Commit Graph

192 Commits

Author SHA1 Message Date
El RIDO
d6f203dc4c Removed option to hide clone button on expiring pastes, since this requires reading the paste for rendering the template, which leaks information on the pastes state 2018-05-27 15:05:31 +02:00
El RIDO
05c1776ada ensure ALL read errors are only exposed in the JSON API to avoid information leakage (i.e. beviour for deleted vs expired pastes), updated test cases & removed duplicate test 2018-05-27 14:36:30 +02:00
El RIDO
caf87cc6f1 Merge branch 'master' into burnafterreading-fix, regression in expired paste error 2018-04-30 20:01:38 +02:00
El RIDO
2c82279292 Merge branch 'attachment-handling' of https://github.com/thororm/PrivateBin into thororm-attachment-handling
apart from resolving conflicts:
- added missing docs
- inlined functions that were used in only one location
- updated unit test to support all previews
- fixed a regression that displayed the preview even when there was no preview and too early
2018-04-29 11:57:03 +02:00
rugk
9c132cd839 Disallow form-action in CSP to limit outgoing connections
See https://github.com/PrivateBin/PrivateBin/issues/272
2018-01-06 18:06:06 +01:00
El RIDO
3bca559826 moving access to into Request class 2018-01-06 10:27:58 +01:00
rugk
414ab0eb71 Add config and basic page template support
* load JS file asyncronously (just HTML5 async attribut)
* add basic support for page template, where it generates the code inside
  of a simple div at the top
* added option to turn off QR code support
2017-12-25 14:59:15 +01:00
El RIDO
86ecdb1155 fixing post increment 2017-11-13 22:15:14 +01:00
El RIDO
502e96c129 StyleCI recommendations 2017-10-08 19:23:33 +02:00
El RIDO
a5d5f6066a refactoring as recommended by Scrutinizer 2017-10-08 19:16:09 +02:00
El RIDO
9f26894b2e PHP < 5.6 compatibility and StyleCI recommendations 2017-10-08 17:10:51 +02:00
El RIDO
4f06feef81 implemented JSON file conversion on purge and storage in PHP files for data leak protection 2017-10-08 16:59:31 +02:00
El RIDO
4ded4b7f8c adding correct HTTP error to response, as per @rugk's recommentation 2017-10-08 16:43:46 +02:00
El RIDO
dbfb1e83ba removing dead code 2017-10-08 16:43:10 +02:00
El RIDO
62f0b95377 making StyleCI happy 2017-10-08 16:42:43 +02:00
El RIDO
6e8eafe129 implemented INI cenversion functionality 2017-10-08 16:42:11 +02:00
El RIDO
6fa2bfe30e updated documentation, incremented version 2017-10-08 16:40:51 +02:00
rugk
f037967820 changes the file extension to php and adds a small one-liner to stop PHP from presenting the file to any website visitor
Signed-off-by: El RIDO <elrido@gmx.net>
2017-10-08 16:25:48 +02:00
thororm
23f5dfbff8 Merge remote-tracking branch 'remotes/thororm/master' into attachment-handling
# Conflicts:
#	tpl/bootstrap.php
#	tpl/page.php
2017-05-13 19:48:25 +02:00
rugk
283873d89a Fix stupid copy&paste error 2017-04-13 10:52:48 +02:00
rugk
9b6748c54d Adjust requested changes 2017-04-13 10:46:09 +02:00
El RIDO
f54036976a added instantburnafterreading option to address #174 2017-04-11 17:23:26 +02:00
rugk
183ebe518b Force JSON request for getting paste data 2017-04-11 16:34:13 +02:00
thororm
096f07f86e Merge branch 'master' into attachment-handling
# Conflicts:
#	js/privatebin.js
#	tpl/bootstrap.php
#	tpl/page.php
2017-04-02 13:30:52 +02:00
El RIDO
bbcc3e167b implementing recommendations of scrutinizer 2017-03-25 00:58:59 +01:00
El RIDO
9b2af0abf5 fixing documentation 2017-03-24 23:54:37 +01:00
El RIDO
18315e7de0 removing unused class 2017-03-24 23:45:10 +01:00
El RIDO
f7853cf439 removing duplicate code, cleanup of temporary test files 2017-03-24 23:42:11 +01:00
El RIDO
ce92bfa934 updated .htaccess format, refactored .htaccess creation logic and improving code coverage, fixes #194 2017-03-24 21:30:08 +01:00
El RIDO
88b02d866e fixes #186 for good 2017-03-24 19:20:34 +01:00
El RIDO
be0919893d updating shipped .htaccess files for Apache 2.4 as per https://httpd.apache.org/docs/2.4/upgrading.html#access - Thanks @EchoDev, fixes #194 2017-03-11 08:56:14 +01:00
El RIDO
823adb78ef bumping required PHP to 5.4, removing unneccessary code, resolves #186 2017-03-05 11:22:24 +01:00
El RIDO
23b09d601d credited Tulio for the portuguese translation, updated SRI hashes 2017-03-05 11:02:18 +01:00
El RIDO
db307c3a77 updated test cases and delete logic to properly implement documented API, thanks @r4sas #188 2017-02-22 21:42:14 +01:00
thororm
4cb0ce5114 Removed self from cspheader
Refactored some variable names
2017-02-13 20:37:57 +01:00
thororm
faf596aeb7 Added preview for
- Video (HTML5)
- Audio (HTML5)
- PDF (Browser capabilities)
attachment.
Added drag & drop functionality
Added attachment preview to preview before submitting
2017-02-12 15:35:37 +01:00
rugk
e9b10f9e2d Add CSP sandbox
Fixes https://github.com/PrivateBin/PrivateBin/issues/168

Alos needed to run some Composer stuff, no idea why my diff was different.
2017-02-01 18:34:13 +01:00
El RIDO
a7de0e095b added supported language, updated credits and changelog 2017-01-10 20:37:14 +01:00
El RIDO
67f6c4eb61 turned bootstrap template variants into logic 2017-01-08 10:02:07 +01:00
El RIDO
f79c00378b Choosing correct Occitan plural formula, added unit tests for Occitan and Chinese, corrected casing of languages in unit test 2017-01-08 07:56:56 +01:00
El RIDO
a5d91298ff add an option to change the site name, solves #154 2017-01-01 16:33:11 +01:00
El RIDO
4a036aea80 updated SRI hashes, added missing formula for slowene plurals and unit test for it, updated credits and changelog 2017-01-01 14:35:39 +01:00
El RIDO
1426d4e371 tagging 1.1 release and updating documentation 2016-12-26 12:13:50 +01:00
El RIDO
f6b8ee3e20 add missing check for non-expiring pastes, fixes #149 2016-12-25 12:15:29 +01:00
El RIDO
ecd8a51137 writing a unit test for #145 lead to the discovery of two errors in the polish translations: error in formula and missing number placeholders in the translation strings 2016-12-25 11:37:45 +01:00
atnaguzin
bbcc53f08e StyleCI fix 2016-12-16 12:25:10 +03:00
R4SAS
ccba2f029f added ru plural formula 2016-12-16 12:15:37 +03:00
rugk
da10a761c4 Fix more typos 2016-12-12 18:50:00 +01:00
rugk
61ee0ef7d3 Fix typos 2016-12-12 18:49:08 +01:00
rugk
658d5ae84d Fix style-ci errors 2016-12-12 18:43:23 +01:00