Claudio Valdez
e3fcd26f12
Add mfa reset button for admin s on user profile edit
2026-03-11 12:30:59 -03:00
Dan Brown
151823b84e
Theme Modules: Added easier way to insert HTML head content
2026-03-08 10:26:00 +00:00
Dan Brown
27240be499
Theme System: Added new page-content focused events
...
Closes #6049
2026-03-06 12:40:22 +00:00
Dan Brown
d0d1bb9829
Merge pull request #6035 from BookStackApp/v25-12
...
Merge further v25-12 changes into development
2026-03-06 10:26:41 +00:00
Dan Brown
7d0237c798
NPM Deps: Updated package versions
...
Fixed SCSS if deprecations
Fixed new eslint detected issues
2026-03-06 10:25:27 +00:00
Dan Brown
f2f76a3c56
Modules: Improved install command based on testing
...
- Updated output to be clearer
- Added warning and confirmation to local install flow
- Adjusted module folder name creation
2026-03-06 09:28:46 +00:00
Dan Brown
ec3dd856db
Mail: Set domain for EHLO based upon the APP_URL
...
For #5990
2026-02-28 18:46:05 +00:00
Dan Brown
25ed242f61
Deps: Updated PHP package versions
2026-02-27 10:09:41 +00:00
Dan Brown
10c46534e0
Logical Theme: Added OIDC_AUTH_PRE_REDIRECT event
...
Allows customization of the auth URL before the user is redirected
to that URL.
Related to #6014
2026-02-27 09:34:33 +00:00
Dan Brown
dd42b9b43f
Text: Updated per-page display limits description
...
To be more sensible & direct as per MtheBird's suggestion.
Closes #6005
2026-02-27 08:54:12 +00:00
Dan Brown
9a12e3a8b7
Book API: Added shelves list to show endpoint
...
For #6006
Added test to cover.
2026-02-24 10:25:17 +00:00
Dan Brown
7aef0a48b3
Content: Updated filters to allow some required attributes
...
- Allows target attribute on links.
- Allows custom mention attribute on links.
Adds test case to cover these.
For #6034
2026-02-23 08:08:44 +00:00
Dan Brown
6808292c90
Editors: Made drawings appear clickiable via cursor
...
During review of #5864
2026-02-21 16:00:14 +00:00
Dan Brown
c10b0fd5b9
Merge branch 'patch-1' of github.com:lublak/BookStack into lublak-patch-1
2026-02-21 15:52:25 +00:00
Dan Brown
1077a4efd0
Merge branch 'v25-12' into development
2026-02-21 13:59:29 +00:00
Dan Brown
23f3f35f6b
Readme: Updated sponsors
2026-02-21 13:56:50 +00:00
Dan Brown
229a99ba24
Descriptions: Improved empty field handling, reduces whitespace
...
For #5724
2026-02-20 14:22:54 +00:00
Dan Brown
8e99fc6783
Books: On delete, redirect to shelf if in context
...
For #6029
Added tests to cover
2026-02-20 11:23:26 +00:00
Dan Brown
80204518a2
Page Content: Better handling for empty content filtering
...
For #6028
2026-02-19 23:25:00 +00:00
Dan Brown
a8d96fd389
Content filter: Allowed custom diagram attribute in allow-list
...
For #6026
2026-02-18 19:33:35 +00:00
Dan Brown
9d15c79fee
Deps: Updated PHP package versions
2026-02-18 19:24:06 +00:00
Dan Brown
e1de1f0583
git: Added old purifier location to gitignore
2026-02-17 18:34:14 +00:00
Dan Brown
a2017ffa55
Caching: Altered purifier cache folder to be server-created
...
Moved from a static folder to a dynamically created folder in the
framework/cache directory, to increase the chance that it's created with
server-writable permissions.
This is due to an issue where users had permission issues, since adding
a new folder means it's created by the git user and often
non-web-writable.
2026-02-17 18:22:13 +00:00
Dan Brown
9646339933
Testing: Addressed failing tests and static checks
2026-02-17 11:31:47 +00:00
Dan Brown
e4383765e1
Meta: Updated licenses and config wording
2026-02-17 11:00:37 +00:00
Dan Brown
5d547fcf4c
Deps: Updated PHP packages
...
Also fixed test namespace
2026-02-17 09:44:56 +00:00
Dan Brown
826b36c985
Editors: Added HTML filtering in certain loading conditions
...
When loaded via ajax for draft revert live in editor, or when loaded
into the editor by a different user.
