1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-02 02:57:26 +01:00
Commit Graph

7016 Commits

Author SHA1 Message Date
8chan
f60c3f5935 Preview board flags script 2014-12-24 06:14:33 -08:00
8chan
d63dea93c5 Remove links from ban list 2014-12-24 06:14:04 -08:00
8chan
87e914948b SECURITY / XSS : ?/edit allowed arbitrary HTML to be added by any user thru addition of <tinyboard raw html>1</tinyboard>
This allowed ANY user with ?/edit privilege to also have raw_html regardless of whether they had $config['mod']['rawhtml']

Now, any changes to <tinyboard> markup modifiers via ?/edit are not allowed. They are removed at read time, and before write they are removed again and the ones in the database (which should be clean...) are inserted instead.

Please immediately apply this patch to your instance if you are running any version of 8chan/infinity.
2014-12-24 06:08:19 -08:00
8chan
906611e7ac Don't expand webm or YouTube videos on js/expand-all-images.js 2014-12-20 14:02:03 -08:00
8chan
bb81e9e0c3 Fix weird "Default object created from empty vlaue" error
Looks like $file can be NULL sometimes, though that should be illegal. Probably an unfixed post.php bug...
2014-12-20 14:00:48 -08:00
8chan
01cca90597 Unicode emoji support 2014-12-20 07:04:20 -08:00
8chan
c1ad74a136 Show first 256 chars of body in <title> 2014-12-20 07:02:42 -08:00
8chan
bedc95f97c Update flags template 2014-12-20 07:02:26 -08:00
8chan
e843f81f3c Customize embed sizes 2014-12-20 07:02:00 -08:00
8chan
025713547c Tweak flag size requirements 2014-12-20 07:01:40 -08:00
8chan
5b5a0b9061 Force subject OP 2014-12-20 07:01:25 -08:00
8chan
b981226cf6 Obscenity.html link in FAQ 2014-12-20 07:00:43 -08:00
8chan
13c75110b9 Fix board removal on 404, splice not pop @bui 2014-12-20 07:00:26 -08:00
8chan
8b701ef10a Add news+ to excluded in FAQ 2014-12-17 05:29:56 -08:00
8chan
d0d2abe8ec Why not let users resize the QR horizontally? 2014-12-16 00:33:20 -08:00
8chan
9dbc4e93be Show backlinks on OP 2014-12-15 23:35:39 -08:00
8chan
cccc1bff79 Fix new highlightReply in Gecko 2014-12-15 17:52:31 -08:00
8chan
f8c1d7c80f what the fuck were you even thinking
this is an insane default

BUGFIX: all-Japanese, all-Arabic, etc posts no longer trip the filter if not robot_enable
2014-12-15 17:50:22 -08:00
8chan
968fab9420 + signs in banner board names 2014-12-14 03:29:34 -08:00
8chan
1c207c0aa5 Bug fix: fix highlightReply() with the new floating boardlist 2014-12-14 03:29:00 -08:00
8chan
1cab7bc74f Prevent one type of blank-posting 2014-12-14 03:28:38 -08:00
8chan
e8f0610299 update update_boards.js 2014-12-14 03:28:19 -08:00
8chan
b9b1935e08 Bug fix: Boards were always unindexed in search engines 2014-12-14 03:28:04 -08:00
8chan
d705606729 Allow a board called news to exist 2014-12-14 03:27:26 -08:00
8chan
6ed13f3fb0 SECURITY: Board Owners could brick accounts by creating account names of matching users with different capitalizations 2014-12-14 03:26:45 -08:00
8chan
8ff796cf80 Update FAQ 2014-12-14 03:26:00 -08:00
8chan
9db6895c98 Allow + in board names, add some new config vars (news+) 2014-12-14 03:25:43 -08:00
8chan
57619d766f Let's not use this file. 2014-12-14 03:19:11 -08:00
8chan
27cb60ebc5 Disable notes completely until per-board notes 2014-12-03 01:15:02 -08:00
8chan
7e7cb6117d we dont even use this file anymore 2014-12-03 00:21:11 -08:00
8chan
05933f23d4 Make claim.html more discoverable 2014-12-03 00:20:36 -08:00
8chan
5aa40669a7 tags in settings.html 2014-12-03 00:20:20 -08:00
8chan
3df5b86235 Return some important info from listBoards() 2014-12-03 00:19:50 -08:00
8chan
a86b07282f Featured -> Top 15 2014-12-03 00:19:27 -08:00
8chan
e7fbb7e509 Update footer, warrant canary, quote US law 2014-12-03 00:19:02 -08:00
8chan
a564bb8ecc Display some important information under the post form 2014-12-03 00:18:24 -08:00
8chan
8d34866636 Fix locale bugs, init_locale was not calling setlocale!? 2014-12-03 00:17:24 -08:00
8chan
6413bc78f6 Make this footer message optional 2014-12-03 00:16:25 -08:00
8chan
58c13bd2a7 Better post.php allow_delete error msg 2014-12-03 00:16:01 -08:00
8chan
dd1c160d35 Hash masked IPs option, use less_ip in inc/bans 2014-12-03 00:15:24 -08:00
8chan
8cc378eaf1 claim.html wrong account bug fix 2014-12-03 00:12:38 -08:00
8chan
b9dace7563 New mod.php pages: ?/tags and ?/reassign 2014-12-03 00:11:48 -08:00
8chan
fa9a3da913 New boards.html page now with tags 2014-12-03 00:10:28 -08:00
8chan
f8318d3425 Dont write catalogs if use_read_php 2014-11-22 01:46:37 -08:00
8chan
a7d4614a3e Better read.php +50 regex 2014-11-22 01:46:21 -08:00
8chan
6d54ae5262 read.php +50 fix 2014-11-22 00:44:57 -08:00
8chan
2228d2f511 Merge branch 'master' of https://github.com/ctrlcctrlv/8chan 2014-11-22 00:15:42 -08:00
8chan
ef0ab8bb00 Isnt set if first write 2014-11-22 00:15:32 -08:00
8chan
a76b5a27c7 Merge https://github.com/ctrlcctrlv/8chan 2014-11-21 23:35:40 -08:00
8chan
89f0d4f3bc This exclamation mark was confusing people 2014-11-21 23:34:23 -08:00