Commit graph

294 commits

Author SHA1 Message Date
Pierre Rudloff
bfaea0e381 Merge tag '3.0.1' into develop
Fixed an open redirect vulnerability that could be used to construct an URL redirecting to an arbitraty domain
2022-02-20 13:34:53 +01:00
Pierre Rudloff
bc14b6e45c Don't redirect to REQUEST_URI when browsing to index.php
Instead, we can make sure everything works correctly on index.php
2022-02-20 13:28:57 +01:00
Pierre Rudloff
27439c7e14 Simplify overly complicated format selection template 2022-02-06 20:46:38 +01:00
Pierre Rudloff
b8c88aecf5 Improve typing 2022-02-03 20:52:18 +01:00
Pierre Rudloff
d46563f994 Simplify code 2022-02-03 20:21:04 +01:00
Pierre Rudloff
781b5c8bc2 phpcs does not like full namespaces 2022-02-03 20:03:55 +01:00
Pierre Rudloff
ffd9275500 Correct way to use interface constant 2022-02-03 20:01:56 +01:00
Pierre Rudloff
6fef87f58b Use HTML dumper for Smarty collector 2022-01-27 00:15:05 +01:00
Pierre Rudloff
5ed15afe1f Use constant for HTTP response code 2022-01-26 23:58:25 +01:00
Pierre Rudloff
d744ee557e Build Link header from an array 2021-10-19 23:14:38 +02:00
Pierre Rudloff
5d40523cf4 Don't hardcode class name 2021-10-18 13:16:28 +02:00
Pierre Rudloff
1e17dff21e Use the new root_path service to make some code more portable 2021-02-09 22:35:32 +01:00
Pierre Rudloff
f2be3a7e5b Use relative paths on debug error page 2021-02-09 22:31:41 +01:00
Pierre Rudloff
36ba147430 phpstan update 2021-02-07 12:42:03 +01:00
Pierre Rudloff
50fe879f16 Add route info to debug bar 2021-02-07 12:24:16 +01:00
Pierre Rudloff
9af922f3f1 Add Smarty collector to debug bar 2021-02-07 00:03:37 +01:00
Pierre Rudloff
bba5090ec3 We can't be sure of the class of the logger 2021-02-06 18:22:19 +01:00
Pierre Rudloff
5c0ed594f3 Debug bar 2021-02-06 15:35:09 +01:00
Pierre Rudloff
05311ac7b6 Add return types 2020-12-17 22:49:21 +01:00
Éric Gaspar
a5bda1d35e
Fix small typos (#333)
* Fix small typos

- *Fix cap on YouTube, AllTube...*

* Fix YouTube cap
2020-12-05 15:00:46 +01:00
Pierre Rudloff
f184bda59b Make sure locale is always set, even on first request 2020-11-21 14:20:01 +01:00
Pierre Rudloff
2d1d69a1f1 Refactor some Robo code 2020-11-16 20:45:49 +01:00
Pierre Rudloff
c0b2acf33e Don't restrict forms in CSP (#327) 2020-11-04 23:03:39 +01:00
Pierre Rudloff
7ad0040f60 Move container creation to a new App class 2020-10-22 23:11:29 +02:00
Pierre Rudloff
3d2b518cb4 Create a test container that we can use in any test 2020-10-22 22:48:47 +02:00
Pierre Rudloff
d83774ae7d Cleaner way to get the domain 2020-10-22 21:40:20 +02:00
Pierre Rudloff
e1d7ad44e0 Make the bookmarklet compatible with ugly URLs 2020-10-22 01:36:00 +02:00
Pierre Rudloff
d97b824a44 Cleaner way to build ugly URLs 2020-10-22 01:26:17 +02:00
Pierre Rudloff
7d856c61fb Cleaner way to build the redirect 2020-10-22 01:13:25 +02:00
Pierre Rudloff
7dead957f0 Fix bookmarklet behind a reverse proxy 2020-10-22 00:45:41 +02:00
Pierre Rudloff
6bb577bcce Use default view variables 2020-10-22 00:45:09 +02:00
Pierre Rudloff
110bfc9ff1 Cleaner way to build the canonical URL 2020-10-22 00:28:36 +02:00
Pierre Rudloff
342b8c4a42 Use secure session cookies (fixes #321) 2020-10-21 23:04:29 +02:00
Pierre Rudloff
de8c5e5dc7 Convert SessionManager to a factory class 2020-10-21 22:48:05 +02:00
Pierre Rudloff
5b0ee7651b Remove Config dependency on LocaleManager 2020-10-21 22:38:09 +02:00
Pierre Rudloff
e9cee39673 Allow manifest in CSP 2020-10-20 23:32:16 +02:00
Pierre Rudloff
0a220d4d8e Move factory classes to a subfolder 2020-10-20 23:29:50 +02:00
Pierre Rudloff
123a6c5ad9 Move middleware to a subfolder 2020-10-20 23:17:22 +02:00
Pierre Rudloff
496ac212e2 Set Link header in PHP so it can work in a subfolder 2020-10-20 23:10:33 +02:00
Pierre Rudloff
4bcf9566ad Improve CSP 2020-10-20 00:57:26 +02:00
Pierre Rudloff
f29a61f182 Upgrade pretty-package-versions to 1.5
So we can have a cleaner way to get the root package version
2020-10-20 00:22:34 +02:00
Pierre Rudloff
561b6c8370 Make the CSP compatible with debug tools 2020-10-19 23:59:23 +02:00
Pierre Rudloff
e2560cd9cb Code cleanup 2020-10-19 22:29:30 +02:00
Pierre Rudloff
da93835ea2 Fix error when X-Forwarded-Path is not defined 2020-10-19 22:20:19 +02:00
bellington3
c5298dd24b
Provide basePath support (#309)
* Provide basePath support

To be able to serve the application via a reverse proxy in a subfolder
smarty needs to be aware of the basepath if any.

* Provide basepath support via X-Forwarded headers

* Fix warnings

* Review adjustments

* Provide support X-Forwarded-Host header

* Use $uri in view factory directly

* Use middleware to set basepath from X-Forwarded-Path header

* Fix invalid type hint in RouterPathMiddleware

* Add "X-Forwarded-Host" to README
2020-10-19 22:18:03 +02:00
Pierre Rudloff
234ecc2c6d Log handled exceptions 2020-10-18 13:20:06 +02:00
Pierre Rudloff
07f19a80f4 Improve fallback error handling 2020-10-18 13:20:06 +02:00
Pierre Rudloff
9becaeaabe Fix uglyUrls 2020-10-18 00:59:19 +02:00
Pierre Rudloff
15636aa435 Stop using a singleton for LocaleManager (#298) 2020-10-17 22:36:03 +02:00
Pierre Rudloff
fc6bf472b2 Stop using deprecated constant 2020-10-17 22:18:58 +02:00