tim/xxx
1
0
Fork 0
Code Issues Pull Requests Releases Activity
78 Commits 2 Branches 0 Tags
main
Commit Graph
6 Commits
Author SHA1 Message Date
tim a9daa6a792 Replace TinyMCE 4.2.8 with a small local editor. 
TinyMCE 4.2.8 has known XSS bugs. publish/editor.js has the same toolbar
and writes the same HTML. The textarea still posts the story.
 2026-09-25 22:58:05 +02:00
tim bcba2e1ca3 Remove unused old libraries and archives. 
TinyMCE 3.3.8, HTML Purifier 3.0.0 and the archives. Their example
scripts could be reached from the web.
 2026-09-25 21:55:53 +02:00
tim 00e1829f8b Escape story fields and clean story HTML with HTML Purifier. 
Add HTML Purifier 4.19.1. Stories are purified when they are saved and
when they are shown.
 2026-09-25 21:34:10 +02:00
tim 00829a0c0d Port the code to PHP 8.5. 
Replace the short open tags and the removed functions (mcrypt, mysql_error,
salt-less crypt). Decode the reCAPTCHA reply as JSON, turn off mysqli
exceptions, drop stripslashes(), and default missing input values.
Fix the misplaced continue in prune_images().
 2026-09-25 21:18:58 +02:00
tim 925a8572d0 Fix captchas 2015-11-22 00:22:34 +02:00
tim 7fc40728f5 Initial commit. 2013-05-17 23:38:44 +02:00