summaryrefslogtreecommitdiff
path: root/include
AgeCommit message (Collapse)Author
2018-12-03fix loginAndrew Dolgov
2018-12-02move some more stuff out of common.jsAndrew Dolgov
rework client-side cookie functions a bit limit dojo cachebust based on server scripts modification time remove param_escape()
2018-12-02set use strict on JS modules; remove some mostly useless stuff like ↵Andrew Dolgov
get_minified_js()
2018-12-02remove obsolete row selection functionsAndrew Dolgov
move getUrlParam() to Utils
2018-12-02remove toggleSelectListRow2()Andrew Dolgov
2018-12-01bring back (debloated) version of unexpanded combined modeAndrew Dolgov
2018-12-01enable c-up/down hotkeys even out of cdmAndrew Dolgov
2018-11-30minor css fixes (mostly for zoom mode)Andrew Dolgov
2018-11-30strip_harmful_tags: remove data- attributesAndrew Dolgov
2018-11-30remove expandable CDM headlinesAndrew Dolgov
2018-11-30use xhrPost is even more places!Andrew Dolgov
2018-11-30debug logging system rework:Andrew Dolgov
* support various logging levels per-message * remove hacks like debug_suppress, DAEMON_EXTENDED_DEBUG, etc * _debug() is kept as a compatibility shim for plugins
2018-11-22sanity config: fix typoAndrew Dolgov
2018-11-22update sanity_config.phpAndrew Dolgov
2018-10-16fix session write handler always assuming that database entry exists and ↵Andrew Dolgov
failing silently if it doesn't; remove session cookie-related hacks
2018-10-16remove session REMOTE_ADDR checksAndrew Dolgov
2018-10-16login: check for stale session in login handler, instead of authenticate_user()Andrew Dolgov
2018-10-16another attempt to enforce session ID regeneration on loginAndrew Dolgov
2018-10-16properly save auth_module after logging inAndrew Dolgov
2018-10-15it was probably not the best idea to use session_regenerate_id() right after ↵Andrew Dolgov
session_start(), duh
2018-10-15do not use separate _ssl cookie for secure sessionsAndrew Dolgov
2018-10-15force regenerate session id on successful login, remove previous blank SID checkAndrew Dolgov
2018-10-15if empty session is autostarted because of a cookie, immediately destroy itAndrew Dolgov
2018-10-15validate_session: bring back IP session binding (enabled by default) and UA ↵Andrew Dolgov
checking
2018-10-14logout user: commit destroyed sessionAndrew Dolgov
2018-09-071. per-feed option STRIP_IMAGES should now also affect other media tagsAndrew Dolgov
2. video/audio elements were not replaced with text links properly in low bandwidth mode
2018-08-23send_local_file: touch() sent files to reset their expiration cooldownAndrew Dolgov
2018-08-20rewrite_cached_urls: support video postersAndrew Dolgov
2018-08-20Revert "add (hidden) _NGINX_XACCEL_PREFIX which uses nginx X-Accel-Redirect ↵Andrew Dolgov
to serve static files faster" This reverts commit c5c3a0a2a8febaa2b1ebcae6c17ff4398a9da6c7.
2018-08-20split transparent rewriting of locally cached media URLs to execute after ↵Andrew Dolgov
both sanitize() and HOOK_RENDER_ARTICLE to allow plugins work on original source URLs consistently
2018-08-20add (hidden) _NGINX_XACCEL_PREFIX which uses nginx X-Accel-Redirect to serve ↵Andrew Dolgov
static files faster
2018-08-16send_local_file: add application/octet-stream hackAndrew Dolgov
cached_url: return original requested filename to save as
2018-08-13if PHP_VERSION check fails, show current versionAndrew Dolgov
2018-08-13bump version_staticAndrew Dolgov
2018-08-13bump required php version to 5.6Andrew Dolgov
2018-08-13remove FEED_CRYPT_KEY and everything related to itAndrew Dolgov
always assume auth_pass_encrypted is false
2018-07-18autoloader: check if class name is namespaced before trying to split itAndrew Dolgov
2018-06-20remove SWF enclosure audio playerAndrew Dolgov
2018-06-20move JShrink Minifier to vendor/Andrew Dolgov
2018-06-20update autoloader to consider namespaces for third party libraries: placed ↵Andrew Dolgov
and loaded from vendor/namespace/classpath.php update readability to a newer implementation based on Readability.js (https://github.com/andreskrey/readability.php) add vendor/Psr/Log interface required for the above
2018-06-18feedbrowser: fix incorrect usage of LIMIT in prepared statementAndrew Dolgov
2018-06-08Don't bail out if git gc removed refsTobias Bell
2018-05-25fetch_file_contents: allow setting http Accept headerAndrew Dolgov
2018-05-23increase buffersize to 16384 bytesAndrew Dolgov
(also some trailing whitespace got clipped)
2018-05-23increased CURLOPT_BUFFERSIZE from 128 to 256Alexander Yaburov
2018-05-20implement hard limits on downloaded data size for general fetching and cache ↵Andrew Dolgov
plugins: MAX_DOWNLOAD_FILE_SIZE & MAX_CACHE_FILE_SIZE
2018-04-14change filter rule regexp type to textfoobar
2018-02-27Allow abbr tag when sanitizing.JustAMacUser
2018-02-25fix previous wrt if-modified-since being added to context options headersAndrew Dolgov
2018-02-25Обновить 'include/functions.php'Metallizzer
The "Connection: close" header is added to the context_options