ArthurHoaro
9ff17ae20e
Add markdown_escape setting
...
This setting allows to escape HTML in markdown rendering or not.
The goal behind it is to avoid XSS issue in shared instances.
More info:
* the setting is set to true by default
* it is set to false for anyone who already have the plugin enabled
(avoid breaking existing entries)
* improve the HTML sanitization when the setting is set to false - but don't consider it XSS proof
* mention the setting in the plugin README
2017-03-04 09:38:12 +01:00
ArthurHoaro
63bddaad4b
Bump version to v0.8.3
...
Signed-off-by: ArthurHoaro <arthur@hoa.ro>
2017-01-20 16:47:36 +01:00
ArthurHoaro
faf8bdda50
Changelog v0.8.3
2017-01-20 16:44:52 +01:00
ArthurHoaro
848939b7ba
Fixes can login function call in loginform.html
...
Fixes #711
2017-01-20 16:41:33 +01:00
Arthur
1022c59df8
Merge pull request #717 from ArthurHoaro/v0.8
...
Preparation of v0.8.2
2016-12-15 11:58:39 +01:00
ArthurHoaro
455f776a3d
Bump version to v0.8.2
2016-12-15 11:52:31 +01:00
ArthurHoaro
5036cffade
v0.8.2 Changelog
2016-12-15 11:49:41 +01:00
ArthurHoaro
00be9941f3
Fix a regression: permalinks change when old links are edited
...
fixes #713
2016-12-15 11:43:42 +01:00
ArthurHoaro
3cc8c89830
Bump version to v0.8.1
...
Signed-off-by: ArthurHoaro <arthur@hoa.ro>
2016-12-12 03:38:12 +01:00
Arthur
75f7adee19
Merge pull request #707 from ArthurHoaro/changelog
...
changelog: add release date for v0.8.1 and add section v0.9.0
2016-12-12 03:32:13 +01:00
ArthurHoaro
00670b2071
changelog: add release date for v0.8.1 and add section v0.9.0
2016-12-12 03:30:54 +01:00
Arthur
622d7864e9
Merge pull request #706 from ArthurHoaro/changelog
...
changelog update
2016-12-12 03:28:02 +01:00
ArthurHoaro
6c1be5bcec
changelog update
2016-12-12 03:26:56 +01:00
Arthur
9cf93bcfc5
Merge pull request #697 from ArthurHoaro/feature/ids-bis
...
Link ID refactoring
2016-12-12 03:15:32 +01:00
Arthur
a0d079141e
Merge pull request #679 from ArthurHoaro/plugins/header
...
Improve theme dependent plugin placeholders:
2016-12-12 03:07:13 +01:00
ArthurHoaro
d592daea83
Add a persistent 'shorturl' key to all links
...
All existing link will keep their permalinks.
New links will have smallhash generated with date+id.
The purpose of this is to avoid collision between links due to their creation date.
2016-12-12 03:03:12 +01:00
ArthurHoaro
c3dfd89959
Unit Test for the new ID system
2016-12-12 03:03:12 +01:00
ArthurHoaro
01878a75b9
Apply the new ID system accros the whole codebase
2016-12-12 03:03:12 +01:00
ArthurHoaro
1dc37f9cf8
Update method to use the new ID system, which replaces linkdate primary keys.
...
creation and update dates are now DateTime objects.
Since this update is very sensitve (changing the whole database), the datastore will be automatically backed up into the file datastore.<datetime>.php.
2016-12-12 03:02:01 +01:00
ArthurHoaro
29d108820f
Link ID refactoring
...
Links now use an incremental unique numeric identifier.
This ID is persistent and must never change.
ArrayAccess is used to match the link ID with the array keys (see the comment in LinkDB for more details)
Key 'created' added, with creation date as a DateTime object. 'updated' is now also a DateTime.
2016-12-12 03:02:01 +01:00
Arthur
bea80e43a3
Merge pull request #702 from ArthurHoaro/feed-cdata
...
Remove new line between content tag and CDATA in ATOM feed
2016-12-05 11:18:59 +01:00
Arthur
cd93689537
Merge pull request #703 from ArthurHoaro/changelog
...
Add latest merged changes to the CHANGELOG
2016-12-05 11:18:39 +01:00
ArthurHoaro
b92287b698
Add latest merged changes to the CHANGELOG
2016-12-03 09:17:14 +01:00
Arthur
19b3930ff3
Merge pull request #701 from ArthurHoaro/plugins/md-html-doc
...
Describe markdown HTML rendering and display a warning
2016-12-03 08:52:12 +01:00
ArthurHoaro
1d2cef8aef
Remove new line between content tag and CDATA in ATOM feed
...
Content not starting directly with CDATA can be misinterpreted by some feed parsers.
2016-12-02 18:37:41 +01:00
ArthurHoaro
3d8f5cf84b
Describe markdown HTML rendering and display a warning
...
Fixes #688
2016-12-01 12:44:37 +01:00
ArthurHoaro
ba0fd80732
Improve theme dependent plugin placeholders:
...
- buttons_toolbar: now expect links represented by an array instead of HTML content
- fields_toolbar: now expect a form represented by an array instead of HTML content
- action_plugin: now expect links represented by an array instead of HTML content
Default templates updated accordingly
mprove theme dependent plugin placeholders:
2016-12-01 11:38:21 +01:00
Arthur
6781465fda
Merge pull request #691 from ArthurHoaro/plugins/no-md-feed
...
