summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-02-18Restore the gallery_installer change from reverted ↵Bharat Mediratta
dcddc68f58dac2f0fe71f5a00ea4af32618efa13 that casts $powered_by_string from SafeString to string.
2010-02-18Revert "Fix for ticket #491: Make user and group names translatable."Bharat Mediratta
This reverts commit 409121942590e12692eaf4e6e9e8b71bfe5ed60c.
2010-02-18Revert "Never assign a SafeString instance to a Model member (or hell will ↵Bharat Mediratta
break loose)." This reverts commit dcddc68f58dac2f0fe71f5a00ea4af32618efa13.
2010-02-18Revert "Fix for ticket #1017: Handle the common case of t(html::clean($var)) ↵Bharat Mediratta
by casting SafeString instances to string in translate()." This reverts commit 4ca55a90ee2f8e1d8595b0ec53a601d6c65475f6.
2010-02-18Fix for tickets #1024 and #1025: Fix formatting of album tree list in the ↵Andy Staudacher
organize dialog, and (magically) drag and drop move to another album works as well again. Tested in FF3.5, Chrome5 on Ubuntu Linux.
2010-02-18Improve setlocale() call, using some of G2's locale fallback code to match ↵Andy Staudacher
the platform's locale names.
2010-02-18Absolutely position the 'Add comment' button on the left for RTL. Fixes part ↵Chad Kieffer
of the reopened #869.
2010-02-18Don't need 'right' class here. Positioning is absolute to the right.Chad Kieffer
2010-02-16Fix for ticket #1017: Handle the common case of t(html::clean($var)) by ↵Andy Staudacher
casting SafeString instances to string in translate().
2010-02-16Merge commit 'upstream/master'Andy Staudacher
2010-02-16Fix for ticket #1020: Fix RSS feed validation of album / recent items feeds.Andy Staudacher
2010-02-15Apply zoom to g-photo and g-movie to hold height and properly position ↵Chad Kieffer
g-context-menu, closes #1018
2010-02-15Put focus on password field in reauthenticate dialog.Andy Staudacher
2010-02-15Update of reviewed XSS audit data.Andy Staudacher
2010-02-15Input sanitizationAndy Staudacher
2010-02-15Never assign a SafeString instance to a Model member (or hell will break loose).Andy Staudacher
2010-02-15Merge branch 'master' of git@github.com:gallery/gallery3Tim Almdal
2010-02-15return the absolute url not the relative for the full size, resize and thumb ↵Tim Almdal
images.
2010-02-15Initialize context-menu hover using g-photo/g-movie, not the image or movie ↵Chad Kieffer
object. Closes ticket #808
2010-02-14Fix for ticket #491: Make user and group names translatable.Andy Staudacher
Also fixed a UI bug: No longer showing the edit user buttons to admins in the profile view (to be consistent with the requirements in the controller).
2010-02-14Fix for ticket 901: Wrap Gallery version string into bdo tag to override the ↵Andy Staudacher
BiDi algorithm. Also, properly marking the "Powere by" string for translation. See: http://www.w3.org/International/tutorials/bidi-xhtml/#Slide0420
2010-02-14Need to allow access to ::change_provider for CLI, to make packager work.Andy Staudacher
2010-02-14Enable session expiration. Currently, it's set to expire sessions after 7 ↵Andy Staudacher
days of inactivity.
2010-02-14Merge commit 'upstream/master'Andy Staudacher
2010-02-14Avoid PHP warnings when the DB host string has no port.Andy Staudacher
2010-02-14On search results, if g-item's onhover height is less than it's siblings set ↵Chad Kieffer
height, set the hover item's height equal to its siblings.
2010-02-14Minor security tightening of IdentityProvider::change_provider().Andy Staudacher
2010-02-14Add zoom attribute to #g-banner to fix issue banner display. Closes #863Chad Kieffer
2010-02-14Create an items REST collection requests that accepts a list of resource ↵Tim Almdal
urls and returns the items associated with them.
2010-02-14Remove the dirty flags from the information returned from the rest request ↵Tim Almdal
for an item. In addition, add links to the images.
2010-02-14If the return object is empty still return the empty object in the json ↵Tim Almdal
response.
2010-02-14Merge branch 'master' of git@github.com:gallery/gallery3Tim Almdal
2010-02-14Change JavaScript reauthentication check to check via XHR.Andy Staudacher
Benefit: Getting the real deadline this way, not interfering with an ongoing maintenance task.
2010-02-14HTML validation, avoid empty <ul>Andy Staudacher
2010-02-14HTML validation fix (<script>)Andy Staudacher
2010-02-14Some HTML validation fixes (don't render empty <ul> lists, empty id ↵Andy Staudacher
attributes, use &amp; not &)
2010-02-14For consistency, use straight Kohana_404_Exception instead of the event system.Andy Staudacher
2010-02-13Change JavaScript reauthentication check to check via XHR.Andy Staudacher
Benefit: Getting the real deadline this way, not interfering with an ongoing maintenance task.
2010-02-13HTML validation, avoid empty <ul>Andy Staudacher
2010-02-13HTML validation fix (<script>)Andy Staudacher
2010-02-12Some HTML validation fixes (don't render empty <ul> lists, empty id ↵Andy Staudacher
attributes, use &amp; not &)
2010-02-12Merge commit 'upstream/master'Andy Staudacher
2010-02-12For consistency, use straight Kohana_404_Exception instead of the event system.Andy Staudacher
2010-02-12Fix for tickets 1009 and 603: Show a themed error page to guests / ↵Andy Staudacher
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors.
2010-02-12Tighten up the text.Bharat Mediratta
2010-02-12Revert "1) Add a depth parameter to retrieving an item thru the rest api"Bharat Mediratta
This reverts commit 3439671bcfb99c1884285e4b4e53295f044e688f.
2010-02-121) Add a depth parameter to retrieving an item thru the rest apiTim Almdal
2) Standardize the structure of members so that client programs can consistently parse the return information. 3) Added a summary parameter so that client programs can easily determine if the information returned is summary (item type, item title) or the full meal deal
2010-02-11Get rid of unnecessary view file.Andy Staudacher
2010-02-11Include user name in logging message for failed password reset. As Bharat ↵Andy Staudacher
points out, t() ensures that parameters are escaped for XSS.
2010-02-11Security: Fix leaking of album / photo names. Reject previous fix for ticket ↵Andy Staudacher
1009. Side effect: Renaming auth::required_login() to login_page().
generated by cgit v1.2.3 (git 2.46.0) at 2025-10-17 22:56:05 +0000