Cathy J. Fitzpatrick
34b309d58d
Add serverlist action to action.php
...
The `serverlist` action returns a list of registered servers. It accepts
cross-domain requests, which is safe since it merely returns publicly
available information.
2013-02-17 21:53:02 -07:00
Cathy J. Fitzpatrick
548cd6bc31
Don't show auth buttons to voice users
2013-02-17 21:20:22 -07:00
Cathy J. Fitzpatrick
7aaeedffd6
Changes to mute/ban/kick buttons
...
- mute/ban/kick buttons are now only shown if the user can use the
corresponding command. This determination is based on the permissions
in use on the main server (and hardcoded as such) because the server
does not currently send the client any information about permissions.
In particular, regular users will no longer see the buttons when
viewing their own profile.
- there is now a blank line between a user's IP address and the auth
buttons.
2013-02-17 21:12:47 -07:00
Cathy J. Fitzpatrick
3b860f6fd5
Better documentation of /highlight and /timestamps
2013-02-17 20:56:13 -07:00
Guangcong Luo
61a6bc5680
Haunter gets a new color
2013-02-15 17:16:20 -08:00
Marty-D
4a6b10bd96
Fix the switch in message for the player's side.
...
- Makes sure the species name is recorded in the battle log as it was
previously.
2013-02-15 20:10:00 -05:00
Cathy J. Fitzpatrick
37a6159bec
Remove cached index.php logging feature
...
This feature isn't likely to obtain any further useful information.
2013-02-14 19:03:16 -07:00
Marty-D
3030132561
Add support for both types of 'miss' messages.
2013-02-14 16:04:01 -05:00
Cathy J. Fitzpatrick
e7acbff12d
Fix for notification on first turn of battle for player 1
...
Previously, the `yourMove` (etc.) notifications on the first turn of
a battle for player 1 did not include the opponent's name, because
the opponent's side of the battle was not yet initialised. This
commit fixes the issue by delaying the notification until the
opponent's side has initialised.
2013-02-14 00:22:43 -07:00
Cathy J. Fitzpatrick
d0e2902479
Don't clear custom CSS in case of error
2013-02-13 20:29:06 -07:00
Cathy J. Fitzpatrick
263fe976a8
One more customcss.php fix
2013-02-13 14:31:15 -07:00
Cathy J. Fitzpatrick
3555e0831b
Fixes for invalidate option
2013-02-13 14:29:13 -07:00
Cathy J. Fitzpatrick
b703b4fe7e
Correct invalidation check in customcss.php
2013-02-13 14:17:46 -07:00
Cathy J. Fitzpatrick
c0f8bae979
Fix bug in customcss.php
2013-02-13 14:11:52 -07:00
Cathy J. Fitzpatrick
002addda88
Add invalidate option to force customcss.php to make HTTP request
2013-02-13 14:06:37 -07:00
Cathy J. Fitzpatrick
0121e879b2
Add correct Expires header to customcss.php
2013-02-13 13:24:57 -07:00
Cathy J. Fitzpatrick
f749470a74
Use customcss.php in <link> for custom CSS
2013-02-13 13:08:55 -07:00
Cathy J. Fitzpatrick
092c214128
Fix theoretical race condition in customcss.php
2013-02-13 01:18:19 -07:00
Cathy J. Fitzpatrick
6650291f9b
Sanitise custom CSS
2013-02-13 01:12:58 -07:00
Guangcong Luo
a4da67a09f
Spread recommender now understands Counter/Mirror Coat
2013-02-12 23:50:15 -08:00
Guangcong Luo
2faa86f94f
New naming scheme for CSS
2013-02-12 23:35:34 -08:00
Cathy J. Fitzpatrick
6672afe12a
Disable web access to lib/ directory
2013-02-12 23:53:01 -07:00
Guangcong Luo
92f9b95f17
Make sure certain keyboard shortcuts don't apply with modifiers
2013-02-12 19:59:19 -08:00
Guangcong Luo
dc679d9e14
CloudFlare doesn't like 301 redirects (?)
