summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2009-08-30Change the processing time for search_task and exif_task to start theBharat Mediratta
1.5 second counter only after we've done any expensive queries. This guarantees at least some time to do work. Fixes ticket #693.
2009-08-30Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta
2009-08-30Improve no_tabs test to print out a complete list of files + line numbers + ↵Andy Staudacher
line snippet.
2009-08-30Add $theme-> methods to Xss whitelist for HTML safety.Andy Staudacher
Updating XSS golden file.
2009-08-30Change all instances of SafeString::of_safe_html() to html::mark_safe() in ↵Andy Staudacher
views.
2009-08-30Fixing typoAndy Staudacher
2009-08-29Minor cleanupAndy Staudacher
2009-08-29Update all code to use helper method html::clean(), html::purify(), ... ↵Andy Staudacher
instead of SafeString directly.
2009-08-29Adding html::clean(), ::purify(), etc.Andy Staudacher
2009-08-29Delete obsolete comment and tighten the code in site_menu().Bharat Mediratta
2009-08-29Remove try/catch in resize() since that will swallow any exceptionsBharat Mediratta
that we generate when resizing.
2009-08-29Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta
2009-08-29Merge branch 'master' of git@github.com:gallery/gallery3Chad Kieffer
2009-08-29Change the organize tree to expand/collapse. It doesn't properly openBharat Mediratta
up to the album that you're viewing, and if you move a photo to a different album it'll reload the entire album tree.
2009-08-29Apply hover effect to dialog buttons.Chad Kieffer
2009-08-29Undo url helper changes - url methods no longer return a SafeString.Andy Staudacher
Adding SafeString::of_safe_html() calls where urls are passed as parameters to t() and t2().
2009-08-29you can close the l10n client directly from its interface now, without going ↵jhilden
back to the languages admin page
2009-08-29Merge branch 'master' of git@github.com:gallery/gallery3jhilden
2009-08-29initial version of the the file with common CSS styles that should be reused ↵jhilden
if possible
2009-08-29Fix error text color.Chad Kieffer
2009-08-29XSS fixesAndy Staudacher
2009-08-29Fix for ticket #628:Tim Almdal
1) increased gallery module version to 11 2) added image_sharpened parameter to the gallery module 3) sharpen all resizes.
2009-08-29Fix invalida syntax on trying to parse the progress bar percentageTim Almdal
2009-08-29L10n fixes for the admin_languages page, and JS/XSS cleanup of the organize ↵Andy Staudacher
views.
2009-08-29Fix link in l10n UI (for SafeString changes)Andy Staudacher
2009-08-29Merge commit 'upstream/master'Andy Staudacher
Conflicts: modules/akismet/views/admin_akismet.html.php modules/comment/helpers/comment_rss.php modules/gallery/helpers/gallery_rss.php modules/gallery/libraries/I18n.php modules/gallery/views/permissions_browse.html.php modules/gallery/views/simple_uploader.html.php modules/info/views/info_block.html.php modules/organize/controllers/organize.php modules/organize/views/organize.html.php modules/organize/views/organize_album.html.php themes/default/views/album.html.php themes/default/views/movie.html.php themes/default/views/photo.html.php
2009-08-29Fixing all detected XSS vectors in PHP->JS code.Andy Staudacher
Xss: Rename UNKNOWN back to DIRTY, JS_XSS to DIRTY_JS. (using a different flag value to highlight potential XSS vectors in JS)
2009-08-29Merge branch 'master' of git@github.com:gallery/gallery3Chad Kieffer
2009-08-29Update status message styles. Lighten backgrounds, don't show background on ↵Chad Kieffer
Admin Maintenance rows, and added gModuleStatus class.
2009-08-29Bugfix: Don't forget to copy the _is_purified_html flag when cloning a ↵Andy Staudacher
SafeString.
2009-08-29Refactor all calls of p::clean() to SafeString::of() and p::purify() to ↵Andy Staudacher
SafeString::purify(). Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
2009-08-29Add more factory methods for convenience:Andy Staudacher
SafeString::purify() and SafeString::of_safe_html(). Removing SafeString::mark_html_safe() since it's no longer needed.
2009-08-29Merge branch 'talmdal_branch' of git@github.com:gallery/gallery3Bharat Mediratta
2009-08-29Add a test for Comment_Model::viewable().Bharat Mediratta
2009-08-29Fix active() to not use user::guest() as the fallback for our Session::get() ↵Bharat Mediratta
call.
2009-08-29Clean up the test and get it working.Bharat Mediratta
2009-08-29Adding SafeString::for_html_attr()Andy Staudacher
2009-08-29Rename $comment_model to $comments.Bharat Mediratta
2009-08-29Fix for 641... extend viewable functionality to comments. Viewable unit test ↵Tim Almdal
is not working.
2009-08-29Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta
2009-08-29Have url::site() and other methods return a SafeString, just as t() and t2().Andy Staudacher
Benefits: - url::site() is often used in views and we can ensure in the url class that returned strings are indeed safe for use in HTML. Makes the list of vars of unknown safety status shorter. - url::site() is often used as message parameter to t() and t2(). The parameter would be HTML-escaped if it wasn't marked as safe HTML already. Makes the usage simpler / shorter.
2009-08-29Merge branch 'master' of git@github.com:gallery/gallery3jhilden
2009-08-29Fix a bug where organize doesn't properly generate the tree at the root album.Bharat Mediratta
2009-08-29* created new generic "Add" dropdown in the site menu. this should take care ↵jhilden
of ticket #537 * removed start/stop translation menu items from the admin, since they are on the languags admin page now
2009-08-29Standardize the access to the create_random_item methodTim Almdal
2009-08-29Merge branch 'master' of git://github.com/gallery/gallery3Tim Almdal
2009-08-29improved translation interface so that it now can be closed without going to ↵jhilden
the admin
2009-08-29Fix typo in the parameter listTim Almdal
2009-08-29Remove stray blank line.Bharat Mediratta
2009-08-29Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta