| Mon, 28 Jun 2010 10:43:04 -0400 |
Dan Fuhry |
SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks! Also removed my stand-in for ucfirst().
|
file |
diff |
annotate
|
| Sun, 16 May 2010 21:35:43 -0400 |
Dan |
Added the ability to trust XFF (X-Forwarded-For) headers.
|
file |
diff |
annotate
|
| Sun, 02 May 2010 23:15:18 -0400 |
Dan |
Added a box on Admin:UploadConfig showing the value of upload_max_filesize.
|
file |
diff |
annotate
|
| Sun, 28 Mar 2010 23:10:46 -0400 |
Dan |
Going ahead with the switch to tabs. This is a major coding standards change! If any unusual parser bugs show up, check this changeset. Converted all .php, .js, .tpl, .css, and .json files and did basic testing.
|
file |
diff |
annotate
|
| Sun, 28 Mar 2010 21:49:26 -0400 |
Dan |
Introduced configurability for gzip compression. Fixes issue 18.
|
file |
diff |
annotate
|
| Sat, 20 Mar 2010 16:05:38 -0400 |
Dan |
Fixed "unapproved" status taking precedence over "spam" flag in comment submit and some display related bugs in comments.js
|
file |
diff |
annotate
|
| Sun, 07 Feb 2010 17:07:42 -0500 |
Dan |
URL sanitizer: disabled uppercase letters in URL hex character codes (it was causing conflicts with the Windows/Apache 2.2 alt namespace separator). Thanks Techokami for finding and reporting this bug.
|
file |
diff |
annotate
|
| Wed, 06 Jan 2010 02:02:51 -0500 |
Dan |
Fixed some bugs with account activation, especially if you're a half-logged-in vegetable.
|
file |
diff |
annotate
|
| Tue, 05 Jan 2010 09:56:00 -0500 |
Dan |
Fixed ENANO_VERSION under databaseless template class
|
file |
diff |
annotate
|
| Mon, 28 Dec 2009 16:53:19 -0500 |
Dan |
Fixed oversanitation of multiple XHTML closing tags in a row
|
file |
diff |
annotate
|
| Fri, 18 Dec 2009 21:21:59 -0500 |
Dan |
OK screw that, put the crypto backend check in functions.
|
file |
diff |
annotate
|
| Thu, 17 Dec 2009 04:26:21 -0500 |
Dan |
JSON preparser: fixed corruption of strings that include the exact pattern word, comma, space, word, colon
|
file |
diff |
annotate
|
| Sat, 12 Dec 2009 15:43:23 -0500 |
Dan |
Set up more sensible defaults (UTC, DST off) for timezone preferences. Also modified enano_date() to properly include GMT offsets when timezone characters are used. Fixes issue 4.
|
file |
diff |
annotate
|
| Mon, 09 Nov 2009 09:18:29 -0500 |
Dan |
which(): added silencer to shut up errors on servers with open_basedir restriction
|
file |
diff |
annotate
|
| Sat, 26 Sep 2009 15:21:51 -0400 |
Dan |
More blank-urlname bugfixes, this time involving internal links
|
file |
diff |
annotate
|