Commit Graph

3991 Commits

Author SHA1 Message Date
Nathan van der Werf 7232e7a29d Escape output to prevent XSS injection (#4074)
Credit to @nathan-van-der-werf
2019-01-18 10:26:56 -06:00
vosco88 a4f4a71fc3 Fix reset search button issues (#4068)
Fixes #4067
2019-01-17 13:33:59 -06:00
Luke Towers 3ff77120c6 Improved disabled support for balloon-selector and fileupload fields 2019-01-16 13:32:31 -06:00
Luke Towers f53caf9a75 Formatting improvement 2019-01-16 12:29:28 -06:00
Luke Towers cc84c7cf7a Revert back to output() and outputThumb() methods
Adds a default false flag to enable the new behaviour of returning responses instead.
2019-01-16 12:27:07 -06:00
Luke Towers 743c74643a Switched to getHttpResonse() instead of output() 2019-01-15 15:58:45 -06:00
Luke Towers 44db59cba1 Ensure thumb is generated for protected files before getting URL to the Files controller 2019-01-15 15:11:29 -06:00
Luke Towers 2fb44fdbee Return backend 404 from files controller 2019-01-15 15:05:57 -06:00
Luke Towers 4f7c5cc1e7 Get the URL of protected assets through the Backend Files controller if available. 2019-01-15 14:25:26 -06:00
Luke Towers 2758c6711b Added Go to previous page link on the access denied page 2019-01-15 13:53:06 -06:00
Anže Časar 74484b1ec2 Fix default value translation (#4062)
Credit to @acasar
2019-01-15 13:38:22 -06:00
Luke Towers 2d6b9c76a9 Recompile assets 2019-01-15 13:35:12 -06:00
Luke Towers d6e680799f Reduce reliance on CMS module from Backend module
added backend 404 view, fixed return to backend URL in the access denied view on backend only instances
2019-01-15 11:46:48 -06:00
Luke Towers a9a0544ab0 recompiled stylesheets, retaining newlines for improved diff readability 2019-01-14 11:52:16 -06:00
Luke Towers 119d2e5f2b Improved UI Popup docs 2019-01-11 14:27:14 -06:00
Luke Towers d258b73ba1 Merge branch 'develop' of https://github.com/octobercms/october into develop 2019-01-10 20:49:27 -06:00
Luke Towers 6c0a77c064 Fix broken tests 2019-01-10 20:49:15 -06:00
Aleksey Bobkov 3b41f82521 Merge branch 'gateway-api-update' into develop 2019-01-10 17:52:10 -08:00
Luke Towers 1c0fd1b419 Yet another change to perfect the getParentForm() method 2019-01-10 18:59:29 -06:00
Luke Towers 39987677f0 Peer review of 1b3263d4c7 2019-01-10 17:57:32 -06:00
Luke Towers 5853cc54c4 Ensure that FormWidgets are correctly initialized with previewMode even on AJAX requests 2019-01-10 17:39:41 -06:00
Luke Towers 1b3263d4c7 Pass the containing Form widget to the FormFields that it generates.
This enables complex FormWidgets that need to know what Form widget they belong to to access that information with $this->formField->form; This also enables a fix for: https://github.com/rainlab/location-plugin/issues/48
2019-01-10 10:22:59 -06:00
Aleksey Bobkov d701e65652 Minor improvement in the update gateway API calls. 2019-01-09 17:24:25 -08:00
Aleksey Bobkov 4fa237eadf Added update gateway client name. 2019-01-05 15:39:46 -08:00
Aleksey Bobkov bff2f1d59e Minor improvement in the update gateway API calls. 2019-01-05 15:18:04 -08:00
Luke Towers 064daa2d2e Compiled assets, minor docblock update 2019-01-03 16:26:30 -06:00
fansaien 2dcd84c4f2 Fix the input trigger API where a form element doesn't exist (#4033)
There are no `form` elements in the preview context of a form, so this adds an alternative selector to use when no common `form` elements are found for the Input Trigger API to use. Credit to @fansaien
2019-01-03 16:24:43 -06:00
fansaien d6b1b6e95d Fixed the Delete and Enter not being captured in keydown.oc.richeditor (#4015)
Credit to @fansaien.

The keydown event can not capture the Backspace(Delete) and Enter key event. 

