Commit Graph

528 Commits

Author SHA1 Message Date
ribas160 0462da6e8e - used bootstrap 5 CSS icon named copy, bootstrap 3 CSS glyphicon named duplicate
- keyboard-shortcuts made more accessible by wrapping the keys into kbd-tags
- translate messages may contain allowed HTML tags
- added the record to the CHANGELOG.md
2025-01-02 15:13:44 +02:00
ribas160 a6a7df9a72 Merge remote-tracking branch 'upstream/master' into copy_to_clipboard_btn
# Conflicts:
#	i18n/ar.json
#	i18n/bg.json
#	i18n/ca.json
#	i18n/co.json
#	i18n/cs.json
#	i18n/de.json
#	i18n/el.json
#	i18n/en.json
#	i18n/es.json
#	i18n/et.json
#	i18n/fi.json
#	i18n/fr.json
#	i18n/he.json
#	i18n/hi.json
#	i18n/hu.json
#	i18n/id.json
#	i18n/it.json
#	i18n/ja.json
#	i18n/jbo.json
#	i18n/ko.json
#	i18n/ku.json
#	i18n/la.json
#	i18n/lt.json
#	i18n/nl.json
#	i18n/no.json
#	i18n/oc.json
#	i18n/pl.json
#	i18n/pt.json
#	i18n/ro.json
#	i18n/ru.json
#	i18n/sk.json
#	i18n/sl.json
#	i18n/sv.json
#	i18n/th.json
#	i18n/tr.json
#	i18n/uk.json
#	i18n/zh.json
#	lib/Configuration.php
2024-12-29 22:19:35 +02:00
ribas160 6c39a1441c Copy paste to clipboard button added. Copy paste to clipboard shortcut added 2024-12-28 18:42:46 +02:00
rugk 6876e14679 Merge remote-tracking branch 'origin/master' into fix-webkit 2024-10-22 22:32:32 +00:00
rugk 628b60dcb4 refactor: deferring everything including all potential deps
Also works on Safari…
2024-10-22 22:29:42 +00:00
El RIDO 07aeed1c4c Merge branch 'master' into fix-webkit 2024-10-19 11:35:57 +02:00
El RIDO ec2e981984 upgrading DOMpurify library to 3.1.7 2024-10-19 11:17:53 +02:00
parthiv-m 788146012e Fix failing tests, update button icon and text according to feedback 2024-10-17 21:56:27 -04:00
theProton 922971590e Merge branch 'PrivateBin:master' into navigate-after-delete 2024-10-17 21:22:29 -04:00
rugk 8d435d7c14 Fix style by removing optional parameter
Co-authored-by: El RIDO <elrido@gmx.net>
2024-10-18 02:59:20 +02:00
rugk 64ed6e96ee fix: load in WebKit again by loading jquery, base and deflate libs non-async'ly 2024-10-16 22:46:18 +00:00
parthiv-m 773c56fc94 Fix conditional display of 'New' paste button on alert 2024-10-14 12:54:36 -04:00
parthiv-m f2b60d3765 Add _is_deleted status message to Controller and prompt for button click after paste delete 2024-10-13 17:45:05 -04:00
El RIDO aafc143a5a strict types in templates 2024-10-11 07:14:18 +02:00
parthiv-m d69d29f3a9 Fix: Once a paste is deleted, navigate to
the home page after 5 seconds; change type
of the corresponding alert to alert-success
2024-10-07 17:42:37 -04:00
El RIDO ab2d2f2477 upgrading DOMpurify library to 3.1.6 2024-08-03 09:52:30 +02:00
El RIDO d27e7e8ee3 make scriptTag parameter a string for flexibility and clarity 2024-07-09 21:38:41 +02:00
El RIDO 8b3b16be44 SRI hashes are now configurable, no longer hardcoded in templates
- addresses #1365
- should make upgrades easier for those using custom templates
- if the JS files got customized, the default SRI hashes can be replaced in the conf.php file, added commented section in conf.sample.php
2024-07-07 16:36:52 +02:00
El RIDO b9d24b74b3 Merge branch 'version-sed' 2024-05-30 18:52:18 +02:00
9401adarsh 750a0adce4 chore: update sri hashes to reflect changes in js/ 2024-05-29 16:21:08 +05:30
El RIDO 05402ef304 remove version from doc blocs
- @version in file header level isn't used on code docs, it is intended
  for API versions at class or method level
- avoids needing to update all these files on version increment
- avoids needing to regenerate SRI hashes for privatebin.js through
  extra phpunit run
- simplifies VERSION_FILES list
- avoids having to filter above list during loop
- adds a few missing doc bloc headers
2024-05-28 21:03:22 +02:00
El RIDO c04c7b0f34 update SRI hashes, npm lock file 2024-05-21 07:14:12 +02:00
El RIDO 22419cd68a incrementing version 2024-05-13 19:18:30 +02:00
El RIDO 619fbb6653 Merge remote-tracking branch 'origin/dompurify' 2024-05-13 06:57:41 +02:00
El RIDO ee3b5ec08a chore: upgrade DOMPurify from v3.1.2 to 3.1.3 2024-05-12 10:18:49 +02:00
El RIDO 2c8b5ed0e4 expiration time selection for bootstrap template, fixes #1309 2024-05-09 15:55:42 +02:00
El RIDO 11c26a7281 update SRI hashes and add missing translation messages 2024-05-06 12:40:48 +02:00
El RIDO 5067e9222c incrementing version 2024-05-05 20:43:33 +02:00
El RIDO 843aa00473 Merge branch 'chrono-privacy' 2024-05-05 19:34:22 +02:00
El RIDO 6028a1d801 chore: upgrade jQuery from v3.7.0 to 3.7.1 2024-05-05 11:50:12 +02:00
El RIDO b00528388f Merge branch 'master' into chrono-privacy 2024-05-05 10:25:31 +02:00
El RIDO 06fb606aa7 Merge branch 'master' into bootstrap 2024-05-04 16:15:07 +02:00
El RIDO 2b87bf3d13 update SRI hashes 2024-05-04 16:14:12 +02:00
El RIDO 0f9158b37b allow disabling comment date display using discussiondatedisplay configuration option 2024-05-04 14:38:41 +02:00
El RIDO 81fdf8ebfc re-lax samesite cookie policy
As per discussion in code review:

