802 Commits

Author SHA1 Message Date
Fraenkiman
0928ae8a70 PrettyURLS plugin does not prevent directory browsing
Preventing directory browsing via PrettyURLS plugin when .htaccess is deleted by the user. ...as an addition to #No. 174
2022-12-26 02:36:47 +01:00
Fraenkiman
fc9bcf45e8 Subject line of email when new comment is not translated
Added multilingual support for email subject line for new comments
2022-12-26 02:17:16 +01:00
azett
34ea684565 added #180 2022-12-25 20:37:05 +01:00
azett
229752b510 fixes #180, possible XSS in entry list 2022-12-25 20:32:55 +01:00
Arvid Zimmermann
91857ec800
description changed 2022-12-25 15:05:48 +01:00
Arvid Zimmermann
5483ebc129
added #176 #177 #178 #179 2022-12-25 15:04:45 +01:00
azett
5d5c7f6d8f fixes #179, preventing path traversal 2022-12-25 15:00:06 +01:00
azett
3cc223dec5 fixes #178, possible XSS via uploaded XML & MD files 2022-12-25 14:42:08 +01:00
azett
d3f3294965 fixes #177, possible XSS in Media Manager plugin 2022-12-25 14:32:08 +01:00
azett
e53acdeef3 fixed translation 2022-12-25 14:23:03 +01:00
azett
5f23b4c2ea fixes #176, possible XSS in setup 2022-12-25 14:16:25 +01:00
Arvid Zimmermann
2e7cac5c03
added #174 2022-12-18 13:28:09 +01:00
azett
9c4e5d6567 Added .htaccess to prevent directory browsing. 2022-12-18 13:24:38 +01:00
azett
a91ca486c4 Index can't be backed up if cache needs to be built. Added helpful error message. 2022-12-18 12:51:02 +01:00
azett
69fef257c5 Leggero: Autofocus for username input in login form 2022-12-18 12:22:11 +01:00
azett
d8d7e3b166 PHP functions used as modifier must be registered as modifier explicitly as of Smarty 4.3 - fixed. 2022-12-18 12:20:43 +01:00
azett
571b061adc PHP functions used as modifier must be registered as modifier explicitly as of Smarty 4.3 - fixed. 2022-12-17 20:47:24 +01:00
Arvid Zimmermann
f6ea8304cb
We have a name for release 1.3 :) 2022-12-17 20:02:44 +01:00
Arvid Zimmermann
1a6716971f
added #172 2022-12-17 14:45:42 +01:00
azett
742f8b04f2 added SVG to forbidden file types in order to prevent possible XSS - see https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2022-24588/CVE-2022-24588.pdf 2022-12-17 14:39:15 +01:00
Arvid Zimmermann
c4cc70e7ea
added latest changes 2022-12-17 14:32:55 +01:00
Arvid Zimmermann
2782e1a087
added latest changes 2022-12-17 14:32:17 +01:00
azett
0a7ad2ccb8 fixes #153 - thx laborix! 2022-12-17 14:23:23 +01:00
azett
5ad4647e94 Merge branch 'master' of https://github.com/flatpressblog/flatpress 2022-12-17 13:09:07 +01:00
azett
7d748fe62a fixes #171 - thx! :) 2022-12-17 13:09:00 +01:00
azett
dfa8e3013b fixes #170, thx for reporting! 2022-12-17 12:38:10 +01:00
azett
ba6ce382a5 removed unnecessary line 2022-12-17 12:32:33 +01:00
Arvid Zimmermann
9912982a94
Merge pull request #169 from fabianosantosnet/master
update some plugins to portuguese
2022-12-16 19:43:17 +01:00
Fabiano Santos
a3067cf47f update some plugins to portuguese 2022-12-13 22:42:33 -03:00
Arvid Zimmermann
cbc421a4fe
updated Smarty version, removed #132 (-> #158) 2022-12-13 20:18:27 +01:00
azett
fd6818c559 AdminArea plugin: Localized phrase "Login" 2022-12-12 21:11:09 +01:00
Arvid Zimmermann
a354636fde
Merge pull request #167 from fabianosantosnet/master
update some plugins to portuguese
2022-12-12 19:49:02 +01:00
azett
9218d118c9 Editor toolbar back to working as intended. Fixes #168, thanks for reporting in this detailled manner! 2022-12-11 14:26:58 +01:00
azett
185a27d35d PHP functions used as modifier must be registered as modifier explicitly as of Smarty 4.3 - fixed. 2022-12-11 14:04:12 +01:00
azett
1c6b423e48 Updated Smarty to 4.3.0. And the FlatPress-specific Smarty plugins now have their own directory, represented by the new constant FP_SMARTYPLUGINS_DIR. 2022-12-11 13:30:29 +01:00
Fabiano Santos
fc76d6639e update some plugins to portuguese 2022-12-04 21:34:41 -03:00
Arvid Zimmermann
5697a82aec
added @fabianosantosnet 2022-12-04 14:39:40 +01:00
Arvid Zimmermann
8c7a6c87a2
Merge pull request #166 from fabianosantosnet/master
update basic pt_br language
2022-12-04 14:35:31 +01:00
Fabiano Santos
6324f2bf17 update portuguese language 2022-11-27 13:02:30 -03:00
Arvid Zimmermann
cfd67fd306
typos 2022-11-19 14:37:22 +01:00
azett
bee5635ec6 Fixed PHP warning - thx laborix! 2022-11-13 13:16:45 +01:00
Arvid Zimmermann
9d918dd107
added link to Smarty upgrade guide 2022-11-02 21:24:48 +01:00
Arvid Zimmermann
b0b5af3d97
Update CHANGELOG.md
new jQuery[UI] versions; added Italian translation fix; added intl link
2022-11-01 20:34:13 +01:00
azett
d4ff88fe58 updated jQuery (3.6 to 3.6.1) and jQueryUI (1.13.1 to 1.13.2) 2022-11-01 13:58:13 +01:00
azett
432b352c26 fixed Italian language pack by Giacomo Margarito - grazie mille! :) 2022-11-01 13:39:20 +01:00
azett
fbb525a382 added #83 2022-10-12 19:50:39 +02:00
azett
5ad886b894 fixes #83: Class-named constructors in Akisment plugin; also: PHP warnings fixed 2022-10-11 21:11:30 +02:00
azett
bdf9e780e1 fixed more PHP warnings - thx laborix! 2022-10-11 20:10:20 +02:00
azett
ac571a5f69 fixed PHP warning on [url=][/url] 2022-10-11 15:39:05 +02:00
azett
1acedaf149 fixed branch name to "master" 2022-10-11 14:36:23 +02:00