summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2020-10-07API: Update API version to 2.2.0Florian Pritz4-7/+7
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-10-07API: Only consider public methods as API endpointsFlorian Pritz1-1/+1
We are not only interested in checking if a method exists here, but really also if it can be called (e.g. if it is public). Private methods should not be considered as potential API endpoints. Before this, private methods could be called, leading to a 500 error due to a call to the private method. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-10-07API: Add `minimum-id-length` post parameterSimon Schuster6-21/+114
This parameter controls the generated id for files (file/upload) and multipastes (file/create_multipaste). The post parameter has to be a positive integer value >= 2. Changes by Florian Pritz: - minor style and typo fixes - NEWS entry - check expected error reply content in tests Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-10-07docker: Fix python binarySimon Schuster1-0/+1
Filebin unconditionally expects a 'python' command to be in path that is compatible with the installed pygments library. For alpine, this means a python3 binary. Therefore, we symlink /usr/bin/python3 to /usr/bin/python.
2020-09-20docker: Always regenerated config files on container startupFlorian Pritz2-15/+11
We should really regenerate the configs, run migrations and hooks during each container startup. Otherwise you really can't update anything at all. The only thing that we do not do multiple times is adding the admin user, but the add_user method already checks for that and simply displayed an error. Hiding that error is probably not worth the effort so we just add a quick explanatory comment before the potential error. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-09-20docker: Fix database error during initial migrationFlorian Pritz1-1/+1
The following error was shown during initial startup of the container and the database was obviously not initialized because of this. I'm not sure why it happens, but setting the database name in the config (in addition to the name in the PDO connection string) fixes the problem. > Database error: A Database Error Occurred > > Error Number: 42000/1102 > Incorrect database name '' > SHOW TABLES FROM `` > Filename: libraries/Migration.php > Line Number: 167 Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-09-18updated Dockerfile and README.mdAndreas Steding2-3/+3
2020-06-12Update NEWS3.4.5Florian Pritz1-0/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-06-12thumbnail-view.js: Detect automatic image rotation in recent browsersFlorian Pritz2-1/+19
The default value has been changed to `from-image` and at least with Firefox 76 and Chromium 83 this leads to double rotated images. Disabling the automatic rotation with `image-orientation: none` in CSS leads to incorrectly scaled images, (likely, but unverified) because the width/height are returned incorrectly/rotated in jquery/javascript. Whatever it may be, the easier fix is to just check for the new default value and if the browser handles orientation automatically, we disable our own code. https://github.com/w3c/csswg-drafts/issues/3799 Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-04-19Update NEWS3.4.4Florian Pritz1-0/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-04-19Update composer.lockFlorian Pritz1-63/+76
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-04-19Update composer dependency versionsFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-04-19Reclassify various exceptions as InsufficientPermissionsExceptionFlorian Pritz3-3/+3
That way they get the correct HTTP status code and they also get ignored by the logging code. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-04-19Reclassify various exceptions as UserInputExceptionFlorian Pritz5-15/+16
These are errors that a user can correct themselves so we should classify them accordingly. That way they get the correct HTTP status code and they also get ignored by the logging code. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-04-19Log HTTP 500 PublicApiException to error logFlorian Pritz2-0/+4
