Skip to content

Bump json5 from 1.0.1 to 1.0.2 #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 6 commits into
base: php8
Choose a base branch
from
Open

Bump json5 from 1.0.1 to 1.0.2 #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
d2fdb44
fix a potential Path Traversal Injection
cms42 May 12, 2023
f1a7b3f
fix potential Command Injection
cms42 May 12, 2023
fb9406b
Handle user input in a more robust way
cms42 May 14, 2023
4183c5e
Merge commit 'fb9406be' into php8
cms42 May 15, 2023
c6f23f5
added rel="noopener" for safe reason
cms42 May 15, 2023
3bc8c44
Bump json5 from 1.0.1 to 1.0.2
dependabot[bot] May 15, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions include/functions.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2668,7 +2668,7 @@ function stdhead($title = "", $msgalert = true, $script = "", $place = "")
<?php if($attendance){ printf(' <a href="attendance.php" class="">'.$lang_functions['text_attended'].'</a>', $attendance->points, $CURUSER['attendance_card']); }else{ printf(' <a href="attendance.php" class="faqlink">%s</a>', $lang_functions['text_attendance']);}?>
<a href="medal.php">[<?php echo nexus_trans('medal.label')?>]</a>
<font class = 'color_invite'><?php echo $lang_functions['text_invite'] ?></font>[<a href="invite.php?id=<?php echo $CURUSER['id']?>"><?php echo $lang_functions['text_send'] ?></a>]: <?php echo sprintf('%s(%s)', $CURUSER['invites'], \App\Models\Invite::query()->where('inviter', $CURUSER['id'])->where('invitee', '')->where('expired_at', '>', now())->count())?>
<?php if(get_user_class() >= \App\Models\User::CLASS_ADMINISTRATOR) printf('[<a href="%s" target="_blank">%s</a>]', nexus_env('FILAMENT_PATH', 'nexusphp'), $lang_functions['text_management_system'])?>
<?php if(get_user_class() >= \App\Models\User::CLASS_ADMINISTRATOR) printf('[<a href="%s" target="_blank" rel="noopener">%s</a>]', nexus_env('FILAMENT_PATH', 'nexusphp'), $lang_functions['text_management_system'])?>
<br />
<font class="color_ratio"><?php echo $lang_functions['text_ratio'] ?></font> <?php echo $ratio?>
<font class='color_uploaded'><?php echo $lang_functions['text_uploaded'] ?></font> <?php echo mksize($CURUSER['uploaded'])?>
Expand Down Expand Up @@ -6410,7 +6410,7 @@ function torrent_name_for_admin(\App\Models\Torrent|null $torrent, $withTags = f
return '';
}
$name = sprintf(
'<div class="text-primary-600 transition hover:underline hover:text-primary-500 focus:underline focus:text-primary-500"><a href="/details.php?id=%s" target="_blank" title="%s">%s</a></div>',
'<div class="text-primary-600 transition hover:underline hover:text-primary-500 focus:underline focus:text-primary-500"><a href="/details.php?id=%s" target="_blank" rel="noopener" title="%s">%s</a></div>',
$torrent->id, $torrent->name, Str::limit($torrent->name, $length)
);
$tags = '';
Expand Down
2 changes: 1 addition & 1 deletion lang/chs/lang_complains.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,5 +28,5 @@
'no_complaints_have_been_processed' => '暂无已处理的申诉',
'text_view_band_log' => '查看封禁记录',
'reply_notify_subject' => '申诉回复',
'reply_notify_body' => '你在网站 %s 的申诉有了回复，点此 <a href="%s" target="_blank">查看</a>。',
'reply_notify_body' => '你在网站 %s 的申诉有了回复，点此 <a href="%s" target="_blank" rel="noopener">查看</a>。',
];
2 changes: 1 addition & 1 deletion lang/chs/lang_mybonus.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -150,7 +150,7 @@
'official_tag_bonus_additional_factor' => '最终奖励为计算所得官种奖励乘以官种系数，当前官种系数为: ',
'reward_type_official_addition' => '官种加成',
'text_get_by_harem' => '后宫加成每小时将额外得到如下的魔力值',
'harem_additional_desc' => '后宫只考虑直属后宫。每个后宫加成值可<a href="invite.php?id=%s" target="_blank" class="altlink">在此</a>查看',
'harem_additional_desc' => '后宫只考虑直属后宫。每个后宫加成值可<a href="invite.php?id=%s" target="_blank" rel="noopener" class="altlink">在此</a>查看',
'harem_additional_note' => '注意：如果自己不做种，此加成值不会增加到用户账号上',
'harem_additional_factor' => '所得奖励为全部后宫的时魔（不考虑加成）之和，乘以后宫加成系数，当前值为：',
'text_bonus_summary' => '每小时获得的合计魔力值',
Expand Down
2 changes: 1 addition & 1 deletion lang/chs/lang_settings.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -759,7 +759,7 @@
'submit_misc_settings' => '其他设定',
'text_misc_settings_note' => '配置其他杂项。',
'row_misc_donation_custom' => '捐赠自定义内容',
'text_donation_custom_note' => '捐赠页自定义的内容，展示于支付宝、PayPal上面。支持&nbsp;<b><a href="tags.php" target="_blank">bbcode 标签</a></b>',
'text_donation_custom_note' => '捐赠页自定义的内容，展示于支付宝、PayPal上面。支持&nbsp;<b><a href="tags.php" target="_blank" rel="noopener">bbcode 标签</a></b>',
'row_approval_status_icon_enabled' => '显示审核状态图标',
'text_approval_status_icon_enabled_note' => "是否在种子列表展示审核状态图标，默认: '否'。",
