summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2022-08-11be conservative and block unknown ip formatsNathan Gass2-1/+9
2022-08-10we pay the cost of curl_getinfo anyway, make it accessible for all requestsNathan Gass1-2/+2
2022-08-04Throw away profile information like EXIF to (sometimes massively) reduce ↵Christian Schneider1-1/+1
image sizes of thumbnails etc.
2022-07-29remove legacy functionDavid Flatz1-10/+0
2022-07-29rename _escape functions to _encodeDavid Flatz2-26/+36
2022-07-29improve validation and escaping of e-mail addresses: use same method for ↵David Flatz2-33/+140
validation in check_email and address_error; encode and validate IDNs; make (more) robust functions to split address lists and emails
2022-07-26make it::filter usable from it_pipeUrban Müller1-1/+1
2022-07-04clip-path is supported on mobile browsersUrban Müller1-0/+1
2022-06-29still need stackoffs=1 for use of D()Urban Müller2-2/+2
2022-06-29ED varname output was broken due to new stacklevel it_debug::echoUrban Müller1-1/+1
2022-06-27suppress errors of dns_get_record but retry to maybe work around temporary ↵David Flatz1-4/+7
problems
2022-06-22ED output to stderror if IT_ED_STDERR is setNathan Gass2-3/+12
2022-06-20make is_private_ip resolve hostnames and check all resolved ipsDavid Flatz2-20/+33
2022-06-20add function to check whether an ip is from a private range which should be ↵David Flatz3-1/+41
useful for security checks of user provided ip-addresses
2022-06-09docsUrban Müller1-1/+1
2022-05-27send reminder much laterUrban Müller1-1/+1
2022-05-25avoid warnings on assoc resultsUrban Müller1-1/+1
2022-05-20curlinfo debug param (used elsewhere) makes more sense than pUrban Müller1-1/+1
2022-05-20supprt ED() without args for stackdumpUrban Müller2-2/+3
2022-05-20try to provide more info on errorDavid Flatz1-1/+1
2022-05-05millisecond logging is precise enoughUrban Müller1-1/+1
2022-05-02introduce ::json_headers, kill unused varUrban Müller1-3/+14
2022-04-21support late setting of debug_aslive in codeUrban Müller1-1/+1
2022-04-20backwards compatibilityUrban Müller1-1/+1
2022-04-20create generic it::servertype()Urban Müller1-2/+10
2022-04-20respect no spam stars in .diffnoticeUrban Müller1-1/+1
2022-04-19typosUrban Müller1-1/+1
2022-04-19docsUrban Müller1-1/+1
2022-04-07No regular use of javascript: found, remove warning and silently strip itChristian Schneider2-5/+1
2022-03-31move sql to body of error messagesNathan Gass1-2/+2
2022-03-28handle missing closing bracket, remove blanks around email (filter_var balks)Urban Müller2-3/+3
2022-03-28user filter_var instead of regex (thx chrigi), correctly ignore display namesUrban Müller2-11/+14
2022-03-23make it_url::request and it_url::get_multi fork-safe; this prevents multiple ↵David Flatz1-6/+6
processes from using the same curl handle
2022-03-21allow * in .diffnotice for no error mailsUrban Müller1-2/+2
2022-03-16keep CurlHandle and CurlMultiHandle around so that we can profit from ↵David Flatz1-3/+13
connection reuse
2022-03-15correctly escape commasUrban Müller1-1/+1
2022-03-15correctly escape commasUrban Müller1-5/+14
2022-03-15simple unit test for it_mail::address_error()Christian A. Weber1-0/+6
2022-03-14accept naked unix user names as recipientsUrban Müller1-4/+4
2022-03-11format check for email addresses on sendingUrban Müller2-4/+16
2022-03-11store content extract on EDC("getcachelog") for get_cache debuggingUrban Müller1-4/+4
2022-03-07docsUrban Müller1-1/+1
2022-03-03Make it_debug::$force_html decision based on Accept header containing ↵Christian Schneider1-1/+1
text/html, not User-Agent
2022-03-03support html override for non-html pagesUrban Müller2-6/+19
2022-02-24use plaintext output for non-html web pagesUrban Müller1-1/+1
2022-02-18calc() exception no longer necessary, parse causes false posUrban Müller1-2/+1
2022-02-14use D() formatting for it::error bodyUrban Müller2-9/+13
2022-02-08double quote should terminate urs, validates D() output with html linksUrban Müller1-1/+1
2022-02-06Filter out javascript: scheme in U() to avoid more XSS attacksChristian Schneider3-0/+14
2022-01-24Fix PHP 8.1 warning when URL given to U() is invalidChristian Schneider2-0/+9
generated by cgit v1.2.3 (git 2.25.1) at 2025-11-04 05:42:30 +0000