05:20 +01:00
0085ddf0c4
Don't emit custom css unless there's something to emit
2020-08-31 21:04:59 +01:00
42971f573d
Bugfix: Fix invalid HTML generated by new hide_email() logic
2020-08-31 20:56:34 +01:00
4012b31194
Changelog: layout
2020-08-19 17:00:09 +01:00
9fad95035b
Fix inbody:searchterm advanced query syntax - fixes #210 (thanks to @SeanFromIT for the report)
2020-08-19 16:59:54 +01:00
97f3e88a94
Update changelog & docs/bugfix system requirements
2020-08-19 15:10:23 +01:00
fe690c3b26
Changelog: add issue reference numbers
2020-08-19 14:50:32 +01:00
d9ddb504bf
Fix typo in the name of the didyoumean index (which is disabled by default).
...
Admins need to manually rename `didyoumeaninddex.sqlite` →
`didyoumeanindex.sqlite`
2020-08-18 15:41:14 +01:00
2ee9f54418
Update changelog
2020-08-18 13:52:18 +01:00
c2e4a04778
Fix #209
2020-08-18 13:49:16 +01:00
490aeb9752
Document structure of pageindex.json
2020-08-16 16:03:50 +01:00
12241c645d
config-info: add dark theme & link clicker thingy
2020-08-15 13:30:27 +01:00
3c5a407356
Really fix #205
2020-08-11 23:01:44 +01:00
5a62a0455b
Bump version for first beta release of v0.22!
2020-08-11 18:08:29 +01:00
b9cbfb7619
Bump title & tag match weightings in search results
2020-08-11 01:06:03 +01:00
89d835afa5
Don't redirect when clicking on a redirect page in the recent changes list
2020-08-11 01:02:17 +01:00
6bd71b89e2
Update changelog
2020-08-09 23:54:58 +01:00
c0fa5b8ae4
Finish improvements to pageindex rebuilder
...
also squash warning from stats engine during the firstrun wizard
2020-08-08 22:01:12 +01:00
3b799cbcba
parser-parsedown: fix templating
2020-08-08 01:54:10 +01:00
ddb7cd9c18
action-raw: add new typeheader GET parameter
2020-08-08 01:18:01 +01:00
75c15d66b2
page-move: Ensure that the new subpage actually exists - fixes #201
2020-08-06 15:47:41 +01:00
e3e2a01435
Improve PDF preview when embedded in pages - fixes #202
2020-08-06 15:28:24 +01:00
54250e71db
docs: tweak
2020-07-28 21:17:04 +01:00
8e93ea65dc
Changelog: more fiddling
2020-07-28 20:00:49 +01:00
334c3956c7
Fix changelog
2020-07-28 19:57:08 +01:00
5e3bde6cd9
New policy: Only officially supported versions of PHP are officially supported by Pepperminty Wiki
2020-07-28 19:47:02 +01:00
3f337b097b
Update changelog
2020-07-28 19:43:36 +01:00
1ec1705a62
Standardise error_log prefixes to aid clarity in multi-wiki environments
2020-07-28 19:42:41 +01:00
7d93aa6a10
Overhaul the way we use setcookie()
...
- Use SameSite=Strict to avoid issues in modern browsers & prevent
session-stealing attacks
- Use Secure when requests run over HTTPS by default to avoid
downgrade-based session-stealing attacks
- Add warning for PHP <= 7.2, as it doesn't support SameSite in
setcookie().
2020-07-28 19:40:22 +01:00
f559239e9b
Fix annoying scrollbar when editing long pages
2020-07-19 00:05:20 +01:00
86216fd4c1
search: squash file_get_contents warning, but more insight is needed. closes #193 .
2020-07-10 23:22:30 +01:00
b4e4094451
Bugfix libsearchengine: fix handling of exclusions that are in both the body and the title
2020-07-10 23:04:59 +01:00
41db6fb786
Fix name of avatars_gravatar_enabled setting
2020-07-10 19:49:25 +01:00
41009bb810
avatar: fix typo in uploaded avatar name & add new avatars_gravatar_enable setting
2020-07-10 19:46:06 +01:00
91439a8428
Update changelog to reflect v0.21.1-hotfix1
2020-07-09 00:46:16 +01:00
fae6e3ecae
debug: hide more secret stuff
2020-07-09 00:22:27 +01:00
3d83fe608e
Bugfix: squash \A
prepending tags for some users
2020-07-08 21:57:25 +01:00
1f36ca34ae
Bugfix: fix the large blank space issue in the blue & photo themes
...