Markdown: fixes feed rendering with nomarkdown tag
2016-12-01 11:13:04 +01:00
Arthur
2a54398371
Merge pull request #700 from teromene/firefox-social-title
...
Show page title when sharing via Firefox Social.
2016-11-30 09:13:38 +01:00
Arthur
fd7d9cad2b
Merge pull request #699 from teromene/https-no-social
...
Disable Firefox Social in the tools section if the page is not loaded using HTTPS.
2016-11-30 09:13:22 +01:00
Teromene
870541f112
Show page title when sharing via Firefox Social.
2016-11-29 11:30:37 +00:00
Teromene
caa382dd55
Disable Firefox Social in the tools section if the page is not loaded using HTTPS, as Firefox will deny the request.
2016-11-29 11:06:31 +00:00
ArthurHoaro
266e3fe5c8
Markdown: fixes feed rendering with nomarkdown tag
...
* make sure we match exactly `nomarkdown` tag
* pass the whole link data to stripNoMarkdownTag() to:
* strip the noMD tag in taglist (array)
* strip the tag in tags (string)
Fixes #689
tmp
2016-11-22 10:26:03 +01:00
Arthur
76fb679e38
Merge pull request #692 from fpunktk/patch-1
...
add meta tag to block sending the referrer
2016-11-22 09:30:27 +01:00
Felix Kästner
1ef05d3601
Add meta tag to block sending the referrer
...
Add a meta tag that tells the browser not to send the referrer header to
external sites.
2016-11-21 22:54:03 +01:00
Arthur
e2e6ec0f4d
Merge pull request #680 from ArthurHoaro/apache-htaccess
...
.htaccess files: support Apache 2.4+ syntax
2016-11-08 15:32:14 +01:00
Arthur
8185e864a2
Merge pull request #684 from virtualtam/fix/docker/nginx
...
Docker: fix & improve nginx+php-fpm configuration
2016-11-08 12:06:00 +01:00
ArthurHoaro
5ebc1d504b
.htaccess files: support Apache 2.4+ syntax
...
If `mod_version` is enabled, the previous syntax will apply for Apache <2.4.
If not, the new syntax is used by default.
Fixes #676
`mod_version` identifier is `version_module` across all Apache versions. See:
* https://httpd.apache.org/docs/current/mod/mod_version.html
* https://httpd.apache.org/docs/2.2/mod/mod_version.html
* https://serverfault.com/questions/733910/how-do-i-load-mod-version-only-if-it-isnt-built-in-to-apache
Note that version_module comes built-in with Debian (and derivatives) Apache2 packages, see https://wiki.debian.org/Apache/PackagingFor24
2016-11-08 11:38:14 +01:00
VirtualTam
f5f6a4b7e2
Merge pull request #683 from ArthurHoaro/plugins/w3ccompliance
...
Plugins W3C compliance
2016-11-06 14:38:56 +01:00
VirtualTam
68579ad5c4
Docker: increase maximum file upload size to 10 MiB
...
Relates to https://github.com/shaarli/Shaarli/issues/681
Changed:
- nginx+php-fpm: set maximum upload size to 10 MiB
See:
- https://nginx.org/en/docs/http/ngx_http_core_module.html#client_max_body_size
- https://secure.php.net/manual/en/ini.core.php#ini.post-max-size
- https://secure.php.net/manual/en/ini.core.php#ini.upload-max-filesize
Signed-off-by: VirtualTam <virtualtam@flibidi.net>
2016-11-06 00:43:50 +01:00
VirtualTam
b7f8b874bb
Docker: set favicon location in nginx configuration
...
Relates to https://github.com/shaarli/Shaarli/issues/681
Fixed:
- nginx: set the favicon location
See http://serverfault.com/a/352861
Signed-off-by: VirtualTam <virtualtam@flibidi.net>
2016-11-05 19:57:36 +01:00
ArthurHoaro
989aa439dd
Plugins W3C compliance
...
Add an alt attribute to images
2016-11-05 15:13:32 +01:00
Arthur
849d1650c1
Merge pull request #677 from yapbreak/master
...
Piwik Plugin
2016-11-02 13:04:37 +01:00
Adrien Oliva
e6c7e33663
Add Piwik Plugin
...
[PullRequest #677 ] Change after Review
Fix logic, my bad!
2016-11-02 08:42:06 +01:00
VirtualTam
761b4e2837
Merge pull request #674 from ArthurHoaro/parsedown-composer
...
Use Composer for Parsedown and fix an issue with links
2016-10-22 12:53:15 +02:00
ArthurHoaro
c5941f316a
Fix an issue with links not being reversed in code blocks
...
Fixes #672
+ Markdown to HTML unit test
2016-10-22 11:13:48 +02:00
ArthurHoaro
e680cfea08
Use Composer to import Parsedown library
...
Reference #613
2016-10-22 11:13:13 +02:00
VirtualTam
3d5e0aede3
Merge pull request #673 from virtualtam/cleanup/linkdb
...
LinkDB: code cleanup
2016-10-21 11:04:52 +02:00
VirtualTam
954dc2446c
Merge pull request #665 from ArthurHoaro/fix/feed-hashtags
...
Fix hashtag links in Feeds
2016-10-20 21:37:28 +02:00
VirtualTam
735ed4a94e
LinkDB: explicit method visibility
...
Relates to https://github.com/shaarli/Shaarli/issues/95
Signed-off-by: VirtualTam <virtualtam@flibidi.net>
2016-10-20 21:33:42 +02:00