Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-02-21 | Fix random queries (such as for the random image block) for locales that ↵ | Andy Staudacher | |
don't use a period as decimal separator of floating point numbers (such as de_DE). (Integrating a fix Kohana's SQL generation for floating point numbers. See http://dev.kohanaframework.org/issues/2636.) | |||
2010-02-18 | Fix for tickets #1024 and #1025: Fix formatting of album tree list in the ↵ | Andy Staudacher | |
organize dialog, and (magically) drag and drop move to another album works as well again. Tested in FF3.5, Chrome5 on Ubuntu Linux. | |||
2010-02-18 | Improve setlocale() call, using some of G2's locale fallback code to match ↵ | Andy Staudacher | |
the platform's locale names. | |||
2010-02-16 | Fix for ticket #1017: Handle the common case of t(html::clean($var)) by ↵ | Andy Staudacher | |
casting SafeString instances to string in translate(). | |||
2010-02-16 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-16 | Fix for ticket #1020: Fix RSS feed validation of album / recent items feeds. | Andy Staudacher | |
2010-02-15 | Apply zoom to g-photo and g-movie to hold height and properly position ↵ | Chad Kieffer | |
g-context-menu, closes #1018 | |||
2010-02-15 | Put focus on password field in reauthenticate dialog. | Andy Staudacher | |
2010-02-15 | Update of reviewed XSS audit data. | Andy Staudacher | |
2010-02-15 | Input sanitization | Andy Staudacher | |
2010-02-15 | Never assign a SafeString instance to a Model member (or hell will break loose). | Andy Staudacher | |
2010-02-15 | Merge branch 'master' of git@github.com:gallery/gallery3 | Tim Almdal | |
2010-02-15 | return the absolute url not the relative for the full size, resize and thumb ↵ | Tim Almdal | |
images. | |||
2010-02-15 | Initialize context-menu hover using g-photo/g-movie, not the image or movie ↵ | Chad Kieffer | |
object. Closes ticket #808 | |||
2010-02-14 | Fix for ticket #491: Make user and group names translatable. | Andy Staudacher | |
Also fixed a UI bug: No longer showing the edit user buttons to admins in the profile view (to be consistent with the requirements in the controller). | |||
2010-02-14 | Fix for ticket 901: Wrap Gallery version string into bdo tag to override the ↵ | Andy Staudacher | |
BiDi algorithm. Also, properly marking the "Powere by" string for translation. See: http://www.w3.org/International/tutorials/bidi-xhtml/#Slide0420 | |||
2010-02-14 | Need to allow access to ::change_provider for CLI, to make packager work. | Andy Staudacher | |
2010-02-14 | Enable session expiration. Currently, it's set to expire sessions after 7 ↵ | Andy Staudacher | |
days of inactivity. | |||
2010-02-14 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-14 | Avoid PHP warnings when the DB host string has no port. | Andy Staudacher | |
2010-02-14 | On search results, if g-item's onhover height is less than it's siblings set ↵ | Chad Kieffer | |
height, set the hover item's height equal to its siblings. | |||
2010-02-14 | Minor security tightening of IdentityProvider::change_provider(). | Andy Staudacher | |
2010-02-14 | Add zoom attribute to #g-banner to fix issue banner display. Closes #863 | Chad Kieffer | |
2010-02-14 | Create an items REST collection requests that accepts a list of resource ↵ | Tim Almdal | |
urls and returns the items associated with them. | |||
2010-02-14 | Remove the dirty flags from the information returned from the rest request ↵ | Tim Almdal | |
for an item. In addition, add links to the images. | |||
2010-02-14 | If the return object is empty still return the empty object in the json ↵ | Tim Almdal | |
response. | |||
2010-02-14 | Merge branch 'master' of git@github.com:gallery/gallery3 | Tim Almdal | |
2010-02-14 | Change JavaScript reauthentication check to check via XHR. | Andy Staudacher | |
Benefit: Getting the real deadline this way, not interfering with an ongoing maintenance task. | |||
2010-02-14 | HTML validation, avoid empty <ul> | Andy Staudacher | |
2010-02-14 | HTML validation fix (<script>) | Andy Staudacher | |
2010-02-14 | Some HTML validation fixes (don't render empty <ul> lists, empty id ↵ | Andy Staudacher | |
attributes, use & not &) | |||
2010-02-14 | For consistency, use straight Kohana_404_Exception instead of the event system. | Andy Staudacher | |
2010-02-13 | Change JavaScript reauthentication check to check via XHR. | Andy Staudacher | |
Benefit: Getting the real deadline this way, not interfering with an ongoing maintenance task. | |||
2010-02-13 | HTML validation, avoid empty <ul> | Andy Staudacher | |
2010-02-13 | HTML validation fix (<script>) | Andy Staudacher | |
2010-02-12 | Some HTML validation fixes (don't render empty <ul> lists, empty id ↵ | Andy Staudacher | |
attributes, use & not &) | |||
2010-02-12 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-12 | For consistency, use straight Kohana_404_Exception instead of the event system. | Andy Staudacher | |
2010-02-12 | Fix for tickets 1009 and 603: Show a themed error page to guests / ↵ | Andy Staudacher | |
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors. | |||
2010-02-12 | Tighten up the text. | Bharat Mediratta | |
2010-02-12 | Revert "1) Add a depth parameter to retrieving an item thru the rest api" | Bharat Mediratta | |
This reverts commit 3439671bcfb99c1884285e4b4e53295f044e688f. | |||
2010-02-12 | 1) Add a depth parameter to retrieving an item thru the rest api | Tim Almdal | |
2) Standardize the structure of members so that client programs can consistently parse the return information. 3) Added a summary parameter so that client programs can easily determine if the information returned is summary (item type, item title) or the full meal deal | |||
2010-02-11 | Get rid of unnecessary view file. | Andy Staudacher | |
2010-02-11 | Include user name in logging message for failed password reset. As Bharat ↵ | Andy Staudacher | |
points out, t() ensures that parameters are escaped for XSS. | |||
2010-02-11 | Security: Fix leaking of album / photo names. Reject previous fix for ticket ↵ | Andy Staudacher | |
1009. Side effect: Renaming auth::required_login() to login_page(). | |||
2010-02-11 | Fix for ticket 1010: Don't leak valid user names in "forgot password" form. | Andy Staudacher | |
Includes fixes for user forms as well (edit user / email / password). | |||
2010-02-11 | Use the admin/users/edit_user_form version of the user editing form | Bharat Mediratta | |
right after initial install so that we're not requiring the user to re-enter the auto-generated password to change their password and email. Fixes ticket #1007 | |||
2010-02-10 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-10 | Refactor the code to display the login page if the user does not have view | Tim Almdal | |
permission into the common auth::require_login() method. | |||
2010-02-10 | If the user does not have permission to view the album, photo or movie, redirect | Tim Almdal | |
to a logon page to allow the user to login. Pass the target url as a session variable to allow the user to be redirected where they want to go if the login was successful. Fixes ticket #1009. |