Tim Almdal
d6648c0aff
Fix for ticket #477 . Use nl2br method when rendering comment::text and
...
item::description. In addition add p::clean or p::purify to places that
xss cleaning had missed (i.e. rss feeds)
2009-07-04 08:17:12 -07:00
Tim Almdal
54ffea2419
Split the clean method into two clean and purify. clean is a light weight
...
approach using html::specialchars and purify uses HTMLPurifier to intelligently
cleanse the output fields. Use purifier for text and title fields where it is
likely that a user would enter html to format their data.
2009-07-03 21:44:10 -07:00
Bharat Mediratta
6e8a8c53e6
Rename $theme->url() to $theme->theme_url() for consistency wiht
...
$theme->theme_script().
2009-06-28 19:49:48 -07:00
Andy Staudacher
40b107dd64
Fix html bug in l10n message
2009-06-16 14:12:40 -07:00
Bharat Mediratta
26314d0ef8
Create gallery::date_time(), gallery::date() and gallery::time()
...
functions that format a unix timestamp into a date+time/date/time
string.
Partial fix for ticket #347 .
2009-06-12 22:44:51 -07:00
Bharat Mediratta
708f27f483
Run p::clean() on any variables that contain data entered by users.
2009-05-31 00:11:48 -07:00
Chad Kieffer
cd8d1c6582
Temp fix for photostreamin admin dashboard, other miscellaneous css fixes. Apply jQuery UI button css to submit inputs in the admin theme.
2009-02-23 05:14:05 +00:00
Chad Kieffer
55cd2afde5
Admin theme style cleanup. Merged separate selected, available, unavailable into a single set of reusable classes. Applied alternating row bg colors. Removed inline CSS from admin views. Moved user admin css into admin_default theme style sheet.
2009-01-24 20:06:13 +00:00
Andy Staudacher
e4a9b19bf9
Changing t() placeholder syntax from {{replace_me}} to %replace_me.
2009-01-15 10:02:41 +00:00
Chad Kieffer
82848bd3a9
HTML format cleanup
2009-01-10 19:13:00 +00:00
Bharat Mediratta
9b90b4b0cd
Use the theme's avatar as the default if Gravatar doesn't have one.
2009-01-10 06:18:35 +00:00
Andy Staudacher
a631fe29f3
i18n refactoring: Rename all _() (reserved by gettext) calls to t().
...
- And refactor printf to our string interpolation / pluralization syntax
- Also, a slight change to the translations_incomings table, using binary(16) instead of char(32) as message key.
2009-01-08 17:13:06 +00:00
Bharat Mediratta
cd1d023754
Change the preamble for views in two ways:
...
1) drop unnecessary semicolon
2) start with <?php for extra security in the case that the server itself doesn't
have short_tags enabled (the app won't work, but we need to make sure that we're
still secure)
2009-01-01 00:23:29 +00:00
Bharat Mediratta
78ce8615f3
Implement the "recent comments" block with real data.
2008-12-21 02:02:41 +00:00
Bharat Mediratta
ad0ddc236c
Fix preamble
2008-12-20 07:30:27 +00:00
Bharat Mediratta
b933d1a170
Move Recent Comments into its own block.
2008-12-20 01:25:03 +00:00
