Commit Graph
39 Commits
Author SHA1 Message Date
Daniel WinzenandGitHub a0c988d574 Merge pull request #87 from DanWin/forgotten-password
Add password reset for super admin
2020-10-17 14:28:10 +02:00
Daniel Winzen 328938f473 Add password reset for super admin 2020-10-17 14:26:51 +02:00
Daniel Winzen c0f2faead4 Setup needs to be accessible without POST 2020-10-17 13:22:09 +02:00
Daniel Winzen 20a97070f8 Update readme 2020-10-17 12:59:01 +02:00
Daniel Winzen e90b9cc9c4 Release new version 1.24.1 2020-10-17 12:53:00 +02:00
Daniel Winzen ede3d7938d Add language meta info and minor restructuring of code 2020-10-17 11:58:39 +02:00
Daniel Winzen 8df28af021 Use $T for translation instead of verwriting $I directly 2020-10-15 22:28:01 +02:00
Daniel Winzen c3e316d412 Various minor optimizations 2020-10-15 20:46:04 +02:00
Daniel WinzenandGitHub 919876480d Merge pull request #81 from cypherbits/remove-request-use
For dangerous and only-POST routes check if it is POST request.
2020-10-15 17:13:48 +02:00
Daniel WinzenandGitHub 4e6cc8d1ab Merge pull request #86 from DanWin/DanWin-funding
Create FUNDING.yml
2020-10-15 17:12:32 +02:00
Daniel WinzenandGitHub 3dd5de099e Create FUNDING.yml 2020-10-15 17:12:17 +02:00
Daniel Winzen c71e17103f Fix chrome flashing white on frame reload 2020-10-15 09:43:06 +02:00
Daniel Winzen 8d84e45c3c Add promise not to use any features 2020-10-15 09:42:29 +02:00
Daniel Winzen d37fc14483 Updated copyright 2020-10-15 08:26:47 +02:00
Daniel Winzen 815d9f203e Improved CSP rules 2020-10-14 13:38:30 +02:00
Daniel Winzen cca830d9db Fixed syntax error 2020-09-20 21:50:37 +02:00
Daniel WinzenandGitHub de04614155 Merge pull request #77 from cypherbits/work1
Little fixes
2020-09-15 20:59:20 +02:00
Daniel Winzen 025709508b Fix guest room bypass #73 2020-09-15 19:37:45 +02:00
Daniel WinzenandGitHub 34fce5f7ab Merge pull request #75 from cypherbits/master
Fix link filters, image embeds, and redirects.
2020-09-15 18:57:01 +02:00
Daniel Winzen 463d66e11e Include Turikish translation 2020-08-01 20:48:57 +02:00
Daniel WinzenandGitHub ed4908b7c7 Merge pull request #70 from creuzwagen/patch-1
Create lang_tr.php
2020-08-01 20:47:41 +02:00
Daniel WinzenandGitHub cc6d36e7ce Merge pull request #66 from cypherbits/php-version-check
If encryption is enabled, check the PHP version is at least 7.2
2020-06-11 10:39:14 +02:00
Daniel WinzenandGitHub 217bd9b08a Merge pull request #67 from whalehub/patch-1
Fix indentation in chat.php
2020-06-11 10:36:37 +02:00
Daniel Winzen 43a6adfa1c Fix undefined index notice 2020-05-07 21:47:49 +02:00
Daniel Winzen e137eb81ac Updated readme 2020-05-07 21:06:16 +02:00
Daniel Winzen 035cfa6aa4 Harden all cookies 2020-05-07 20:50:20 +02:00
Daniel Winzen e9a1d61027 Allow data URI for img and media in CSP 2020-05-07 20:38:17 +02:00
Daniel WinzenandGitHub a4d2484e24 Merge pull request #63 from cypherbits/fix-security-header
Fix Content-Security-Policy header.
2020-05-07 20:29:27 +02:00
Daniel WinzenandGitHub ac46e658bd Merge pull request #64 from cypherbits/faster-encryption-load
If admin defined keys with the right length, do not compute the keys.
2020-05-07 20:28:35 +02:00
Daniel WinzenandGitHub 9c5e879d7d Merge pull request #62 from cypherbits/fix-session-xss
Fix XSS in session variables.
2020-05-07 20:28:10 +02:00
Daniel WinzenandGitHub 0f3a04b4de Merge pull request #61 from cypherbits/safe-cookies
Session cookies security hardening.
2020-05-03 10:33:00 +02:00
Daniel Winzen e149c9f97d Fix reflected XSS vulnerability 2020-05-02 19:42:34 +02:00
Daniel WinzenandGitHub 1887d42a78 Merge pull request #58 from cypherbits/new-encryption
New generation AES256-GCM encryption by libsodium. PHP >= 7.2 needed
2020-05-02 18:32:50 +02:00
Daniel WinzenandGitHub 95fd504249 Merge pull request #60 from cypherbits/header_security
Add more security headers
2020-05-02 18:28:44 +02:00
Daniel WinzenandGitHub c728d6d447 Merge pull request #59 from cypherbits/link_privacy
Add chat link privacy with noreferrer and noopener
2020-05-02 18:27:57 +02:00
Daniel Winzen 95c1faf1d9 Correctly calculate frameset hight for non-upload enabled users 2020-05-02 18:23:35 +02:00
Daniel Winzen d58fdeee8b Added example CSS that moves the chatters list to the right 2020-04-12 12:45:39 +02:00
Daniel WinzenandGitHub e0d6fe5d91 Merge pull request #57 from infoabcd/master
Full Chinese translation
2020-04-11 11:21:38 +02:00
Daniel Winzen 03f9a86515 Allow making file upload member-only and added required tag to captcha input 2020-02-29 14:26:48 +01:00