El RIDO
211d3e4622
preparing unit test for model refactoring, refactoring traffic limiter
2015-09-26 17:57:46 +02:00
El RIDO
d04eab52c9
refactoring how attachments are stored
2015-09-26 12:29:27 +02:00
El RIDO
6d24ff824e
refactoring configuration
2015-09-22 23:21:31 +02:00
El RIDO
9f68658106
incrementing version number, updating changelog
2015-09-21 22:43:00 +02:00
El RIDO
0de9f868fa
improving unit tests, fixing #38
2015-09-21 22:32:52 +02:00
El RIDO
608605cd54
incrementing version number, updating docs
2015-09-19 17:23:10 +02:00
El RIDO
a41d0ca4dd
various fixes:
...
- changing default formatter option to plain text to make upgrading from
0.19 Alpha smoother
- fixing translation message change in bootstrap templates
- adjusting how image uploads are displayed in bootstrap templates
2015-09-19 14:22:29 +02:00
El RIDO
a111357fae
add optional (since it uses a session cookie) language selection
2015-09-19 11:21:13 +02:00
El RIDO
47efedf23c
traffic limiter would fail behind a reverse proxy / load balancer.
...
Adding configuration option to set the trusted HTTP header to get the
visitors IP in such a case (avoiding security issue if malicious clients
just set these headers themselfs)
2015-09-18 22:31:01 +02:00
El RIDO
ed9c4f45f4
adding file name support for #20 , solving issue with unencryptable file
2015-09-18 12:33:10 +02:00
El RIDO
ec8851e46c
support < 0.21 syntax highlighting
2015-09-17 20:47:00 +02:00
El RIDO
106141efa4
merging @vikstrous file upload feature for #20 from
...
8a6d268278
2015-09-16 22:51:48 +02:00
El RIDO
0e53d1ee86
added markdown support and a dropdown for the format selection. The
...
options other then markdown are plain text and source code (syntax
highlighting). Resolves #25
2015-09-12 17:33:16 +02:00
El RIDO
b060d57524
- implemented php side of plural translation
...
- using it to generate labels dynamically for the expire options
(deprecating the [expire_labels] configuration).
- added translation of the human readable data sizes to support the
french octet
- fixed IEC label for kibibytes
2015-09-06 19:21:17 +02:00
El RIDO
eee7b0144a
covering JS side of translations ( #7 ), added the messages to the
...
translation files and translated the german ones
2015-09-06 13:07:46 +02:00
El RIDO
a2af88a36e
initial work on translations, covering the PHP side of it
2015-09-05 02:24:56 +02:00
El RIDO
28776ac178
formatting RainTPL class
2015-09-05 01:55:19 +02:00
El RIDO
411419d597
adding tests and unifying paste creation output
2015-09-03 22:55:36 +02:00
El RIDO
2d79ba8243
updating docs, bumping version to 0.20
2015-09-03 22:22:59 +02:00
El RIDO
602fc4705e
change for API consistency
2015-09-01 23:51:31 +02:00
El RIDO
b25022e403
refactored JSON API, its now possible to retrieve pastes as JSON, which
...
is now used when posting comments, eliminating the need to store the
password in sessionStorage
2015-09-01 22:33:07 +02:00
El RIDO
802a0b26b9
burn after reading messages are only deleted after callback by JS when
...
successfully decrypted, resolves #11
2015-08-31 22:10:41 +02:00
El RIDO
d3c4600806
slight configuration changes, template modifications to make discussions
...
and password configurable, removed generated configuration test as it
grows quite big and a new one can be generated easily if needed
2015-08-31 00:01:35 +02:00
El RIDO
2d0668af03
concluding work on configuration test generator for #16 . Replaced a few
...
die()s in the code with Exception, making it possible to test properly.
Fixed some outdated unit tests.
2015-08-29 20:29:14 +02:00
El RIDO
1c4d1aa6b6
working on configuration unit test generator as described in #16
2015-08-29 01:26:48 +02:00
El RIDO
ae82e84ef8
correcting php doc comments
2015-08-27 23:58:56 +02:00
El RIDO
d57d6cf44b
created initial unit tests for main zerobin class
2015-08-27 23:30:35 +02:00
El RIDO
f775da3931
fixing nasty deletion bug from #15 , included unit tests to trigger it
...
and reworked persistence classes to through exceptions rather to fail
silently
2015-08-27 21:41:21 +02:00
El RIDO
cb28056223
made highlighting more configurable, added all four themes, there is now a configurable flavour text (notice)
2015-08-17 23:18:33 +02:00
El RIDO
24d18c5313
cleaned up phpdoc comments, added README on how to install and use it
2015-08-16 15:55:31 +02:00
El RIDO
49c6e3c1b6
updated base64.js to version 2.1.9, using minified version found at
...