Ref
https://github.com/sbrl/Pepperminty-Wiki/blob/master/Changelog.md#fixed-3
2020-07-08 21:38:03 +01:00
edc1a694dd
feature-comments: add 2 new settings
2020-07-08 19:35:42 +01:00
4378f4f526
Update changelog
2020-07-08 02:06:38 +01:00
0fc24c4ce9
themes: limit max width of sidebar & allow resize
...
....although it doesn't currently persist that information
2020-07-07 21:34:57 +01:00
1813fe73e2
Add absolute redirects
2020-07-07 21:10:38 +01:00
beb4e2e968
noindex, nofollow login pages to try and stop bots from getting into infinite loops
2020-06-11 20:52:25 +01:00
78d6adc6da
Update changelog
2020-06-04 19:15:57 +01:00
237d10f908
Bugfix: Display link when redirect page sends user to a another page that doesn't exist Note that this only shows for users with permission to edit the target page at the moment.
2020-06-04 19:11:29 +01:00
79ddc234d2
Bugfix: Squash warning when determining language in the fenced code block extensions
2020-06-04 01:42:29 +01:00
ec7cca0ccb
Update changelog
2020-05-25 21:30:09 +01:00
cd96e43e0f
Add reading time estimation
...
Disable with readingtime_enabled.
Also add new class system-text-insert for all things that appear below a
wiki page's title <h1> and the beginning of the body text
2020-05-24 21:47:40 +01:00
093b405182
Add meta theme-color support
2020-05-24 01:59:05 +01:00
d99587079f
Update changelog
2020-05-23 22:56:36 +01:00
69cbda5e79
parser-parsedown: add marked text support
...
Also update help text
2020-05-23 12:57:04 +01:00
04bb67f505
Fiddle with parsedown versions, remove ParsedownExtreme, and add our own checkbox implementation
2020-05-23 02:06:59 +01:00
a0f6e89643
Start implementing similar pages system, but it's not finished yet
...
We have the backend suggestion system done, but not the UI.
I can tell that this is going to require lots of tweaking to get just
right. I suspect it might be a good idea to explore some possible
tweakable settings we can add to allow people to tweak the engine to
better suit their individual setups.
2020-05-22 21:22:07 +01:00
ff46c132cd
Bump version. - v0.21 is here~!
2020-05-17 13:23:27 +01:00
6e3ec4863b
master settings page: fix invalid HTML that was causing layout issues
...
....especially when using the photo theme.
2020-05-09 15:43:12 +01:00
260cd6d4b4
build system: make PEPPRMINT_THEME environment variable work again
2020-05-09 15:38:39 +01:00
e252bad4ca
Bump version. It's time for the first beta release of v0.21 :D :D :D
2020-05-07 22:08:11 +01:00
a6a37033ec
Update changelog
2020-04-21 22:32:20 +01:00
2dacc5f99c
Disable the didyoumean typo correction engine by default & add it to the changelog
2020-04-21 22:13:08 +01:00
8278cd052b
parser-parsedown: add markdown support to image captions
2020-04-21 21:56:31 +01:00
c1af093ada
Reduce number of calls to stas_parse()
2020-04-21 21:01:00 +01:00
d294c7e89a
feature-upload: squash unlink() warning when file fails to upload
2020-04-21 20:08:17 +01:00
6b8040b78c
Update credits
2020-04-21 15:05:25 +01:00
ed9b6cfa51
Update changelog
2020-04-18 13:23:50 +01:00
0e0ccd9e00
Add new anoncomments setting
2020-04-18 13:23:18 +01:00
dbbd9e7514
Update changelog
2020-04-18 13:00:03 +01:00
300f1df8f4
Update changelog for v0.20.3-hotfix3
...
TODO: merge hotfixes into this branch
2020-04-18 12:55:14 +01:00
9fa2e935b0
theme/default: Fix mini tag margin
2020-03-14 17:21:14 +00:00
15b83cefa3
Update changelog
2020-03-10 01:49:57 +00:00
83c9d527cb
Bugfix: Squash empty tags when saving an edit to a page
2020-02-04 01:45:14 +00:00
83bf9acd86
Add tag input autocomplete when editing pages.
...
Thanks to Awesomplete by @LeaVerou :D
2020-01-26 21:04:39 +00:00
92283ec5d1
Changelog: layout
2020-01-17 19:12:03 +00:00
11611262c4
Add initial mobile theme support
2020-01-16 20:13:01 +00:00
844907086d
Add prefers-color-scheme dark mode to downloader
2020-01-16 19:17:54 +00:00