Commit Graph

162 Commits

Author SHA1 Message Date
Cathy J. Fitzpatrick
61d08e1df2 Add support for challstr alias of challenge-string 2013-02-12 05:01:36 -07:00
Cathy J. Fitzpatrick
5934de9a35 Fix for registration link issue 2013-02-12 04:57:06 -07:00
Cathy J. Fitzpatrick
4f96f0923b Fix bug occasionally causing userlist not to load 2013-02-12 03:52:59 -07:00
Cathy J. Fitzpatrick
37dc0b423f Temporary measure so /kick continues to work on old servers 2013-02-12 03:04:48 -07:00
Cathy J. Fitzpatrick
b6b2a4bc3b Add js/html-sanitizer-minified.js 2013-02-12 02:58:58 -07:00
Cathy J. Fitzpatrick
274e9c96de Prevent servers from injecting JavaScript into client
This commit makes various changes to prevent servers from injecting
arbitrary JavaScript into the client. This prevents a variety of
possible exploits. The main changes in the client are as follows:

- Raw HTML from the server is now sanitised using caja to prevent
  excution of JavaScript. See
    https://code.google.com/p/google-caja/wiki/JsHtmlSanitizer
  for details.

- The client now has a variety of CSS classes for possible chat
  command messages that can be sent from the server, rather than the
  server injecting arbitrary CSS `style` attributes into the client.
2013-02-12 02:57:17 -07:00
Marty-D
472443fe6d Add messages for Suction Cups and Ingrain. 2013-02-11 17:23:27 -05:00
Marty-D
cf55e22b53 Add default switch in/out messages. 2013-02-11 12:23:25 -05:00
Cathy J. Fitzpatrick
a022bd6ead Fix runtime error in login action when name or pass is empty 2013-02-11 02:35:00 -07:00
Cathy J. Fitzpatrick
836f98a153 Only send /avatar when joining lobby if user is named
This avoids showing the avatar message twice on servers that have not
pulled Zarel/Pokemon-Showdown@b467b2452f yet.
2013-02-10 22:35:44 -07:00
Cathy J. Fitzpatrick
ebeeb9a081 Save preferred avatar in prefs 2013-02-10 21:37:24 -07:00
Cathy J. Fitzpatrick
4fed69c330 Add error message for invalid username 2013-02-10 20:14:30 -07:00
Cathy J. Fitzpatrick
2ff3957c3b Don't sign assertions for invalid usernames 2013-02-10 20:08:31 -07:00
Cathy J. Fitzpatrick
a6b7ad5977 Set maximum username length to 18 for consistency
The Pokemon Showdown server already enforced a maximum username length
of 18 characters, but the login server allowed registering names up to
63 characters long.
2013-02-10 19:18:21 -07:00
Cathy J. Fitzpatrick
5c1ec0b695 Allow two username registrations every two hours 2013-02-10 18:18:21 -07:00
Cathy J. Fitzpatrick
2ae1040c9f Revise formatting of action.php 2013-02-10 17:27:47 -07:00
Cathy J. Fitzpatrick
849786d782 Allow only one username registration per day 2013-02-10 17:19:51 -07:00
Cathy J. Fitzpatrick
f2b90b3b4e Fix ladder tab when connected via alternative port
This allows the ladder tab to work when connected to the main server
via port 80 rather than port 8000.
2013-02-09 21:54:05 -07:00
Cathy J. Fitzpatrick
9172a6b37d Fix typo in previous commit 2013-02-09 21:51:49 -07:00
Cathy J. Fitzpatrick
af33ac2748 Changes to chat history feature
- all client side text commands are now included in the history
- `chatHistory.sentences` is now named `chatHistory.lines`
2013-02-09 21:50:25 -07:00
The Immortal
cbd68d59c7 Give Limi a custom color n_n 2013-02-09 19:17:09 +04:00
