20 Commits

Author SHA1 Message Date
Mark Nielsen
6670d28fbc MDL-56978 core: fix error handling in min_fix_utf8
Must completely suppress notice from iconv as Behat's
shutdown function uses error_get_last() which is
unable to detect if the error was suppressed or not.
2016-11-16 08:59:15 -08:00
Damyon Wiese
0bb431e3ac MDL-49167 YUI: Fix for theme/yui_combo.php and $CFG->yuislashargs
It was too aggressively cleaning it's params (broken in MDL-48980).
2015-02-16 11:26:31 +08:00
Damyon Wiese
af9a7937cc MDL-48980 Security: Always clean the result from min_get_slash_argument
The result from this function is used in send_file calls and if unclean
(windows dir separators, or .. path components) it could expose sensitive
files (e.g. .php files). Now we always clean the result from this function
even if it means double cleaning.

I also fixed the unit test for this function and added a new test for this cleaning.

I also updated the comments to point to get_file_argument as the full version of
min_get_slash_argument.
2015-01-28 14:38:29 +08:00
Petr Škoda
b19d75a264 MDL-43402 let's try to remove @ silencing from gzip related code
If anything goes wrong on multiple production sites we can just
revert this commit, that is why it is separete from the rest
of zlib stuff.
2013-12-27 11:06:18 +08:00
Petr Škoda
bff1d60c05 MDL-40676 ignore null bytes 2013-09-02 12:25:02 +08:00
Petr Skoda
3681e78429 MDL-33007 add buggy iconv workaround to configonlylib, add tests and fix minor issues 2012-06-01 12:23:09 +02:00
Petr Skoda
18ac11b730 MDL-32849 add support for url rewriting in min_get_slash_argument() and combo loader
This helps especially IIS servers using ^([^\?]+?\.php)(\/.+)$ rewrite rule.
2012-05-08 20:11:44 +02:00
Petr Skoda
9d473266a7 MDL-32683 use slashargument urls for theme images 2012-05-05 15:23:59 +02:00
Petr Skoda
99302c5e96 MDL-26028 cleanup all IE6 gzip hacks 2012-04-28 18:00:06 +02:00
Petr Skoda
78fcdb5fdb MDL-28345 make sure input parameters do not contain invalid utf-8 chars 2011-07-15 15:00:49 +02:00
Petr Skoda
78bfb562a0 MDL-21249 improved php docs and adding direct access prevention in core libs 2010-07-25 13:35:05 +00:00
Petr Skoda
e26eafd49e fixed comment typos 2010-05-22 18:59:12 +00:00
Petr Skoda
885ea6df1b fixed sloppy IE regression, sorrrryyyyy 2010-02-09 13:39:37 +00:00
Petr Skoda
90611847c8 MDLSITE-854 setting bigger output buffer size to match size of our CSS and JS 2010-01-12 11:12:59 +00:00
Sam Hemelryk
ef1973ce0a lib-configonlylib MDLSITE-854 Changed zlib setting from on to 1 to fix content delivery bug 2010-01-12 03:16:38 +00:00
Petr Skoda
7c986f04e3 MDL-21241 theme CSS and JS gzip compression + some more fixes 2010-01-05 20:18:15 +00:00
Petr Skoda
aa42314ded MDL-21189 yui2/3 combo loader implemented - yay! admin settings in the next commit; yui libs stored in more standard locations 2009-12-25 22:37:04 +00:00
Petr Skoda
60f2c8666a MDL-21189 custom yui image loading needed for combo yui loader 2009-12-25 19:51:40 +00:00
Petr Skoda
b5d0cafc6f MDL-20787 final switch to new $OUTPUT->pix_url() - yay! 2009-12-16 21:50:45 +00:00
Petr Skoda
78946b9bdb MDL-20204 first batch of major theme changes, some regressions are still there, expect more changes and improvements soon; see tracker for details and list of subtasks 2009-12-16 18:00:58 +00:00