These return a 500 HTTP error code and when using a CLI download tool, you might not see the returned HTML error message. To make debugging easier we also log them to the error log. Some extending exceptions also return different error codes (e.g. UserInputException) so we filter these by only logging if the return code is 500. If a user/admin sees that code they likely expect a log entry. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-02-09Fix error when repasting non-existent IDFlorian Pritz1-4/+5
We shouldn't treat a possibly boolean value as an array (`$filedata["data_id"]`). Signed-off-by: Florian Pritz <bluewind@xinu.at>
2020-01-15Link to OpenSUSE client repository by Moritz WilhelmyFlorian Pritz1-0/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-12-07Update NEWS3.4.3Florian Pritz1-0/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-12-07ExceptionHandler: Fix null object array access errorFlorian Pritz2-1/+2
Not sure why, but this only started to happen with php 7.4. Should be fixed anyways so I didn't investigate further. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-12-06Update NEWS3.4.2Florian Pritz1-0/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-12-06Fix deprecated array access syntax with {}Florian Pritz2-1/+2
This leads to a deprecation warning as of php 7.4. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-09-27Update NEWS3.4.1Florian Pritz1-0/+6
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-09-27upload_history_thumbnails: Remove broken PDF thumbnailsFlorian Pritz1-1/+0
PDF thumbnail support has been removed by 98f7c65dddf0667f1a0462e08be9e6273ce658fb, but this has been left. The thumbnails are not generated so the images show up empty. Fix it by simply not listing them in the first place. Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-09-27Merge tag '3.1.11' of git://github.com/bcit-ci/CodeIgniter into devFlorian Pritz26-143/+206
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-09-19[ci skip] 3.1.11 releaseAndrey Andreev516-43604/+140184
2019-09-19[ci skip] Fix changelog links to session libraryAndrey Andreev1-6/+6
2019-09-18[ci skip] Update Cache library Redis driver to work with phpRedis 5, ↵Andrey Andreev2-1/+13
similarly to PR #5816 (also add changelog entry)
2019-09-18[ci skip] Merge pull request #5831 from DeanWunder/patch-1Andrey Andreev1-1/+1
Fixed HTML type attribute for input field in tutorial
2019-09-18Merge pull request #5835 from dangereyes88/developProject lead, CodeIgniter1-1/+1
Update typography.rst
2019-09-05[ci skip] Remove a few leftover trailing spaces from PR #5816Andrey Andreev1-5/+5
2019-09-05[ci skip] Merge pull request #5816 from mchobbylong/adapt-php-redisAndrey Andreev1-7/+48
Adapt to new version of php-redis
2019-09-05[ci skip] Merge pull request #5828 from mchobbylong/alter-php5-validate-idAndrey Andreev1-1/+1
Alter php5_validate_id()
2019-08-13[ci skip] Add update mimes.php step to 3.1.11 upgrade instructionsAndrey Andreev1-0/+6
2019-08-13[ci skip] Merge pull request #5815 from kamaslau/patch-2Andrey Andreev1-1/+1
Fix .aac file mime type
2019-08-13[ci skip] Merge pull request #5808 from harrysrevis/developAndrey Andreev1-6/+17
Correct / Added characters
2019-08-02[ci skip] Fix a CSRF-related bugAndrey Andreev2-0/+2
2019-07-16Fix #5796Andrey Andreev4-3/+4
2019-07-15[ci skip] Fix #5788Andrey Andreev2-1/+2
2019-06-23[ci skip] Add changelog entry for PR #5783Andrey Andreev1-0/+1
2019-06-23[ci skip] Merge pull request #5783 from gxgpet/developAndrey Andreev1-2/+4
Session files driver to return the failure status code instead of Exception throwing
2019-06-19Fix #5774Andrey Andreev2-1/+2
2019-06-19[ci skip] Add changelog entry for #5779, PR #5781Andrey Andreev1-0/+1
2019-06-19[ci skip] Merge pull request #5781 from gxgpet/developAndrey Andreev1-2/+1
Fixes php5_validate_id() method calling from Redis session driver
2019-06-14Update composer.lockFlorian Pritz1-6/+7
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-06-14composer.json: Fix name of fileinfo PHP extensionFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-06-14Update Gentoo overlay info linkFlorian Pritz1-1/+1
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-06-02[ci skip] Merge pull request #5756 from bckcmo/developAndrey Andreev1-10/+8
Fixed broken 'Send a pull request' link and added links to official G…
2019-06-02Close #5763Andrey Andreev1-0/+7
2019-05-21Release 3.4.03.4.0Florian Pritz1-0/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-05-21Allow data URLs in CSP headerFlorian Pritz2-1/+2
Signed-off-by: Florian Pritz <bluewind@xinu.at>