Commit Graph

689 Commits

Author SHA1 Message Date
rugk
efffeddc25
Merge branch 'master' of https://github.com/PrivateBin/PrivateBin 2016-09-18 12:23:07 +02:00
rugk
2cd4717bd2
Use default csp value by default
Otherwise the CSP may break updates if we later change the behaviour of PrivateBin somehow.
We should have done this before the v1.0 release, but well...
2016-09-18 12:21:42 +02:00
El RIDO
8cfcf1c9f5
Adding HTTP headers to address certain XSS attacks, resolves #91 2016-09-18 11:29:37 +02:00
rugk
ec7af3a738
Improve formatting 2016-09-14 23:55:55 +02:00
rugk
8cb1a0a14d
Improve issue template 2016-09-03 18:23:03 +02:00
rugk
23febfc5ca
Remove unintentially submitted test file 2016-09-03 18:14:14 +02:00
rugk
1a159c973f
Prevent referrer to be send
Uses both CSP and Referrer-Policy
Fixes #96
2016-09-03 18:12:24 +02:00
rugk
b7184b92a3 Fix csp config unit tests 2016-08-27 14:47:21 +02:00
El RIDO
7da4723112 Merge pull request #97 from matunixe/master
Fix some french translation issues (typo + minor problems).
2016-08-27 13:53:50 +02:00
Mathias
8cb9e9d871 Fix some french translation issues (typo + minor problems). 2016-08-27 12:33:44 +02:00
rugk
b11866a63b Allow manifest loading via CSP (2) 2016-08-27 00:02:50 +02:00
rugk
9ff74e8841 Allow manifest loading via CSP 2016-08-27 00:01:19 +02:00
El RIDO
a13266a784 ensure the server salt path is initialized, instead of relying on the default 2016-08-25 15:02:38 +02:00
El RIDO
e925833090 bumping version number to 1.0 2016-08-25 09:53:31 +02:00
rugk
2ee9325f49 Make clear that HTTPS provides basic security...
whereas the other things are advantaged security features.
2016-08-24 23:28:54 +02:00
rugk
2cde59821a Add FAQ note to issue template 2016-08-24 17:35:29 +02:00
rugk
932c0b573d More useful links for Libsodium installation
Also mentioning one needs to install the PHP extension too.
2016-08-24 16:43:44 +02:00
rugk
61f0eaa757 Fix typo 2016-08-23 20:56:45 +02:00
rugk
1bc2caf459 Correct order of PRNG
As stated in 76e90f747b/ERRATA.md
2016-08-23 20:56:14 +02:00
rugk
19e5467b79 Revert "Add PHPv7 to list of "requires /dev/urandom in open_basedir""
This reverts commit b229fb6041.
2016-08-23 20:44:16 +02:00
rugk
b229fb6041 Add PHPv7 to list of "requires /dev/urandom in open_basedir" 2016-08-23 17:24:51 +02:00
El RIDO
91eabd8489 readded /dev/urandom, the primary source for safe randomness in PHP 7, random_compat and mcrypt 2016-08-23 08:54:26 +02:00
rugk
226a64d8a4 Clarify randomness & add PDO link
* Remove "some disk space" - Everyone knows that files need some place to be stored. Additionally nowadays disk space is not problem in general.
* Add link to PDO.
* Clarify randomness. I am however not sure whether `com_dotnet` needs access to `/dev/urandom` (with open_basedir set).
2016-08-22 19:28:20 +02:00
El RIDO
3d7b35aed4 PSR-2/4 fixes 2016-08-22 16:20:14 +02:00
El RIDO
62dd25b91a added note for phpdoc with PHP 7 2016-08-22 10:58:01 +02:00
El RIDO
313b5d34d2 updating docs 2016-08-22 10:34:37 +02:00
El RIDO
1907586b39 changing link to project page 2016-08-22 09:50:28 +02:00
El RIDO
6aba39488f adding check for PATH ending in DIRECTORY_SEPARATOR, fixes #86 2016-08-22 09:46:26 +02:00
El RIDO
47d6bd7a02 Clarifying requirement for safe randomness in installation document 2016-08-22 09:44:49 +02:00
El RIDO
38a185ef22 shrinking icon to avoid renderering glitches 2016-08-21 20:42:58 +02:00
El RIDO
6c49bd09b8 Merge pull request #88 from PrivateBin/iconupdate
Readd icon instead of logo for header
2016-08-21 20:03:26 +02:00
rugk
5621f32752 Readd icon instead of logo for header
Continues #87
2016-08-21 16:51:54 +02:00
rugk
c6e71d2972 Add link to info page to logo
This overwrites the useless link to the logo.
2016-08-21 15:24:02 +02:00
El RIDO
ba2ce38077 added alt text 2016-08-21 07:34:45 +02:00
El RIDO
057047094d Merge pull request #87 from PrivateBin/newicon
Replace icon with logo with text
2016-08-20 19:10:19 +02:00
rugk
f7a75a9d33 Merge branch 'master' into newicon 2016-08-20 19:09:39 +02:00
rugk
d7896fbd95 Fix header link in subdir installations
Now this does link to PrivateBin and not to the top-root (file) of the webserver
2016-08-20 18:53:07 +02:00
rugk
a7c3b6079d Update logo 2016-08-20 18:25:56 +02:00
rugk
8f19045b58 Replace icon with logo with text 2016-08-20 18:01:52 +02:00
rugk
f82533f479 Use icon with text for Readme 2016-08-20 17:57:02 +02:00
El RIDO
47646e056b fixing urlshortening regression caused by CSP introduction, resolves #10 2016-08-18 15:09:58 +02:00
El RIDO
cd02c6e916 Merge pull request #83 from PrivateBin/novendorignore
Clever gitignore for vendor dir
2016-08-17 21:00:27 +02:00
rugk
e4f615d8be Exclude doch folder 2016-08-17 20:43:59 +02:00
rugk
c6af0ebfce Fix typo of Composer name 2016-08-17 20:00:29 +02:00
rugk
e7d5b34f4f Also exclude PHP phar builder 2016-08-17 19:56:35 +02:00
rugk
47b5d315f6 Delete excluded files & adjsut exlcusion
Also add Composer license to LICENSE.md as it is excluded right now
2016-08-17 19:44:03 +02:00
rugk
49beb2ff64 Allow PHP files in vendor dir to be committed 2016-08-17 19:37:40 +02:00
El RIDO
a9759f1872 updated changelog 2016-08-16 11:38:52 +02:00
El RIDO
f72e260ee7 adding subresource integrity hashes for all javascript includes, resolves #6 2016-08-16 11:11:03 +02:00
El RIDO
f957a1868f push state to history when displaying raw text to allow use of back button, fixes #7 2016-08-16 09:51:36 +02:00