Andy Miller
f77df43d7a
Update SECURITY.md
2024-03-04 15:49:48 -07:00
Andy Miller
de1ccfa12d
Mitigate various SSTI injections
2024-03-04 15:41:30 -07:00
Andy Miller
5928411b86
fixed path traversal by santize checking fiilename
2024-03-04 13:39:50 -07:00
Andy Miller
15dc7568a5
typo
2024-03-04 13:31:40 -07:00
Andy Miller
b435d2b884
upgraded built-in composer to 2.7.1
2024-02-13 12:47:21 -07:00
Andy Miller
dbedb60634
update vendor libs
2024-02-13 12:47:00 -07:00
Andy Miller
f9f5781af8
fix for bad page dates + changelog update
2024-02-03 13:45:35 -07:00
pmoreno.rodriguez
ad8b1b79bd
New Trait for decoding attribute in images ( #3796 )
...
* New Trait for decoding attribute in images
* Update comments info
* decoding default in system/config/system.yaml and system/blueprints/config/system.yaml for the images.defaults.decoding value
* Fixed predefined option in the decoding attribute
2024-02-03 13:24:12 -07:00
Andy Miller
cd2a7d8d98
changelog updated
2024-01-19 12:41:54 +00:00
Andy Miller
1dc6866eab
fix other multibyte issues in inflector
2024-01-19 12:40:55 +00:00
Andy Miller
0b16401a91
fix special-chars in titleize - fixes #732
2024-01-19 12:39:24 +00:00
Andy Miller
78b8125eae
Merge branch 'release/1.7.44'
2024-01-05 12:43:46 +00:00
Andy Miller
0d7cd64d0d
Merge tag '1.7.44' into develop
...
Release v1.7.44
2024-01-05 12:43:46 +00:00
Andy Miller
3ea86e1794
remvoed outdated PR as it was DRAFT
2024-01-05 12:43:27 +00:00
Andy Miller
6df03063c8
remove test
2024-01-05 12:34:59 +00:00
Andy Miller
e5990f431d
Revert "Added 'outdated' option to scheduler command ( #3771 )"
...
This reverts commit a71403f158
2024-01-05 12:31:53 +00:00
Andy Miller
b3d55ca81a
remove a debug
2024-01-05 12:26:08 +00:00
Andy Miller
a0e728b540
Merge tag '1.7.44' into develop
...
Releaese v1.7.44
2024-01-05 11:59:45 +00:00
Andy Miller
171a5c074c
Merge branch 'release/1.7.44'
2024-01-05 11:59:44 +00:00
Andy Miller
f33e89fa45
prepare for release
2024-01-05 11:59:37 +00:00
Andy Miller
e33d71e4b9
updated changelog
2024-01-05 11:58:34 +00:00
Andy Miller
ddbb1362dc
updated composer again
2024-01-05 11:58:23 +00:00
maelanleborgne
a71403f158
Added 'outdated' option to scheduler command ( #3771 )
2024-01-05 11:46:14 +00:00
Ron Wardenier
88eb9f915a
Allow empty and maolformed links in markdown ( #3782 )
...
When a user adds an invalid link in a page in markdown for example [](https://) and that page is parsed to be shown in a blog listing page that blog listing page crashes with a CRITICAL error. Instead of throwing an error the URL is now ignored. See also https://discord.com/channels/501836936584101899/506916956637495306/1185616779486167141
2024-01-05 11:44:44 +00:00
Andy Miller
70e5262512
Merge branch 'develop' of github.com:getgrav/grav into develop
2024-01-05 11:44:00 +00:00
Andy Miller
a1c116dd82
update copyright year
2024-01-05 11:43:52 +00:00
Rotzbua
cc08da0c74
add php 8.3 to test ( #3778 )
...
https://www.php.net/releases/8.3/en.php
2024-01-05 11:43:34 +00:00
Andy Miller
f7eab6b163
composer updates
2024-01-05 11:27:02 +00:00
Andy Miller
f59fa9a291
language updates
2024-01-05 11:26:45 +00:00
Andy Miller
458c64086e
Revert "Use new groupNames method"
...
