550 Commits

Author SHA1 Message Date
ccd0
0877dc8b8a FileInfo: round bytes also 2014-06-29 00:16:20 -07:00
ccd0
136f778743 rewrite FileInfo for easier XSS checking 2014-06-29 00:05:55 -07:00
ccd0
646c29c4bc fix short filename hover 2014-06-28 22:07:02 -07:00
ccd0
b6739cc45d move HTML escape to global as E 2014-06-28 21:58:14 -07:00
ccd0
9a7f8548a1 add BuildTest keybind 2014-06-27 21:56:24 -07:00
ccd0
20006af4fe prettify tweaks 2014-06-27 21:45:26 -07:00
Zixaphir
64c9c139c1 Merge branch 'v3'
Conflicts:
	LICENSE
	builds/appchan-x.user.js
	builds/crx/script.js
	src/Archive/archives.json
	src/General/Config.coffee
	src/General/Header.coffee
	src/General/Settings.coffee
	src/Images/FappeTyme.coffee
	src/Posting/QR.coffee
	src/Posting/QR.post.coffee
2014-06-22 07:13:41 -07:00
Zixaphir
f103fd0301 Merge branch 'mayhem' into v3
Conflicts:
	CHANGELOG.md
	package.json
	src/Archive/archives.json
	src/General/Config.coffee
	src/General/Header.coffee
	src/General/Main.coffee
	src/General/Settings.coffee
	src/General/UI.coffee
	src/Miscellaneous/Keybinds.coffee
	src/Monitoring/ThreadUpdater.coffee
	src/Monitoring/Unread.coffee
	src/Posting/QR.captcha.coffee
	src/Posting/QR.coffee
	src/Posting/QR.post.coffee
2014-06-22 07:04:25 -07:00
ccd0
63d7372ad2 a few more tweaks from Mayhem 2014-06-18 23:59:17 -07:00
ccd0
cdb83f744a cleanup menu code 2014-06-18 22:39:19 -07:00
Mayhem
41c22af15f GM2 incoming! 2014-06-19 04:34:37 +02:00
ccd0
f17dfcc180 use post ID for jsmath event 2014-06-18 02:11:27 -07:00
ccd0
efc852464f don't use event for adding to menu internally 2014-06-17 21:12:07 -07:00
Mayhem
cc4ff57993 Don't double number captchas when reporting too. 2014-06-13 01:55:41 +02:00
Mayhem
4c17333f53 Fix #1669. 2014-06-13 01:42:45 +02:00
ccd0
bb911dfead remove captcha doubling from report window 2014-06-09 14:40:06 -07:00
Brandon
994296f2cc fix /f/ sauce 2014-06-05 01:49:34 -07:00
Zixaphir
13236e18d3 Merge branch 'master' of github.com:zixaphir/appchan-x
Conflicts:
	LICENSE
	builds/appchan-x.user.js
	builds/crx/script.js
2014-05-27 12:39:51 -07:00
Zixaphir
2efa358131 Merge branch 'v3'
Conflicts:
	CHANGELOG.md
	LICENSE
	builds/appchan-x.user.js
	builds/crx/manifest.json
	builds/crx/script.js
	package.json
	src/General/Navigate.coffee
	src/Miscellaneous/CatalogLinks.coffee
	src/Posting/QR.coffee
2014-05-27 12:39:01 -07:00
ccd0
08ee499d57 don't run jsMath parsing until post is inserted into the document 2014-05-24 15:41:53 -07:00
ccd0
6a1706f5b6 check that jsMath and jsMath.Autoload exist 2014-05-24 01:15:21 -07:00
ccd0
6b838f7992 fix failure of jsMath to load in cross-thread quotes 2014-05-24 00:25:24 -07:00
ccd0
b2d1ac11f4 fix jsMath loading error 2014-05-23 23:58:56 -07:00
Zixaphir
05de96fd0b Try again on zixaphir/appchan-x#724 2014-05-16 09:25:51 -07:00
Zixaphir
a0f5efdcc7 Attempt to resolve zixaphir/appchan-x#724 2014-05-16 09:21:15 -07:00
ccd0
cb828fa9c4 quote all the attributes 2014-05-15 17:32:38 -07:00
ccd0
05014b7f13 rewrite HTML escaping in post building 2014-05-15 17:02:17 -07:00
ccd0
e74fc2765a move escape function to Build 2014-05-15 10:02:27 -07:00
ccd0
4b757fb0a3 only need single quotes here 2014-05-15 09:30:08 -07:00
ccd0
1189b71029 this seems to be a common pattern 2014-05-14 14:16:16 -07:00
ccd0
6ce8bef709 Drop HTML in custom board titles.
This could be useful, but the fact that it's been broken almost
since its creation indicates nobody's actually using it.

