Andy Staudacher
2bc73e2e36
Fix XSS vectors in HTML attributes (mostly t() calls)
2009-08-31 21:51:57 -07:00
Andy Staudacher
a5dfc81a8f
Merge commit 'upstream/master'
...
Conflicts:
modules/akismet/views/admin_akismet.html.php
modules/comment/helpers/comment_rss.php
modules/gallery/helpers/gallery_rss.php
modules/gallery/libraries/I18n.php
modules/gallery/views/permissions_browse.html.php
modules/gallery/views/simple_uploader.html.php
modules/info/views/info_block.html.php
modules/organize/controllers/organize.php
modules/organize/views/organize.html.php
modules/organize/views/organize_album.html.php
themes/default/views/album.html.php
themes/default/views/movie.html.php
themes/default/views/photo.html.php
2009-08-29 14:17:48 -07:00
Andy Staudacher
c01ac42c46
Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeString::purify().
...
Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
2009-08-29 12:48:40 -07:00
Bharat Mediratta
12f25a7e55
Fix the after_install loader to immediately open the "Welcome to
...
Gallery 3!" dialog, but not immediately open the "change your
password" dialog.
2009-08-08 21:26:55 -07:00
Tim Almdal
e04675470b
Forgot to save this file when i changed the value from 1 to true
2009-08-08 16:01:20 -07:00
Tim Almdal
cb1ae141bb
Create an new option 'immediate' and if set to true then don't try to set up click events, but just show the dialog. Also remove the destroy method and put all the cleanup into the dialog close handler
2009-08-08 15:46:53 -07:00
Tim Almdal
445a8fb1b6
Change galleryPanel and galleryDialog widgets to gallery_panel and gallery_dialog respectively
...
Signed-off-by: Bharat Mediratta <bharat@menalto.com >
2009-08-08 02:08:42 +08:00
Tim Almdal
a302a9c3fa
Refactor the gallery dialog into a jQuery widget
...
Signed-off-by: Bharat Mediratta <bharat@menalto.com >
2009-08-08 02:08:28 +08:00
Shai Ben-Naphtali
b99774ac49
Fixed grammer and set lowercase for the word project (minor change)
...
Signed-off-by: Bharat Mediratta <bharat@menalto.com >
2009-07-21 13:19:07 +08:00
Bharat Mediratta
708f27f483
Run p::clean() on any variables that contain data entered by users.
2009-05-31 00:11:48 -07:00
Bharat Mediratta
28b41056e3
Restructure things so that the application is now just another module.
...
Kohana makes this type of transition fairly straightforward in that
all controllers/helpers/etc are still located in the cascading
filesystem without any extra effort, except that I've temporarily
added a hack to force modules/gallery into the module path.
Rename what's left of "core" to be "application" so that it conforms
more closely to the Kohana standard (basically, just
application/config/config.php which is the minimal thing that you need
in the application directory)
There's still considerable work left to be done here.
2009-05-27 15:07:27 -07:00
