1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-02 02:57:26 +01:00
Commit Graph

7101 Commits

Author SHA1 Message Date
8chan
d63dea93c5 Remove links from ban list 2014-12-24 06:14:04 -08:00
8chan
87e914948b SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2014-12-24 06:08:19 -08:00
7185
21107d7f35 Clean Tomorrow theme 2014-12-22 01:27:27 +01:00
7185
5c2d5a9494 Merge remote-tracking branch 'upstream/master' 2014-12-22 01:23:10 +01:00
8chan
906611e7ac Don't expand webm or YouTube videos on js/expand-all-images.js 2014-12-20 14:02:03 -08:00
8chan
bb81e9e0c3 Fix weird "Default object created from empty vlaue" error
Looks like $file can be NULL sometimes, though that should be illegal. Probably an unfixed post.php bug...
2014-12-20 14:00:48 -08:00
8chan
c67c575561 Merge /srv/http 2014-12-20 15:04:23 +00:00
8chan
01cca90597 Unicode emoji support 2014-12-20 07:04:20 -08:00
8chan
c1ad74a136 Show first 256 chars of body in <title> 2014-12-20 07:02:42 -08:00
8chan
bedc95f97c Update flags template 2014-12-20 07:02:26 -08:00
8chan
e843f81f3c Customize embed sizes 2014-12-20 07:02:00 -08:00
8chan
025713547c Tweak flag size requirements 2014-12-20 07:01:40 -08:00
8chan
5b5a0b9061 Force subject OP 2014-12-20 07:01:25 -08:00
8chan
b981226cf6 Obscenity.html link in FAQ 2014-12-20 07:00:43 -08:00
8chan
13c75110b9 Fix board removal on 404, splice not pop @bui 2014-12-20 07:00:26 -08:00
8chan
c59a840cc7 Merge /srv/http 2014-12-17 13:30:15 +00:00
8chan
8b701ef10a Add news+ to excluded in FAQ 2014-12-17 05:29:56 -08:00
8chan
d0d2abe8ec Why not let users resize the QR horizontally? 2014-12-16 00:33:20 -08:00
8chan
9dbc4e93be Show backlinks on OP 2014-12-15 23:35:39 -08:00
8chan
d956c9a58e Merge https://github.com/ctrlcctrlv/8chan 2014-12-16 01:52:58 +00:00
8chan
958dbb1af6 Merge /srv/http 2014-12-16 01:52:48 +00:00
8chan
cccc1bff79 Fix new highlightReply in Gecko 2014-12-15 17:52:31 -08:00
8chan
f8c1d7c80f what the fuck were you even thinking
this is an insane default

BUGFIX: all-Japanese, all-Arabic, etc posts no longer trip the filter if not robot_enable
2014-12-15 17:50:22 -08:00
Fredrick Brennan
d871e3942d Merge pull request #279 from forklessanon/fix-3
Fix thread stats so post count hover works on the OP's id.
2014-12-16 09:48:56 +08:00
Fredrick Brennan
6e08634be9 Merge pull request #281 from topkek/wrap-backlinks
Allow backlinks to wrap normally
2014-12-16 09:43:54 +08:00
Fredrick Brennan
14fce406a8 Merge pull request #308 from forklessanon/patch-6
Added tripcode removal to post editing
2014-12-16 09:42:53 +08:00
Forkless
d457cb57b8 Added tripcode removal to post editing 2014-12-14 22:49:54 -06:00
Fredrick Brennan
d53ce19076 Merge pull request #285 from topkek/treeview
Add tree view to options dialog & close ctrlcctrlv/8chan#280
2014-12-14 19:43:20 +08:00
Fredrick Brennan
26d78b1ce5 Merge pull request #301 from topkek/image-expanding
Scroll to thumbnail when shrinking an expanded image
2014-12-14 19:41:30 +08:00
Fredrick Brennan
d8b34a3237 Merge pull request #276 from wholelotofhs/master
Adds an option to disable custom board stylesheet
2014-12-14 19:40:02 +08:00
8chan
1b2ef21b8c Merge /srv/http 2014-12-14 11:29:50 +00:00
8chan
968fab9420 + signs in banner board names 2014-12-14 03:29:34 -08:00
8chan
1c207c0aa5 Bug fix: fix highlightReply() with the new floating boardlist 2014-12-14 03:29:00 -08:00
8chan
1cab7bc74f Prevent one type of blank-posting 2014-12-14 03:28:38 -08:00
8chan
e8f0610299 update update_boards.js 2014-12-14 03:28:19 -08:00
8chan
b9b1935e08 Bug fix: Boards were always unindexed in search engines 2014-12-14 03:28:04 -08:00
8chan
d705606729 Allow a board called news to exist 2014-12-14 03:27:26 -08:00
8chan
6ed13f3fb0 SECURITY: Board Owners could brick accounts by creating account names of matching users with different capitalizations 2014-12-14 03:26:45 -08:00
8chan
8ff796cf80 Update FAQ 2014-12-14 03:26:00 -08:00
8chan
9db6895c98 Allow + in board names, add some new config vars (news+) 2014-12-14 03:25:43 -08:00
8chan
57619d766f Let's not use this file. 2014-12-14 03:19:11 -08:00
topkek
96d69c52f2 Scroll to thumbnail when shrinking an expanded image 2014-12-09 21:26:29 +00:00
8chan
27cb60ebc5 Disable notes completely until per-board notes 2014-12-03 01:15:02 -08:00
8chan
8165dd6f66 Merge https://github.com/ctrlcctrlv/8chan 2014-12-03 09:13:46 +00:00
8chan
be379dfc69 Merge 2014-12-03 09:13:21 +00:00
Fredrick Brennan
5cc158732e Merge pull request #289 from b4x/master
Changed moderate to volunteer on
2014-12-03 16:26:16 +08:00
8chan
7e7cb6117d we dont even use this file anymore 2014-12-03 00:21:11 -08:00
8chan
05933f23d4 Make claim.html more discoverable 2014-12-03 00:20:36 -08:00
8chan
5aa40669a7 tags in settings.html 2014-12-03 00:20:20 -08:00
8chan
2671f9f9ea Merge 2014-12-03 08:20:19 +00:00