El RIDO
f2e0c1a701
upgrade to zlib 1.2.12
2022-03-30 06:05:37 +02:00
El RIDO
82be7c6354
Merge branch 'hardening' of github.com:PrivateBin/PrivateBin into hardening
2022-03-27 08:28:10 +02:00
El RIDO
75dc346f0f
be more specific on the base type match and less specific on the subtype, in order to fail-safe (avoid being tricked into not sanitizing - the mime type is a user provided input)
2022-03-27 08:27:24 +02:00
El RIDO
960faf4417
wording
...
Co-authored-by: rugk <rugk+git@posteo.de>
2022-03-27 07:58:25 +02:00
El RIDO
36cb37c029
prevent error when attachments are disabled, but paste with attachment gets displayed
2022-03-13 20:18:51 +01:00
El RIDO
5617612eb3
upgrade to showdown 2.0.3
2022-03-13 20:05:38 +01:00
El RIDO
2a4d572c1e
Sanitize SVG preview, preventing script execution in instance context, while dropping support for attachment download in IE
2022-03-13 19:56:12 +01:00
El RIDO
f39934a104
Merge pull request #896 from Patriccollu/PB-in-Corsican
...
Adding Corsican as brand new locale
2022-02-26 11:52:43 +01:00
Patriccollu
004e2dd75c
Update to add Corsican as new locale
2022-02-24 20:03:48 +01:00
El RIDO
7a6f36a789
disable failing part of the test
2022-02-23 06:04:05 +01:00
El RIDO
a0f8a667ae
deprecated functions, fix test partially
2022-02-20 21:07:04 +01:00
El RIDO
fbf0eae513
update bootstrap JS library to 3.4.1
...
note that this fails one of our unit tests
2022-02-20 16:13:54 +01:00
El RIDO
7277d2bb43
update all libraries
2022-02-18 07:36:09 +01:00
El RIDO
9df6754dfa
Merge pull request #881 from PrivateBin/jbobau
...
Lojban translation
2022-02-13 08:58:29 +01:00
El RIDO
8faf0501f4
improve Lojban support
...
- Crowdin has to use the 3 letter language code, since Lojban has no 2 letter code. Added support for this in the PHP backend and renamed the translation file.
- Lojban has no plural cases, updated the plural-formulas accordingly.
- Credited the change and documented it.
- Updated the SRI hashes.
2022-02-12 16:17:09 +01:00
Bjoern Becker
832f000576
update jquery
2022-02-11 12:22:16 +01:00
foxsouns - SEE ME @ GITLAB
401cd32d07
add jb (lojban) into supported languages list
2022-02-09 22:30:53 -08:00
El RIDO
a2ffbafa13
ensure npm's package.json version gets incremented
2021-06-05 09:43:01 +02:00
El RIDO
bc11452259
make filename unique per paste ID
2021-04-17 09:08:11 +02:00
El RIDO
853a4f386f
fix indentation
2021-04-17 08:51:25 +02:00
El RIDO
47029fb04e
Merge branch 'master' into download-feature
2021-04-17 08:47:14 +02:00
El RIDO
1dc8b24665
transmit cookie only over HTTPS, fixes #472
2021-04-16 20:15:12 +02:00
ed66351337
Added download feature ( #5318 ).
2021-04-16 19:29:03 +02:00
El RIDO
175d14224e
set plurals for and credit Estonian translation
2021-04-16 18:27:12 +02:00
El RIDO
d65bf02d78
upgraded kjua
2021-04-05 17:33:07 +02:00
El RIDO
458ebcb321
incrementing version
2021-04-05 17:05:14 +02:00
El RIDO
a369202c51
add missing expiration reset
2021-04-05 13:47:37 +02:00
El RIDO
77ee40909f
record defaults during initialization, fixes #682
2021-04-05 13:24:53 +02:00
El RIDO
5fd829aa09
adding unit tests for TopNav.resetInput(), triggering bug described in #682
2021-04-05 12:50:23 +02:00
El RIDO
a40f3b2950
update DOMpurify to version 2.2.7
2021-04-03 07:04:59 +02:00
El RIDO
2e10bdbd22
update DOMpurify to version 2.2.7
2021-04-02 09:09:47 +02:00
El RIDO
da0896fe42
set plurals for and credit Catalan translation
2021-04-02 09:00:27 +02:00
El RIDO
5a9bcea3a9
set plurals for and credit Indonesian translation
2021-03-09 05:54:06 +01:00
El RIDO
b38ebc503e
plural rules and documenting newly added languages
2021-01-07 21:16:03 +01:00
El RIDO
5ec72f1d89
address false positive jsverify RngState 080d2f5b13a86e97c4
2020-10-04 14:08:27 +02:00
El RIDO
1614342248
update DOMpurify to version 2.0.14
2020-08-30 08:34:38 +02:00
El RIDO
0673c1cde1
fix display of empty files #663
2020-06-30 20:10:56 +02:00
El RIDO
cb0faf690c
DOMpurify strips line tabulation characters (\u000b), adresses jsverifyRngState 8f6fbd749c3852ea01
2020-06-07 07:58:07 +02:00
El RIDO
8fcc321eb6
adjust unit tests to new link format
2020-06-07 07:47:28 +02:00
El RIDO
5450a431cf
Merge branch 'Haocen-625-bugfixes'
2020-06-07 07:38:59 +02:00
Haocen Xu
65011019b7
Fix urls2links unit test
2020-06-02 09:03:33 -04:00
El RIDO
dfed1a4b45
switching webcrypto library to native node crypto implementation (requires node>=10)
2020-06-01 08:07:25 +02:00
unknown
903ea5ea68
Open all links in new window
2020-06-01 02:33:22 +08:00
Haocen Xu
dd98af0775
Avoid recreation of existing pasteurl element when calling URL shortener
2020-05-30 06:07:47 -04:00
Haocen Xu
5f0011b0f6
Sanitize output from Helper.urls2links
2020-05-30 06:05:20 -04:00
Haocen Xu
25a39148a8
Change order of execution to detect delete token properly
2020-05-30 06:00:17 -04:00
Haocen Xu
e298c3d10c
Reload page when back button in browser pressed, avoid reading burn
...
after read paste from cache
2020-05-30 05:57:27 -04:00
Haocen Xu
afcece17dd
Fix broken Helper.durationToSeconds, as it doesn't handle weeks
2020-05-30 05:55:41 -04:00
Haocen Xu
74551f58d7
Avoid DOMPurify mess with forward slash in expirationDateString
2020-05-30 05:52:15 -04:00
Haocen Xu
4984194c33
Avoid dropzone appearing when it should not by fixing
...
TopNav.isAttachmentReadonly logic
2020-05-30 05:48:15 -04:00