2026-02-16 15:50:54 +00:00
Dan Brown
3fa1174e7a
Content filtering: Updated config and readme attribution
2026-02-16 13:46:45 +00:00
Dan Brown
50e8501027
Content Filter: Added extra object filtering
...
Was blocked by CSP anyway, but best to have an extra layer.
2026-02-16 13:02:24 +00:00
Dan Brown
8a221f64e4
Content Filtering: Covered new config options and filters with tests
2026-02-16 10:11:48 +00:00
Dan Brown
035be66ebc
Content: Updated tests and CSP usage of content script setting
...
Updates CSP to use new content_filtering option.
Splits out content filtering tests to their own class.
Updated tests where needed to adapt to changes.
2026-02-15 18:44:14 +00:00
Dan Brown
227027fc45
Content: Updated purifier and content caching
...
- Updated page content cache to use app version in cache key
- Moved purifier cache into framework to better work with existing
expected folders.
- Added app version check to purifier so that it will reset its own
cache on app version change.
2026-02-15 16:46:09 +00:00
Dan Brown
0f040fe8b1
Content: Tuned HTML purifier for our use
...
Tested it with a range of supported, including uncommon, content types
and added support, or changed config, where needed.
Been through docs for all HTMLPurifier options to assess what's
relevant.
2026-02-15 16:17:03 +00:00
Dan Brown
10ebe53bd9
Page Content: Added more complex & configurable content filtering
...
- Added new option to control parts of the filter.
- Added whitelist filtering pass via HTMLPurifier.
2026-02-13 14:14:28 +00:00
Dan Brown
5e12b678c7
Merge pull request #5998 from BookStackApp/further_theme_development
...
Further theme system developments
2026-02-09 13:34:15 +00:00
Dan Brown
057d7be0bc
Views: Made index/show sidebars a lot more modular
...
Split out each sidebar block into their own template for easier
customization of those elements, and less code to manage when overriding
the parent show/index views.
2026-02-08 17:03:48 +00:00
Dan Brown
984a73159f
Theme modules: Updated view includes to prevent caching conflicts
2026-02-08 13:39:34 +00:00
Dan Brown
a20438b901
Theme System: Fixed theme view before/after issues
...
- Updated the system to work with modules.
- Updated module docs to consider namespacing.
- Fixed view loading and registration event ordering.
- Fixed checking if views are registered.
2026-02-07 23:01:13 +00:00
Dan Brown
9d3d0a4a07
Theme Modules: Added testing coverage for install command
2026-02-05 21:57:12 +00:00
Dan Brown
5038d124e1
Theme modules: Updated docs to cover ZIP format
2026-02-05 18:01:17 +00:00
Dan Brown
f7890c2dd9
Theme Modules: Fixes and improvements after manual testing
...
- Added (limited) redirect handling to module downloads.
- Adjusted wording/text for consistency and clarity.
- Fixed scenarios where process was not stopped on error.
- Fixed module folder creation check/logic.
- Added better failed request handling to module downloads.
- Updated download response streaming to monitor/limit download size.
2026-02-05 17:49:35 +00:00
Dan Brown
45ae03ceac
Theme Modules: Added install helper command
...
Not yet tested at all, either manually or via PHPUnit
2026-02-03 20:43:01 +00:00
Dan Brown
aa0a8dda11
Theme Modules: Added dev documentation
2026-02-02 18:29:35 +00:00
Dan Brown
120ee38383
Theme Modules: Added testing coverage
2026-02-01 17:31:21 +00:00
Dan Brown
cd84074cdf
Theme System: Split & organised tests, changed module version to string
2026-02-01 16:27:52 +00:00
Dan Brown
4949520194
Theme System: Added initial module implementations
2026-02-01 11:53:46 +00:00
Dan Brown
46dcc30bf7
Updated translator & dependency attribution before release v25.12.3
2026-01-29 15:18:06 +00:00
Dan Brown
9f7d3b55dd
Updated translations with latest Crowdin changes ( #5997 )
2026-01-29 15:11:40 +00:00
Dan Brown
3e5e88dc87
Deps: Updated PHP package versions via composer
2026-01-29 14:57:05 +00:00
Dan Brown
c77a0fdff3
Page Content: Added form elements to filtering
...
Added and updated tests to cover.
Also updated API auth to a narrower focus of existing session instead of also existing user auth.
This is mainly for tests, to ensure they're following the session
process we'd see for activity in the UI.
2026-01-29 14:54:08 +00:00