Commit Graph

2107 Commits

Author SHA1 Message Date
Bharat Mediratta
467a032f8e Rename any files that have two dots in them to a legal name. This
fixes the bug where we made those files invalid in 3.0.4 without
providing a clean upgrade path.  Bump gallery module to 50. Fixes
2012-07-21 15:11:27 -07:00
Bharat Mediratta
6d9d6a2e5d Allow albums to have two (or more) dots in the name. Fixes #1897. 2012-07-21 15:01:31 -07:00
Bharat Mediratta
a98afdb32c Refill the path and url caches in the item model at the end of this task. Fixes #1896. 2012-07-21 11:12:51 -07:00
Bharat Mediratta
3e99c37c35 Fix comment typo. 2012-07-21 11:11:16 -07:00
Bharat Mediratta
f9e77c4c14 Fix the access_cache rebuilding code to not load all missing access caches into the stack, if you're missing
enough it'll blow the stack (like, if you truncate the access_caches table).  Fixes #1895.
2012-07-21 10:38:23 -07:00
Bharat Mediratta
e4daa42830 Rename the comparator to something that makes more sense (to me), and make it static.
Follow-on to 5d9e717417 for #1859.
2012-06-11 14:02:23 -07:00
Bharat Mediratta
8e74750dc2 Checkpoint XSS golden file 2012-06-11 13:54:33 -07:00
Bharat Mediratta
37a0e9a710 Follow-on to 3caf3cc323 for #1866 - harden one
more place and update the test.
2012-06-11 13:47:00 -07:00
Bharat Mediratta
03d55d2530 Encode urls in 404 log entries. Fixes #1882. 2012-06-05 21:25:56 -07:00
Bharat Mediratta
b7074ee595 Clean file paths in Kohana_Exception::debug_path(). Fixes #1880. 2012-06-05 21:13:34 -07:00
Bharat Mediratta
713a06f234 Do a better job of escaping filenames when uploading. Fixes #1881. 2012-06-05 20:20:21 -07:00
Bharat Mediratta
9e1f975e7b Fix up syntax in the last change. Follow-on for #1879. 2012-06-05 14:08:15 -07:00
Tony Fung
6fbea19b35 Force Turn off the compress as most image file already compressed. 2012-06-05 11:16:37 +08:00
Bharat Mediratta
3fbe07078f Second attempt to fix #1821 - first attempt caused an infinite loop in some cases
when zlib.output_compression is enabled.
2012-06-04 19:54:01 -07:00
Bharat Mediratta
648d9a4de8 Remove accidental double encoding. 2012-05-19 11:51:10 -07:00
Bharat Mediratta
a9be0691d9 Create an ajax response framework that inserts <meta> tags to guard
against UTF-7, and create a $.gallery_autocomplete variant of jQuery's
autocomplete that expects the first line to be a <meta> tag and
discards it.  More complete fix for #1871.
2012-05-19 11:31:25 -07:00
Bharat Mediratta
9e2ea2ffed Smash multiple extensions down into a single one when accepting file
uploads.  Fixes #1872.
2012-05-17 20:25:27 -07:00
Bharat Mediratta
355679fa55 Revert "Convert any UTF-7 to UTF-8 so that fragment pages (like AJAX replies)"
This will break many legal UTF-8 strings.

This reverts commit 1c5c2e7de4.
2012-05-16 12:01:41 -07:00
Bharat Mediratta
1c5c2e7de4 Convert any UTF-7 to UTF-8 so that fragment pages (like AJAX replies)
won't be mistakenly interpreted as UTF-7.  Fixes #1869.
2012-05-16 11:32:28 -07:00
Bharat Mediratta
91e87cb811 Oops, fix indentation in 99af395a01 2012-05-16 11:32:11 -07:00
Bharat Mediratta
99af395a01 Force the error page to UTF-8. Fixes #1868. 2012-05-16 11:07:26 -07:00
Bharat Mediratta
891652b233 Send back form errors wrapped in JSON. Fixes #1867. 2012-05-15 16:00:46 -07:00
Bharat Mediratta
aac18ef833 Don't allow new albums with a slug that matches a controller - put up a
message telling the user that it's a reserved address.  Partial fix for #95.
2012-05-15 15:53:38 -07:00
Bharat Mediratta
3caf3cc323 Harden installer against bad characters in the database name or prefix. Fixes #1866. 2012-05-15 10:54:51 -07:00
Bharat Mediratta
3d03ea697f Follow-on to ce34e89c89 for #1865 -
allow strings and coerce them to integers.  It might be easier to just
cast whatever comes in, but I'm worried that we'll accidentally cast
an array to an int(1) without realizing it.
2012-05-15 10:50:21 -07:00
Bharat Mediratta
ce34e89c89 Different approach to resolving #1865, this replaces 6a6b3f90f3
which was rolled back.
2012-05-15 09:50:57 -07:00
Bharat Mediratta
f06c227505 Oops dropped a semicolon in e3d50dd8be 2012-05-15 09:26:13 -07:00
Bharat Mediratta
e3d50dd8be Simplify dialog title for editing advanced settings. Fixes #1864. 2012-05-14 20:52:01 -07:00
Bharat Mediratta
1531c3898f Force uploader status messages to be integers. Fixes #1863. 2012-05-14 20:52:01 -07:00
Bharat Mediratta
ffbaa7bf82 Follow on for #1845 - handle paths with dots in them properly. 2012-05-13 21:09:59 -07:00
Bharat Mediratta
5d9e717417 Sort modules by visible name, not id. Fixes #1859. 2012-05-11 17:14:41 -07:00
Bharat Mediratta
34ac1a466d Verify that theme names are well formed. Fixes #1856. 2012-05-11 15:12:30 -07:00
Bharat Mediratta
b512734b9d Close all buffers, not just the ones that Kohana opened. Fixes #1821,
thanks to pvalsecc.
2012-05-08 18:23:33 -07:00
Bharat Mediratta
a563dcdfb3 Convert the missing movie placeholder over to a JPG for consistency. Fixes #1828. 2012-05-07 21:41:28 -07:00
Bharat Mediratta
2a4903c0e7 Fix typo in call to Kohana_Exception::getMessage, thanks to Serge.
Fixes #1780.
2012-05-07 21:17:58 -07:00
Bharat Mediratta
a23fed4ce1 Improve IdentityProvider switching code, patch thanks to Reklov
Nesalk.  Fixes #1834.
2012-05-07 12:04:43 -07:00
Bharat Mediratta
e722e5d5d4 Fix missing date.timezone which results in a crash on startup in I18n
code.  Fill in missing field and log it 25% of the time. Fixes #1853.
2012-05-07 11:38:51 -07:00
Bharat Mediratta
3fe3c09ec3 Use html::anchor consistently. Fixes #1851. 2012-05-06 09:45:04 -07:00
Bharat Mediratta
fd15295642 Clean up comments. 2012-05-05 21:09:30 -07:00
Bharat Mediratta
916f5c7d3b Clean up message to preserve page formatting. Fixes #1848. 2012-05-05 19:55:29 -07:00
Bharat Mediratta
ef4dbd18af Fix extension-swapping code for files that have extensions that are
not 3 characters long.  Fixes #1845.
2012-05-05 19:34:01 -07:00
Bharat Mediratta
d5a445b779 Improve the dimensions-detecting regex, thanks to cchiappa.
Fixes #1844.
2012-05-05 19:19:04 -07:00
Bharat Mediratta
801c9a98e4 Fix #1846. 2012-05-05 18:52:44 -07:00
Bharat Mediratta
75492b9dd6 "public static" -> "static" 2012-04-01 14:09:08 -07:00
Bharat Mediratta
daea22c6b3 Exclude modules/gallery/vendor/joomla from some structure tests 2012-04-01 14:07:50 -07:00
Bharat Mediratta
cd46dc479c Beef up the random number generator by using Joomla's new implementation. 2012-04-01 12:39:48 -07:00
Bharat Mediratta
f6dac703ec Try a different approach at filtering. Fixes #1831. 2012-04-01 11:53:34 -07:00
Bharat Mediratta
7ba0b1b75c Restrict valid urls to having a http:// or https:// prefix. Fixes #1830. 2012-04-01 11:36:16 -07:00
Bharat Mediratta
bf2bb3e1ea Update copyright to 2012. #1822 2012-02-27 09:48:23 -08:00
Bharat Mediratta
6d530991f2 Updated for #1764 and #1790 2012-02-27 09:19:43 -08:00