Cathy J. Fitzpatrick
61d08e1df2
Add support for challstr alias of challenge-string
2013-02-12 05:01:36 -07:00
Cathy J. Fitzpatrick
5934de9a35
Fix for registration link issue
2013-02-12 04:57:06 -07:00
Cathy J. Fitzpatrick
4f96f0923b
Fix bug occasionally causing userlist not to load
2013-02-12 03:52:59 -07:00
Cathy J. Fitzpatrick
37dc0b423f
Temporary measure so /kick continues to work on old servers
2013-02-12 03:04:48 -07:00
Cathy J. Fitzpatrick
b6b2a4bc3b
Add js/html-sanitizer-minified.js
2013-02-12 02:58:58 -07:00
Cathy J. Fitzpatrick
274e9c96de
Prevent servers from injecting JavaScript into client
...
This commit makes various changes to prevent servers from injecting
arbitrary JavaScript into the client. This prevents a variety of
possible exploits. The main changes in the client are as follows:
- Raw HTML from the server is now sanitised using caja to prevent
excution of JavaScript. See
https://code.google.com/p/google-caja/wiki/JsHtmlSanitizer
for details.
- The client now has a variety of CSS classes for possible chat
command messages that can be sent from the server, rather than the
server injecting arbitrary CSS `style` attributes into the client.
2013-02-12 02:57:17 -07:00
Marty-D
472443fe6d
Add messages for Suction Cups and Ingrain.
2013-02-11 17:23:27 -05:00
Marty-D
cf55e22b53
Add default switch in/out messages.
2013-02-11 12:23:25 -05:00
Cathy J. Fitzpatrick
a022bd6ead
Fix runtime error in login action when name or pass is empty
2013-02-11 02:35:00 -07:00
Cathy J. Fitzpatrick
836f98a153
Only send /avatar when joining lobby if user is named
...
This avoids showing the avatar message twice on servers that have not
pulled Zarel/Pokemon-Showdown@b467b2452f yet.
2013-02-10 22:35:44 -07:00
Cathy J. Fitzpatrick
ebeeb9a081
Save preferred avatar in prefs
2013-02-10 21:37:24 -07:00
Cathy J. Fitzpatrick
4fed69c330
Add error message for invalid username
2013-02-10 20:14:30 -07:00
Cathy J. Fitzpatrick
2ff3957c3b
Don't sign assertions for invalid usernames
2013-02-10 20:08:31 -07:00
Cathy J. Fitzpatrick
a6b7ad5977
Set maximum username length to 18 for consistency
...
The Pokemon Showdown server already enforced a maximum username length
of 18 characters, but the login server allowed registering names up to
63 characters long.
2013-02-10 19:18:21 -07:00
Cathy J. Fitzpatrick
5c1ec0b695
Allow two username registrations every two hours
2013-02-10 18:18:21 -07:00
Cathy J. Fitzpatrick
2ae1040c9f
Revise formatting of action.php
2013-02-10 17:27:47 -07:00
Cathy J. Fitzpatrick
849786d782
Allow only one username registration per day
2013-02-10 17:19:51 -07:00
Cathy J. Fitzpatrick
f2b90b3b4e
Fix ladder tab when connected via alternative port
...
This allows the ladder tab to work when connected to the main server
via port 80 rather than port 8000.
2013-02-09 21:54:05 -07:00
Cathy J. Fitzpatrick
9172a6b37d
Fix typo in previous commit
2013-02-09 21:51:49 -07:00
Cathy J. Fitzpatrick
af33ac2748
Changes to chat history feature
...
