sbrl-github/Pepperminty-Wiki
sbrl-github
/
Pepperminty-Wiki
mirror of https://github.com/sbrl/Pepperminty-Wiki.git
1
0
Fork 0
Code
1,785 Commits 5 Branches 62 Tags 9.2 MiB
Commit Graph

455 Commits

Author SHA1 Message Date
Starbeamrainbowlabs 2e1e1d0535
100-run: fix XSS when action is not found 2021-09-25 11:42:07 +01:00
Starbeamrainbowlabs 978da55e00
Update changelog 2021-09-21 14:10:02 +01:00
Starbeamrainbowlabs f59e68127c
Ensured that the `returnto` GET parameter leads you only to another place on your Pepperminty Wiki instance (thanks, @JamieSlome) 2021-09-21 13:40:12 +01:00
Starbeamrainbowlabs 4be6a181cb
Bugfix: XSS in format GET param of stats action 2021-09-21 13:29:27 +01:00
Starbeamrainbowlabs 05555e7d55
Changelog: fix heading indents 2021-09-15 14:42:50 +01:00
Starbeamrainbowlabs 6b9dfbcf68
Update changelog again 2021-09-03 02:26:47 +01:00
Starbeamrainbowlabs 51475b41b1
Update Changelog 2021-09-03 02:25:58 +01:00
Starbeamrainbowlabs 07eed388bd
Bump version 2021-09-03 02:05:24 +01:00
Starbeamrainbowlabs ec0b556892
recent changes: fix broken charactetr when displaying page moves 2021-09-03 02:01:24 +01:00
Starbeamrainbowlabs 7aaded1f40
page-help: Add formats to data size bar on ?action=help&dev=yes 2021-09-03 01:29:49 +01:00
Starbeamrainbowlabs 1f51bf31c6
Add new file formats to the list of allowed formats for uploaded files: 
image/avif
image/jxl

Also, lesser known image formats:

image/hief image/heic
 2021-09-03 00:52:01 +01:00
Starbeamrainbowlabs 4a00a404e1
Update changelog 2021-09-03 00:28:20 +01:00
Starbeamrainbowlabs 80f77a93b5
feature-comments: fix potential XSS 2021-09-02 22:50:00 +01:00
Starbeamrainbowlabs 51be347000
action-protect: fix 2021-09-02 22:29:39 +01:00
Starbeamrainbowlabs d5ef65ce01
Update changelog 2021-09-02 21:35:12 +01:00
Starbeamrainbowlabs e0f65c2e65
action-hash: fix potential XSS in string GET param 2021-09-02 21:27:26 +01:00
Starbeamrainbowlabs b6fc5941b7
feature-watchlist: fix format GET parameter 2021-09-02 21:23:31 +01:00
Starbeamrainbowlabs 4fdbd9a427
Update changelog 2021-09-02 21:22:03 +01:00
Starbeamrainbowlabs 96546184dc
Implement simple slugify function 
I suspect I may have to fix a number of issues here.....
 2021-09-02 21:19:31 +01:00
Starbeamrainbowlabs 473e8e1fc9
Update changelog 2021-09-02 21:08:53 +01:00
Starbeamrainbowlabs 0a77065c3f
Bugfix: Fix stored XSS attack - ref CVE-2021-38600 
See https://github.com/hmaverickadams/CVE-2021-38600

For some reason the author did not think ti wise to let me know 
privately first - instead publicly announcing it via a GitHub repo..... 
sigh.

In addition, is this *really* a vulnerability? Since Pepperminty Wiki 
requires the site secret to set it up, I can't see that this has a real 
impact.

