Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2014-02-20 | CI_Utf8-related changes | Andrey Andreev | 1 | -8/+8 | |
- Give priority to mb_convert_encoding() over iconv() in clean_string() (partially fixes #261) - Add more proper unit tests | |||||
2014-02-20 | Don't use error suppression with ini_set() | Andrey Andreev | 1 | -1/+1 | |
2014-02-19 | Add compatibility layer for array_column(), array_replace(), ↵ | Andrey Andreev | 3 | -1/+248 | |
array_replace_recursive() | |||||
2014-02-19 | Moved $_error load statement lower. | Cristian Kocza | 1 | -3/+2 | |
This prevents a possible recursion when an error is trigerred by one of the config file. Also since the variable is used only later in the code it makes sense to move it lower. | |||||
2014-02-18 | Don't load password hashing compat for HHVM | Andrey Andreev | 1 | -1/+1 | |
2014-02-18 | Add an ext/hash compatibility layer (just hash_pbkdf2(), for now) | Andrey Andreev | 2 | -0/+145 | |
2014-02-15 | [ci skip] Micro-optimization | Andrey Andreev | 1 | -1/+1 | |
2014-02-15 | Rename CI_Utf8::_is_ascii() to is_ascii() and make it public | Andrey Andreev | 1 | -4/+2 | |
No reason for it to be protected. | |||||
2014-02-13 | [ci skip] Add index.html to system/core/compat/ | Andrey Andreev | 1 | -0/+10 | |
2014-02-13 | Fix syntax error | Andrey Andreev | 1 | -2/+2 | |
2014-02-13 | Introducing compatibility layers | Andrey Andreev | 3 | -0/+366 | |
- Limited support for mbstring (mb_strlen(), mb_strpos(), mb_substr() only) via iconv. Falls back to regular strlen(), strpos(), substr() if iconv is not available. - Password hashing, dependant on CRYPT_BLOWFISH (2y version, available since PHP 5.3.7) availability. | |||||
2014-02-12 | Move mbstring/iconv configuration and MB_ENABLED, ICONV_ENABLED out of ↵ | Andrey Andreev | 2 | -38/+48 | |
CI_Utf8::__construct() Also, use mb_substitute_character() instead of ini_set() | |||||
2014-02-11 | Utf8/iconv/mbstring-related changes | Andrey Andreev | 1 | -6/+27 | |
2014-02-11 | 2013 > 2014 | darwinel | 17 | -17/+17 | |
Update copyright notices from 2013 to 2014. And update one calendar example in user_guide from year 2013/2014 to 2014/2015. | |||||
2014-02-10 | CI_Security: URL-decode until possible | Andrey Andreev | 1 | -1/+5 | |
2014-02-10 | [ci skip] Fix a typo | Andrey Andreev | 1 | -1/+1 | |
2014-02-10 | CI_Security: Expect a backslash as a tag separator | Andrey Andreev | 1 | -2/+2 | |
2014-02-10 | CI_Security: Filter jscript, wscript, vbs, confirm, prompt the same way as ↵ | Andrey Andreev | 1 | -6/+10 | |
javascript, alert | |||||
2014-02-08 | Deprecate CI_Config::system_url() | Andrey Andreev | 1 | -0/+1 | |
2014-02-08 | CI_Input tweaks | Andrey Andreev | 1 | -65/+20 | |
- Make get_post(), post_get() and server()'s parameter mandatory. - Change default value of parameter to NULL for cookie(), input_stream() and _fetch_from_array() (for consistency with get(), post()). - Delegate Array-vs-single and parameter detection to _fetch_from_array() to overall simplify the code. | |||||
2014-02-03 | [ci skip] Update info on function_usable | Andrey Andreev | 1 | -0/+5 | |
2014-01-30 | Previous 2 commits were just dumb | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Add <math> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-25 | Previous commit caused side effects ... | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Fix CI_Security::_remove_evil_attributes() being way too aggressive | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Re-add 'on\w*' to evil attributes (rel #2667) | Andrey Andreev | 1 | -2/+1 | |
