Andy Miller
306f33f4ae
fixes for twig3 loader + improve recovery mode
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-12-08 18:07:32 -07:00
Andy Miller
94d85cd873
add support for environment in grav scheduler
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-12-03 10:41:29 -07:00
Andy Miller
a4c3a3af6d
Add isindex to XSS dangerous tags (CVE-2023-31506 / GHSA-h85h-xm8x-vfw7)
...
The original CVE-2023-31506 fix missed the deprecated <isindex> HTML tag,
which can still be used for XSS via event handlers like onmouseover.
The <isindex> tag is deprecated in HTML5 and has no legitimate modern use.
2025-11-29 21:07:23 -07:00
Andy Miller
779661ab8a
more improvements for JS minification and now pulls any broken JS out of pipeline
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-11-27 20:56:07 +00:00
Andy Miller
9f33e247cf
added configurable snapshot pruning amount
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-11-14 11:33:07 +00:00
Andy Miller
f9348a4d9d
Merge branch 'develop' into 1.8
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-10-17 18:35:14 -06:00
Andy Miller
2999c06a3a
change snapshot storage
2025-10-17 16:49:42 -06:00
Andy Miller
44f90cbce0
Merge branch 'develop' into 1.8
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-10-15 20:22:14 -06:00
Andy Miller
7dd5c8a0ba
staging root config option
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-10-15 13:00:05 -06:00
Andy Miller
250568bae5
initial safeupgrade work
2025-10-15 10:29:26 -06:00
Andy Miller
5bc7d6943f
added cache check interval
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-09-22 11:24:50 -06:00
Andy Miller
972ec26035
prepare for beta release
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-09-22 10:20:44 -06:00
Andy Miller
9116079e97
twig3 compatiblity layer
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-09-21 11:40:23 -06:00
Andy Miller
35f5d2f329
Merge branch 'develop' into 1.8
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-09-20 17:57:14 -06:00
Andy Miller
c608ed10cf
implement a better purge strategy
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-08-25 13:27:23 +01:00
Andy Miller
56cc894c1d
initial improved schedular functionality
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-08-24 20:27:28 +01:00
Andy Miller
7236862a15
Add Imagick adapter support
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2025-08-16 12:52:55 +01:00
Andy Miller
b59a3adc80
avif support via getgrav/image updates
2024-10-25 15:29:16 +01:00
Andy Miller
4ec9a3a489
Merge branch 'develop' into 1.8
2024-10-25 10:49:38 +01:00
pmoreno.rodriguez
346d194125
New Trait for fetchPriority attribute in images ( #3850 )
2024-10-25 10:42:20 +01:00
Andy Miller
4f1f9a7755
Merge branch 'develop' into feature/v1.8
...
# Conflicts:
# CHANGELOG.md
# composer.lock
2024-10-14 19:25:17 +01:00
pmoreno.rodriguez
ad8b1b79bd
New Trait for decoding attribute in images ( #3796 )
...
* New Trait for decoding attribute in images
* Update comments info
* decoding default in system/config/system.yaml and system/blueprints/config/system.yaml for the images.defaults.decoding value
* Fixed predefined option in the decoding attribute
2024-02-03 13:24:12 -07:00
JS Media Creation
1b8e267d0a
Add mime type for vCards (.vcf files) ( #3772 )
...
Adds support for vCards (.vcf files) in case of e.g. scanning a qr-code with the direct url to the file, so that it can be downloaded.
Only a thumb-vcf.png should be added then too.
2023-11-08 12:06:04 +00:00
Junky Junkerson
45f8fe4d0b
Correcting comment in about custom site.yaml value ( #3659 )
...
Corrected blog: route: '/blog' comment from system.blog.route to site.blog.route
2023-10-24 10:32:49 +01:00
Jeremy Angele
80ce87e4a9
Update dangerous extensions ( #3756 )
...
Thanks for this!
2023-10-24 10:20:22 +01:00
Andy Miller
e3b0aa0c50
inlcude phar in dangerous extensions
2023-08-22 11:57:13 +01:00
Andy Miller
259e775db8
Added languages debug option
2023-06-08 14:50:52 -06:00
Andy Miller
7a393101ee
Merge branch 'develop' into feature/v1.8
...