- all client side text commands are now included in the history
- `chatHistory.sentences` is now named `chatHistory.lines`
2013-02-09 21:50:25 -07:00
The Immortal
cbd68d59c7
Give Limi a custom color n_n
2013-02-09 19:17:09 +04:00
Cathy J. Fitzpatrick
23f9865992
Refactor serverid/servertoken
2013-02-09 04:50:49 -07:00
Cathy J. Fitzpatrick
78356e64c3
Specify character encoding for getassertion output
2013-02-09 02:40:42 -07:00
Cathy J. Fitzpatrick
01435a97e5
Fix /rating (etc.) when connected to server via alternative port
2013-02-09 02:32:13 -07:00
Cathy J. Fitzpatrick
75262eb607
Remove unusual use of group
2013-02-08 19:25:57 -07:00
Cathy J. Fitzpatrick
d3c4bc26fe
Remove two more unused actions
2013-02-08 19:24:13 -07:00
Cathy J. Fitzpatrick
3d810fa926
Remove more obsolete code from action.php
2013-02-08 18:37:40 -07:00
Cathy J. Fitzpatrick
500999151d
Remove obsolete upkeep action from action.php
2013-02-08 18:15:21 -07:00
Cathy J. Fitzpatrick
6a2f29eb7f
Include only necessary information in Config.upkeep
2013-02-08 18:06:39 -07:00
Cathy J. Fitzpatrick
86a81f9614
Display friendly error message when trying to register 'guest*'
2013-02-08 17:02:31 -07:00
Marty-D
10eb8911e9
Add more move messages.
2013-02-08 17:00:53 -05:00
Cathy J. Fitzpatrick
909ba32c7c
Add check for name === '' in renameMe
2013-02-08 07:16:31 -07:00
Cathy J. Fitzpatrick
4fee96910b
Detect user error in testclientgetassertion
2013-02-08 05:43:45 -07:00
Cathy J. Fitzpatrick
58600066de
Revise list of what works in the testclient
2013-02-08 05:32:21 -07:00
Cathy J. Fitzpatrick
92e8aabf72
Another testclient improvement
2013-02-08 05:26:03 -07:00
Cathy J. Fitzpatrick
4076152c85
Add support for omitting userid for getassertion
2013-02-08 05:15:49 -07:00
Cathy J. Fitzpatrick
135b4b8bd1
Fix to testclient for Chrome
2013-02-08 04:37:34 -07:00
Cathy J. Fitzpatrick
1d5e58d9b7
Add mention of 'Bogus request' message to testclient overlay
2013-02-08 04:30:12 -07:00
Cathy J. Fitzpatrick
d14bfd7aa2
Revise README.md for new testclient.html
2013-02-08 04:20:16 -07:00
Cathy J. Fitzpatrick
c6b26c5719
Revise testclient.html to be more user-friendly
2013-02-08 04:18:12 -07:00
Cathy J. Fitzpatrick
d2783cf610
No need to sanitise $challenge in getassertion
...
I now sanitise the challenge in getAssertion() instead.
2013-02-08 03:44:00 -07:00
Cathy J. Fitzpatrick
319b00539f
More revisions to index.php for challenge-response authentication
2013-02-08 01:55:31 -07:00
Cathy J. Fitzpatrick
1eeb0acd71
Changes to index.php for challenge-response authentication
2013-02-08 01:22:18 -07:00
Cathy J. Fitzpatrick
01522f0a15
Fix bug in testing for presence of challengekeyid
2013-02-08 01:07:52 -07:00
Cathy J. Fitzpatrick
dff5b85e88
Changes to sim.js for challenge-response authentication
2013-02-08 00:10:28 -07:00
Cathy J. Fitzpatrick
f0fde921ec
Changes to action.php for challenge-response authentication
2013-02-07 23:22:13 -07:00
Guangcong Luo
1a0ae1f17f
pokedex.php moved - useful test page for utilichart.js
2013-02-07 16:35:33 -08:00
Guangcong Luo
41a6b2d96b
Pokemon with formes work correctly in teambuilder now
2013-02-07 16:33:57 -08:00
Cathy J. Fitzpatrick
f7adbee232
More changes to cached index.php logging
...
- record lag time in the log
- use an <img> tag rather than an AJAX request to reduce false
positives caused by slow internet
2013-02-07 13:54:24 -07:00
Marty-D
6c9c6ef9f7
Fix Skull Bash's message.
2013-02-07 13:15:48 -05:00