Commit Graph

2943 Commits

Author SHA1 Message Date
Cathy J. Fitzpatrick
34b309d58d Add serverlist action to action.php
The `serverlist` action returns a list of registered servers. It accepts
cross-domain requests, which is safe since it merely returns publicly
available information.
2013-02-17 21:53:02 -07:00
Cathy J. Fitzpatrick
548cd6bc31 Don't show auth buttons to voice users 2013-02-17 21:20:22 -07:00
Cathy J. Fitzpatrick
7aaeedffd6 Changes to mute/ban/kick buttons
- mute/ban/kick buttons are now only shown if the user can use the
  corresponding command. This determination is based on the permissions
  in use on the main server (and hardcoded as such) because the server
  does not currently send the client any information about permissions.
  In particular, regular users will no longer see the buttons when
  viewing their own profile.

- there is now a blank line between a user's IP address and the auth
  buttons.
2013-02-17 21:12:47 -07:00
Cathy J. Fitzpatrick
3b860f6fd5 Better documentation of /highlight and /timestamps 2013-02-17 20:56:13 -07:00
Guangcong Luo
61a6bc5680 Haunter gets a new color 2013-02-15 17:16:20 -08:00
Marty-D
4a6b10bd96 Fix the switch in message for the player's side.
- Makes sure the species name is recorded in the battle log as it was
previously.
2013-02-15 20:10:00 -05:00
Cathy J. Fitzpatrick
37a6159bec Remove cached index.php logging feature
This feature isn't likely to obtain any further useful information.
2013-02-14 19:03:16 -07:00
Marty-D
3030132561 Add support for both types of 'miss' messages. 2013-02-14 16:04:01 -05:00
Cathy J. Fitzpatrick
e7acbff12d Fix for notification on first turn of battle for player 1
Previously, the `yourMove` (etc.) notifications on the first turn of
a battle for player 1 did not include the opponent's name, because
the opponent's side of the battle was not yet initialised. This
commit fixes the issue by delaying the notification until the
opponent's side has initialised.
2013-02-14 00:22:43 -07:00
Cathy J. Fitzpatrick
d0e2902479 Don't clear custom CSS in case of error 2013-02-13 20:29:06 -07:00
Cathy J. Fitzpatrick
263fe976a8 One more customcss.php fix 2013-02-13 14:31:15 -07:00
Cathy J. Fitzpatrick
3555e0831b Fixes for invalidate option 2013-02-13 14:29:13 -07:00
Cathy J. Fitzpatrick
b703b4fe7e Correct invalidation check in customcss.php 2013-02-13 14:17:46 -07:00
Cathy J. Fitzpatrick
c0f8bae979 Fix bug in customcss.php 2013-02-13 14:11:52 -07:00
Cathy J. Fitzpatrick
002addda88 Add invalidate option to force customcss.php to make HTTP request 2013-02-13 14:06:37 -07:00
Cathy J. Fitzpatrick
0121e879b2 Add correct Expires header to customcss.php 2013-02-13 13:24:57 -07:00
Cathy J. Fitzpatrick
f749470a74 Use customcss.php in <link> for custom CSS 2013-02-13 13:08:55 -07:00
Cathy J. Fitzpatrick
092c214128 Fix theoretical race condition in customcss.php 2013-02-13 01:18:19 -07:00
Cathy J. Fitzpatrick
6650291f9b Sanitise custom CSS 2013-02-13 01:12:58 -07:00
Guangcong Luo
a4da67a09f Spread recommender now understands Counter/Mirror Coat 2013-02-12 23:50:15 -08:00
Guangcong Luo
2faa86f94f New naming scheme for CSS 2013-02-12 23:35:34 -08:00
Cathy J. Fitzpatrick
6672afe12a Disable web access to lib/ directory 2013-02-12 23:53:01 -07:00
Guangcong Luo
92f9b95f17 Make sure certain keyboard shortcuts don't apply with modifiers 2013-02-12 19:59:19 -08:00
Guangcong Luo
dc679d9e14 CloudFlare doesn't like 301 redirects (?) 2013-02-12 19:58:45 -08:00
Cathy J. Fitzpatrick
272a076aca Fix coloured output in /learn 2013-02-12 20:28:36 -07:00
Cathy J. Fitzpatrick
db80ef64c7 Fix for room links in /whois and /rooms 2013-02-12 15:18:43 -07:00
Cathy J. Fitzpatrick
20e0a9b677 Fix another bug in tagPolicy 2013-02-12 13:06:29 -07:00
Cathy J. Fitzpatrick
9ea4e9626f Fix missing semi-colon (minor coding style issue) 2013-02-12 12:58:47 -07:00
Cathy J. Fitzpatrick
9f49eb973a Fix for target='_blank' being stripped from links 2013-02-12 12:57:04 -07:00
Cathy J. Fitzpatrick
63d4c2ad46 Fix message-modchat-disable CSS class 2013-02-12 12:17:13 -07:00
Cathy J. Fitzpatrick
f339b5333a Fix theoretical server JavaScript injection exploit 2013-02-12 05:16:28 -07:00
Cathy J. Fitzpatrick
61d08e1df2 Add support for challstr alias of challenge-string 2013-02-12 05:01:36 -07:00
Cathy J. Fitzpatrick
5934de9a35 Fix for registration link issue 2013-02-12 04:57:06 -07:00
Cathy J. Fitzpatrick
4f96f0923b Fix bug occasionally causing userlist not to load 2013-02-12 03:52:59 -07:00
Cathy J. Fitzpatrick
37dc0b423f Temporary measure so /kick continues to work on old servers 2013-02-12 03:04:48 -07:00
Cathy J. Fitzpatrick
b6b2a4bc3b Add js/html-sanitizer-minified.js 2013-02-12 02:58:58 -07:00
Cathy J. Fitzpatrick
274e9c96de Prevent servers from injecting JavaScript into client
This commit makes various changes to prevent servers from injecting
arbitrary JavaScript into the client. This prevents a variety of
possible exploits. The main changes in the client are as follows:

