github-mirror/framework
2
0
Fork 0
mirror of https://github.com/flarum/framework.git synced 2024-11-30 13:36:10 +08:00
Code Issues Actions 26 Packages Projects Releases Wiki Activity
3,088 Commits 87 Branches 50 Tags 181 MiB
b69b24eea6
Commit Graph

3088 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniël Klabbers
b69b24eea6 Fixed issue with tmp/storage/views not existing, this caused tmpname to notice. 
Fixed csrf test that assumed an access token allows application access, which is actually api token.
Improved return type hinting in the StartSession middleware
 2019-06-18 17:22:23 +02:00
Franz Liedke
953cae0de1 Refactor tests to shorten HTTP requests 
Multiple tests now provide JSON request bodies, and others copy cookies
from previous responses, so let's provide convenient helpers for these.
 2019-06-13 00:13:59 +02:00
Franz Liedke
3899cd8487 Accept CSRF token in request body as well 2019-06-13 00:13:58 +02:00
Franz Liedke
aa43d1475e Implement middleware for CSRF token verification 
This fixes a rather large oversight in Flarum's codebase, which was that
we had no explicit CSRF protection using the traditional token approach.

The JS frontend was actually sending these tokens, but the backend did
not require them.
 2019-06-13 00:13:58 +02:00
Franz Liedke
69fdd82ffc Add tests for CSRF token check 2019-06-13 00:13:57 +02:00
Franz Liedke
53cc505037 Integration tests: Configure vendor path 
Now that this is possible, make the easy change...
 2019-06-13 00:13:57 +02:00
Franz Liedke
a7259bbd5f Integration tests: Memoize request handler as well 
This is useful to send HTTP requests (or their PSR-7 equivalents)
through the entire application's middleware stack (instead of
talking to specific controllers, which should be considered
implementation detail).
 2019-06-13 00:13:57 +02:00
Franz Liedke
5632ffb62b Integration tests: Fix test setup 2019-06-13 00:13:38 +02:00
Franz Liedke
3f2d1ffd02 Fix syntax error 2019-06-13 00:11:57 +02:00
Franz Liedke
ae409751c1 Apply fixes from StyleCI (#1793) 
[ci skip] [skip ci]
 2019-06-12 23:50:21 +02:00
Franz Liedke
a5b70d5175 Introduce a vendor path 
This lets us or anyone modify the path from where dependencies (usually
installed into /vendor by Composer) are loaded. We need to be able to
tweak this in our integration tests, where the application code under
test needs access to certain dependencies.
 2019-06-12 23:48:22 +02:00
Franz Liedke
ab731f090f Inject app, not container, to avoid global helpers 2019-06-12 23:48:22 +02:00
Daniël Klabbers
20207e1294 Update CHANGELOG.md 
added fix for js compiler tmp path fix to changelog
 2019-06-12 17:18:21 +02:00
Daniël Klabbers
e8beafa1d4 Merge branch 'master' of github.com:flarum/core 2019-06-12 16:47:15 +02:00
Daniël Klabbers
23f2082f07 fixed issue with the Js compiler being unable to use the system tmp directory, using the one in storage is much safer across different operating systems 2019-06-12 16:46:53 +02:00
Daniël Klabbers
8c3065680a Update CHANGELOG.md 
fixed missing link markdown
 2019-06-12 00:43:57 +02:00
Daniël Klabbers
6b3e2c6205 Update CHANGELOG.md 
added missing changelog item for #1738
 2019-06-12 00:43:09 +02:00
Daniël Klabbers
b939539149 Update CHANGELOG.md 
referenced incorrect (parent) commit in changelog
 2019-06-12 00:38:54 +02:00
Daniël Klabbers
c65b3e5cec patched constraint for components/font-awesome, fixes #1790 2019-06-11 20:22:35 +02:00
Annim Banerjee
4c731ac621 Updated names to match components in fontawsome (#1791) 
fa-* named components are not present, hence updated to matching names.
 2019-06-11 20:17:59 +02:00
Franz Liedke
77025c7bfd Load LESS variables via path traversal 
Since these files are part of the same package, there is no need
to assume a Composer context to load these from. Instead, we can
just load them via the path relative to the current PHP file.

