553 commits

Author	SHA1	Message	Date
ArthurHoaro	5f85fcd863	Working on shaarli/Shaarli#224 ... I reviewed character escaping everywhere with the following ideas: * use a single common function to escape user data: `escape` using `htmlspecialchars`. * sanitize fields in `index.php` after reading them from datastore and before sending them to templates. It means no escaping function in Twig templates. 2 reasons: * it reduces risks of security issue for future user made templates * more readable templates * sanitize user configuration fields after loading them.	2015-06-23 16:35:36 +02:00
nodiscc	578a84bda0	re-add readDb() missing from previous merge	2015-06-23 14:57:54 +02:00
VirtualTam	ca74886f30	LinkDB: move to a proper file, add test coverage ... Relates to #71 LinkDB - move to application/LinkDB.php - code cleanup - indentation - whitespaces - formatting - comment cleanup - add missing documentation - unify formatting Test coverage for LinkDB - constructor - public / private access - link-related methods Shaarli utilities (LinkDB dependencies) - move startsWith() and endsWith() functions to application/Utils.php - add test coverage Dev utilities - Composer: add PHPUnit to dev dependencies - Makefile: - update lint targets - add test targets - generate coverage reports Signed-off-by: VirtualTam <virtualtam@flibidi.net>	2015-06-11 00:45:45 +02:00