This reverts commit 470b69c775
2024-01-05 11:20:40 +00:00
Andy Miller
345086538c
updated composer and vendor libraries
2023-11-09 12:38:20 +00:00
Andy Miller
c62e173955
updated changelog
2023-11-09 12:37:02 +00:00
JS Media Creation
1b8e267d0a
Add mime type for vCards (.vcf files) ( #3772 )
...
Adds support for vCards (.vcf files) in case of e.g. scanning a qr-code with the direct url to the file, so that it can be downloaded.
Only a thumb-vcf.png should be added then too.
2023-11-08 12:06:04 +00:00
Andy Miller
eb72cb32bb
updated changelog
2023-11-06 16:52:28 +00:00
Andy Miller
4e01398545
Added debugger output when routes conflict
2023-11-06 16:50:27 +00:00
Andy Miller
b0dd2358f4
Updated packages (including dom-sanitizer 1.0.7)
2023-11-06 16:50:15 +00:00
Djamil Legato
0c9333e60d
Revert "fix whitespace encoding in urls" ( #3764 )
...
* Revert "fix whitespace encoding in urls (#3719 )"
This reverts commit 6a9b1f2214
2023-10-27 23:58:08 -07:00
Andy Miller
0b53609fa0
updated changelog
2023-10-25 14:49:52 +01:00
Andy Miller
cfa510e7f7
Merge branch 'master' into develop
2023-10-25 12:38:41 +01:00
Andy Miller
6d5f0ff9ba
validaiton math rounding - fixes #3761
2023-10-25 12:38:12 +01:00
Angela Ugrinovska
71939e18be
Fixed too few arguments exception thrown in the admin with using flex objects ( #3658 )
...
Going through older PRs, thanks for this.
2023-10-24 10:33:58 +01:00
Junky Junkerson
45f8fe4d0b
Correcting comment in about custom site.yaml value ( #3659 )
...
Corrected blog: route: '/blog' comment from system.blog.route to site.blog.route
2023-10-24 10:32:49 +01:00
Vital
2179ef33a7
Fixed exception: "Property 'jsmodule_pipeline_include_externals' does not exist in the object!" ( #3661 )
...
Co-authored-by: Artemkin_V <avr@vital-web.ru>
2023-10-24 10:32:19 +01:00
Rotzbua
d0ae677e61
Update jquery-3.x.min.js to v3.6.4 ( #3713 )
...
Source: https://code.jquery.com/jquery-3.6.4.min.js
2023-10-24 10:30:19 +01:00
dirkjf
6a9b1f2214
fix whitespace encoding in urls ( #3719 )
...
* fix broken src url encoding
* remove redundant code
* Revert "remove redundant code"
This reverts commit 4e0020114e3e8259da3a
2023-10-24 10:30:00 +01:00
yiwu
b1117e45c9
Update system.yaml ( #3721 )
...
add ISO 8601 dateformat
2023-10-24 10:28:44 +01:00
Ricardo Verdugo
382a836d80
Fix invalid input to foreach ( #3724 )
...
* Fix invalid input to foreach
This happens with discord oauth, possibly others
* Update UserGroupObject.php
---------
Co-authored-by: Andy Miller <1084697+rhukster@users.noreply.github.com>
2023-10-24 10:28:23 +01:00
Raffael Herrmann
db3e39f0cb
Added detection of external triggers of the scheduler ( #3726 )
...
Added extension to the isCrontabSetup method to detect external triggers of the scheduler, so that in the admin interface the error message is hidden when the scheduler is called by an external trigger.
2023-10-24 10:25:44 +01:00
Jeremy Angele
80ce87e4a9
Update dangerous extensions ( #3756 )
...
Thanks for this!
2023-10-24 10:20:22 +01:00
Jeff
f0f29891d6
Update Inflector::ordinalize() ( #3759 )
...
put the init() call before the $ordinals test
2023-10-24 10:19:24 +01:00
