1
0
Fork 0
mirror of https://github.com/sbrl/Pepperminty-Wiki.git synced 2024-12-22 13:45:02 +00:00
Commit graph

933 commits

Author SHA1 Message Date
63c59ea151
Merge pull request #248 from neapsix/patch-php82-2
Fixes to deprecation warnings starting in PHP 8.2
2024-09-05 02:32:29 +01:00
690f93c96b
Merge pull request #247 from neapsix/patch-comments-0
Fix undefined var when posting new top-level comment
2024-09-05 02:25:46 +01:00
adef3064ab
firstrun: clarify data storage directory 2024-08-19 23:24:40 +01:00
06d0fe4c5e
feature-firstrun: correctly check for pdo_sqlite3 instead of sqlite3 in system requirements check 2024-08-19 22:08:48 +01:00
16354b467e
page-edit: fix typo 2024-02-10 19:25:10 +00:00
f787d39f45
user-table: fix typos
I got a new extension!
2023-12-18 23:26:50 +00:00
b2b9606622
Bugfix: correct help page link for interwiki links 2023-09-10 13:46:50 +01:00
Benjamin Spiegel
3abad2e61e Replace deprecated reset(object)
Calling `reset()` on an object causes warnings starting in PHP 8.2.
This commit replaces one instance with ArrayIterator object and
getIterator() method following a recommendation in the deprecation
notice RFC.
2023-06-05 21:48:14 -05:00
Benjamin Spiegel
484f71fc6c Replace deprecated ${var} in strings with {$var}
Using `${var}` to embed variables in strings causes warnings starting
in PHP 8.2. This commit replaces two instances with `{$var}`, following
recommendations in the deprecation notice and related RFC.
2023-05-22 00:34:20 -05:00
Benjamin Spiegel
ff437562e3 Fix undefined var in recent change for new comment
With the recent changes module, adding a recent change for a new comment
caused the warning "Undefined variable $comment_thread" if the comment
was not a reply. Use `isset()` instead of `!== NULL` to check for reply
depth, avoiding the warning when $comment_thread is not set.
2023-05-21 23:34:00 -05:00
0e675f4c6f
parsedown: fix templating under circumstances 2023-01-26 20:51:07 +00:00
c6fb3cdd6e
credits: fix typo
fixes #233
2022-09-17 17:36:20 +01:00
b0e1418175
typo 2022-08-14 22:31:08 +01:00
ccd0fa8f13
typo 2022-08-14 22:30:49 +01:00
b2ba00df56
Document redirect and redirected_from GET params to the view action 2022-08-14 21:41:17 +01:00
2ddad1ae59
page-list: add filter GET param to filter page list by a substring. 2022-08-03 01:13:04 +01:00
5ed37cad13
parser-parsedown: coment debug logging
...oops :P
2022-08-03 01:07:00 +01:00
96eb694a1d
Bugfix action-raw: add missing implode 2022-06-30 01:43:54 +01:00
9bc1380a7b
bugfix: fix reference to tags in action-raw 2022-06-30 01:42:52 +01:00
ec340d18a9
action-raw: updaate rest api docs 2022-06-30 01:39:56 +01:00
234f9fa371
Add x-tags to raw action 2022-06-29 00:06:36 +01:00
46f85c7b0c
page-edit: add missing refresh header 2022-05-26 02:49:18 +01:00
e54bacdcac
page-edit: fix user page permissions check to also occur in the save action 2022-05-26 01:12:51 +01:00
71544b5d9d
Merge branch 'master' of github.com:sbrl/Pepperminty-Wiki 2022-05-25 23:51:02 +01:00
49a675c042
Return a 409 Conflict instead of a 200 OK on an edit conflict when saving a page in the save action 2022-05-25 23:50:55 +01:00
f4ff1f41e1
Remove debug logging 2022-05-18 15:36:13 +01:00
3f76c64b82
Make PeppermintParsedown::extract_page_names more multibyte safe to avoid empty statistics 2022-04-24 14:38:21 +01:00
bf2d797d92
oneboxing: change to use [[[triple square brackets]]]
This is because for some reason when extending Parsedown to add a new 
block type for [[internal links]] to detect oneboxing means that it's 
impossible to  tell if we're inside e.g. a bulleted list or not :-/
2022-03-17 03:20:21 +00:00
434abdf29f
Add initial simple oneboxing support 2022-03-12 02:52:53 +00:00
f4f08d8066
docs: Update apiDoc
As it turns out, we used @apiVersion for things that weren't HTTP API 
routes. In such cases, the recommended directive is @since, not 
@apiVersion
2022-02-27 16:19:35 +00:00
bb9a56f59a
StorageBox: Fix crash when index.php is a symlink 2022-02-27 15:56:34 +00:00
d99ca1685c
lib-storage-box: make more robust
I have no idea what's going on here
2022-02-27 15:35:01 +00:00
0ecc874fc1
credits: add author of latest PR 2022-02-19 15:22:05 +00:00
ae4d03da17
Bugfix: Banish erroneous additional entries in complex tables of contents 2022-02-18 23:59:42 +00:00
334b928c1e
Add initial support for embedding videos from YouTube, Vimeo, etc 2022-02-07 02:46:47 +00:00
439187139d
Bugfix: fix crash when attempting to leave a top-level comment 2022-02-06 00:24:55 +00:00
75e2abce0f
parser-parsedown: fix typo in help 2022-01-30 02:36:48 +00:00
021ebaea22
Fix crash when loading the stats page 2022-01-05 02:47:28 +00:00
4853c1f604
fix login when hosting Pepperminty Wiki in a subdirectory 2021-09-30 21:26:30 +01:00
7cf545a3ca
Fix more intelligent returnto redirect 2021-09-30 21:06:07 +01:00
fa407ce99d
login: regenerate sessiono token on login; make returnto sanitisation more intelligent 2021-09-27 21:32:39 +01:00
4f3a1c3757
Display returnto URL above the login form if present to further mitigate CSRF issues 2021-09-27 20:51:12 +01:00
7b6cbbe821
feature-upload: ensure that Javascript in SVG images does not execute
My first time using Content-Security-Policy. Yay!

It's real powerful, but I have yet to find a good generator to help me 
create more complex policies. In this case, the policy allows everything 
by default, but disables all Javascript.

This new Content-Security-Policy header is served for all image 
previews.
2021-09-21 14:04:42 +01:00
f59e68127c
Ensured that the returnto GET parameter leads you only to another place on your Pepperminty Wiki instance (thanks, @JamieSlome) 2021-09-21 13:40:12 +01:00
4be6a181cb
Bugfix: XSS in format GET param of stats action 2021-09-21 13:29:27 +01:00
14eb9e0d41
fixup 2021-09-03 02:04:49 +01:00
edd1702ea3
page-sitemap: tweak description 2021-09-03 02:04:41 +01:00
ec0b556892
recent changes: fix broken charactetr when displaying page moves 2021-09-03 02:01:24 +01:00
de4536e173
page-view: XSS again again again 2021-09-03 01:50:09 +01:00
fef9102393
page-move: htmlentities & returnto support in login URLs 2021-09-03 01:41:51 +01:00