Cathy J. Fitzpatrick
d0e2902479
Don't clear custom CSS in case of error
2013-02-13 20:29:06 -07:00
Cathy J. Fitzpatrick
263fe976a8
One more customcss.php fix
2013-02-13 14:31:15 -07:00
Cathy J. Fitzpatrick
3555e0831b
Fixes for invalidate option
2013-02-13 14:29:13 -07:00
Cathy J. Fitzpatrick
b703b4fe7e
Correct invalidation check in customcss.php
2013-02-13 14:17:46 -07:00
Cathy J. Fitzpatrick
c0f8bae979
Fix bug in customcss.php
2013-02-13 14:11:52 -07:00
Cathy J. Fitzpatrick
002addda88
Add invalidate option to force customcss.php to make HTTP request
2013-02-13 14:06:37 -07:00
Cathy J. Fitzpatrick
0121e879b2
Add correct Expires header to customcss.php
2013-02-13 13:24:57 -07:00
Cathy J. Fitzpatrick
f749470a74
Use customcss.php in <link> for custom CSS
2013-02-13 13:08:55 -07:00
Cathy J. Fitzpatrick
092c214128
Fix theoretical race condition in customcss.php
2013-02-13 01:18:19 -07:00
Cathy J. Fitzpatrick
6650291f9b
Sanitise custom CSS
2013-02-13 01:12:58 -07:00
Guangcong Luo
a4da67a09f
Spread recommender now understands Counter/Mirror Coat
2013-02-12 23:50:15 -08:00
Guangcong Luo
2faa86f94f
New naming scheme for CSS
2013-02-12 23:35:34 -08:00
Cathy J. Fitzpatrick
6672afe12a
Disable web access to lib/ directory
2013-02-12 23:53:01 -07:00
Guangcong Luo
92f9b95f17
Make sure certain keyboard shortcuts don't apply with modifiers
2013-02-12 19:59:19 -08:00
Guangcong Luo
dc679d9e14
CloudFlare doesn't like 301 redirects (?)
2013-02-12 19:58:45 -08:00
Cathy J. Fitzpatrick
272a076aca
Fix coloured output in /learn
2013-02-12 20:28:36 -07:00
Cathy J. Fitzpatrick
db80ef64c7
Fix for room links in /whois and /rooms
2013-02-12 15:18:43 -07:00
Cathy J. Fitzpatrick
20e0a9b677
Fix another bug in tagPolicy
2013-02-12 13:06:29 -07:00
Cathy J. Fitzpatrick
9ea4e9626f
Fix missing semi-colon (minor coding style issue)
2013-02-12 12:58:47 -07:00
Cathy J. Fitzpatrick
9f49eb973a
Fix for target='_blank' being stripped from links
2013-02-12 12:57:04 -07:00
Cathy J. Fitzpatrick
63d4c2ad46
Fix message-modchat-disable CSS class
2013-02-12 12:17:13 -07:00
Cathy J. Fitzpatrick
f339b5333a
Fix theoretical server JavaScript injection exploit
2013-02-12 05:16:28 -07:00
Cathy J. Fitzpatrick
61d08e1df2
Add support for challstr alias of challenge-string
2013-02-12 05:01:36 -07:00
Cathy J. Fitzpatrick
5934de9a35
Fix for registration link issue
2013-02-12 04:57:06 -07:00
Cathy J. Fitzpatrick
4f96f0923b
Fix bug occasionally causing userlist not to load
2013-02-12 03:52:59 -07:00
Cathy J. Fitzpatrick
37dc0b423f
Temporary measure so /kick continues to work on old servers
2013-02-12 03:04:48 -07:00
Cathy J. Fitzpatrick
b6b2a4bc3b
Add js/html-sanitizer-minified.js
2013-02-12 02:58:58 -07:00
Cathy J. Fitzpatrick
274e9c96de
Prevent servers from injecting JavaScript into client
...
