5381 Commits

Author	SHA1	Message	Date
Matias Griese	492cc1d2f1	Added XSS check for uploaded SVG files before they get stored (in Form plugin)	2022-03-14 18:55:56 +02:00
Matias Griese	4d4efb31e3	Escape root url pattern in Utils::url()	2022-03-09 12:25:46 +02:00
Andy Miller	c7bc5f5b59	hash for multiavatar only	2022-03-08 14:00:06 -07:00
Andy Miller	41b8fbb0e0	Update changelog + Accounts in sidebar	2022-03-08 10:45:44 -07:00
Djamil Legato	e60ba13d75	Fixed issue with URL method not escaping subpaths slashes	2022-03-08 09:32:28 -08:00
Matias Griese	e0deeeb551	Make new avatar logic more robust	2022-03-08 19:15:46 +02:00
Andy Miller	9fd580c49b	Alternative Multiavatar Approach (#3551) ... * Support multiavatar by default * Support custom hash string	2022-03-08 09:45:41 -07:00
Andy Miller	e09bae918c	fix for empty $root	2022-03-05 11:20:54 -07:00
Andy Miller	0abde01442	better fix	2022-03-05 09:22:12 -07:00
Andy Miller	03f71fa49d	rolled back but fixed the Utils::url() functionality	2022-03-04 15:37:03 -07:00
Andy Miller	4f92568171	Added system config option legacy_url_root_behavior	2022-03-03 13:16:48 -07:00
Andy Miller	b80fcca0cf	fixes for Utils::url()	2022-03-03 12:35:17 -07:00
Andy Miller	7b7235297e	Merge branch 'develop' of github.com:getgrav/grav into develop	2022-03-03 11:21:06 -07:00
Andy Miller	34ab8408fa	fix for url() function breaking when path contains root	2022-03-03 11:21:03 -07:00
Matias Griese	f19297d5f7	Added XSS check for uploaded SVG files before they get stored	2022-03-02 13:37:51 +02:00
Matias Griese	78b8051627	Fixed avatar save location when account:// stream points to custom directory	2022-03-02 12:24:27 +02:00
Djamil Legato	3dd0cabeac	Fixed entity sanitization for XSS detection	2022-02-23 14:57:36 -08:00
Matias Griese	a7e82f279a	Fixed non-standard video html atributes generated by {{ media.html() }} [#3540]	2022-02-22 11:30:33 +02:00
Matias Griese	6d0d6c22d3	Fixed new Utils::pathinfo() and Utils::basename() being too strict for legacy use [#3542]	2022-02-22 09:46:29 +02:00
Matias Griese	7e52112b21	Fixed phpstan issues (All level 2, Framework level 5)	2022-02-19 12:01:50 +02:00
xaver	a900b89795	Remove variable duplicate (#3539)	2022-02-18 08:39:20 -07:00
Matias Griese	ec884997ef	Improve vector image code [#3533]	2022-02-12 10:49:52 +02:00
Matias Griese	3a45748ce6	Added auto_sizes support for SVG vector images [#3533]	2022-02-12 10:41:34 +02:00
Xaver Maierhofer	c4e10cf59f	Add Vector image auto_sizes support	2022-02-12 10:26:18 +02:00
Andy Miller	b1938c9790	prepare for release	2022-02-07 12:12:03 -07:00
Rotzbua	0323a898cb	Normalize variable names	2022-02-07 11:20:16 +02:00
Rotzbua	d275532cf8	Fix documentation of return type	2022-02-07 11:20:16 +02:00
Matias Griese	7306f164e9	Fixed groups filter not matching against readableName [getgrav/grav-plugin-admin#2224]	2022-02-07 10:30:25 +02:00
Matias Griese	88219fbf0e	Fixed accounts filter only matches against email address [getgrav/grav-plugin-admin#2224]	2022-02-07 10:07:00 +02:00
Djamil Legato	5eefc91781	Fixed "Page Authors" field in Security tab, wrongly loading and saving the value (fixes #3525)	2022-02-04 11:23:09 -08:00
Matias Griese	67ef9b221a	Fixed error while deleting retina image in admin	2022-02-04 19:58:23 +02:00
Matias Griese	c82a35cea0	Added twig filter |field_parent to get parent field name	2022-02-03 19:51:46 +02:00
Andy Miller	5248519c37	prepare for release	2022-01-31 11:52:12 -07:00
Matias Griese	5b9a0fb237	Fixed Call to undefined method error when upgrading from Grav 1.6 [#3523]	2022-01-31 11:26:35 +02:00
Andy Miller	96df7deaf4	prepare for release	2022-01-28 13:08:36 -07:00
Matias Griese	7666651324	Fixed error on thumbnail image creation	2022-01-28 19:13:26 +02:00
Djamil Legato	b9db2f3322	Fixed MimeType for gzip (application/x-gzip)	2022-01-27 16:24:50 -08:00
Matias Griese	84a1ab6ca5	Added unicode-safe Utils::basename() and Utils::pathinfo() methods and use them everywhere	2022-01-26 13:54:33 +02:00
Matias Griese	3b89377570	Improved Filesystem::basename() and Filesystem::pathinfo() to be UTF-8 safe	2022-01-26 13:16:35 +02:00
Matias Griese	c3c31880b0	Added support for registering assets from HtmlBlock	2022-01-26 11:06:05 +02:00
Andy Miller	9bb6f5366e	prepare for release	2022-01-24 11:40:25 -07:00
Matias Griese	6f2fa9311a	Fixed XSS check not detecting escaped &#58	2022-01-18 12:34:52 +02:00
Matias Griese	61061220d7	Compoer update, fixed phpstan errors	2022-01-17 09:37:59 +02:00
Matias Griese	aa7e64f2b7	Merge remote-tracking branch 'origin/develop' into develop ... # Conflicts: # CHANGELOG.md	2022-01-14 11:25:40 +02:00
Matias Griese	b58210de1a	Added HtmlBlock support for {% style %}, {% script %} and {% link %} tags	2022-01-14 11:25:21 +02:00
Andy Miller	0bb52c75ce	page-level override for redirect_default_route	2022-01-13 06:20:38 -07:00
Matias Griese	da6b41f8a6	Added twig tag for links: {% link icon 'theme://images/favicon.png' priority: 20 with { type: 'image/png' } %}	2022-01-13 13:06:19 +02:00
Matias Griese	1ab2f7083c	Added module support for twig script tag: {% script module 'theme://js/module.mjs' %}	2022-01-13 12:52:23 +02:00
Matias Griese	707710d679	Added links and modules support to HtmlBlock class	2022-01-13 12:24:05 +02:00
Andy Miller	3e784a2f15	prepare for release	2022-01-12 15:26:29 -07:00