615 Commits

Author	SHA1	Message	Date
El RIDO	f2e0c1a701	upgrade to zlib 1.2.12	2022-03-30 06:05:37 +02:00
El RIDO	82be7c6354	Merge branch 'hardening' of github.com:PrivateBin/PrivateBin into hardening	2022-03-27 08:28:10 +02:00
El RIDO	75dc346f0f	be more specific on the base type match and less specific on the subtype, in order to fail-safe (avoid being tricked into not sanitizing - the mime type is a user provided input)	2022-03-27 08:27:24 +02:00
El RIDO	960faf4417	wording ... Co-authored-by: rugk <rugk+git@posteo.de>	2022-03-27 07:58:25 +02:00
El RIDO	36cb37c029	prevent error when attachments are disabled, but paste with attachment gets displayed	2022-03-13 20:18:51 +01:00
El RIDO	5617612eb3	upgrade to showdown 2.0.3	2022-03-13 20:05:38 +01:00
El RIDO	2a4d572c1e	Sanitize SVG preview, preventing script execution in instance context, while dropping support for attachment download in IE	2022-03-13 19:56:12 +01:00
El RIDO	f39934a104	Merge pull request #896 from Patriccollu/PB-in-Corsican ... Adding Corsican as brand new locale	2022-02-26 11:52:43 +01:00
Patriccollu	004e2dd75c	Update to add Corsican as new locale	2022-02-24 20:03:48 +01:00
El RIDO	7a6f36a789	disable failing part of the test	2022-02-23 06:04:05 +01:00
El RIDO	a0f8a667ae	deprecated functions, fix test partially	2022-02-20 21:07:04 +01:00
El RIDO	fbf0eae513	update bootstrap JS library to 3.4.1 ... note that this fails one of our unit tests	2022-02-20 16:13:54 +01:00
El RIDO	7277d2bb43	update all libraries	2022-02-18 07:36:09 +01:00
El RIDO	9df6754dfa	Merge pull request #881 from PrivateBin/jbobau ... Lojban translation	2022-02-13 08:58:29 +01:00
El RIDO	8faf0501f4	improve Lojban support ... - Crowdin has to use the 3 letter language code, since Lojban has no 2 letter code. Added support for this in the PHP backend and renamed the translation file. - Lojban has no plural cases, updated the plural-formulas accordingly. - Credited the change and documented it. - Updated the SRI hashes.	2022-02-12 16:17:09 +01:00
Bjoern Becker	832f000576	update jquery	2022-02-11 12:22:16 +01:00
foxsouns - SEE ME @ GITLAB	401cd32d07	add jb (lojban) into supported languages list	2022-02-09 22:30:53 -08:00
El RIDO	a2ffbafa13	ensure npm's package.json version gets incremented	2021-06-05 09:43:01 +02:00
El RIDO	bc11452259	make filename unique per paste ID	2021-04-17 09:08:11 +02:00
El RIDO	853a4f386f	fix indentation	2021-04-17 08:51:25 +02:00
El RIDO	47029fb04e	Merge branch 'master' into download-feature	2021-04-17 08:47:14 +02:00
El RIDO	1dc8b24665	transmit cookie only over HTTPS, fixes #472	2021-04-16 20:15:12 +02:00
Christian Pierre MOMON	ed66351337	Added download feature (#5318).	2021-04-16 19:29:03 +02:00
El RIDO	175d14224e	set plurals for and credit Estonian translation	2021-04-16 18:27:12 +02:00
El RIDO	d65bf02d78	upgraded kjua	2021-04-05 17:33:07 +02:00
El RIDO	458ebcb321	incrementing version	2021-04-05 17:05:14 +02:00
El RIDO	a369202c51	add missing expiration reset	2021-04-05 13:47:37 +02:00
El RIDO	77ee40909f	record defaults during initialization, fixes #682	2021-04-05 13:24:53 +02:00
El RIDO	5fd829aa09	adding unit tests for TopNav.resetInput(), triggering bug described in #682	2021-04-05 12:50:23 +02:00
El RIDO	a40f3b2950	update DOMpurify to version 2.2.7	2021-04-03 07:04:59 +02:00
El RIDO	2e10bdbd22	update DOMpurify to version 2.2.7	2021-04-02 09:09:47 +02:00
El RIDO	da0896fe42	set plurals for and credit Catalan translation	2021-04-02 09:00:27 +02:00
El RIDO	5a9bcea3a9	set plurals for and credit Indonesian translation	2021-03-09 05:54:06 +01:00
El RIDO	b38ebc503e	plural rules and documenting newly added languages	2021-01-07 21:16:03 +01:00
El RIDO	5ec72f1d89	address false positive jsverify RngState 080d2f5b13a86e97c4	2020-10-04 14:08:27 +02:00
El RIDO	1614342248	update DOMpurify to version 2.0.14	2020-08-30 08:34:38 +02:00
El RIDO	0673c1cde1	fix display of empty files #663	2020-06-30 20:10:56 +02:00
El RIDO	cb0faf690c	DOMpurify strips line tabulation characters (\u000b), adresses jsverifyRngState 8f6fbd749c3852ea01	2020-06-07 07:58:07 +02:00
El RIDO	8fcc321eb6	adjust unit tests to new link format	2020-06-07 07:47:28 +02:00
El RIDO	5450a431cf	Merge branch 'Haocen-625-bugfixes'	2020-06-07 07:38:59 +02:00
Haocen Xu	65011019b7	Fix urls2links unit test	2020-06-02 09:03:33 -04:00
El RIDO	dfed1a4b45	switching webcrypto library to native node crypto implementation (requires node>=10)	2020-06-01 08:07:25 +02:00
unknown	903ea5ea68	Open all links in new window	2020-06-01 02:33:22 +08:00
Haocen Xu	dd98af0775	Avoid recreation of existing pasteurl element when calling URL shortener	2020-05-30 06:07:47 -04:00
Haocen Xu	5f0011b0f6	Sanitize output from Helper.urls2links	2020-05-30 06:05:20 -04:00
Haocen Xu	25a39148a8	Change order of execution to detect delete token properly	2020-05-30 06:00:17 -04:00
Haocen Xu	e298c3d10c	Reload page when back button in browser pressed, avoid reading burn ... after read paste from cache	2020-05-30 05:57:27 -04:00
Haocen Xu	afcece17dd	Fix broken Helper.durationToSeconds, as it doesn't handle weeks	2020-05-30 05:55:41 -04:00
Haocen Xu	74551f58d7	Avoid DOMPurify mess with forward slash in expirationDateString	2020-05-30 05:52:15 -04:00
Haocen Xu	4984194c33	Avoid dropzone appearing when it should not by fixing ... TopNav.isAttachmentReadonly logic	2020-05-30 05:48:15 -04:00