This commit makes various changes to prevent servers from injecting
arbitrary JavaScript into the client. This prevents a variety of
possible exploits. The main changes in the client are as follows:
- Raw HTML from the server is now sanitised using caja to prevent
excution of JavaScript. See
https://code.google.com/p/google-caja/wiki/JsHtmlSanitizer
for details.
- The client now has a variety of CSS classes for possible chat
command messages that can be sent from the server, rather than the
server injecting arbitrary CSS `style` attributes into the client.
2013-02-12 02:57:17 -07:00
Marty-D
472443fe6d
Add messages for Suction Cups and Ingrain.
2013-02-11 17:23:27 -05:00
Marty-D
cf55e22b53
Add default switch in/out messages.
2013-02-11 12:23:25 -05:00
Cathy J. Fitzpatrick
a022bd6ead
Fix runtime error in login action when name or pass is empty
2013-02-11 02:35:00 -07:00
Cathy J. Fitzpatrick
836f98a153
Only send /avatar when joining lobby if user is named
...
This avoids showing the avatar message twice on servers that have not
pulled Zarel/Pokemon-Showdown@b467b2452f yet.
2013-02-10 22:35:44 -07:00
Cathy J. Fitzpatrick
ebeeb9a081
Save preferred avatar in prefs
2013-02-10 21:37:24 -07:00
Cathy J. Fitzpatrick
4fed69c330
Add error message for invalid username
2013-02-10 20:14:30 -07:00
Cathy J. Fitzpatrick
2ff3957c3b
Don't sign assertions for invalid usernames
2013-02-10 20:08:31 -07:00
Cathy J. Fitzpatrick
a6b7ad5977
Set maximum username length to 18 for consistency
...
The Pokemon Showdown server already enforced a maximum username length
of 18 characters, but the login server allowed registering names up to
63 characters long.
2013-02-10 19:18:21 -07:00
Cathy J. Fitzpatrick
5c1ec0b695
Allow two username registrations every two hours
2013-02-10 18:18:21 -07:00
Cathy J. Fitzpatrick
2ae1040c9f
Revise formatting of action.php
2013-02-10 17:27:47 -07:00
Cathy J. Fitzpatrick
849786d782
Allow only one username registration per day
2013-02-10 17:19:51 -07:00
Cathy J. Fitzpatrick
f2b90b3b4e
Fix ladder tab when connected via alternative port
...
This allows the ladder tab to work when connected to the main server
via port 80 rather than port 8000.
2013-02-09 21:54:05 -07:00
Cathy J. Fitzpatrick
9172a6b37d
Fix typo in previous commit
2013-02-09 21:51:49 -07:00
Cathy J. Fitzpatrick
af33ac2748
Changes to chat history feature
...
- all client side text commands are now included in the history
- `chatHistory.sentences` is now named `chatHistory.lines`
2013-02-09 21:50:25 -07:00
The Immortal
cbd68d59c7
Give Limi a custom color n_n
2013-02-09 19:17:09 +04:00
Cathy J. Fitzpatrick
23f9865992
Refactor serverid/servertoken
2013-02-09 04:50:49 -07:00
Cathy J. Fitzpatrick
78356e64c3
Specify character encoding for getassertion output
2013-02-09 02:40:42 -07:00
Cathy J. Fitzpatrick
01435a97e5
Fix /rating (etc.) when connected to server via alternative port
2013-02-09 02:32:13 -07:00
Cathy J. Fitzpatrick
75262eb607
Remove unusual use of group
2013-02-08 19:25:57 -07:00
Cathy J. Fitzpatrick
d3c4bc26fe
Remove two more unused actions
2013-02-08 19:24:13 -07:00
Cathy J. Fitzpatrick
3d810fa926
Remove more obsolete code from action.php
2013-02-08 18:37:40 -07:00
Cathy J. Fitzpatrick
500999151d
Remove obsolete upkeep action from action.php
2013-02-08 18:15:21 -07:00