2014-01-25 | Partially fix #2667 | Andrey Andreev | 1 | -2/+8 | |
2014-01-24 | [ci skip] Add a link to PHP bug 54709 in is_really_writable()'s docblock | Andrey Andreev | 1 | -0/+1 | |
2014-01-24 | CI_Security: Also add <svg> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-24 | CI_Security: Add <select> and <keygen> tags to the list of 'naughty' HTML ↵ | Andrey Andreev | 1 | -1/+1 | |
elements | |||||
2014-01-24 | Fix syntax errors | Andrey Andreev | 1 | -2/+2 | |
2014-01-24 | CI_Security: Add 'form' and 'xlink:href' to evil attributes | Andrey Andreev | 1 | -1/+1 | |
2014-01-24 | Add &newline; and &tab; to CI_Security:: | Andrey Andreev | 1 | -1/+3 | |
2014-01-22 | CI_Security::_decode_entity() to replace dangerous HTML5 entities | Andrey Andreev | 1 | -1/+19 | |
Related to issue #2771 | |||||
2014-01-21 | Add <button> to the list of 'naugthy' html elements in CI_Security::xss_clean() | Andrey Andreev | 1 | -2/+2 | |
2014-01-20 | Fix #2729 | Andrey Andreev | 1 | -2/+3 | |
2014-01-20 | Merge branch 'develop' into feature/output_compressed_cache | Andrey Andreev | 1 | -4/+4 | |
2014-01-18 | Fix #2829 | Andrey Andreev | 1 | -4/+4 | |
2014-01-18 | Merge branch 'develop' into feature/output_compressed_cache | Andrey Andreev | 1 | -1/+1 | |
2014-01-18 | Fix 2 Router-related errors | Andrey Andreev | 1 | -1/+1 | |
2014-01-18 | Merge branch 'develop' into feature/output_compressed_cache | Andrey Andreev | 1 | -0/+3 | |
2014-01-18 | Fix CI_URI:: not being properly indexed | Andrey Andreev | 1 | -0/+3 | |
2014-01-18 | Merge branch 'develop' into feature/output_compressed_cache | Andrey Andreev | 5 | -355/+293 | |
2014-01-18 | Fix #2827 | Andrey Andreev | 1 | -1/+1 | |
2014-01-17 | Merge branch 'feature/uri_routing_overhaul' into 'develop' | Andrey Andreev | 3 | -352/+283 | |
2014-01-17 | Add autoloading library aliasing support (supersedes PR #2824) | Andrey Andreev | 1 | -2/+9 | |
2014-01-16 | URI Routing overhaul | Andrey Andreev | 3 | -352/+283 | |
- Allow multiple levels of controller directories (supersedes PRs #390, #2439) - Add support for per-directory 'defaul_controller' and '404_override' (resolves issue #2611; supersedes PR #939) - Fixed a bug where default_controller was called instead of triggering 404 if the current route is inside a directory - Removed a few calls from CI_Router to CI_URI that made a necessity for otherwise internal CI_URI methods to be public: - Removed CI_URI::_fetch_uri_string() and moved its logic into CI_URI::__construct() - Removed CI_URI::_remove_url_suffix, CI_URI::_explode_segments() and moved their logic into CI_URI::_set_uri_string() - Removed CI_URI::_reindex_segments() altogether ( doesn't need further manipulation, while is public anyway and can be properly (and more effectively) replaced on the spot) | |||||
2014-01-15 | Fix #2799 by adding conditional PCRE UTF-8 support to CI_URI::filter_uri() | Andrey Andreev | 2 | -2/+2 | |
Also did a tiny micro-optimization in the Utf8 class. | |||||
2014-01-15 | Merge changes from develop | Andrey Andreev | 5 | -61/+82 | |
2014-01-15 | Fix #2822: Incorrect usage of fwrite() | Andrey Andreev | 2 | -15/+41 | |
We only used to check (and not always) if the return value of fwrite() is boolean FALSE, while it is possible that the otherwise returned bytecount is less than the length of data that we're trying to write. This allowed incomplete writes over network streams and possibly a few other edge cases. |