danwin1210/le-chat-php
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
362 Commits 1 Branch 58 Tags
bf6036770416b51a6342b26f490abcc3be687f8d
Commit Graph
311 Commits
Author SHA1 Message Date
Daniel Winzen 6e39ec7222 Use correct ISO 639-1 Language Codes 2020-11-09 18:15:38 +01:00
Daniel Winzen 3abd5377b5 auto-kick spammers not setting a postid 2020-11-08 21:23:29 +01:00
Daniel Winzen b45e18261f Improved background-forground color contrast for links 2020-11-06 22:30:19 +01:00
Daniel Winzen c9a1f3af4f Print meta description 2020-10-25 15:09:01 +01:00
Daniel Winzen de1893c0f4 Added meta description setting for SEO 2020-10-25 15:00:19 +01:00
Daniel Winzen b611606f9e Add autocomplete hints for password managers 2020-10-25 14:38:38 +01:00
Daniel Winzen f0e9a1a4dd Catch exceptions 2020-10-25 13:55:08 +01:00
Daniel Winzen 4c5c3e9ff0 Add browser themeing 2020-10-24 22:03:05 +02:00
Daniel Winzen cbd07f2f57 Unquote font-family names where applicalable 2020-10-24 21:43:23 +02:00
Daniel Winzen 8712e76814 Simplified link matching regex 2020-10-24 21:25:42 +02:00
Daniel Winzen e3d355ea84 Prevent really long (spam) messages from taking too much space 2020-10-24 21:13:36 +02:00
Daniel Winzen a83d234a0c Add viewport meta tag for mobile friendly chat 2020-10-24 21:07:40 +02:00
Daniel Winzen 6bb073323d Move from frames to iframes 2020-10-24 19:27:33 +02:00
Daniel Winzen f5a051cfbb Move away from using $_REQUEST when not necessary 2020-10-24 17:43:52 +02:00
Daniel Winzen 396fc98eef Make use of strict type checking on function return values and parameters 2020-10-17 16:29:22 +02:00
Daniel Winzen 328938f473 Add password reset for super admin 2020-10-17 14:26:51 +02:00
Daniel Winzen c0f2faead4 Setup needs to be accessible without POST 2020-10-17 13:22:09 +02:00
Daniel Winzen e90b9cc9c4 Release new version 1.24.1 2020-10-17 12:53:00 +02:00
Daniel Winzen ede3d7938d Add language meta info and minor restructuring of code 2020-10-17 11:58:39 +02:00
Daniel Winzen c3e316d412 Various minor optimizations 2020-10-15 20:46:04 +02:00
Daniel WinzenandGitHub 919876480d Merge pull request #81 from cypherbits/remove-request-use 
For dangerous and only-POST routes check if it is POST request.
 2020-10-15 17:13:48 +02:00
Daniel Winzen c71e17103f Fix chrome flashing white on frame reload 2020-10-15 09:43:06 +02:00
Daniel Winzen 8d84e45c3c Add promise not to use any features 2020-10-15 09:42:29 +02:00
Daniel Winzen d37fc14483 Updated copyright 2020-10-15 08:26:47 +02:00
Daniel Winzen 815d9f203e Improved CSP rules 2020-10-14 13:38:30 +02:00
Daniel Winzen cca830d9db Fixed syntax error 2020-09-20 21:50:37 +02:00
Daniel WinzenandGitHub de04614155 Merge pull request #77 from cypherbits/work1 
Little fixes
 2020-09-15 20:59:20 +02:00
Daniel Winzen 025709508b Fix guest room bypass #73 2020-09-15 19:37:45 +02:00
Daniel WinzenandGitHub 34fce5f7ab Merge pull request #75 from cypherbits/master 
Fix link filters, image embeds, and redirects.
 2020-09-15 18:57:01 +02:00
cypherbits b7ff7c9eb7 For dangerous and only-POST routes check if it is POST request. 2020-08-05 19:15:37 +02:00
cypherbits b1c7242752 Little fixes 2020-08-02 17:54:47 +02:00
cypherbits 51fb54e0aa Oops... 2020-08-01 22:40:42 +02:00
cypherbits e5e3b478dc Fix link filters, image embeds, and redirects. 2020-08-01 21:14:39 +02:00
Daniel Winzen 463d66e11e Include Turikish translation 2020-08-01 20:48:57 +02:00
Daniel WinzenandGitHub cc6d36e7ce Merge pull request #66 from cypherbits/php-version-check 
If encryption is enabled, check the PHP version is at least 7.2
 2020-06-11 10:39:14 +02:00
AaronandGitHub 972f1a62c1 Fix indentation in chat.php 2020-05-17 14:14:44 +02:00
cypherbits 9ab4622b67 If encryption is enabled, check the PHP version is at least 7.2 2020-05-11 18:24:25 +02:00
Daniel Winzen 43a6adfa1c Fix undefined index notice 2020-05-07 21:47:49 +02:00
Daniel Winzen 035cfa6aa4 Harden all cookies 2020-05-07 20:50:20 +02:00
Daniel Winzen e9a1d61027 Allow data URI for img and media in CSP 2020-05-07 20:38:17 +02:00
Daniel WinzenandGitHub a4d2484e24 Merge pull request #63 from cypherbits/fix-security-header 
Fix Content-Security-Policy header.
 2020-05-07 20:29:27 +02:00
Daniel WinzenandGitHub ac46e658bd Merge pull request #64 from cypherbits/faster-encryption-load 
If admin defined keys with the right length, do not compute the keys.
 2020-05-07 20:28:35 +02:00
cypherbits 5aeca202ca fix 2020-05-03 17:41:56 +02:00
cypherbits c2cd0258f1 If admin defined keys with the right length, do not compute the keys. 2020-05-03 15:18:41 +02:00
cypherbits 0f97ddd573 Fix Content-Security-Policy header. 2020-05-03 15:08:30 +02:00
cypherbits 81b8b78df0 Fix XSS in session variables. 2020-05-03 11:13:52 +02:00
cypherbits 581aede13f Session cookies security hardening. 2020-05-02 21:53:19 +02:00
Daniel Winzen e149c9f97d Fix reflected XSS vulnerability 2020-05-02 19:42:34 +02:00
Daniel WinzenandGitHub 1887d42a78 Merge pull request #58 from cypherbits/new-encryption 
New generation AES256-GCM encryption by libsodium. PHP >= 7.2 needed
 2020-05-02 18:32:50 +02:00
Daniel WinzenandGitHub 95fd504249 Merge pull request #60 from cypherbits/header_security 
Add more security headers
 2020-05-02 18:28:44 +02:00