602 Commits

Author	SHA1	Message	Date
Dan Brown	ad542f0407	Prevented potential inline JS event usage ... - Removes 'on*' attributes from elements. - Also updated script logic to remove scripts instead of escaping. - All JS injection removal now uses DomDocument + xpath parsing.	2019-05-05 13:53:37 +01:00
Dan Brown	8c190324ac	Updated existing image tests to reflect changes ... - Also added some new tests	2019-05-04 18:11:19 +01:00
Dan Brown	79f6dc00a3	Change image-selector to not use manager ... - Now changes the images directly for user, system & cover. - Extra permission checks added to edit & delete actions.	2019-05-04 15:50:29 +01:00
Dan Brown	cb832a2c10	Started diversion to not using image manager for cover/system/user	2019-04-27 14:55:23 +01:00
Dan Brown	a87ae16010	Started extraction of image controller to separate controllers	2019-04-27 14:18:00 +01:00
Dan Brown	aeb1fc4d49	Started rewriting back-end image managment	2019-04-21 15:52:29 +01:00
Dan Brown	4e49d06182	Merge branch 'fix/registraion-form-validation' of git://github.com/cw1998/BookStack into cw1998-fix/registraion-form-validation	2019-04-21 12:24:39 +01:00
Dan Brown	2bb06463d5	Added deeper content id de-duplication ... Closes #1393	2019-04-21 12:22:41 +01:00
Dan Brown	6c66a8935a	Added test to check page HTML id de-duplication ... Relates to #1393	2019-04-20 13:01:56 +01:00
Dan Brown	c24764018a	Updated ldap server option parsing to work with protocol and port ... - Aligns with PHP behaviour where ports is ignore for full LDAP URI. - Added tests to check format being passed to LDAP is as expected. - May be related to #1220 - Related to #1386 and #1278	2019-04-16 22:47:53 +01:00
Christopher Wilkinson	c8cf6731e2	Add min length validation on name on register form & add sign up link	2019-04-16 12:18:51 +01:00
Dan Brown	c380c10d54	Prevented bad duplicate IDs causing major exception ... Related to #1393	2019-04-15 21:20:32 +01:00
Dan Brown	7f3f6e65b9	Aligned item creation wording and updated shelf-book-add logic	2019-04-15 20:45:04 +01:00
Christopher Wilkinson	d3cd369247	Fix phpcs issues	2019-04-15 09:27:17 +01:00
Christopher Wilkinson	faa3a8b842	Add button to add a book directly from a shelf view	2019-04-15 09:27:17 +01:00
Dan Brown	ee58bea8b7	Updated user references to be app-default-supporting functions	2019-04-14 13:19:33 +01:00
Dan Brown	9406b4d4c9	Updated view toggle to store date ... Also added test for user list order preferences	2019-04-14 13:01:51 +01:00
Dan Brown	b12ae6d11b	Added bookshelves to breadcrumbs ... - Updated breadcrumb dropdown switchers and back-end sibling code to handle new breadcrumbs. - Added breadcrumb view composer and EntityContext system to mangage tracking if in the context of a bookshelf.	2019-04-07 18:28:11 +01:00
Dan Brown	221a483b40	Standardised view referencing to dot-notation	2019-04-07 12:00:09 +01:00
Dan Brown	0a06e2bce3	Actioned some todo items, Cleaned old grid css	2019-04-07 09:57:48 +01:00
Dan Brown	d9cde4123d	Fixed entity excerpt function signature misalignment	2019-04-06 18:47:27 +01:00
Dan Brown	7cda9b026e	Updated tests to suit layout changes, Updated 404 page ... - Also replaced 'or' usage in templates with null coalescing operator	2019-04-06 18:36:17 +01:00
Dan Brown	745a0bb98d	Updated custom homepage views	2019-04-06 17:31:59 +01:00
Dan Brown	aedff7dc6d	Added book selector to books sort ... Now more efficient rather than listing all books in the system.	2019-04-06 16:59:04 +01:00
