Commit Graph

75 Commits

Author SHA1 Message Date
Michal Čihař
ee7d7d0b45 Fixed rendering BBCode links in setup
The URL validation needs to be adjusted for setup as the links need to
go one level up.

Fixes #12512

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-16 09:47:29 +02:00
Michal Čihař
a3d811571a Fix <iframe> tag
Fixes #12513

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-30 14:14:02 +02:00
Michal Čihař
ed6188d2c8 Whitelist relative URLs from built in transformatons
Fixes #12483

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-24 11:46:46 +02:00
Michal Čihař
265efb046f Extend PMA_checkLink to cover more use cases
- allow to support mailto, ftp or http links on request
- do not use multibyte functions as we're interested in first chars
  anyway and we're comparing against ascii ones

Issue #12479

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-08-24 11:33:52 +02:00
Michal Čihař
5d1a6af96f Merge branch 'QA_4_6' into QA_4_6-security 2016-07-22 12:12:32 +02:00
Michal Čihař
1d70a1ba64 Allow only https outgoing links
We no longer produce http links, so it's better to filter out these at
all levels.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-22 12:10:11 +02:00
Michal Čihař
3c06eede3f Add rel="noopener noreferrer" to all target="_blank" links
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:02:53 +02:00
Michal Čihař
506fd28cbd Add support to link directly to some page
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-17 11:54:28 +02:00
Michal Čihař
a6b7349214 Fix doc linkst for config
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-17 11:45:10 +02:00
Durgesh
de28889a30 Fix HTML rendering in error message, Issue #11872
Signed-off-by: Durgesh <007durgesh219@gmail.com>
2016-02-09 16:10:15 +05:30
Michal Čihař
55b317c699 Remove /*overload*/ prefix from mb_* calls
I believe this was temporary flagging to see which code is migrated and
can be safely removed now.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-01-04 16:35:28 +01:00
Hugues Peccatte
dffc8c34e9 Remove logic code in declaration files.
Move declaration out of logic file.

Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2015-10-27 18:56:39 +01:00
Hugues Peccatte
f0ba28fc1d Set namespace on Advisor, Config, Console and Util classes.
Set namespace on DbQbe.
Set namespace to 'DbSearch'.
Split Advisor.class.php file.
Change Advisor namespace.
Rename DbQbe class and file.
Set namespace on DisplayResults.
Set namespace on Error.
Use namespace for ErrorHandler.
Add class autoloader.
Change ErrorHandler filename.
Remove some require.
Update Config namespace path.
Update PMA_Util to PMA\libraries\Util.
Rename Font and File classes files.
Use namespace for Footer.
Set namespace in all libraries classes.
Namespace OutputBuffering.
Export SubPartition.
Rename Partition file.
Namespace PDF.
Namespace RecentFavoriteTable.
Replace PMA_Response by Response and PMA_Message by Message.
Update uses and calls.
Fix unit tests.
Fix SqlParser autoload.

Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2015-09-01 21:22:52 +02:00
Dan Ungureanu
91b97fadc2 Remove unneeded closing tags.
Signed-off-by: Dan Ungureanu <udan1107@gmail.com>
2015-07-19 00:18:38 +03:00
Hugues Peccatte
95f4ed1558 Replace mb functions by standard string functions.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-10-05 12:48:25 +02:00
Hugues Peccatte
48bd3b8ee5 Remove unused $pmaString.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-10-05 10:42:44 +02:00
Hugues Peccatte
3de88162ff Replace PMA_String uses by mb_* calls.
Remove part of unused  variables.

Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-09-28 20:53:01 +02:00
Hugues Peccatte
9b77d746ab Mass modifications to use PMA_String.
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2014-09-06 10:44:03 +02:00
Michal Čihař
cdb1f5d4e9 Allow local links to documentation 2013-09-12 10:03:19 +02:00
J.M
2b0816375e Fix bug #3901 Setup script warning for config auth (stored login data) shows link BBcode 2013-05-01 20:47:08 +02:00
Marc Delisle
28f74e7c29 Security: block another case of remote execution vulnerability 2013-04-23 16:16:13 -04:00
Michal Čihař
a3069af822 Adjust bbcode handling to new documentation 2012-11-12 09:59:05 +01:00
Michal Čihař
371d420c21 Simplify linking to documentation
Now documentation can be simply linked using [doc@anchor]..[/doc]
2012-09-05 15:19:13 +02:00
Michal Čihař
c83fa4b179 Drop deprecated [tt] from bbcode support 2012-09-05 14:38:31 +02:00
Michal Čihař
58054705ef Drop deprecated [b] from bbcode support 2012-09-05 14:38:08 +02:00
Michal Čihař
a567a78b7f Drop deprecated [i] from bbcode support 2012-09-05 14:37:21 +02:00
Michal Čihař
63037816a7 Wrap long lines 2012-09-05 14:36:02 +02:00
Madhura Jayaratne
f5ed603c36 Use camel case for function names - another instance 2012-06-23 22:59:08 +05:30
Michal Čihař
397b6fd00e Cleanup spacing after @return 2012-04-27 11:33:26 +02:00
Dieter Adriaenssens
0f772aa173 check if PHPMYADMIN is set 2012-04-14 16:51:26 +02:00
Madhura Jayaratne
ea800101cb Fix Checkstyle Warnings - Type: BraceOnSameLine 2012-04-13 21:50:26 +05:30
Jo Michael
4521b28517 Use pma-bbcode for trigger_error messages 2012-04-08 21:09:31 +02:00
Madhura Jayaratne
9f179dddc2 Coding style improvements - mostly doc comments 2012-03-21 05:45:12 +05:30
Michal Čihař
e56949f160 Use package name PhpMyAdmin
Needed to match phpdoc rules as package name must begin with upper case.
2011-10-25 10:13:17 +02:00
Madhura Jayaratne
634220143b Valid starts 2011-10-02 08:12:24 +05:30
Madhura Jayaratne
44c15352ec Revert 5a6a74481a 2011-10-02 08:05:34 +05:30
Madhura Jayaratne
5a6a74481a For PMA_linkURL() applied URLs 2011-10-02 00:59:53 +05:30
Marc Delisle
4d2521ac91 Merge branch 'QA_3_4' 2011-08-24 12:30:15 -04:00
Herman van Rink
c547703b10 Sanitize filenames before using in Content-Disposition header 2011-08-08 20:07:09 +02:00
Piotr Przybylski
878cff0205 Comments 2011-07-31 20:41:03 +02:00
Piotr Przybylski
8824da9ed8 Fix links in messages shown by setup script 2011-07-31 17:23:34 +02:00
Michal Čihař
3638bbd345 Fix typo 2011-07-25 14:46:33 +02:00
Michal Čihař
ffe203b099 Simplify definition of new valid links 2011-07-25 14:38:05 +02:00
Michal Čihař
765d823bbd Better function names 2011-07-25 14:35:52 +02:00
Michal Čihař
2cc790bad2 Coding style 2011-07-25 14:34:44 +02:00
Michal Čihař
c44b0eacec Fix docblocks 2011-07-25 14:32:09 +02:00
Michal Čihař
8d589ed83e Fix matching of tags without target 2011-07-25 14:12:22 +02:00
Michal Čihař
0c57cb20e2 Use preg_replace_callback for interpreting [a@...]
This way we need to evaluate regullar expression only once and can
convert all correct links rather than replacing none in case one string
is broken.
2011-07-25 14:05:57 +02:00
Michal Čihař
55c6412e6c Add documentation 2011-07-25 13:56:19 +02:00
Michal Čihař
a4807a8e7c Improve check for valid links 2011-07-25 13:54:09 +02:00