This assumption may break in certain environments, and it is
already broken when running (integration) tests.
 2019-06-09 00:19:06 +02:00
Franz Liedke
836351f0cc This method should be private 2019-06-09 00:19:05 +02:00
Franz Liedke
2637e83490 Do not rely on extensions_enabled being present 
This mostly simplifies setup in complex integration tests.
 2019-06-09 00:19:05 +02:00
Daniël Klabbers
57463f4862 remove use of like which might cause unwanted side effects (#1787) 2019-06-03 12:04:17 +02:00
Franz Liedke
c740c7f593 Update changelog 2019-06-01 20:12:30 +02:00
flarum-bot
50eda14bf3 Bundled output for commit 046c3d0da8 [skip ci] 2019-06-01 18:10:13 +00:00
Franz Liedke
046c3d0da8 Update insecure jQuery version 
Thanks, GitHub security alerts!
 2019-06-01 20:03:07 +02:00
Franz Liedke
8a4d6f5179 Restore "originalUri" request attribute 
This is helpful when Flarum is installed in subfolders.

Fixes #778.
 2019-06-01 12:51:05 +02:00
Franz Liedke
7850fc3b52 Use the settings repository's default value 
Updates commit 860ac26841.
 2019-05-24 20:11:34 +02:00
Franz Liedke
eb4796ef69 Update changelog 2019-05-24 20:11:31 +02:00
Daniël Klabbers
ad43aaebbd Update SECURITY.md 
fixed typo
 2019-05-23 11:15:55 +02:00
Franz Liedke
59ec16cc5d Add a security policy 2019-05-23 11:10:53 +02:00
Toby Zerner
4357ad3d54 Merge pull request #1779 from clarkwinkelmann/fix-userpage-card-dropdown 
Fix dropdown icon not showing in UserCard when on UserPage
 2019-05-02 19:21:39 +09:30
Toby Zerner
d10a9aa6f7 Merge pull request #1780 from clarkwinkelmann/remove-notification-id 
Remove notification id from serializer attributes
 2019-05-02 19:20:42 +09:30
Clark Winkelmann
89e8823404 Remove notification id from serializer attributes 2019-05-01 23:05:25 +02:00
Clark Winkelmann
f843764365 Fix dropdown icon not showing in UserCard when on UserPage 
The rule hiding the icon in the UserHero was too broad and applied to UserCard in the list of posts as well
The float rule was redundant
 2019-05-01 22:54:13 +02:00
Clark Winkelmann
4ea1b80ac1 Remove post id from serializer attributes (#1775) 2019-04-19 21:37:14 +02:00
Daniël Klabbers
860ac26841 This small fix prevents that the forum frontend breaks whenever 
custom_less is NULL or unavailable in the database. We cannot rely
on this value to exist or is incorrectly set to null and thus
completely bricking the app.
 2019-04-12 14:10:20 +02:00
Toby Zerner
bbc2deeca2 Update changelog 2019-03-24 12:26:02 +10:30
Toby Zerner
a917dbc652 Fix is:unread gambit 2019-03-24 12:24:44 +10:30
flarum-bot
db10172890 Bundled output for commit b35dd6d405 [skip ci] 2019-03-20 21:09:11 +00:00
Franz Liedke
b35dd6d405 Fix storing dynamic mail settings 
Refs #1169.
 2019-03-20 22:02:06 +01:00
flarum-bot
a8d138e696 Bundled output for commit 7ffe1502ee [skip ci] 2019-03-19 09:06:21 +00:00
Franz Liedke
e0c38bd725 Apply fixes from StyleCI (#1761) 
[ci skip] [skip ci]
 2019-03-19 09:59:09 +01:00
Franz Liedke
7ffe1502ee Allow configuring all drivers via frontend (#1169) 
This includes an API endpoint for fetching the list of possible
drivers and their configuration fields. In the future, this can
be extended to include more meta information about each field.
 2019-03-19 09:56:20 +01:00
Franz Liedke
cc92e31174 Remove dead code 
Probably a leftover from copy-pasting the BasicsPage.
 2019-03-17 19:02:46 +01:00
Franz Liedke
93ab68e5c4 Add drivers for Mailgun, Mandrill, SES (#1169) 2019-03-16 12:58:35 +01:00
Franz Liedke
f3e4496930 Rely on default contribution guidelines 
See https://help.github.com/en/articles/creating-a-default-community-health-file-for-your-organization.
 2019-03-16 12:32:29 +01:00
flarum-bot
f9b109aa9b Bundled output for commit 1578dfe0e3 [skip ci] 2019-03-15 17:01:09 +00:00
Franz Liedke
8948b8214a Fix last commit 2019-03-15 17:57:11 +01:00