8chan
1338ca3091
SECURITY / XSS: Stop arbitrary HTML injection introduced by @forklessanon
2015-01-29 19:01:59 -08:00
8chan
da3927ed17
Put a limit on ?/recent
2015-01-29 19:01:11 -08:00
8chan
4cca83da8f
b/w issues, disable auto-gif for now
2015-01-28 17:57:31 -08:00
8chan
804247654d
No IP showing in purge()
2015-01-28 17:57:16 -08:00
8chan
5efd0e9b18
This is using jQuery now
2015-01-23 02:19:01 -08:00
Fredrick Brennan
f5b7e8adfe
Merge pull request #315 from forklessanon/feature-3
...
Added mod function to spoiler all images in a given post
2015-01-22 16:11:25 +08:00
Fredrick Brennan
fd7620bddf
Merge pull request #331 from marktaiwan/better-webm-thumbnail
...
Better webm thumbnail
2015-01-22 16:09:10 +08:00
8chan
138f9aeb40
Merge
2015-01-22 08:04:12 +00:00
8chan
c473b5409c
Fix no cache bug in display.php
2015-01-21 23:53:43 -08:00
8chan
f9119b16b9
Ban appeals for admin/globals fix
2015-01-21 23:52:50 -08:00
8chan
6cca52e92d
ReCAPTCHA lib fix
2015-01-21 23:52:25 -08:00
8chan
f66c78e20b
sql_open mask_db_error
2015-01-21 23:51:48 -08:00
8chan
290eed43d0
Some 8chan.co>8ch.net (rest in #348 )
2015-01-21 23:49:15 -08:00
Markerov
7011fdf9c2
round starting time down to nearest second
2015-01-07 03:18:24 +08:00
8chan
980d8784e5
Tinyboard is defunct. No reason to keep the update checker
2015-01-06 01:34:54 -08:00
8chan
0a2dfedb0e
Ban appeals: limit by board, make more efficient, enable in infinity
2015-01-06 01:34:27 -08:00
8chan
437ff83696
max wf bugfix
2015-01-06 01:32:45 -08:00
8chan
1a154223ea
Merge https://github.com/ctrlcctrlv/infinity
2015-01-05 04:40:24 -08:00
8chan
b7e6bca82e
Allow ADMIN level to use Global Volunteer capcode
2015-01-05 04:38:16 -08:00
Fredrick Brennan
755fc1e592
Merge pull request #334 from Pashe/css-urls
...
Board stylesheet URL filter fixes and whitelist additions
2015-01-05 12:43:33 +08:00
Pashe
916cb4c997
inc/functions.php: Tabs in code tags ( fixes #328 )
2015-01-03 23:48:57 -06:00
Pashe
e95a147e3e
8chan-mod-pages.php: Filter CSS imports from sites with potentially unsafe content (pomf.se)
2015-01-03 16:35:03 -06:00
Pashe
fe8b02442a
8chan-mod-pages.php: Make the CSS URL filter error message less vague
2015-01-03 16:16:55 -06:00
Pashe
dbc4fbc5fe
8chan-mod-pages.php: Fix CSS URL filter ignoring all but the last URL on a line
2015-01-02 23:27:12 -06:00
Pashe
aa71065dac
8chan-mod-pages.php: Add 8chan.co and fonts.gstatic.com to the CSS whitelist
2015-01-02 21:09:22 -06:00
Fredrick Brennan
3692d12cbc
Merge pull request #332 from cmdrk/master
...
Updated dnsbl to only block exit nodes
2015-01-01 14:57:24 +08:00
8chan
72255ad5b8
Merge
...
Conflicts:
stylesheets/style.css
2014-12-31 22:45:03 -08:00
8chan
c1ec49dc29
Mask DB error option
2014-12-31 22:42:42 -08:00
8chan
aa5d0e6e4b
Hour max threads filter
2014-12-31 22:37:38 -08:00
8chan
3f3b0051d8
Move login check in inc/mod/auth.php to a function
...
This allows pages like create.php to not include inc/mod/pages.php while still being able to use the mod auth functions (like generating salts and passwords)
2014-12-31 22:35:21 -08:00
8chan
351375185e
Early 404 option in clean()
2014-12-31 22:33:31 -08:00
8chan
db89ee7827
No file placeholder in catalog
2014-12-31 22:33:10 -08:00
8chan
0f3a65a984
First spam settings in ?/settings
2014-12-31 22:32:26 -08:00
8chan
04afbe904d
Move bans.html theme over to cron
2014-12-31 22:31:43 -08:00
cmdrk
69cd484038
Updated dnsbl to only block exit nodes
2015-01-01 00:09:58 -06:00
8chan
8ac83fbba6
Merge
...
Conflicts:
inc/mod/pages.php
2014-12-24 14:19:35 +00:00
8chan
f60c3f5935
Preview board flags script
2014-12-24 06:14:33 -08:00
8chan
d63dea93c5
Remove links from ban list
2014-12-24 06:14:04 -08:00
8chan
87e914948b
SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
...
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']
Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.
Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2014-12-24 06:08:19 -08:00
8chan
bb81e9e0c3
Fix weird "Default object created from empty vlaue" error
...
Looks like $file can be NULL sometimes, though that should be illegal. Probably an unfixed post.php bug...
2014-12-20 14:00:48 -08:00
8chan
c67c575561
Merge /srv/http
2014-12-20 15:04:23 +00:00
8chan
01cca90597
Unicode emoji support
2014-12-20 07:04:20 -08:00
8chan
025713547c
Tweak flag size requirements
2014-12-20 07:01:40 -08:00
8chan
5b5a0b9061
Force subject OP
2014-12-20 07:01:25 -08:00
Forkless
22878daecd
Added mod function to spoiler all images in a given post
2014-12-19 06:43:01 -06:00
8chan
d956c9a58e
Merge https://github.com/ctrlcctrlv/8chan
2014-12-16 01:52:58 +00:00
8chan
958dbb1af6
Merge /srv/http
2014-12-16 01:52:48 +00:00
8chan
f8c1d7c80f
what the fuck were you even thinking
...
this is an insane default
BUGFIX: all-Japanese, all-Arabic, etc posts no longer trip the filter if not robot_enable
2014-12-15 17:50:22 -08:00
Fredrick Brennan
14fce406a8
Merge pull request #308 from forklessanon/patch-6
...
Added tripcode removal to post editing
2014-12-16 09:42:53 +08:00
Forkless
d457cb57b8
Added tripcode removal to post editing
2014-12-14 22:49:54 -06:00