Moved the binding keydown function into froalaEditor.initialized event to solve this issue. Please review this Froala Editor issue: https://github.com/froala/wysiwyg-editor/issues/1879

The editor.events doesn't support off function. So, can not call off function in the unregisterHandlers()
2019-01-03 14:07:29 -06:00
fansaien 5db5522d4d Fix the filter options being escaped twice (#4032)
Credit to @fansaien.

Reference: https://github.com/octobercms/october/pull/3793.  This commit added the e() function for translation results. 

Because the filter is using the mustache template, and the manual said: All variables are HTML escaped by default. If you want to return unescaped HTML, use the triple mustache: {{{name}}} (https://mustache.github.io/mustache.5.html)

That means the string will be escaped twice. So, I removed the e().
2019-01-03 14:04:26 -06:00
Ben Thomson ee003c416c Redirect user to last available page in list widget if current page is unavailable (#4020)
Credit to @bennothommo. Fixes #4008.
2018-12-30 12:49:42 -06:00
Ben Thomson 63dfb7fad3 Replace deprecated prepareModel call in ImportExport behavior 2018-12-30 16:35:17 +08:00
Ben Thomson b6bd643e21 Rename prepareModel to prepareQuery, deprecate prepareModel 2018-12-30 16:25:01 +08:00
Luke Towers 26173486d3 Fix issue where the clear search button would submit a form if the search widget is within an HTML form 2018-12-28 11:51:51 -06:00
Luke Towers 400ce2391e Fix support for the placeholder property in RichEditor FormWidgets 2018-12-27 15:28:10 -06:00
Gonzalo Henríquez 9f304d2ef8 Improvements to Spanish translation (#4004)
Credit to @bombozama
2018-12-23 11:06:31 -06:00
Luke Towers a2708ee0f5 Added backend.manage_default_dashboard permission to lock down who has access to change the default dashboard for the system. Fixes #2176 2018-12-20 17:26:49 -06:00
Luke Towers 301b09070d Compiled assets 2018-12-20 17:09:42 -06:00
fansaien 6a6ab8fc88 added the event to the callback (#4001)
Credit to @fansaien
2018-12-20 16:30:04 -06:00
Luke Towers ed226e0b09 Recompiled hotkey JS 2018-12-20 13:41:32 -06:00
Luke Towers 44ac62abeb Recompiled LESS using new CSS minification 2018-12-20 13:41:09 -06:00
fansaien 27c604abb2 Added option as alias for alt (#4000)
Credit to @fansaien
2018-12-20 13:35:00 -06:00
munxar e6f4e13446 Added NestedForm FormWidget (#3977)
Credit to @munxar
2018-12-19 21:54:20 -06:00
Woo eb1d3fadbc Add format property to list columns (#3990)
Credit to @vicrly. Fixes #3967.
2018-12-19 20:52:07 -06:00
Felipe Alves Reis 23817c363c Added invalid login translated message in backend lang file (#3994)
Credit to @felipe-alves-reis
2018-12-19 20:26:25 -06:00
fansaien db7610d5c4 Removed the deprecated hotkeyMac (#3995)
Reference: fd264a5fb4 (diff-79eab92a9098980b73745ce9b5ac1895)
2018-12-19 20:21:05 -06:00
Luke Towers 85e614203c Add soft delete column to backend users so that migrations that use the User model work 2018-12-19 19:43:04 -06:00
Jim Cottrell 34da61805b Replace URL parameters dynamically without needing a list in advance (#3361)
Fixes #3358. Credit to @jimcottrell
2018-12-18 10:03:03 -06:00
Luke Towers 54a67ca556 Implemented soft deleting for backend users 2018-12-17 23:09:17 -06:00
Ben Thomson 14c4d1392e Datatable dropdown usability tweaks (#3980)
Adds a couple of usability tweaks to the dropdown cell type in the data table widget, to more closely mimic a native dropdown field.

Pressing the up or down arrow keys when the cell is focused but with the dropdown closed will select the previous or next item automatically and set it as the cell value. This does prevent the usual table function of going to the previous or next row when focused on a dropdown cell, but I think it's a worthwhile trade-off. When the dropdown is open, the up and down arrows work the same as previously implemented.

Typing out characters will initiate a search and select the first matching option automatically and set it as the cell value. For example, for the following options:

Apples
Oranges
Bananas
Typing out o and r on the keyboard will automatically select the Oranges option.

Credit to @bennothommo
2018-12-16 09:30:23 -06:00
vosco88 a11868169e Add reset search (X) to toolbar search input (#3975)
Credit to @vosco88
2018-12-14 09:04:01 -06:00