4b3d11c988
Add browsing-topics premission policy
2022-04-10 11:28:52 +02:00
7b8e031ab5
Remove FLoC Header
...
Google announced that it is discontinuing FLoC.
2022-04-10 10:36:39 +02:00
456ced37c2
incrementing version
2022-04-05 07:30:51 +02:00
6c1f0dde0c
set CSP also as meta tag, to deal with misconfigured webservers mangling the HTTP header
2022-03-13 18:11:13 +01:00
1034d4038e
unify IP-related logic into traffic limiter
2022-02-20 11:25:19 +01:00
91041d8c59
simplify/unify naming & wording of the two types of IP lists for the traffic limiter
2022-02-20 09:09:20 +01:00
d764c03759
Merge branch 'master' of https://github.com/stevenandres/PrivateBin into stevenandres-master
2022-02-20 08:44:09 +01:00
93135e0abf
improving code coverage
2021-06-13 10:44:26 +02:00
7901ec74a7
folding Persistance\ServerSalt into Data\Filesystem
2021-06-08 22:01:29 +02:00
b5a6ce323e
folding Persistance\TrafficLimiter into Data\Filesystem
2021-06-08 07:49:22 +02:00
3429d293d3
remove configurable dir for traffic & purge limiters
2021-06-08 06:37:27 +02:00
9b893f09d7
Merge branch 'master' into floc
2021-04-17 08:35:21 +02:00
6f3bb25b09
disable Google FloC
2021-04-16 20:25:50 +02:00
1dc8b24665
transmit cookie only over HTTPS, fixes #472
2021-04-16 20:15:12 +02:00
9e6eb50ced
adding new security headers, fixes #765
2021-04-16 19:19:11 +02:00
458ebcb321
incrementing version
2021-04-05 17:05:14 +02:00
bb6a44ce7a
remove double translation, avoid unsupported double quotes in INI file
2020-10-13 07:28:35 +02:00
eb32ea1419
Make it possible to change the info text
...
This makes it possible to change the last part of the info text and
replace it with something individual. E.g pointing to the cmdline
client.
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
2020-10-11 17:04:08 +02:00
e61c44ef46
Make Opengraph really functional
...
Make Opengraph really functional
Change : #664 for #651
2020-07-01 19:47:12 +02:00
13c2f8d968
Make Opengraph really functional
...
3 URLs of images used on social networks are passed in absolute URL.
Note that I did not pass all the images in absolute URLs, but, it could be consistent to do so, but, if the images work, maybe a relative call is more efficient?
Remove the version of PrivateBin, at the end of each image. This apparently prevents the opengraph from working, and, so I deleted on all of the images, to remain consistent at this level. This will make fewer requests, and, anyway, the images are not intended to change with each version.
2020-06-30 22:42:12 +02:00
7794915172
expose permission exceptions to the API
2020-05-31 16:33:25 +02:00
3f75c81a2f
fixed duplicated getKey()
2020-05-08 12:18:20 -07:00
effe6ad3e5
fixed spacing to please StyleCI
2020-05-08 11:37:21 -07:00
8fbdb69d8a
added check for null whitelist
2020-05-08 11:36:19 -07:00
c152f85b50
removed $remoteip that the audit didn't like
2020-05-07 16:45:24 -07:00
819d25a74c
change to whitelist_paste_creation
2020-05-07 16:13:25 -07:00
ef9780707a
Update lib/Controller.php
...
Co-authored-by: rugk <rugk+git@posteo.de >
2020-05-07 15:54:13 -07:00
9ca041fa06
Update lib/Controller.php
...
Co-authored-by: rugk <rugk+git@posteo.de >
2020-05-07 15:53:56 -07:00
9327c9b58b
added whitelist check
2020-05-05 14:18:52 -07:00
9914c37683
incrementing version
2020-03-22 06:44:04 +01:00
afd82ac34d
Merge branch 'master' into php7.4-ci
2020-02-16 13:23:11 +01:00
adece1d784
incrementing version
2020-02-16 11:15:51 +01:00
5d54006c9e
update minimum required PHP version to 5.6 and replace slowEquals() with native hash_equals() function
2020-02-05 19:30:14 +01:00
ed590ee557
incrementing version
2020-01-08 19:31:06 +01:00
2d4edfe401
incrementing version number in preparation of release
2019-09-22 19:42:04 +02:00
7c61f59dcd
removing untranslated string for non-human entities, moving insecure notice to template, so it can remains translated
2019-09-19 19:14:48 +02:00
07018e5876
incrementing version number in preparation of release
2019-07-08 18:35:34 +02:00
11375a4f59
moved referrer policy from CSP & meta to proper HTTP header to avoid browser console error message about unknown CSP header and to ensure it always applies before HTML is parsed, fixes #196
2019-06-27 20:31:10 +02:00
c2e060d464
made compression configurable, fixes #38
2019-06-23 19:45:40 +02:00
42c2003220
made notice configurable, fixing a few CSS glitches
2019-06-17 21:40:37 +02:00
4d6897f063
increasing minimum PHP version to 5.5 as this is required by the yzalis/identicon library upgrade to version 1.2.0
2019-06-16 10:50:52 +02:00
909ff2daa7
handle scrutinizer issues (mostly changes in API documentation)
2019-05-19 09:42:55 +02:00
09162a3c57
fix display of v2 pastes in JS, fixing parsing of comments in PHP, avoid exposing expiration date (we provide time_to_live, would allow calculation of creation date of paste)
2019-05-15 07:44:03 +02:00
cc1c55129f
switching to full JSON API without POST array use, ensure all JSON operations are done with error detection
2019-05-13 22:31:52 +02:00
700f8a0ea7
made all php unit tests pass again
2019-05-10 07:55:39 +02:00
59569bf9fc
working on JsonApi tests
2019-05-08 22:11:21 +02:00
3338bd792e
implement version 2 format validation, changing ID checksum algorithm, resolves #49
2019-05-03 23:03:57 +02:00
b5ebc4a3d7
incrementing version
2018-08-11 19:29:58 +02:00
f9c8441edb
renaming controller #342
2018-07-29 15:17:35 +02:00
Harald Leithner
El RIDO
Andreas Schneider
ZerooCool
Steven Andrés