Commit graph

732 commits

Author SHA1 Message Date
Yassine Guedidi 7ebc96f3b9 Remove session-based redirection 2023-12-28 21:42:26 +01:00
Jeremy Benoist fa107116cc
Prepare 2.6.7 release 2023-10-02 14:14:34 +02:00
Kevin Decherf aa06e8328e ConfigController: remove 2fa cancel step
This change annoys me, however this endpoint was anyway problematic:
- it was vulnerable to a CSRF attack, see GHSA-56fm-hfp3-x3w3
- it is useless as we don't really handle a two-steps validation

Still, if you send an incorrect code during the "activation" phase a
flash error will pop up but the 2fa will stay enabled. This need rework
when possible.

Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-09-30 00:49:58 +02:00
Kevin Decherf 5240684be9 ConfigController: move OTP endpoints to POST method only
Fixes GHSA-56fm-hfp3-x3w3

Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-09-30 00:49:58 +02:00
Simounet 6fab27f3ce
Add tag form submit button always displayed 2023-09-29 15:35:33 +02:00
Simounet 9bc026f343
Fix #6971 - Full clickable card on mass action 2023-09-27 19:25:16 +02:00
Jérémy Benoist 8ac80e934e
Merge pull request #6912 from Simounet/feat/tag-mass-action-improved
Mass action layout improved
2023-09-04 13:25:05 +02:00
Simounet 4b04cd5746
Mass action tag layout updated 2023-09-04 12:00:16 +02:00
Simounet 2d7d16ee6c
Tag mass action layout updated 2023-09-01 14:16:27 +02:00
Simounet 18615738c0
Title removed from footer's stats element 2023-08-31 12:34:36 +02:00
Simounet 452362c17a
Untagged entries number removed from the filter's sidebar 2023-08-31 12:34:36 +02:00
Nicolas Lœuillet ca879c36de Prepare wallabag 2.6.3 2023-08-21 11:52:16 +02:00
Nicolas Lœuillet ffcc5c9062
Merge pull request from GHSA-gjvc-55fw-v6vq
Replace GET way to POST way to delete API client
2023-08-21 11:08:47 +02:00
Nicolas Lœuillet c3d1f92278 Replace GET way to POST way to delete API client 2023-08-09 21:54:40 +02:00
Nicolas Lœuillet a9893d754f Replace GET way to POST way to reset data user
Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2023-08-09 21:39:03 +02:00
Kevin Decherf f4fd8e4675
Merge pull request #6778 from wallabag/add-confirmation-before-reload
Add confirmation before reload entry
2023-08-09 19:40:49 +02:00
Kevin Decherf 60cb8c0294
Merge pull request #6797 from yguedidi/use-twig-instead-of-templating
Use Twig instead of templating
2023-08-08 23:18:16 +02:00
Yassine Guedidi f43d8fa947 Move from transchoice to trans 2023-08-05 23:39:13 +01:00
Yassine Guedidi e93fdca2d3 Use Twig instead of templating 2023-08-05 16:43:36 +01:00
Nicolas Lœuillet d6f63d5d51
Add confirmation before reload entry 2023-07-30 20:07:24 +02:00
Nicolas Lœuillet c1cba72a19 Replace hardcoded url by current wallabag url 2023-07-30 10:09:54 +02:00
Viktorius Suwandi e80a169435
Remove external dependencies on src/Wallabag/CoreBundle/Resources/views/Developer/howto_app.html.twig 2023-07-30 14:07:45 +07:00
Nicolas Lœuillet c75d3e6961 Remove twofactor_auth parameter
Fix #6649
2023-07-15 16:18:01 +02:00
Nicolas Lœuillet 6639f7da6d Fix export for same domain entries 2023-06-29 19:59:08 +02:00
Nicolas Lœuillet 74848a4794
Fix undefined variable 2023-06-26 17:41:55 +02:00
Nicolas Lœuillet f511af6fda
Add confirmation alert when deleting articles from list view 2023-06-20 17:30:31 +02:00
Nicolas Lœuillet 708bb261d0
Update quickstart content 2023-06-19 13:59:34 +02:00
Nicolas Lœuillet fedd6c9eda
Remove hardcoded string 2023-06-19 10:08:51 +02:00
Simounet 619499d455
[Boyscout] Settings: Reduced width for the default mark as read container 2023-06-16 14:28:57 +02:00
Simounet 97a87235a1
Setting to show / hide articles thumbnails styling 2023-06-16 14:28:57 +02:00
Nicolas Lœuillet a94d7503c2
Added new setting to show / hide articles thumbnails 2023-06-16 14:27:15 +02:00
Nicolas Lœuillet 54b3977a3c Update main contributors 2023-06-16 11:40:33 +02:00
Simounet 78f66c72fc
Remove annotation text on entry without any 2023-06-15 23:17:30 +02:00
Simounet 18943d191f
[Boyscout] Useless title on tags removed 2023-06-15 23:14:02 +02:00
Simounet 5d1abde36d
Entry view tags styled udpated 2023-06-15 23:13:45 +02:00
Nicolas Lœuillet ae975fdba0
Update translation key 2023-06-15 17:06:31 +02:00
Nicolas Lœuillet 439e906c44
Merge pull request #6619 from Simounet/fix/6618-mass-action-not-submitting
Fix #6618 mass action buttons not submitting anything
2023-06-15 15:00:42 +02:00
Simounet 09af754a33
Fix #6618 mass action buttons not submitting anything 2023-06-15 14:52:59 +02:00
Simounet fcb880fbd1
Empty space on the top bar used for more add url toggle clickable target 2023-06-14 21:54:57 +02:00
Simounet fe740f4a69
Fix RSS feed_route not set 2023-06-12 19:05:38 +02:00
Simounet 3c7457801f
index class added to body 2023-06-12 18:15:39 +02:00
Simounet e5b72f3123
Fix Stylelint errors 2023-06-12 18:15:38 +02:00
Simounet 81f58df7b8
Mass action tag layout updated 2023-05-26 21:14:32 +02:00
Simounet f9143c4255
[Boyscout] Elements in need of entries hidden if no entry available 2023-05-25 22:22:48 +02:00
Simounet d0aad7b96d
Mass actions available on cards view
fixup! Mass action toggle button added
2023-05-25 22:04:44 +02:00
Simounet 384918cda9
Mass action toggle button added 2023-05-25 21:56:09 +02:00
Simounet eae4d5a142
[Boyscout] Feed link HTML facto 2023-05-25 21:56:08 +02:00
Jeremy Benoist 66b7bdd07c
Merge remote-tracking branch 'origin/2.5.x' 2023-04-24 14:36:32 +02:00
Jérémy Benoist 268372dbbd
Merge pull request #6289 from wallabag/2.5/fix-csrf-user-deletion
Fix CSRF on user deletion
2023-02-07 21:52:51 +01:00
Jeremy Benoist f1b3d5cdd7
Fix CSRF on user deletion 2023-02-07 21:41:52 +01:00