Commit Graph

4204 Commits

Author SHA1 Message Date
El RIDO 86b1a4e9ac disable running snyk if triggering user doesn't have access to the secret 2025-09-13 07:20:25 +02:00
rugk 394b4cb33d Merge pull request #1639 from PrivateBin/urlshortener/url-vadility
Strengthen validation of URL in proxy services
2025-09-12 00:05:02 +02:00
El RIDO 2b8b5d71d2 Merge pull request #1645 from karthikkasturi/master
fix regex check for short url in response
2025-09-11 20:55:34 +02:00
Karthik Kasturi 24afa5a1d8 removed CSP tag from shortenerproxy.php 2025-09-11 18:17:30 +01:00
Karthik Kasturi 191ed63b04 fix regex check for short url in response 2025-09-10 16:02:06 +01:00
El RIDO 952e86b11c Merge pull request #1643 from PrivateBin/crowdin-translation
New Crowdin updates
2025-09-07 07:31:49 +02:00
PrivateBin Translator Bot 90d661db6f New translations en.json (Chinese Simplified) 2025-09-07 04:10:44 +02:00
El RIDO fc53db1559 Merge pull request #1642 from PrivateBin/dependabot/github_actions/actions/setup-node-5
Bump actions/setup-node from 4 to 5
2025-09-04 21:31:22 +02:00
dependabot[bot] ba5dfb2a08 Bump actions/setup-node from 4 to 5
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-04 13:21:14 +00:00
El RIDO bd61a3d021 enable tests to pass
The path is only optional when it is / and the very last element, otherwise it is required. As soon as it is in the middle of a URL it helps the parser to identify which part is the username and domain and what is path and GET parameters. The @ sign is legitimate, if unusual, in the latter two.
2025-09-03 20:13:33 +02:00
rugk a6034ace1b test: PHP considers this invalid 2025-09-03 14:25:04 +00:00
rugk 616635c66c style: scruintizer wants some trailing comma 2025-09-03 14:21:00 +00:00
rugk e4f2383dd8 test: more test cases for testForeignUrlUsingUsernameTrick 2025-09-03 14:20:03 +00:00
rugk 25dca0838e style(codespaces): comment PHP unit testing setup for now 2025-09-03 14:14:08 +00:00
rugk cfc687d62b style: fix indentation 2025-09-03 14:12:12 +00:00
rugk 168fed64b9 chore: apply Scruintizer diff 2025-09-03 14:11:35 +00:00
rugk 4f13d93af2 style: use explicit types 2025-09-03 13:53:51 +00:00
rugk f76704a88c refactor: simplify tests 2025-09-03 13:48:28 +00:00
rugk dbaa70ec11 test: move ftp example to rejected because of foreign URL 2025-09-03 13:45:30 +00:00
rugk 879b696f22 wipfix: correct contatenation of options 2025-09-03 13:43:57 +00:00
rugk 0a398d73f0 chore(codespace): install stuff for PHP unit testing 2025-09-03 12:57:55 +00:00
rugk fae7e233f3 test: write some tests for testing proxy ensurance 2025-09-03 12:38:44 +00:00
rugk 64165d9928 chore: always ignore composer PHP bin dir 2025-09-03 12:38:13 +00:00
rugk bdfe74c077 chore: fix Codespace COmposer/PHPUnit PATH 2025-09-03 12:37:55 +00:00
rugk 2c1a17a07f Strengthen validation of URL in proxy services
This should definitively rule out any circumstances, where invalid URLs could cause problems.

Both URL validity is checked before it is forwarded to the URL shortener proxy _and_ the host part is explicitly compared to make sure the domain is really the same one.

TOOD:
* [ ] some tests may be needed here (hmpff…)
2025-09-02 22:40:22 +02:00
El RIDO a72545c994 Merge pull request #1636 from PrivateBin/crowdin-translation
New Crowdin updates
2025-08-30 19:23:03 +02:00
PrivateBin Translator Bot e31027d71e New translations en.json (Corsican) 2025-08-30 17:54:07 +02:00
El RIDO 5cc963be1b deduplicate proxy view operations 2025-08-30 09:22:44 +02:00
El RIDO 5cc66bb29b Merge pull request #1629 from karthikkasturi/shlink
Added shlink integration
2025-08-30 09:19:41 +02:00
El RIDO a97af156a0 Merge pull request #1633 from PrivateBin/crowdin-translation
New Crowdin updates
2025-08-21 18:13:10 +02:00
PrivateBin Translator Bot 374f937418 New translations en.json (Czech) 2025-08-21 16:56:25 +02:00
PrivateBin Translator Bot 53cf3063b9 New translations en.json (Czech) 2025-08-21 15:18:24 +02:00
Karthik Kasturi 77395c147f updated test cases, added clarity in error messages 2025-08-20 01:23:06 +00:00
Karthik Kasturi 39e527915e Add test cases for shlink 2025-08-19 23:55:32 +00:00
Karthik Kasturi 0be1cef224 i18n updates 2025-08-19 21:39:16 +01:00
Karthik Kasturi 7ec8bc6ef1 chore: moved proxy classes to different folder and namespaces 2025-08-19 20:34:39 +01:00
El RIDO c317dc423b Merge pull request #1631 from PrivateBin/crowdin-translation
New Crowdin updates
2025-08-18 21:42:18 +02:00
PrivateBin Translator Bot 7380b3d5d4 New translations en.json (Corsican) 2025-08-18 19:21:45 +02:00
Karthik Kasturi 4a39a2ad0f refactor: added AbstractProxy base class for shortener proxies 2025-08-15 23:28:44 +01:00
Karthik Kasturi 714e455479 style fixes 2025-08-15 00:20:11 +01:00
Karthik Kasturi 0808052acf Added shlink integration 2025-08-15 00:07:51 +01:00
El RIDO ebe275d509 Merge pull request #1627 from karthikkasturi/auto-shorten-urls
Auto shorten urls
2025-08-14 07:56:35 +02:00
Karthik Kasturi 0460f18ca0 chore: added new translation 2025-08-14 01:21:49 +01:00
Karthik Kasturi eab8b3b7c9 Updated changelog 2025-08-14 00:48:36 +01:00
Karthik Kasturi 94e0d718cf update SRI 2025-08-14 00:39:59 +01:00
Karthik Kasturi 059e64adb1 Auto Shortening URLs 2025-08-14 00:29:28 +01:00
El RIDO 08c44cfb05 Merge pull request #1626 from PrivateBin/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-08-13 07:12:42 +02:00
dependabot[bot] 09bab8744f Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 17:11:00 +00:00
El RIDO 50b8c1de50 Merge pull request #1625 from karthikkasturi/copy-short-link
Update Copy Link url after short url is generated
2025-08-09 15:01:05 +02:00
El RIDO 8eac99c2ec Merge pull request #1623 from karthikkasturi/master
Update scripts to defer
2025-08-09 14:58:52 +02:00