Cathy J. Fitzpatrick
23f9865992 Refactor serverid/servertoken 2013-02-09 04:50:49 -07:00
Cathy J. Fitzpatrick
78356e64c3 Specify character encoding for getassertion output 2013-02-09 02:40:42 -07:00
Cathy J. Fitzpatrick
01435a97e5 Fix /rating (etc.) when connected to server via alternative port 2013-02-09 02:32:13 -07:00
Cathy J. Fitzpatrick
75262eb607 Remove unusual use of group 2013-02-08 19:25:57 -07:00
Cathy J. Fitzpatrick
d3c4bc26fe Remove two more unused actions 2013-02-08 19:24:13 -07:00
Cathy J. Fitzpatrick
3d810fa926 Remove more obsolete code from action.php 2013-02-08 18:37:40 -07:00
Cathy J. Fitzpatrick
500999151d Remove obsolete upkeep action from action.php 2013-02-08 18:15:21 -07:00
Cathy J. Fitzpatrick
6a2f29eb7f Include only necessary information in Config.upkeep 2013-02-08 18:06:39 -07:00
Cathy J. Fitzpatrick
86a81f9614 Display friendly error message when trying to register 'guest*' 2013-02-08 17:02:31 -07:00
Marty-D
10eb8911e9 Add more move messages. 2013-02-08 17:00:53 -05:00
Cathy J. Fitzpatrick
909ba32c7c Add check for name === '' in renameMe 2013-02-08 07:16:31 -07:00
Cathy J. Fitzpatrick
4fee96910b Detect user error in testclientgetassertion 2013-02-08 05:43:45 -07:00
Cathy J. Fitzpatrick
58600066de Revise list of what works in the testclient 2013-02-08 05:32:21 -07:00
Cathy J. Fitzpatrick
92e8aabf72 Another testclient improvement 2013-02-08 05:26:03 -07:00
Cathy J. Fitzpatrick
4076152c85 Add support for omitting userid for getassertion 2013-02-08 05:15:49 -07:00
Cathy J. Fitzpatrick
135b4b8bd1 Fix to testclient for Chrome 2013-02-08 04:37:34 -07:00
Cathy J. Fitzpatrick
1d5e58d9b7 Add mention of 'Bogus request' message to testclient overlay 2013-02-08 04:30:12 -07:00
Cathy J. Fitzpatrick
d14bfd7aa2 Revise README.md for new testclient.html 2013-02-08 04:20:16 -07:00
Cathy J. Fitzpatrick
c6b26c5719 Revise testclient.html to be more user-friendly 2013-02-08 04:18:12 -07:00
Cathy J. Fitzpatrick
d2783cf610 No need to sanitise $challenge in getassertion
I now sanitise the challenge in getAssertion() instead.
2013-02-08 03:44:00 -07:00
Cathy J. Fitzpatrick
319b00539f More revisions to index.php for challenge-response authentication 2013-02-08 01:55:31 -07:00
Cathy J. Fitzpatrick
1eeb0acd71 Changes to index.php for challenge-response authentication 2013-02-08 01:22:18 -07:00
Cathy J. Fitzpatrick
01522f0a15 Fix bug in testing for presence of challengekeyid 2013-02-08 01:07:52 -07:00
Cathy J. Fitzpatrick
dff5b85e88 Changes to sim.js for challenge-response authentication 2013-02-08 00:10:28 -07:00
Cathy J. Fitzpatrick
f0fde921ec Changes to action.php for challenge-response authentication 2013-02-07 23:22:13 -07:00
Guangcong Luo
1a0ae1f17f pokedex.php moved - useful test page for utilichart.js 2013-02-07 16:35:33 -08:00
Guangcong Luo
41a6b2d96b Pokemon with formes work correctly in teambuilder now 2013-02-07 16:33:57 -08:00
Cathy J. Fitzpatrick
f7adbee232 More changes to cached index.php logging
- record lag time in the log
- use an <img> tag rather than an AJAX request to reduce false
  positives caused by slow internet
2013-02-07 13:54:24 -07:00
Marty-D
6c9c6ef9f7 Fix Skull Bash's message. 2013-02-07 13:15:48 -05:00