> Cookies are always scoped in browsers. That's not the issue. SameSite attribute just protects against CSRF attacks. But Get requests (aka links) are also "protected" with Strict, which breaks it… and for users that is highly confusing when they (apparently arbitrarily) do not get the language they have set before when clicking a link.

https://github.com/PrivateBin/PrivateBin/pull/1287#discussion_r1589299210
2024-05-04 12:12:31 +02:00
rugk 4500794980 chore: ugrade DOMPurify from v3.0.8 to 3.1.2
This incluces v3.1.1, which says:
> Note that this is a security release and should be upgraded to immediately.

https://github.com/cure53/DOMPurify/releases/tag/3.1.1

The release notes of the actual version itself are https://github.com/cure53/DOMPurify/releases/tag/3.1.2

I do not found more information on the vulnerability that apparently is in there.

* [x] manually tested and works
2024-05-03 15:55:53 +00:00
El RIDO c66d3f05da semantics 2024-04-23 22:11:58 +02:00
El RIDO e22da2e0d1 address "oneliner-hell" 2024-04-23 21:15:33 +02:00
El RIDO 658383e6d1 set lang cookie with strict SameSite property 2024-04-21 11:36:31 +02:00
El RIDO 15481290fb fix tab alignment 2024-04-21 11:02:14 +02:00
El RIDO 545ba7506e bootstrap 5 - fix password modal display 2024-04-21 11:01:40 +02:00
El RIDO 491ed9a521 bootstrap 5 template function complete
current status:
- got expiration and format selections to work
- fixed modals (password, QR-code, etc.)
- replaced glyphicons with Bootstrap icons (needs CSP relaxation to work)
- tested the different settings and combinations
- got editor tabs to change active status

to be done:
- add "Dark Mode" to translation strings
- figure out how to change prettify theme when dark mode gets selected
- check tab alignment in HTML source
2024-04-18 21:36:43 +02:00
El RIDO 1870b9075c Merge branch 'cloudrac3r-patch-1' 2024-03-22 07:44:47 +01:00
Cadence Ember d4fdc563ae Update all instances of text in language files 2024-03-22 11:25:17 +13:00
El RIDO 89a5d07b94 shortened paste URL does not appear in email
fixes #606
2024-03-10 17:26:30 +01:00
El RIDO 63b2526ee7 "Send" button now labeled "Create", fixes #946 2024-02-12 21:50:11 +01:00
El RIDO aad975a721 incrementing version 2024-02-11 15:31:11 +01:00
El RIDO a3ee624d3a incrementing version 2024-02-11 14:17:27 +01:00
El RIDO 57b1890815 Merge branch 'master' into ask-before-burn 2024-02-07 19:45:54 +01:00
El RIDO 7bb913acdf Merge pull request #1236 from PrivateBin/bump-libs
bump libraries to DOMpurify 3.0.8 & zlib 1.3.1, increase compression level
2024-02-07 19:30:25 +01:00