Commit Graph

279 Commits

Author SHA1 Message Date
Michael 652802f758 Enable user defined channels upon adding/editing 2024-04-15 20:20:42 +00:00
Michael 69fc2c04e4 Issue 13812: Public groups with manual request approval 2024-04-08 07:58:45 +00:00
Michael 200cf29a8d Configuration for widgets 2024-03-25 07:38:36 +00:00
Hypolite Petovan b4d71f1855 Remove duplicated '$baseurl' template variable declarations
- This variable is declared for all templates in Renderer
2024-03-24 09:11:46 -04:00
Hypolite Petovan e16b6ee6e1
Check form security token in /settings/userexport module (#13929)
* Escape HTML in the location field of a calendar event post

- This allowed script tags to be interpreted in the post display of an event.

* Add form security token check to /admin/phpinfo module

- This prevents basic XSS attacks against /admin/phpinfo

* Add form security token check to /babel module

- This prevents basic XSS attacks against /babel

* Prevent pass-through for attachments

- This addresses a straightforward Reflected XSS vulnerability if a malicious HTML/Javascript file is attached to a post through upload

* Prevent overwriting cid on event edit

- This allowed to share an event as any other user after zeroing the cid field of an existing event

* Check form security token in /settings/userexport module

- Prevents basic XSS attacks against /settings/userexport/*
2024-02-22 21:08:32 +01:00
Michael Vogel 14e5b06029
Image handling reworked, new image formats added (#13900)
* Image handling reworked, new image formats added

* Updated messages.po

* The dot is now part of the file extension

* Added WebP in install documentation

* Handle unhandled mime types

* Fixed animated picture detected
2024-02-17 07:45:41 +01:00
Michael Vogel 52825cb4c4
User setting to disable blurring of sensitive pictures (#13883) 2024-02-10 09:50:49 +01:00
Michael 7924085c94 Issue 13844: User defined channels based on the network 2024-02-04 07:14:57 +00:00
Michael f1efb8d277 Fix: Saving of channel languages 2024-02-03 11:01:17 +00:00
Michael 3fe4991fcf Filter user defined channels by size 2024-01-30 10:05:05 +00:00
Michael d2702dfe9c Use centralized functions for tag string handling 2024-01-28 06:32:55 +00:00
Michael ad15b7b256 Fix warning: E_WARNING: Undefined array key "publish" 2024-01-10 22:04:02 +00:00
Michael d2a74d1936 New option to disallow 2024-01-07 19:22:56 +00:00
Michael c4b85ef25a New field "publish" for channels 2024-01-07 18:36:47 +00:00
Michael 4aedf7f650 Improved code / updated messages.po 2024-01-06 22:04:30 +00:00
Michael aba4a482f0 Limited settings for the relay account type 2024-01-06 21:52:28 +00:00
Michael 811a9f01bc New user account type "Channel Relay" 2024-01-06 17:27:42 +00:00
Michael 31b88da9d5 Merge remote-tracking branch 'upstream/develop' into channel-languages 2024-01-03 19:17:58 +00:00
Michael da3d390187 User defined channels can now have got individual language definitions 2024-01-03 19:17:14 +00:00
Michael 7ecf143e4c The "unkmail" functionality is removed 2024-01-03 10:23:11 +00:00
Michael 89e7420237 Friendica copyright changed from 2023 to 2034 2024-01-02 20:57:26 +00:00
Michael 8de58aa39d open channel settings when empty 2023-12-17 06:41:19 +00:00
Michael 0a0d2c98e8 Channel definition now stays open after edit 2023-12-17 06:16:26 +00:00
Michael 62386e4c9e Frio: Improved user defined channel page 2023-12-16 21:43:01 +00:00
Michael 14266a1ca4 Only use posts with wanted languages for subscribed tags 2023-12-11 22:07:01 +00:00
Michael b3d7dfb9a5 Issue 8542: User option to display the event list/birthday notification 2023-11-25 14:57:24 +00:00
Michael ffbab95c20 Channels can now be based on the "network" feed as well 2023-11-21 23:13:26 +00:00
Michael c8a3fea091 "browser_update" is integer, not boolean 2023-11-18 11:24:29 +00:00
Michael 6adf76c689 Fix the preview mode setting 2023-11-17 23:30:28 +00:00
Michael 170998da1a Allow to upload pictures up to the allowed system upload size 2023-11-17 12:19:01 +00:00
Michael Vogel cad4b2f7b8
Update src/Module/Settings/Display.php
Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2023-11-16 15:48:25 +01:00
Michael 581b96c32f New user option to hide the page drop checkbox 2023-11-15 21:55:54 +00:00
Michael 3f2b0b9422 Use ISO-639-1 for the language detection 2023-11-02 22:49:25 +00:00
Michael 7371070cde Issue 13511: Ensure stattic community user settings 2023-10-29 19:43:44 +00:00
Hypolite Petovan 7ebf4d51ca Fix redirections in two-factor authentication settings index page
- FoundException are used to redirect users
2023-10-24 20:26:34 -04:00
Hypolite Petovan 4a90394c38 Remove DI and superglobals dependency from two-factor settings modules 2023-10-24 19:44:53 -04:00
Michael Vogel e99fcfddb5
Merge pull request #13541 from MrPetovan/bug/13534-image-blurred
Drop using the proxy large size for image preview
2023-10-14 23:40:18 +02:00
Hypolite Petovan 938b2bae23 Align proxy sizes to photo preview sizes
- PIXEL_SMALL goes from 300 to 320
- PIXEL_MEDIUM goes from 600 to 640
- Use Proxy pixel constants where we used hard-coded pixel values
2023-10-14 16:05:01 -04:00
Michael fce82deabc Merge remote-tracking branch 'upstream/2023.09-rc' into channel-improvements 2023-10-14 19:06:35 +00:00
Michael be394b573d Channels: Larger fields, better error handling 2023-10-14 18:39:35 +00:00
Hypolite Petovan b29a68d467 Add exception when authentication returns different user id than logged in in Settings\RemoveMe 2023-10-14 14:15:42 -04:00
Hypolite Petovan 3a42849759 Add current user's hovercard to removeme page
- Extract Hovercard generation to Content\Widget
2023-10-14 14:15:41 -04:00
Hypolite Petovan e6855d3125 Refactor Delegation modules
- Remove dependency on DI
- Group translation labels in template variables
- Reformat tempate code
2023-10-14 14:15:40 -04:00
Hypolite Petovan 710f9eecb2 User Repository\UserDefinedChannel->selectByUid instead of Factory\UserDefinedChannel->getForUser
- Rename Repository\Channel to Repository\UserDefinedChannel
- Add new Collection\UserDefinedChannels class
- Move Factory\Timeline->createFromTableRow to Factory\UserDefinedChannel
2023-10-07 05:48:23 -04:00
Michael ed24d06e0c Now there are user defined channels 2023-10-05 19:10:20 +00:00
Michael 6a86eeda10 Timeline classes are split into multiple classes 2023-10-05 05:36:12 +00:00
Michael 5d6e02bef3 Some more changes after review 2023-10-05 03:17:55 +00:00
Michael 73e9190ce7 Changes after review 2023-10-05 03:16:44 +00:00
Michael afb6913a2f Timelines are now an object instead of an array 2023-09-30 18:51:35 +00:00
Michael 82684cd6cd Changes after review 2023-09-26 05:05:51 +00:00