RichWeber
|
92cd13a913
|
pull origin
|
10 years ago |
Carsten Brandt
|
3a1e0f3a5c
|
property codestyle framework
|
10 years ago |
|
Carsten Brandt
|
1f31f27787
|
phpdoc
|
10 years ago |
|
Carsten Brandt
|
08a480c6e6
|
make Request more robust against invalid CSRF data
fixes #4514
|
10 years ago |
tom--
|
2c5c2c101b
|
Fixes #4131: Security adjustments
|
10 years ago |
Alexander Makarov
|
0edd8bc65a
|
Fixed missing and incorrect phpdoc
|
10 years ago |
|
Alexander Makarov
|
07f01bcf2b
|
Used substr_compare instead of substr when we don't care about result
|
10 years ago |
Qiang Xue
|
4e4e76e883
|
Request::cookieValidationKey must be explicitly specified now.
|
10 years ago |
OmgDef
|
697a85dd26
|
Check for UPLOAD_ERR_NO_FILE in UploadedFile
fixes #4276, close #4358
|
10 years ago |
|
Qiang Xue
|
e5a87af234
|
Fixes #4331: `yii\helpers\Url` now uses `UrlManager` to determine base URL when generating URLs
|
10 years ago |
|
Carsten Brandt
|
4717571e22
|
improved docs about goBack()
fixes #4343
|
10 years ago |
Nikola Kovacs
|
f6c589f043
|
Add absoluteAuthTimeout to yii\web\User.
This is based on the code from Yii 1.1.14 by Ivo Kund.
|
10 years ago |
|
Carsten Brandt
|
8b70a55b14
|
Improved global configuration of assetmanager
Added `beforeCopy`, `afterCopy`, `forceCopy` properties to AssetManager
fixes #4209
|
10 years ago |
|
Alexander Makarov
|
5296da3390
|
Adjusted phpdoc
|
10 years ago |
|
Qiang Xue
|
acaa4f8194
|
Fixes #4204: `yii\web\Request::getUserIP()` will return null if it cannot detect user IP address
|
10 years ago |
|
Alexander Makarov
|
f66e28c4aa
|
Fixes #4199: added missing category to logging calls
|
10 years ago |
|
Qiang Xue
|
9c4d4715dd
|
guide WIP [skip ci]
|
10 years ago |
|
Qiang Xue
|
399b6b18e3
|
Fixes #4103
|
10 years ago |
Klimov Paul
|
2bab6259d1
|
'Security' helper usage switched to 'security' application component.
|
10 years ago |
|
Qiang Xue
|
c6f711ccca
|
Fixes #3765: Added `yii\web\User::enableSession` to support authentication without using session
|
10 years ago |
|
Carsten Brandt
|
109c4b44bc
|
attempt to fix multiple header issue
fixes #3893
|
10 years ago |
|
Carsten Brandt
|
6578cfbdab
|
updated phpdoc and classmap
|
10 years ago |
|
Carsten Brandt
|
a28589203f
|
do not show debug info for UserException
|
10 years ago |
|
Carsten Brandt
|
f12316f2e8
|
file and line information missing from error array representation
|
10 years ago |
|
Qiang Xue
|
7b1cef269d
|
Fixes #3996: Traversing `Yii::$app->session` may cause a PHP error
|
10 years ago |
|
Alexander Makarov
|
0c14f47f9a
|
Fixes #3793: Changed inline autocomplete hints style to get more IDEs support
|
10 years ago |
|
Qiang Xue
|
209dd7e600
|
Fixes #3956: Flash messages set via `Yii::$app->session->setFlash()` will be removed only if they are accessed
|
10 years ago |
|
Alexander Makarov
|
dfa0bc8d06
|
Fixes #3897: Raised visibility of `yii\web\View::registerAssetFiles()` to protected
|
10 years ago |
|
Qiang Xue
|
6b799d392d
|
Fixes #3358: Removed automatic CSRF meta tag generation by `View`. Added `Html::csrfMetaTags()` and its call to main layout files
|
10 years ago |
|
Alexander Makarov
|
4ad1b6c1d5
|
Fixes #3640: All cookies are not httpOnly by default in order to increase overall security
|
10 years ago |
SonicGD
|
b2246d19ce
|
fix align
|
10 years ago |
|
SonicGD
|
bf73fd81c1
|
Set expire to null so CookieCollection::has work
|
10 years ago |
|
Klimov Paul
|
8ac309849d
|
Url encoding for the route param added
|
10 years ago |
Sergey Gonimar
|
9b31870286
|
Fix ErrorHandler
|
10 years ago |
|
Carsten Brandt
|
c8f6baf5ba
|
Update Response.php
typo
|
10 years ago |
|
Carsten Brandt
|
ee2b968b7f
|
fixed argument display in errorHandler
|
10 years ago |
|
Qiang Xue
|
313437f3c0
|
Fixes #3284: Added support for checking multiple ETags by `yii\filters\HttpCache`.
|
10 years ago |
|
Klimov Paul
|
1641e057a9
|
`VarDumper::export()` applied over framework.
|
10 years ago |
|
Carsten Brandt
|
ad6b191081
|
improved docs about flash messages
|
10 years ago |
Alexandr
|
a07b4afea6
|
Update Controller.php
|
11 years ago |
|
Alexandr
|
06e0c50699
|
Update ErrorAction.php
|
11 years ago |
lynicidn
|
3829b3a5ad
|
changed comments #3446
|
11 years ago |
|
Carsten Brandt
|
7511de6cab
|
added errorInfo to exception views
|
11 years ago |
|
Qiang Xue
|
a2aa20f183
|
simplified errorhandler registration.
|
11 years ago |
|
Qiang Xue
|
af7530663d
|
Fixes #3383: Added `$type` parameter to `IdentityInterface::findIdentityByAccessToken()`
|
11 years ago |
|
Alexander Makarov
|
340278b59c
|
Fixes #3183: fixed regression after #3175
|
11 years ago |
|
Qiang Xue
|
4fcd5003de
|
Fixes #2906: Added support for using conditional comments for js and css files registered through asset bundles and Html helper
|
11 years ago |
|
Carsten Brandt
|
4f9e4e2c78
|
ensure assetmanager and baseurl to handle relative urls correctly
|
11 years ago |
|
Carsten Brandt
|
6fe63a217f
|
view did not use the correct assetmanager
|
11 years ago |
Michael Härtl
|
1e3989e5d1
|
Fix call to AssetConverter::convert() in AssetBundle
|
11 years ago |