Dan Brown	17969c0bbf	Added shelves and search shortcuts to profile page	2019-04-06 16:21:20 +01:00
Dan Brown	37bf7f11e4	Implemented new design in entity selector ... - Also showed entity path in search. - Cleaned popular entity fetch logic. - Cleaned entity selector JS code a little	2019-03-30 16:54:15 +00:00
Dan Brown	53a26a365c	Merge branch 'master' into 2019-design	2019-03-30 13:17:29 +00:00
Dan Brown	193e2ffebe	Prevent dbl exts. on img upload, Randomized attachment upload names	2019-03-24 19:08:21 +00:00
Dan Brown	f5fe524e6c	Added extension whitelist for image uploads ... - A continuation of the security issues addressed in v0.25.3	2019-03-21 19:43:15 +00:00
Dan Brown	37b91b6b0e	Hardened image file validation by removing custom validation ... - Added test to check PHP files cannot be uploaded as an image.	2019-03-20 23:59:55 +00:00
Dan Brown	8b7bee7c67	Updated standard entity lists	2019-03-17 15:07:03 +00:00
Dan Brown	5f2d226f09	Merge branch 'master' into 2019-design	2019-03-10 21:40:02 +00:00
Dan Brown	44c537de1a	Performed some LDAP service/test cleanup	2019-03-10 10:54:19 +00:00
Dan Brown	6bccf0e64a	Merge branch 'feature-ldap-attributes' of git://github.com/dfanara/BookStack into dfanara-feature-ldap-attributes	2019-03-10 10:31:09 +00:00
Dan Brown	042a6f9760	Updated shelf menu item to show on custom permission ... - Extended new 'userCanOnAny' helper to take a entity class for filtering. Closes #1201	2019-03-09 21:15:45 +00:00
Dan Brown	5c9b528517	Abstracted userCanCreatePage helper to work for any permisison ... - Added test to cover scenario where someone with create-own permission would want to copy a viewable item into a container entity that they own.	2019-03-09 16:50:22 +00:00
Dan Brown	6be2d3f28c	Merge branch 'Copy-For-View-Only' of git://github.com/mark-james/BookStack into mark-james-Copy-For-View-Only	2019-03-09 16:12:12 +00:00
Daniel Fanara	502ea608bf	Issue #1306 - Unit Tests for LdapService Changes	2019-03-09 01:08:49 -05:00
Daniel Fanara	55b07c7076	Issue #1306 - Specify display name attribute from LDAP	2019-03-08 23:55:11 -05:00
Dan Brown	98a4359198	Updated user language select to use correct default ... - Updated localisation system to take note of system defaul locale before replacing the current locale Fixes #1316	2019-03-07 21:09:23 +00:00
Dan Brown	035a0d8efb	Added experimental breadcrumb traversal	2019-02-24 15:57:35 +00:00
Dan Brown	f1e571a57c	Made shelf listing more unique & efficient ... - Now includes listing of all books within.	2019-02-16 17:13:01 +00:00
Dan Brown	a112c11df8	Re-ordered and updated main settings page	2019-02-16 14:17:35 +00:00
Dan Brown	3286f29a61	Merge branch 'master' into 2019-design	2019-02-09 14:58:38 +00:00
Dan Brown	5325870271	Updated auth pages to new design, Removed public layout	2019-02-03 17:34:15 +00:00
Dan Brown	138f5d5c4f	Updated user and shelf views to new design	2019-02-03 13:45:45 +00:00
Dan Brown	20988962fe	Migrated a whole load more page/chapter/shelf views	2019-02-02 11:41:41 +00:00
Dan Brown	32603362a6	Updated a bunch of book views	2019-01-31 20:37:12 +00:00
abijeet	5ef0992d5b	PHPCS related fixes.	2019-01-27 15:59:23 +05:30
Dan Brown	36424a24b5	Added ability for date format strings to be localized by back-end ... Requires the locale to be installed on the system-side. Closes #1214	2019-01-19 12:11:18 +00:00