Commit Graph

527 Commits (quadra)

Author SHA1 Message Date
Isaac Connor 9fd8882f39 Handle auto in width 2024-12-17 15:22:05 -05:00
Isaac Connor 90ec23b410 Sanitise filter[Id] 2024-05-30 10:05:15 -04:00
Isaac Connor 3f95e04ede in detaintPath also strip :// because php:// is a way to inject code 2023-09-15 09:25:45 -04:00
Isaac Connor 57bf25d39f Correct the syntax of the CSP 2023-02-23 09:48:00 -05:00
Isaac Connor 4637eaf9ea Add object-src CSP directive 2023-02-20 18:26:03 -05:00
Isaac Connor 5b17f0bb06 Introduce check_datetime function to validate dates 2023-02-20 12:24:19 -05:00
Isaac Connor 2c2c49a9d9 Fix detaintPath not stripping sequences like ..././ 2023-02-20 12:18:39 -05:00
Isaac Connor 7938524b14 Add Access-Control-Allow-Credentials: true so that we can pass cookies along with xhr requests. 2022-11-02 10:09:50 -04:00
Isaac Connor 4a98138ec4 Revert "add remoteaddr to session when regenerating"
This reverts commit d97f94573c.
2022-10-17 12:28:03 -04:00
Isaac Connor d97f94573c add remoteaddr to session when regenerating 2022-10-17 12:23:47 -04:00
Isaac Connor 1569816f5e Check for definition of CAMBOZOLA defines. The purpose is just to easy running the 1.36 UI against a 1.37 database. 2022-10-11 10:23:10 -04:00
Isaac Connor d44a1ad175 Handle filter[query] not being defined 2022-09-29 16:15:11 -04:00
Isaac Connor c595b95efa Need a ; before report-uri 2022-06-23 16:44:13 -04:00
Isaac Connor 04e4f3b8da Use Content-Security-Policy: for all views instead of Report-Only 2022-06-23 16:44:11 -04:00
Isaac Connor c58e63e927 Don't turn '0' into '' 2022-06-23 16:40:34 -04:00
Isaac Connor 46c01db646 handle various functions no longer dealing with null 2022-06-23 14:12:06 -04:00
Isaac Connor d09c4ffc93 Test for values being trueish as passing null to strcmp is deprecated 2022-06-23 14:11:20 -04:00
Isaac Connor 1865aaa858 Remove debug 2022-05-24 14:52:19 -04:00
Isaac Connor d62ea5a5f7 Comment out debugging 2022-05-02 10:25:49 -04:00
Isaac Connor fc78133733 Only apply height styles to the stream img. 2022-04-27 21:44:55 -04:00
Isaac Connor 2969a00dcb Remove loading=lazy as it causes problems with ajax Querying 2022-04-27 17:39:33 -04:00
Isaac Connor 3088a7a181 Fix test for chrome version 7 by not including periods. We only care about the major and php is confused. 2022-04-04 17:00:41 -04:00
Ben Dailey 1ad191e8d6 Most programmatic images are lazy. 2022-03-29 18:45:13 -04:00
Isaac Connor 33a067c085 fix validInt to take negative integers. Introduce validCardinal to handle positive integers 2021-10-28 13:11:44 -04:00
Isaac Connor 105eff7a21 Remove references to zma 2021-02-01 17:29:16 -05:00
Isaac Connor e4c6709eca ensure options always has width and height set 2021-01-27 13:07:31 -05:00
Isaac Connor bfd16db34b add format padding so that right align file size strings will line up nicely. 2020-12-11 09:33:36 -05:00
Isaac Connor eb4b7f248d handle sort_field and limit not existing in _REQUEST 2020-12-09 17:56:27 -05:00
Isaac Connor 3cf31435a7 fix next/prev buttons by correcting the sort_field when it is StartTime or EndTime 2020-11-13 09:51:54 -05:00
Isaac Connor 8029f59eac Rename StartTime, EndTime in Events to StartDateTime and EndDateTime 2020-11-04 13:52:50 -05:00
Isaac Connor 2178da387d pass desired object name into querystring() 2020-10-23 17:56:38 -04:00
Isaac Connor 946a59ce8b add special case for sort_field being StartDateTime. This is not an event column and must be corrected to StartTime 2020-10-21 10:37:39 -04:00
Andrew Bauer 442fadb585 link bstable locale to zoneminder's 2020-10-17 07:28:14 -05:00
Isaac Connor 12b75e93b8 Merge branch 'release-1.34' 2020-10-15 17:19:56 -04:00
Isaac Connor 3c5dc8e8b3 Add line breaks in select options 2020-10-15 17:16:14 -04:00
Isaac Connor 10c0a6617c Return Debug to a regular function to match other logging functions. Since we switched to using namespaces we no longer clash with cake_php. 2020-10-14 10:39:25 -04:00
Isaac Connor cd2e96eaec Merge branch 'master' of github.com:ZoneMinder/zoneminder 2020-10-13 08:42:28 -04:00
Isaac Connor 908c20e959 add ZM prefix to Warning 2020-10-13 08:42:22 -04:00
Andrew Bauer 1db31ba574 remove makePopupLink function. Use makeLink instead 2020-10-12 12:20:21 -05:00
Isaac Connor b683d5326a Test for empty array in htmlOPtions when notifying about not selecting a value 2020-10-07 11:22:42 -04:00
Andrew Bauer 87fd316e5b makePopupButton removed, use makeButton instead 2020-10-05 16:40:14 -05:00
Andrew Bauer 2852d14ca6 use data-on-change-this instead of inline js 2020-10-04 08:04:11 -05:00
Andrew Bauer b8d95dfa05 fix array to string php warning 2020-10-01 09:13:50 -05:00
Andrew Bauer ae9139b00c unpopup zone view 2020-09-25 10:52:13 -05:00
Isaac Connor 8bd958e91c pass querySep to querystring 2020-09-24 12:12:06 -04:00
Isaac Connor 29880cdab3 handle width options['width'] and options['height'] aren't set 2020-09-17 20:57:14 -04:00
Andrew Bauer aa6bf31cbd pass OLANG as a function parm 2020-09-11 07:51:00 -05:00
Isaac Connor 3b7bde755e
Merge pull request #3041 from mnoorenberghe/unsafe_inline_backcompat
Drop support for CSP 1 browsers (with no nonce-* support)
2020-09-10 18:09:44 -04:00
Andrew Bauer 46d4f55b80 add makeHelpLink helper function 2020-09-10 17:06:27 -05:00
Matthew Noorenberghe f031ce9934 Drop support for CSP 1 browsers (with no nonce-* support)
This gets rid of console spew in modern browsers.
2020-09-10 16:25:43 -04:00