Dan Brown
d1bde2fc78
Updated version and assets for release v26.03.4
2026-04-30 11:38:43 +01:00
Dan Brown
16562816c5
Merge branch 'v26-03' into release
2026-04-30 11:36:39 +01:00
Dan Brown
cf648906e9
SSR: Hardened URL validator against a range of workarounds
...
Added a more comprehensive range of tests to cover.
Thanks to naruhodoowl (https://github.com/kilhsrito-crypto ) for
reporting.
2026-04-30 10:18:50 +01:00
Dan Brown
fddeb9030b
Attachments: Added page access check to attachment delete
...
Thanks to github.com/404-pkj for reporting.
2026-04-29 18:31:11 +01:00
Dan Brown
99a704698d
Deps: Updated PHP package versions
2026-04-29 18:12:24 +01:00
Dan Brown
fc220dea39
Search: Fixed exact saerch term negation causing no results
...
Closes #6121
2026-04-29 18:07:32 +01:00
Dan Brown
82ef7356f3
Updated version and assets for release v26.03.3
2026-04-05 22:44:28 +01:00
Dan Brown
cb6c5d71a0
Merge branch 'development' into release
2026-04-05 22:43:38 +01:00
Dan Brown
e033578fea
Updated translator & dependency attribution before release v26.03.3
2026-04-05 22:43:15 +01:00
Dan Brown
a7dd998ac9
Updated translations with latest Crowdin changes ( #6067 )
2026-04-05 22:29:00 +01:00
Dan Brown
b9d650785a
Deps: Updated PHP package versions
2026-04-05 22:28:27 +01:00
Dan Brown
508cf0ade6
Updated version and assets for release v26.03.2
2026-03-23 11:55:00 +00:00
Dan Brown
851aba228a
Merge branch 'development' into release
2026-03-23 11:53:29 +00:00
Dan Brown
25790fd024
Merge branch 'sec_26_03_2' into development
2026-03-23 11:24:07 +00:00
Dan Brown
1763ac550b
Meta: Updated translators pre v26.03.2 release
2026-03-23 10:08:38 +00:00
Dan Brown
fd6867e577
Updated translations with latest Crowdin changes ( #6064 )
2026-03-23 10:05:51 +00:00
Dan Brown
5ebc1fe3b0
Deps: Updated PHP package versions pre v26.03.2 release
2026-03-22 17:22:13 +00:00
Dan Brown
a44756168d
WYSIWYG: Aligned double click to set label for details functionality
...
Aligned the behaviour across the WYSIWYG editors, and also for nested
details blocks (which wasn't working in the TinyMCE implementation).
Closes #6059
2026-03-22 17:20:36 +00:00
Dan Brown
fa1dc162bd
Update PHP_CodeSniffer repository link ( #6060 )
2026-03-21 17:13:43 +00:00
Dan Brown
5763d26b17
Updated registration to use validated input instead of all
2026-03-19 21:29:30 +00:00
Rodrigo Primo
04dd9f8e19
Update PHP_CodeSniffer repository link
2026-03-17 17:21:01 -03:00
Dan Brown
7111e080c1
Updated version and assets for release v26.03.1
2026-03-17 11:00:48 +00:00
Dan Brown
ee4786f83a
Merge branch 'development' into release
2026-03-17 10:59:56 +00:00
Dan Brown
0120b475eb
Deps: Updated PHP deps pre v26.03.1
2026-03-17 10:59:11 +00:00
Dan Brown
8a59895ba0
Merge branch 'sec_chapter_export' into development
2026-03-17 10:41:51 +00:00
Dan Brown
a9ffd3e0c7
Responses: Added extra sanitization for download names
...
From testing, don't think this could exploited directly, as the response
would error instead of allowing control characters, but this adds an
extra layer of sanitization, and switches to encoded disposition
filenames for better UTF8 support.
2026-03-16 18:28:44 +00:00
Dan Brown
33d2eee4b2
Updated version and assets for release v26.03
2026-03-15 13:19:47 +00:00
Dan Brown
89caab1108
Merge branch 'development' into release
2026-03-15 13:18:38 +00:00
Dan Brown
4f18fea086
Deps: Updated PHP deps pre v26.03 release
2026-03-15 13:17:48 +00:00
Dan Brown
362859ac23
Updated translator & dependency attribution before release v26.03
2026-03-15 13:14:54 +00:00
Dan Brown
7cbfd72920
Merge pull request #6007 from BookStackApp/l10n_development
...
Updated translations with latest Crowdin changes
2026-03-15 12:58:05 +00:00
Dan Brown
49df47836e
Merge pull request #6057 from BookStackApp/v25-12
...
V25.12 changes v3
2026-03-15 12:51:02 +00:00
Dan Brown
f4c9d2b049
Exports: Fixed scope of pages in chapter MD export
...
Added tests to cover children of all MD exports
2026-03-13 13:35:28 +00:00
Dan Brown
60a3b0c0ac
API examples: Updated books-read to include shelf info
2026-03-12 17:04:36 +00:00
Dan Brown
446b4a7d3d
Updated version and assets for release v25.12.9
2026-03-12 11:01:04 +00:00
Dan Brown
d335b49be0
Merge branch 'v25-12' into release
2026-03-12 10:59:00 +00:00
Dan Brown
5f5fea7c83
Deps: Bumped PHP packages before release
2026-03-12 10:52:12 +00:00
Dan Brown
6e7cc169d1
Preferences: Updated return redirect with better origin checks
...
As suggested by Alex Dan in their security report.
2026-03-10 18:31:51 +00:00
Dan Brown
6216c89f82
Packages: Updated PHP package versions
2026-03-10 17:48:12 +00:00
Dan Brown
404e67afbc
Page Revisions: Added testing coverage to basic diffing
2026-03-10 17:47:07 +00:00
Dan Brown
6d64262a61
Revision Diffs: Added filtering post-diff render
2026-03-10 15:03:43 +00:00
Dan Brown
151823b84e
Theme Modules: Added easier way to insert HTML head content
2026-03-08 10:26:00 +00:00
Dan Brown
27240be499
Theme System: Added new page-content focused events
...
Closes #6049
2026-03-06 12:40:22 +00:00
Dan Brown
d0d1bb9829
Merge pull request #6035 from BookStackApp/v25-12
...
Merge further v25-12 changes into development
2026-03-06 10:26:41 +00:00
Dan Brown
7d0237c798
NPM Deps: Updated package versions
...
Fixed SCSS if deprecations
Fixed new eslint detected issues
2026-03-06 10:25:27 +00:00
Dan Brown
f2f76a3c56
Modules: Improved install command based on testing
...
- Updated output to be clearer
- Added warning and confirmation to local install flow
- Adjusted module folder name creation
2026-03-06 09:28:46 +00:00
Dan Brown
ec3dd856db
Mail: Set domain for EHLO based upon the APP_URL
...
For #5990
2026-02-28 18:46:05 +00:00
Dan Brown
d9b9303a42
Updated version and assets for release v25.12.8
2026-02-27 10:29:04 +00:00
Dan Brown
50a7183b32
Merge branch 'v25-12' into release
2026-02-27 10:28:13 +00:00
Dan Brown
25ed242f61
Deps: Updated PHP package versions
2026-02-27 10:09:41 +00:00
Dan Brown