Commit Graph

105557 Commits

Author SHA1 Message Date
Michal Čihař
bc6fbbe032 Update documentation copyright
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-22 10:38:38 +02:00
Michal Čihař
a32b3ceb6e Use single quotes
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-22 10:38:19 +02:00
Kamyar Sec
69c38579f6 Translated using Weblate (Kurdish Sorani)
Currently translated at 18.1% (582 of 3209 strings)

[CI skip]
2016-07-22 09:45:21 +02:00
Michal Čihař
0fad7290c9 Escape database name in SQL query
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-19 09:20:15 +02:00
Michal Čihař
ff9291964c Update TCPDF to 6.2.12
Changelog:

6.2.12 (2015-09-12)
	- fix composer package name to tecnickcom/tcpdf

6.2.11 (2015-08-02)
	- "PNG regression in 6.2.9 (they appear as their alpha channel)" was fixed.
	- "Encoded SRC URLs in <img> tags don't work anymore" was fixed.

6.2.10 (2015-07-28)
	- Minor mod to PNG parsing.
	- Make dependency on mcrypt optional.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-18 15:54:39 +02:00
Michal Čihař
d35c3d9ed5 Update ReCaptcha library to 1.1.2
There should be no functional changes.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-18 15:51:44 +02:00
‫حمودي الجيلاني‬‎
0f1d629043 Translated using Weblate (Arabic)
Currently translated at 34.2% (1098 of 3209 strings)

[CI skip]
2016-07-16 18:44:09 +02:00
Michal Čihař
c0450b2915 Remove allowed failures test from maintenance branch
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:42:41 +02:00
Michal Čihař
b8b1bdd77e Include X-Robots-Tag header in responses
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:28:03 +02:00
José Camilo Fernandes Coelho
f28925adb0 Translated using Weblate (Portuguese)
Currently translated at 53.9% (1731 of 3209 strings)

[CI skip]
2016-07-12 10:25:53 +02:00
Saulo Castro
64b1f13200 Translated using Weblate (Portuguese (Brazil))
Currently translated at 93.3% (2997 of 3209 strings)

[CI skip]
2016-07-11 18:45:29 +02:00
Phongphan A Bunlom
394f77dc70 Translated using Weblate (Thai)
Currently translated at 30.7% (986 of 3209 strings)

[CI skip]
2016-07-09 18:45:52 +02:00
Franco
68f10806ce Translated using Weblate (Spanish)
Currently translated at 99.6% (3198 of 3209 strings)

[CI skip]
2016-07-05 18:45:55 +02:00
Arben Çokaj
a879cd8b77 Translated using Weblate (Albanian)
Currently translated at 100.0% (3209 of 3209 strings)

[CI skip]
2016-07-03 03:44:09 +02:00
Bartosz Pazoła
c7fc778fad Translated using Weblate (Polish)
Currently translated at 82.6% (2652 of 3209 strings)

[CI skip]
2016-07-02 12:45:16 +02:00
Kyeong Su Shin
997a7bb793 Translated using Weblate (Korean)
Currently translated at 78.1% (2508 of 3209 strings)

[CI skip]
2016-07-01 00:44:56 +02:00
Michal Čihař
f204208540 Move count() call outside loop
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-24 12:58:35 +02:00
Michal Čihař
52a01c4bfb Fix type conversion for numeric values
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-24 12:55:04 +02:00
Peter Chen
cfb38bbcbf Translated using Weblate (Chinese (Taiwan))
Currently translated at 100.0% (3209 of 3209 strings)

[CI skip]
2016-06-24 02:59:46 +02:00
Isaac Bennetch
58534ce2fc Prepare for 4.6.4-dev
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-06-23 02:40:42 -04:00
Isaac Bennetch
f2db92434b Fix merge conflicts
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-06-23 00:28:35 -04:00
Isaac Bennetch
4f57305eab Release 4.6.3
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-06-23 00:27:15 -04:00
Isaac Bennetch
f7d1c1f463 Changelog entries for security release
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-06-22 23:53:56 -04:00
Michal Čihař
615212a14d Do not allow javascript: links in transformation
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 13:28:07 +02:00
Michal Čihař
519e634a8d Merge branch 'QA_4_6' into QA_4_6-security 2016-06-22 13:10:55 +02:00
Michal Čihař
4d21b5c077 Fixed rendering of chart of columns with HTML inside
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 13:07:32 +02:00
Michal Čihař
301e1b0f7d Fix adjusting privileges for tables/databases with quote in name
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 11:58:05 +02:00
Michal Čihař
e50e37b51d Properly escape database name when listing privileges
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 11:35:04 +02:00
Michal Čihař
57ae483bad Escape database name when showing dialog
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 11:14:57 +02:00
Michal Čihař
960fd1fd52 Properly escape zoom search column type
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 11:10:14 +02:00
Michal Čihař
36df83a97a Escape saved search name
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 11:00:14 +02:00
Michal Čihař
d95a4a2f96 Avoid undefined index in case of incomplete bookmark
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 10:57:11 +02:00
Michal Čihař
0b7416c5f4 Escape user group when displaying
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 10:53:46 +02:00
Michal Čihař
792cd1262f Escape partition comment when displaying
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 10:26:50 +02:00
Weblate
6c8c8de097 Merge remote-tracking branch 'origin/QA_4_6' into QA_4_6 2016-06-20 12:22:06 +02:00
uncle_cat
0459089406 Translated using Weblate (Chinese (China))
Currently translated at 88.0% (2824 of 3209 strings)

[CI skip]
2016-06-20 12:22:04 +02:00
Michal Čihař
1cc7466db3 Quote delimiter before using preg_replace
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 12:16:03 +02:00
Michal Čihař
2674e503f2 Assign helperFunctions before doing extract
This way we avoid possiblity of rewriting it from within the context.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 12:07:13 +02:00
Michal Čihař
4bcc606225 Always use delimiter not present in search expression
This avoids need to figure out correct escaping in case delimiter is
present in the expression.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 12:03:44 +02:00
Michal Čihař
2f4950828e Update referrer <meta> to match current standards
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 10:47:30 +02:00
Michal Čihař
80cd2f448c Merge branch 'QA_4_6' into QA_4_6-security 2016-06-20 10:42:29 +02:00
Michal Čihař
364732e309 Escape error message from server
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 10:11:25 +02:00
Michal Čihař
895a131d2e Escape HTML when rendering AJAX error
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 10:07:52 +02:00
Michal Čihař
79661610f6 Escape attributes when showing images in javascript
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 10:04:16 +02:00
Michal Čihař
1e5716cb96 Add referrer CSP and <meta> tag
This avoids leaking Referer header in modern browsers.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-20 09:41:06 +02:00
Madhura Jayaratne
040822fe5a ChangeLog entry for e7003792d9
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-06-18 09:19:00 +10:00
Madhura Jayaratne
e7003792d9 Escape generated query
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-06-18 09:13:02 +10:00
Michal Čihař
1a558a4190 Ensure id is numeric
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-17 17:12:41 +02:00
Michal Čihař
be3ecbb4cc Simplify and cleanup transformation plugins
Remove PMA_transformation_global_html_replace which makes the code only
more confusing.

Also add escaping to browse transformations.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-17 16:18:13 +02:00
Michal Čihař
d648ade18d Escape binary log name
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-17 14:51:15 +02:00