summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add missing "new" when raising an InvaludArgumentExceptionnashe2018-01-041-1/+1
|
* Do not assume that Composer autoload is case insensitivenashe2018-01-042-2/+2
|
* Merge pull request #98 from moonmoon/anti-csrfthomas2018-01-0212-9/+203
|\ | | | | Implement a mitigation against CSRF attacks
| * Safely generate random HMAC keys for CSRF tokensnashe2018-01-021-1/+7
| |
| * Add paragonie/random_compat to implement a polyfill for random_bytesnashe2018-01-023-3/+57
| |
| * Add CSRF token checksnashe2017-12-234-1/+11
| |
| * Implement and expose a CSRF mitigationnashe2017-12-232-1/+50
| |
| * Give a session to the usersnashe2017-12-233-3/+13
| |
| * Add hash_equals polyfill and related testsnashe2017-12-182-1/+66
| |
* | Speed up Travis build by caching composer packagesnashe2018-01-021-0/+4
| |
* | Remove unnecessary calls to Spycnashe2018-01-021-4/+2
|/
* Fix link to CONTRIBUTING.md in README.mdThomas Chauchefoin2017-10-261-2/+2
|
* Fix phpunit output on Travis builds Thomas Chauchefoin2017-10-261-3/+0
| | | See #97.
* Improve project structurenashe2017-10-216-144/+157
|
* Cleanup install.phpnashe2017-10-172-25/+15
|
* Add GuzzleHarness and use itnashe2017-10-173-30/+47
|
* Use new *_path helpers in install.phpnashe2017-10-171-2/+2
|
* Move the setup page into a viewnashe2017-10-172-118/+119
|
* Add view_path and admin_path helpersnashe2017-10-171-0/+22
|
* Update .travis.ymlnashe2017-07-171-3/+3
| | | | In Travis, xdebug is not enabled on non-stable versions of PHP.
* Troubleshoot failures on some test targetsnashe2017-07-161-0/+1
|
* Use phpunit from vendor/nashe2017-07-161-0/+3
|
* Use bash in .travis.ymlnashe2017-07-161-2/+2
|
* Oops, forgot to make guzzle update effectivenashe2017-07-161-23/+33
|
* Run the built-in web servers in a subshellnashe2017-07-161-2/+2
|
* Use HHVM's built-in web server when necessarynashe2017-07-161-2/+2
|
* Use HHVM's built-in web server when necessarynashe2017-07-161-1/+2
|
* Make tests pass on php-nightlynashe2017-07-161-1/+1
| | | | See https://github.com/guzzle/guzzle/releases/tag/6.3.0
* Fix typo in project's descriptionnashe2017-07-161-1/+1
|
* Add tests for the installernashe2017-07-162-0/+87
|
* Files to test for +w rights were not removed by the installernashe2017-07-161-0/+3
| | | | It leds to some issues with the cache.
* Move helper functions to a separate filenashe2017-07-163-14/+34
| | | | This will be useful to use it in the tests.
* Hide errors of cron.php if not in debug modenashe2017-07-161-3/+5
|
* Update CONTRIBUTING.mdnashe2017-07-162-3/+3
|
* Update issue_template.mdnashe2017-07-151-6/+0
|
* Update README.mdnashe2017-07-151-24/+11
|
* Add CONTRIBUTING.mdnashe2017-07-151-0/+37
|
* Add an issue template for Githubnashe2017-07-151-0/+24
|
* Update docsnashe2017-07-152-0/+0
|
* Change submodule path to https:// rather than ssh://nashe2017-07-141-1/+1
| | | | … and make Travis tests pass.
* Point docs/ to the wikinashe2017-07-142-0/+3
|
* docs/ were moved to moonmoon/moonmoon.github.ionashe2017-07-133-241/+0
|
* Delete CNAMEThomas Chauchefoin2017-07-131-1/+0
|
* Announce text/xml instead of application/atom+xml in atom.phpnashe2017-07-131-1/+1
|
* Add an option to disable feed certificate checknashe2017-07-135-2/+18
|
* Update composer.json to use the last version of SimplePienashe2017-07-132-8/+14
| | | | | | This version allows us to pass cURL options to SimplePie, this will be needed to correctly handle feeds over SSL/TLS but with invalid certificates.
* Do not encode feed title twicenashe2017-07-131-1/+1
| | | | cf. #95
* Only display $Planet->errors in debug modenashe2017-07-131-3/+5
|
* Fix Cache.php encodingnashe2017-07-131-1/+1
|
* Fix PHP noticenashe2017-07-122-2/+2
| | | | | "Only variables should be assigned by reference in moonmoon/custom/views/default/sidebar.tpl.php"