- Raw HTML from the server is now sanitised using caja to prevent
  excution of JavaScript. See
    https://code.google.com/p/google-caja/wiki/JsHtmlSanitizer
  for details.

- The client now has a variety of CSS classes for possible chat
  command messages that can be sent from the server, rather than the
  server injecting arbitrary CSS `style` attributes into the client.
2013-02-12 02:57:17 -07:00
Marty-D
472443fe6d Add messages for Suction Cups and Ingrain. 2013-02-11 17:23:27 -05:00
Marty-D
cf55e22b53 Add default switch in/out messages. 2013-02-11 12:23:25 -05:00
Cathy J. Fitzpatrick
a022bd6ead Fix runtime error in login action when name or pass is empty 2013-02-11 02:35:00 -07:00
Cathy J. Fitzpatrick
836f98a153 Only send /avatar when joining lobby if user is named
This avoids showing the avatar message twice on servers that have not
pulled Zarel/Pokemon-Showdown@b467b2452f yet.
2013-02-10 22:35:44 -07:00
Cathy J. Fitzpatrick
ebeeb9a081 Save preferred avatar in prefs 2013-02-10 21:37:24 -07:00
Cathy J. Fitzpatrick
4fed69c330 Add error message for invalid username 2013-02-10 20:14:30 -07:00
Cathy J. Fitzpatrick
2ff3957c3b Don't sign assertions for invalid usernames 2013-02-10 20:08:31 -07:00
Cathy J. Fitzpatrick
a6b7ad5977 Set maximum username length to 18 for consistency
The Pokemon Showdown server already enforced a maximum username length
of 18 characters, but the login server allowed registering names up to
63 characters long.
2013-02-10 19:18:21 -07:00
Cathy J. Fitzpatrick
5c1ec0b695 Allow two username registrations every two hours 2013-02-10 18:18:21 -07:00
Cathy J. Fitzpatrick
2ae1040c9f Revise formatting of action.php 2013-02-10 17:27:47 -07:00
Cathy J. Fitzpatrick
849786d782 Allow only one username registration per day 2013-02-10 17:19:51 -07:00
Cathy J. Fitzpatrick
f2b90b3b4e Fix ladder tab when connected via alternative port
This allows the ladder tab to work when connected to the main server
via port 80 rather than port 8000.
2013-02-09 21:54:05 -07:00
Cathy J. Fitzpatrick
9172a6b37d Fix typo in previous commit 2013-02-09 21:51:49 -07:00