As with the file info formatting, I'll mention it on the changelog
and add it back with better security if someone actually wants to
use it.
2014-05-13 15:03:10 -07:00
ccd0
0415828e27 Disallow custom HTML in file info format.
I doubt anyone is using it, and if someone manages to inject a
malicious script into the page, this could be used to install a
script permanently to be executed each time 4chan is visited.

I'll mention it in the changelog, and if anyone complains, I can
add it back with some security checks.
2014-05-13 14:20:19 -07:00
ccd0
3365e67c0a ' should be ' 2014-05-13 02:26:28 -07:00
ccd0
43a99b9291 update catalog.neet.tv board list 2014-05-12 23:56:53 -07:00
Zixaphir
02ed8d2db0 4gropes has been broken for awhile, I guess? Fix #687
If anyone has a new catalog to replace 4gropes, CC me.
2014-05-12 23:46:58 -07:00
ccd0
97ca89c83d Escape file info more aggressively.
Most of this isn't strictly necessary, but it makes the script
more robust against changes, either in 4chan or the script itself.
I don't want to have to review this code for vulnerabilities each
time something changes.
2014-05-12 22:20:04 -07:00
ccd0
57ed5e8055 fix privilege escalation vulnerability 2014-05-12 21:46:18 -07:00
Zixaphir
4f820ad8de 4gropes has been broken for awhile, I guess? Fix #687
If anyone has a new catalog to replace 4gropes, CC me.
2014-05-11 19:42:13 -07:00
ccd0
c3f04314cc make things work with Quick Reply and Thread Updater disabled 2014-05-11 17:36:13 -07:00
Brandon
de2d6a0303 /f/ security issue #722 2014-05-09 10:53:56 -07:00
Brandon
ae997753e2 fix #720 2014-05-04 16:13:40 -07:00
Zixaphir
93c5ecae9c Merge branch 'v3' 2014-05-03 16:07:23 -07:00
Zixaphir
0faacd737e Revert "Lets pretend we're smarter than we really are!"
This reverts commit 393eb3ec2289293dd4d4caaef17db33bb695fa30.

Conflicts:
	LICENSE
	builds/4chan-X.user.js
	builds/crx/script.js
2014-05-03 16:05:46 -07:00
Zixaphir
c04c83f915 Merge branch 'v3'
Conflicts:
	CHANGELOG.md
	LICENSE
	README.md
	builds/appchan-x.user.js
	builds/crx/manifest.json
	builds/crx/script.js
	package.json
	src/General/Header.coffee
	src/General/Main.coffee
	src/General/css/font-awesome.css
	src/General/html/Features/Index-navlinks.html
	src/Miscellaneous/ExpandComment.coffee
	src/Miscellaneous/Keybinds.coffee
	src/Monitoring/ThreadStats.coffee
	src/Posting/QR.captcha.coffee
	src/Posting/QR.coffee
	src/Theming/Banner.coffee
2014-05-03 06:20:04 -07:00
Zixaphir
ec77ec1e84 QuoteYou > QuoteMarkers 2014-05-03 03:35:33 -07:00
Zixaphir
a1601d8825 Merge branch 'mayhem' into v3
Conflicts:
	CHANGELOG.md
	package.json
	src/General/Build.coffee
	src/General/Index.coffee
	src/General/Main.coffee
	src/General/lib/post.class
	src/Monitoring/ThreadStats.coffee
2014-05-03 02:45:58 -07:00
Zixaphir
523d6bd9c4 Merge branch 'ccd0' into v3
Conflicts:
	CHANGELOG.md
	LICENSE
	builds/4chan-X.user.js
	builds/crx.crx
	builds/crx/script.js
	src/General/Build.coffee
	src/General/Index.coffee
	src/General/Main.coffee
	src/General/Navigate.coffee
	src/General/css/style.css
	src/General/html/Build/post.html
	src/General/html/Features/Index-navlinks.html
	src/General/lib/post.class
	src/Images/Gallery.coffee
	src/Images/ImageExpand.coffee
	src/Images/ImageHover.coffee
	src/Miscellaneous/Banner.coffee
	src/Miscellaneous/Keybinds.coffee
	src/Monitoring/ThreadUpdater.coffee
	src/Posting/QR.captcha.coffee
	src/Posting/QR.coffee
	src/Posting/QR.post.coffee
	src/Quotelinks/QuoteBacklink.coffee
	src/Quotelinks/Quotify.coffee
2014-05-03 02:03:35 -07:00
Zixaphir
ca9b0517de Merge some changes from appchan. 2014-05-03 01:09:35 -07:00
Mayhem
a9b05047be Build pathnames taking into account the thread slug. 2014-04-30 15:30:46 +02:00
ccd0
e1ff987c1e enable keybinds on catalog 2014-04-26 22:51:48 -07:00