9192c510f5/base64.min.js
2015-08-16 12:27:06 +02:00
El RIDO
769768d25e
updated jquery to 1.11.3
2015-08-16 11:20:06 +02:00
El RIDO
8881b3047a
changing version string
2015-08-16 00:04:14 +02:00
Sebastien SAUVAGE
43a439e7d0
Time attack protection on hmac comparison
...
This fixes issue 2.7 of https://defuse.ca/audits/zerobin.htm , and thus
(with commit a24212afda90ca3e4b4ff5ce30d2012709b58a28) also issue 2.8.
(cherry picked from commit 0b4db7ece313dd268e51fc47a0293a649927558a)
Conflicts:
index.php
2015-08-15 23:44:03 +02:00
Sebastien SAUVAGE
e7feca0e53
Stronger server salt
...
ZeroBin now generates a much stronger salt. This fixes issue #68
(mentioned in section 2.1 of https://defuse.ca/audits/zerobin.htm )
(cherry picked from commit a24212afda90ca3e4b4ff5ce30d2012709b58a28)
Conflicts:
lib/serversalt.php
lib/vizhash16x16.php
2015-08-15 22:18:57 +02:00
jeldrik
4f72f04eda
Prevent inconstitent /data/trafic_limiter.php due to file read while writing
...
(cherry picked from commit 71a7f6adaea9a86a84fa8ebbcb9e5c506a785527)
Conflicts:
index.php
2015-08-15 22:10:05 +02:00
Sébastien SAUVAGE
5b54ca34ad
Update index.php
...
Removed ugly error message when paste identifier is invalid (eg. http://mydomain.com/zerobin?foo )
(cherry picked from commit 43fa904979a29e4c205b9f4f08e1c487555bbe1c)
Conflicts:
index.php
2015-08-15 22:07:07 +02:00
Sebastien SAUVAGE
bc8b23d35e
XSS flaw correction
...
With a client IE < 10 there was a XSS security flaw. Other browsers were
not affected.
Also corrected spacing display with IE<10.
(cherry picked from commit 28813cd82ae47e556b610da3c7302a6709e27431)
Conflicts:
CHANGELOG.md
index.php
js/zerobin.js
lib/vizhash16x16.php
2015-08-15 22:01:43 +02:00
El RIDO
e646729b2d
fixing regressions from cherrypicking
2015-08-15 21:39:08 +02:00
Sebastien SAUVAGE
5f87ea6843
ZeroBin 0.18
...
(cherry picked from commit 7a8cbee2f99cd74a50bce7e8df8130e2c477d903)
Conflicts:
CHANGELOG.md
index.php
js/zerobin.js
lib/vizhash16x16.php
2015-08-15 21:06:19 +02:00
Sebastien SAUVAGE
cff4d99f05
"Burn after reading" as a checkbox
...
"Burn after reading" option has been moved out of Expiration combo to a
separate checkbox.
Reason is: You can prevent a read-once paste to be available ad vitam
eternam on the net.
(cherry picked from commit 190b278402c086ebc4d1a78aae27d1e2666e3e7a)
Conflicts:
css/zerobin.css
index.php
js/zerobin.js
tpl/page.html
2015-08-15 19:01:03 +02:00
El RIDO
ad70051323
reviewed unit tests, fixing line endings, added more tests
2015-08-15 18:32:31 +02:00
Sebastien SAUVAGE
7db76d8d71
Updated json checking.
...
- adapted to SJCL changed
- added entropy checking (from
f2ee2e8ba2
2015-08-15 18:16:55 +02:00
El RIDO
134d22c958
small unit testing improvements, removing never accessed code
2015-08-15 16:37:44 +02:00
Simon Rupf
badf459390
split common persistance logic into abstract class
2013-11-01 01:15:58 +01:00
Sebastien SAUVAGE
5b253cf77c
ZeroBin 0.17
...
* added deletion link.
* small refactoring.
* improved regex checks.
* larger server alt on installation.
2013-11-01 01:15:14 +01:00
Sébastien SAUVAGE
c26c4a8bec
arbitrary JSON file disclosure correction
...
The following securit issue has been fixed:
https://github.com/sebsauvage/ZeroBin/issues/30
2013-10-31 22:53:22 +01:00
Simon Rupf
d247bff897
syntax highlighting can now be turned off, template can be changed in
...
configuration
2013-10-31 22:24:40 +01:00
Simon Rupf
630e16c4a0
Added more configuration options, based on patch by Uli Köhler
2013-10-30 23:54:42 +01:00
Simon Rupf
51008d3e68
added test for entropy of cypher text - closes #3
2012-09-08 19:54:24 +02:00
