Commit graph

412 commits

Author SHA1 Message Date
Yassine Guedidi 3fc0b5fa5b Move Api controllers to Core 2024-01-25 20:34:40 +01:00
Yassine Guedidi 0234aa1acf Move User templates to Core 2024-01-25 20:34:40 +01:00
Yassine Guedidi 87ed669504 Move User form types to Core 2024-01-25 20:34:40 +01:00
Yassine Guedidi bdeaa93dd8 Move User repository to Core 2024-01-25 20:34:40 +01:00
Yassine Guedidi a37ded9101 Move User entity to Core 2024-01-25 20:34:40 +01:00
Yassine Guedidi 3d7bb85d71 Move User controller to Core 2024-01-25 20:34:40 +01:00
Yassine Guedidi b9a1248c4b Move Annotation form types to Core 2024-01-25 20:34:40 +01:00
Yassine Guedidi 23301b7eac Move Annotation repository to Core 2024-01-25 20:34:39 +01:00
Yassine Guedidi 2190174754 Move Annotation entity to Core 2024-01-25 20:34:39 +01:00
Yassine Guedidi 2ed8c219cc Move Annotation controller to Core 2024-01-25 20:34:39 +01:00
Yassine Guedidi 0178c7356d Fix PHPStan errors 2024-01-22 19:15:54 +01:00
Yassine Guedidi 0a117958c9 Apply PHP-CS-Fixer fixes 2024-01-22 19:15:54 +01:00
Yassine Guedidi 25474a7b99 Upgrade from lexik/form-filter-bundle to spiriitlabs/form-filter-bundle 2024-01-22 19:15:54 +01:00
Yassine Guedidi 16c239aa78 Merge branch '2.6' into merge-2.6-in-master 2024-01-03 11:08:10 +01:00
Yassine Guedidi 7ebc96f3b9 Remove session-based redirection 2023-12-28 21:42:26 +01:00
Yassine Guedidi f4493f7472 Remove support for fallback in Redirect helper 2023-12-28 21:42:12 +01:00
Yassine Guedidi ffec47bd88 Use Redirect helper in ConfigController::changeViewModeAction 2023-12-28 21:26:30 +01:00
Yassine Guedidi a351b0aada Fix canonicalize depreciation 2023-12-24 20:29:11 +01:00
Kevin Decherf 4a5f769428 Merge remote-tracking branch 'origin/2.6' into port/2.6.7
Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-10-25 22:09:21 +02:00
Jeremy Benoist fa107116cc
Prepare 2.6.7 release 2023-10-02 14:14:34 +02:00
Kevin Decherf aa06e8328e ConfigController: remove 2fa cancel step
This change annoys me, however this endpoint was anyway problematic:
- it was vulnerable to a CSRF attack, see GHSA-56fm-hfp3-x3w3
- it is useless as we don't really handle a two-steps validation

Still, if you send an incorrect code during the "activation" phase a
flash error will pop up but the 2fa will stay enabled. This need rework
when possible.

Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-09-30 00:49:58 +02:00
Kevin Decherf 5240684be9 ConfigController: move OTP endpoints to POST method only
Fixes GHSA-56fm-hfp3-x3w3

Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-09-30 00:49:58 +02:00
Simounet a46fd5fc9f
Fix deprecated null parameter passed to explode() 2023-09-26 18:02:46 +02:00
Kevin Decherf 2910fb6da4 Merge branch '2.6' into port/2.6.4-2.6.6
Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-09-18 16:50:07 +02:00
Simounet 452362c17a
Untagged entries number removed from the filter's sidebar 2023-08-31 12:34:36 +02:00
Jeremy Benoist c6ff0bc691
Remove remaining MOBI stuff 2023-08-23 08:49:56 +02:00
Nicolas Lœuillet b1752b619d Add display article configurator (font family, font size, line height and max width) 2023-08-22 13:02:50 +02:00
Yassine Guedidi 8ef6a14652 Resolve self depreciation 2023-08-22 01:43:00 +02:00
Nicolas Lœuillet 981d6a47da
Merge pull request #6793 from wallabag/fix-4414
Fix search when search term has useless space
2023-08-21 20:19:16 +02:00
Nicolas Lœuillet 407dd48ed0
Merge pull request #6767 from wallabag/remove-demo
Remove (useless) demo mode
2023-08-21 20:18:18 +02:00
Nicolas Lœuillet cbcfa69c05 Remove (useless) demo mode
Fix #6671
2023-08-21 13:16:56 +02:00
Nicolas Lœuillet 6ff00315d0 Fix search when search term has useless space 2023-08-21 13:16:14 +02:00
Yassine Guedidi 0f17a8cf8a PHPStan level 3 2023-08-21 12:03:38 +02:00
Nicolas Lœuillet 78b0b55c40
Merge pull request from GHSA-p8gp-899c-jvq9
Replace GET way to POST way to reset data user
2023-08-21 11:08:24 +02:00
Nicolas Lœuillet 383dcc5c45
Merge pull request #6119 from Spoons/feat_referer_to_session_redirect
Fix: Use Session instead of Referrer for Redirection
2023-08-21 10:32:03 +02:00
Nicolas Lœuillet a9893d754f Replace GET way to POST way to reset data user
Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-08-09 21:39:03 +02:00
Michael Ciociola 8d3d916d4a Remove extraneous blank lines from EntryController.php 2023-08-06 15:48:28 -05:00
Michael Ciociola e90daf0690
Update TagController.php 2023-08-06 20:20:35 +00:00
Michael Ciociola 9729db75de
Update EntryController.php 2023-08-06 20:19:49 +00:00
Michael Ciociola ced2ea4015
Merge branch 'master' into feat_referer_to_session_redirect 2023-08-06 20:14:44 +00:00
Yassine Guedidi e93fdca2d3 Use Twig instead of templating 2023-08-05 16:43:36 +01:00
Nicolas Lœuillet c75d3e6961 Remove twofactor_auth parameter
Fix #6649
2023-07-15 16:18:01 +02:00
Nicolas Lœuillet 6639f7da6d Fix export for same domain entries 2023-06-29 19:59:08 +02:00
Nicolas Lœuillet 28db6c22eb
Fix duplicate tags creation when assigning search results to tag
Fixes #6330
2023-06-17 15:19:59 +02:00
Nicolas Lœuillet 96cf34f730 Added flash message when we try to add to much tags 2023-06-13 13:06:35 +02:00
Jeremy Benoist 66b7bdd07c
Merge remote-tracking branch 'origin/2.5.x' 2023-04-24 14:36:32 +02:00
Jérémy Benoist 268372dbbd
Merge pull request #6289 from wallabag/2.5/fix-csrf-user-deletion
Fix CSRF on user deletion
2023-02-07 21:52:51 +01:00
Jeremy Benoist f1b3d5cdd7
Fix CSRF on user deletion 2023-02-07 21:41:52 +01:00
Jeremy Benoist 242e3feac9
Fix adding tag to entries from other people
I've also limited tag length to 20 chars (and limit adding more than 5 tags at once)
2023-02-07 21:25:57 +01:00
Jeremy Benoist b795622f06
Prepare 2.5.3 2023-02-01 09:51:02 +01:00