1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-12 15:51:17 +01:00
Commit Graph

23 Commits

Author SHA1 Message Date
8chan
fe9297aaaa Attempt to hide IPs from board volunteers 2014-10-09 21:39:37 -04:00
8chan
3da946268a SECURITY: Poster IDs could reveal IPs across boards
Imagine the following scenario:

Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B.

If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
2014-10-07 08:16:21 -07:00
czaks
8d0f1bf4ad fix a bug in filename truncation 2014-07-08 09:56:31 +02:00
czaks
fe126cb4bf rewrite filename truncation code; ref #53 2014-05-11 14:10:53 +02:00
Jason Lam
ff51706bfd add new truncate_filename filter 2014-05-09 20:42:57 -04:00
Fredrick Brennan
042e7b9c59 Deprecate postControls(), per-file deletion and spoilering 2014-04-30 17:18:35 -04:00
copypaste
c483e1258c multiimage posting 2014-04-27 15:48:47 +02:00
Michael Foster
df143c6b50 fix Twig permissions 2013-09-19 16:09:35 +10:00
Michael Foster
9c48084f3b upgrade twig library 2013-09-19 16:08:25 +10:00
Michael Foster
157dcf9fb1 Continue upgrading Twig 2013-08-01 15:55:28 -04:00
Michael Foster
0fe5528574 Upgrade Twig library 2013-08-01 15:20:12 -04:00
Michael Foster
6cdf603875 Fix last commit; Make Tinyboard Twig extension more mb-safe 2013-07-31 16:38:09 -04:00
Michael
cbc3bd0c0a Merge pull request #114 from Macil/rtlfix
Fix display issues with RTL control characters in post names, subjects, ...
2013-06-18 10:41:31 -07:00
Macil Tech
2fe79f6a61 Output times in UTC.
Let the client localize the times with js/local-time.js themselves. No
one cares what the server timezone is.

This fixes a bug where posts made in a different daylight savings mode
have their times displayed off by an hour. Their times would be rendered
to the server's own timezone area correctly, but then the server's
*current* utc-offset would be appended, which wouldn't match up.
2013-06-18 11:10:39 -05:00
Macil Tech
a92bb182d9 Fix display issues with RTL control characters in post names, subjects, and filenames. 2013-06-18 11:07:47 -05:00
Michael Save
af61bcaf77 Slightly less crappy stylesheet chooser 2012-05-06 01:37:46 +10:00
Michael Save
2a301de29f Paginate ?/noticeboard 2012-04-21 15:15:32 +10:00
Michael Save
a340c5b6ee edit users 2012-04-16 23:18:07 +10:00
Michael Save
761cb4feab ?/users (user list) 2012-04-13 21:43:01 +10:00
Michael Save
e92ee2b487 moderation log 2012-04-13 20:48:37 +10:00
Michael Save
9649550463 start on mod interface rewrite 2012-04-13 02:11:41 +10:00
Michael Save
dd0f421015 better anti-bot check 2012-04-12 17:20:49 +10:00
Michael Save
874b8cbf00 inc/contrib -> inc/lib 2012-04-09 20:52:26 +10:00