Still, I'll fix it anyway.....
 2021-09-02 20:54:06 +01:00
Starbeamrainbowlabs fab1b52882
Bugfix: fix error handling logic 2021-08-15 21:46:19 +01:00
Starbeamrainbowlabs ba70f74a96
Added automatic system requirements indicator to first run 2021-08-06 01:50:08 +01:00
Starbeamrainbowlabs e7b3f5e0d0
feature-upload: add function / class existence checks where functions from php extensions are required 2021-08-06 01:49:59 +01:00
Starbeamrainbowlabs fb9eec2d33
Fix & improve sidebar 2021-07-21 00:44:31 +01:00
Starbeamrainbowlabs 83012a1416
Prefix default value of logo_url with https: 
...apparently some browsers don't see //example.com as a valid URL
 2021-07-21 00:19:26 +01:00
Starbeamrainbowlabs 86206195b6
Fix crash when using the search bar in recent versions of php 2021-07-20 23:54:56 +01:00
Starbeamrainbowlabs 440b4e9cda
Add sidebar_show to the settings GUI & the configuration guide 2021-07-20 23:22:44 +01:00
Starbeamrainbowlabs 2e54a8a4d5
Improve resilience and error output if the PHP Zip extension is not installed on first run 2021-07-20 23:15:48 +01:00
Starbeamrainbowlabs 03c7d941e6
fix changelog 2021-04-11 21:49:44 +01:00
Starbeamrainbowlabs 26f5838ce0
Add experimental [display text](./Page Name.md) style internal links 
This  is transparently handled by a wrapper around inlineLink, which 
conditionally bails by returning the parent if parsing fails. It then 
~~ab~~uses inlineInternalLink to provide proper internal link support.

Fixes #190.
 2021-04-11 21:47:41 +01:00
Starbeamrainbowlabs 77880d9410
search: properly apply weightings in titlels and tags 2021-02-10 22:17:38 +00:00
Starbeamrainbowlabs b2a783e903
core: Support setting page through either GET or POST 
Fixes #217.
 2020-11-20 21:25:47 +00:00
Starbeamrainbowlabs d29b87eb6d
Make the statistic update system more resilient 2020-11-20 21:13:31 +00:00
Starbeamrainbowlabs 880c9e3796
Send `x-robots-tag: noindex,nofollow` with the login page 
SemrushBot, you better obey this one
 2020-10-26 18:59:53 +00:00
Starbeamrainbowlabs e0d5d72f08
Update changelog 2020-10-26 18:28:52 +00:00
Starbeamrainbowlabs 7dd9bd74c4
Add support for creating pages whose name is not yet known - fixes #194 2020-10-25 22:50:03 +00:00
Starbeamrainbowlabs 73f909141d
configuration guide: update to include count of how many settings we have so far 
...we've got 114 settings so far - pretty awesome! Also a challenge to 
navigate to find the right one that you want, though..... I'm open to 
suggestions (and contributions :P).
 2020-09-20 01:26:43 +01:00
Starbeamrainbowlabs f02caae2d1
Bump version for next stable release~! 2020-09-11 21:22:57 +01:00
Starbeamrainbowlabs 7fe8f1ab02
Bump version ready for next beta release 2020-09-05 00:51:46 +01:00
Starbeamrainbowlabs 32c6906a27
Update changelog 2020-08-31 21:05:20 +01:00
Starbeamrainbowlabs 0085ddf0c4
Don't emit custom css unless there's something to emit 2020-08-31 21:04:59 +01:00
Starbeamrainbowlabs 42971f573d
Bugfix: Fix invalid HTML generated by new hide_email() logic 2020-08-31 20:56:34 +01:00
Starbeamrainbowlabs 4012b31194
Changelog: layout 2020-08-19 17:00:09 +01:00
Starbeamrainbowlabs 9fad95035b
Fix inbody:searchterm advanced query syntax - fixes #210 (thanks to @SeanFromIT for the report) 2020-08-19 16:59:54 +01:00
Starbeamrainbowlabs 97f3e88a94
Update changelog & docs/bugfix system requirements 2020-08-19 15:10:23 +01:00
Starbeamrainbowlabs fe690c3b26
Changelog: add issue reference numbers 2020-08-19 14:50:32 +01:00
Starbeamrainbowlabs d9ddb504bf
Fix typo in the name of the didyoumean index (which is disabled by default). 
Admins need to manually rename `didyoumeaninddex.sqlite` → 
`didyoumeanindex.sqlite`
 2020-08-18 15:41:14 +01:00
Starbeamrainbowlabs 2ee9f54418
Update changelog 2020-08-18 13:52:18 +01:00
Starbeamrainbowlabs c2e4a04778
Fix #209 2020-08-18 13:49:16 +01:00