# Conflicts:
# CHANGELOG.md
# composer.json
# composer.lock
# system/blueprints/config/system.yaml
# system/src/Grav/Common/Twig/WriteCacheFileTrait.php
2023-05-12 13:44:07 -06:00
Andy Miller
8e6b823833
massive change!
2022-10-05 06:38:32 -06:00
Andy Miller
51a386e252
Fix bad default page stream
2022-09-22 17:40:35 -06:00
Andy Miller
01264ef70d
initial commit
2022-09-22 12:36:36 -06:00
Matias Griese
81ca0c2e25
Merge branch 'develop' of github.com:getgrav/grav into feature/v1.8
...
Conflicts:
CHANGELOG.md
composer.json
composer.lock
2022-06-29 13:14:06 +03:00
Paweł Bogusławski
b9800b7c35
Allow to configure syslog tag ( #3596 )
...
* Allow to configure syslog tag
Author-Change-Id: IB#1120629
* Update InitializeProcessor.php
2022-06-15 10:38:59 -06:00
Matias Griese
6032bd07dc
Merge branch 'develop' of github.com:getgrav/grav into feature/v1.8
...
Conflicts:
composer.json
composer.lock
2022-03-09 12:32:31 +02:00
Andy Miller
41b8fbb0e0
Update changelog + Accounts in sidebar
2022-03-08 10:45:44 -07:00
Andy Miller
9fd580c49b
Alternative Multiavatar Approach ( #3551 )
...
* Support multiavatar by default
* Support custom hash string
2022-03-08 09:45:41 -07:00
Andy Miller
03f71fa49d
rolled back but fixed the Utils::url() functionality
2022-03-04 15:37:03 -07:00
Andy Miller
4f92568171
Added system config option legacy_url_root_behavior
2022-03-03 13:16:48 -07:00
Matias Griese
fcd9093f84
Use **Symfony Cache** instead of unmaintaided **Doctrine Cache** (with backward compatibility layer)
2022-02-12 15:33:38 +02:00
Matias Griese
58b54a70bd
Removed system.umask_fix setting for security reasons
2022-02-12 13:49:30 +02:00
Djamil Legato
b9db2f3322
Fixed MimeType for gzip (application/x-gzip)
2022-01-27 16:24:50 -08:00
Andy Miller
c962201bae
initial js module support in assets
2022-01-09 13:29:40 -07:00
Matias Griese
90f5ff7c74
Use secure session cookies in HTTPS by default (system.session.secure_https: true)
2021-12-08 17:38:16 +02:00
Andy Miller
7dc6b71252
whitespace
2021-10-26 11:39:15 -06:00
Ricardo Verdugo
fd61f82f5a
Watermark Media Action ( #3308 )
...
* added gregwar merge media action and watermark media function
* remove the dump left by accident
* added scaling to the watermark
Co-authored-by: Ricardo <ricardo@urbansquid.london >
Co-authored-by: Andy Miller <1084697+rhukster@users.noreply.github.com >
2021-10-21 06:31:33 -06:00
Andy Miller
07bd1e03d0
Better backwards compatibility
2021-10-01 11:42:41 -06:00
Andy Miller
75ef1341eb
Added new HTTP\Client class for more general use
2021-09-30 17:39:49 -06:00
Rotzbua
de3aa16aca
add mime for .avif image format
...
new image format developed by google
references:
https://codelabs.developers.google.com/codelabs/avif#0
https://caniuse.com/avif
2021-08-18 11:19:38 +03:00
Rotzbua
34d001cbef
fix typo mime type of .aif ( #3423 )
...
mime type should be `audio/aiff`
reference: https://en.wikipedia.org/wiki/Audio_Interchange_File_Format
2021-08-13 10:58:35 -04:00
Matias Griese
f45afd1f54
Added support for multiple mime-types per file extension [ #3422 ]
2021-08-13 13:05:32 +03:00