PrivateCoffee/alltube
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
1533 commits 1 branch 0 tags 4.5 MiB
Commit graph

295 commits

Author SHA1 Message Date
Pierre Rudloff
9410d4b49b LinkHeaderMiddleware should use the same URL as ViewFactory 
This way the X-Forwarded-Path header is used to generate the Link header
 2022-02-20 13:55:44 +01:00
Pierre Rudloff
bfaea0e381 Merge tag '3.0.1' into develop 
Fixed an open redirect vulnerability that could be used to construct an URL redirecting to an arbitraty domain
 2022-02-20 13:34:53 +01:00
Pierre Rudloff
bc14b6e45c Don't redirect to REQUEST_URI when browsing to index.php 
Instead, we can make sure everything works correctly on index.php
 2022-02-20 13:28:57 +01:00
Pierre Rudloff
27439c7e14 Simplify overly complicated format selection template 2022-02-06 20:46:38 +01:00
Pierre Rudloff
b8c88aecf5 Improve typing 2022-02-03 20:52:18 +01:00
Pierre Rudloff
d46563f994 Simplify code 2022-02-03 20:21:04 +01:00
Pierre Rudloff
781b5c8bc2 phpcs does not like full namespaces 2022-02-03 20:03:55 +01:00
Pierre Rudloff
ffd9275500 Correct way to use interface constant 2022-02-03 20:01:56 +01:00
Pierre Rudloff
6fef87f58b Use HTML dumper for Smarty collector 2022-01-27 00:15:05 +01:00
Pierre Rudloff
5ed15afe1f Use constant for HTTP response code 2022-01-26 23:58:25 +01:00
Pierre Rudloff
d744ee557e Build Link header from an array 2021-10-19 23:14:38 +02:00
Pierre Rudloff
5d40523cf4 Don't hardcode class name 2021-10-18 13:16:28 +02:00
Pierre Rudloff
1e17dff21e Use the new root_path service to make some code more portable 2021-02-09 22:35:32 +01:00
Pierre Rudloff
f2be3a7e5b Use relative paths on debug error page 2021-02-09 22:31:41 +01:00
Pierre Rudloff
36ba147430 phpstan update 2021-02-07 12:42:03 +01:00
Pierre Rudloff
50fe879f16 Add route info to debug bar 2021-02-07 12:24:16 +01:00
Pierre Rudloff
9af922f3f1 Add Smarty collector to debug bar 2021-02-07 00:03:37 +01:00
Pierre Rudloff
bba5090ec3 We can't be sure of the class of the logger 2021-02-06 18:22:19 +01:00
Pierre Rudloff
5c0ed594f3 Debug bar 2021-02-06 15:35:09 +01:00
Pierre Rudloff
05311ac7b6 Add return types 2020-12-17 22:49:21 +01:00
Éric Gaspar
a5bda1d35e
Fix small typos (#333) 
* Fix small typos

- *Fix cap on YouTube, AllTube...*

* Fix YouTube cap
 2020-12-05 15:00:46 +01:00
Pierre Rudloff
f184bda59b Make sure locale is always set, even on first request 2020-11-21 14:20:01 +01:00
Pierre Rudloff
2d1d69a1f1 Refactor some Robo code 2020-11-16 20:45:49 +01:00
Pierre Rudloff
c0b2acf33e Don't restrict forms in CSP (#327) 2020-11-04 23:03:39 +01:00
Pierre Rudloff
7ad0040f60 Move container creation to a new App class 2020-10-22 23:11:29 +02:00
Pierre Rudloff
3d2b518cb4 Create a test container that we can use in any test 2020-10-22 22:48:47 +02:00
Pierre Rudloff
d83774ae7d Cleaner way to get the domain 2020-10-22 21:40:20 +02:00
Pierre Rudloff
e1d7ad44e0 Make the bookmarklet compatible with ugly URLs 2020-10-22 01:36:00 +02:00
Pierre Rudloff
d97b824a44 Cleaner way to build ugly URLs 2020-10-22 01:26:17 +02:00
Pierre Rudloff
7d856c61fb Cleaner way to build the redirect 2020-10-22 01:13:25 +02:00
Pierre Rudloff
7dead957f0 Fix bookmarklet behind a reverse proxy 2020-10-22 00:45:41 +02:00
Pierre Rudloff
6bb577bcce Use default view variables 2020-10-22 00:45:09 +02:00
Pierre Rudloff
110bfc9ff1 Cleaner way to build the canonical URL 2020-10-22 00:28:36 +02:00
Pierre Rudloff
342b8c4a42 Use secure session cookies (fixes #321) 2020-10-21 23:04:29 +02:00
Pierre Rudloff
de8c5e5dc7 Convert SessionManager to a factory class 2020-10-21 22:48:05 +02:00
Pierre Rudloff
5b0ee7651b Remove Config dependency on LocaleManager 2020-10-21 22:38:09 +02:00
Pierre Rudloff
e9cee39673 Allow manifest in CSP 2020-10-20 23:32:16 +02:00
Pierre Rudloff
0a220d4d8e Move factory classes to a subfolder 2020-10-20 23:29:50 +02:00
Pierre Rudloff
123a6c5ad9 Move middleware to a subfolder 2020-10-20 23:17:22 +02:00
Pierre Rudloff
496ac212e2 Set Link header in PHP so it can work in a subfolder 2020-10-20 23:10:33 +02:00
Pierre Rudloff
4bcf9566ad Improve CSP 2020-10-20 00:57:26 +02:00
Pierre Rudloff
f29a61f182 Upgrade pretty-package-versions to 1.5 
So we can have a cleaner way to get the root package version
 2020-10-20 00:22:34 +02:00
Pierre Rudloff
561b6c8370 Make the CSP compatible with debug tools 2020-10-19 23:59:23 +02:00
Pierre Rudloff
e2560cd9cb Code cleanup 2020-10-19 22:29:30 +02:00
Pierre Rudloff
da93835ea2 Fix error when X-Forwarded-Path is not defined 2020-10-19 22:20:19 +02:00
bellington3
c5298dd24b
Provide basePath support (#309) 
* Provide basePath support

To be able to serve the application via a reverse proxy in a subfolder
smarty needs to be aware of the basepath if any.

* Provide basepath support via X-Forwarded headers

* Fix warnings

* Review adjustments

* Provide support X-Forwarded-Host header

* Use $uri in view factory directly

* Use middleware to set basepath from X-Forwarded-Path header

* Fix invalid type hint in RouterPathMiddleware

* Add "X-Forwarded-Host" to README
 2020-10-19 22:18:03 +02:00
Pierre Rudloff
234ecc2c6d Log handled exceptions 2020-10-18 13:20:06 +02:00
Pierre Rudloff
07f19a80f4 Improve fallback error handling 2020-10-18 13:20:06 +02:00
Pierre Rudloff
9becaeaabe Fix uglyUrls 2020-10-18 00:59:19 +02:00
Pierre Rudloff
15636aa435 Stop using a singleton for LocaleManager (#298) 2020-10-17 22:36:03 +02:00