2013-02-12 19:58:45 -08:00
Cathy J. Fitzpatrick
272a076aca
Fix coloured output in /learn
2013-02-12 20:28:36 -07:00
Cathy J. Fitzpatrick
db80ef64c7
Fix for room links in /whois and /rooms
2013-02-12 15:18:43 -07:00
Cathy J. Fitzpatrick
20e0a9b677
Fix another bug in tagPolicy
2013-02-12 13:06:29 -07:00
Cathy J. Fitzpatrick
9ea4e9626f
Fix missing semi-colon (minor coding style issue)
2013-02-12 12:58:47 -07:00
Cathy J. Fitzpatrick
9f49eb973a
Fix for target='_blank' being stripped from links
2013-02-12 12:57:04 -07:00
Cathy J. Fitzpatrick
63d4c2ad46
Fix message-modchat-disable CSS class
2013-02-12 12:17:13 -07:00
Cathy J. Fitzpatrick
f339b5333a
Fix theoretical server JavaScript injection exploit
2013-02-12 05:16:28 -07:00
Cathy J. Fitzpatrick
61d08e1df2
Add support for challstr alias of challenge-string
2013-02-12 05:01:36 -07:00
Cathy J. Fitzpatrick
5934de9a35
Fix for registration link issue
2013-02-12 04:57:06 -07:00
Cathy J. Fitzpatrick
4f96f0923b
Fix bug occasionally causing userlist not to load
2013-02-12 03:52:59 -07:00
Cathy J. Fitzpatrick
37dc0b423f
Temporary measure so /kick continues to work on old servers
2013-02-12 03:04:48 -07:00
Cathy J. Fitzpatrick
b6b2a4bc3b
Add js/html-sanitizer-minified.js
2013-02-12 02:58:58 -07:00
Cathy J. Fitzpatrick
274e9c96de
Prevent servers from injecting JavaScript into client
...
This commit makes various changes to prevent servers from injecting
arbitrary JavaScript into the client. This prevents a variety of
possible exploits. The main changes in the client are as follows:
- Raw HTML from the server is now sanitised using caja to prevent
excution of JavaScript. See
https://code.google.com/p/google-caja/wiki/JsHtmlSanitizer
for details.
- The client now has a variety of CSS classes for possible chat
command messages that can be sent from the server, rather than the
server injecting arbitrary CSS `style` attributes into the client.
2013-02-12 02:57:17 -07:00
Marty-D
472443fe6d
Add messages for Suction Cups and Ingrain.
2013-02-11 17:23:27 -05:00
Marty-D
cf55e22b53
Add default switch in/out messages.
2013-02-11 12:23:25 -05:00
Cathy J. Fitzpatrick
a022bd6ead
Fix runtime error in login action when name or pass is empty
2013-02-11 02:35:00 -07:00
Cathy J. Fitzpatrick
836f98a153
Only send /avatar when joining lobby if user is named
...
This avoids showing the avatar message twice on servers that have not
pulled Zarel/Pokemon-Showdown@b467b2452f yet.
2013-02-10 22:35:44 -07:00
Cathy J. Fitzpatrick
ebeeb9a081
Save preferred avatar in prefs
2013-02-10 21:37:24 -07:00
Cathy J. Fitzpatrick
4fed69c330
Add error message for invalid username
2013-02-10 20:14:30 -07:00
Cathy J. Fitzpatrick
2ff3957c3b
Don't sign assertions for invalid usernames
2013-02-10 20:08:31 -07:00
Cathy J. Fitzpatrick
a6b7ad5977
Set maximum username length to 18 for consistency
...
The Pokemon Showdown server already enforced a maximum username length
of 18 characters, but the login server allowed registering names up to
63 characters long.
2013-02-10 19:18:21 -07:00
Cathy J. Fitzpatrick
5c1ec0b695
Allow two username registrations every two hours
2013-02-10 18:18:21 -07:00
Cathy J. Fitzpatrick
2ae1040c9f
Revise formatting of action.php
2013-02-10 17:27:47 -07:00
Cathy J. Fitzpatrick
849786d782
Allow only one username registration per day
2013-02-10 17:19:51 -07:00
Cathy J. Fitzpatrick
f2b90b3b4e
Fix ladder tab when connected via alternative port
...
This allows the ladder tab to work when connected to the main server
via port 80 rather than port 8000.
2013-02-09 21:54:05 -07:00
Cathy J. Fitzpatrick
9172a6b37d
Fix typo in previous commit
2013-02-09 21:51:49 -07:00