7 Commits

Author	SHA1	Message	Date
Dan Brown	caeea658d1	Access: Hardened usage of referring URLs via login ... Adds a more substantial URL check, via a new class which is shared and used in other parts of the app for consistency. Thanks to mfk25 for reporting.	2026-07-01 10:45:59 +01:00
Dan Brown	01dc1e71c5	Attachments: Added more extensive URL filtering ... Added a central URLFilter class to check & clean URLs used for attachments, which is also used for validation, and by the purifier to standardise protocols (and to make protocol config easier in future). Thanks to mfk25 for reporting.	2026-07-01 00:41:19 +01:00
Dan Brown	c5c066c3e7	Merge pull request 'Merge v26.03 branch changes' (#6122) from v26-03 into development ... Reviewed-on: https://codeberg.org/bookstack/bookstack/pulls/6122	2026-05-14 16:08:26 +02:00
Dan Brown	cf648906e9	SSR: Hardened URL validator against a range of workarounds ... Added a more comprehensive range of tests to cover. Thanks to naruhodoowl (https://github.com/kilhsrito-crypto) for reporting.	2026-04-30 10:18:50 +01:00
Dan Brown	c7d3775bb9	Plain text: Created a new HTML to plain text converter ... To centralise logic to be more consistent, and to have smarter logic which avoids just following newline format from input, preventing smushing HTML elements (like list elements) next to eachother	2026-04-05 00:05:10 +01:00
Dan Brown	36cb243d5e	Timezones: Updated date displays to use consistent formats	2025-09-04 16:11:35 +01:00
Dan Brown	579c1bf424	Timezones: Seperated out store & display timezones to two options	2025-09-04 15:06:58 +01:00