'row_approval_status_none_visible' => '未审核种子是否可见',
Expand Down
2 changes: 1 addition & 1 deletion lang/cht/lang_complains.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,5 +28,5 @@
'no_complaints_have_been_processed' => '暫無已處理的申訴',
'text_view_band_log' => '查看封禁記錄',
'reply_notify_subject' => '申訴回復',
'reply_notify_body' => '你在網站 %s 的申訴有了回復，點此 <a href="%s" target="_blank">查看</a>。',
'reply_notify_body' => '你在網站 %s 的申訴有了回復，點此 <a href="%s" target="_blank" rel="noopener">查看</a>。',
];
2 changes: 1 addition & 1 deletion lang/cht/lang_mybonus.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -150,7 +150,7 @@
'official_tag_bonus_additional_factor' => '最終獎勵為計算所得官種獎勵乘以官種系數，當前官種系數為: ',
'reward_type_official_addition' => '官種加成',
'text_get_by_harem' => '後宮加成每小時將額外得到如下的魔力值',
'harem_additional_desc' => '後宮只考慮直屬後宮。每個後宮加成值可<a href="invite.php?id=%s" target="_blank" class="altlink">在此</a>查看',
'harem_additional_desc' => '後宮只考慮直屬後宮。每個後宮加成值可<a href="invite.php?id=%s" target="_blank" rel="noopener" class="altlink">在此</a>查看',
'harem_additional_note' => '註意：如果自己不做種，此加成值不會增加到用戶賬號上',
'harem_additional_factor' => '所得獎勵為全部後宮的時魔（不考慮加成）之和，乘以後宮加成系數，當前值為：',
'text_bonus_summary' => '每小時獲得的合計魔力值',
Expand Down
2 changes: 1 addition & 1 deletion lang/cht/lang_settings.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -759,7 +759,7 @@
'submit_misc_settings' => '其他設定',
'text_misc_settings_note' => '配置其他雜項。',
'row_misc_donation_custom' => '捐贈自定義內容',
'text_donation_custom_note' => '捐贈頁自定義的內容，展示於支付寶、PayPal上面。支持&nbsp;<b><a href="tags.php" target="_blank">bbcode 標簽</a></b>',
'text_donation_custom_note' => '捐贈頁自定義的內容，展示於支付寶、PayPal上面。支持&nbsp;<b><a href="tags.php" target="_blank" rel="noopener">bbcode 標簽</a></b>',
'row_approval_status_icon_enabled' => '顯示審核狀態圖標',
'text_approval_status_icon_enabled_note' => "是否在種子列表展示審核狀態圖標，默認: '否'。",
'row_approval_status_none_visible' => '未審核種子是否可見',
Expand Down
2 changes: 1 addition & 1 deletion lang/en/lang_complains.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,5 +28,5 @@
'no_complaints_have_been_processed' => 'No complaints have been processed',
'text_view_band_log' => 'View ban log',
'reply_notify_subject' => 'Complaint replied',
'reply_notify_body' => 'You have a reply to your complaint on the site %s, click here <a href="%s" target="_blank">to see it</a>.',
'reply_notify_body' => 'You have a reply to your complaint on the site %s, click here <a href="%s" target="_blank" rel="noopener">to see it</a>.',
];
2 changes: 1 addition & 1 deletion lang/en/lang_settings.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -759,7 +759,7 @@
'submit_misc_settings' => 'Misc settings',
'text_misc_settings_note' => 'Misc settings',
'row_misc_donation_custom' => 'Donation custom',
'text_donation_custom_note' => 'Donation page custom content, displayed above Alipay, PayPal. Support&nbsp;<b><a href="tags.php" target="_blank">bbcode tag</a></b>',
'text_donation_custom_note' => 'Donation page custom content, displayed above Alipay, PayPal. Support&nbsp;<b><a href="tags.php" target="_blank" rel="noopener">bbcode tag</a></b>',
'row_approval_status_icon_enabled' => 'Show approval status icon',
'text_approval_status_icon_enabled_note' => "Whether to show the approval status icon in the torrent list, default: 'No'.",
'row_approval_status_none_visible' => 'Visibility of not reviewed torrents',
Expand Down
2 changes: 1 addition & 1 deletion nexus/Install/install/install.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -225,7 +225,7 @@
</div>
</div>
<div class="m-2 text-center">
Welcome to the NexusPHP installer, if you have any questions, click<a href="https://nexusphp.org/" target="_blank" class="text-blue-500 p-1">here</a>for help.
Welcome to the NexusPHP installer, if you have any questions, click<a href="https://nexusphp.org/" target="_blank" rel="noopener" class="text-blue-500 p-1">here</a>for help.
</div>
</body>
<script>
Expand Down
2 changes: 1 addition & 1 deletion nexus/Install/settings.default.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -410,7 +410,7 @@
'mainversion' => 'NexusPHP',
'subversion' => 'v1.6.0-beta6',
'releasedate' => '2021-05-08',
'website' => '<a href="https://nexusphp.org" target="_blank">https://nexusphp.org</a>',
'website' => '<a href="https://nexusphp.org" target="_blank" rel="noopener">https://nexusphp.org</a>',
),
'backup' =>
array (
Expand Down
2 changes: 1 addition & 1 deletion nexus/Install/update/update.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -262,7 +262,7 @@
</div>
</div>
<div class="m-2 text-center">
Welcome to the NexusPHP updater, if you have any questions, click<a href="https://nexusphp.org/" target="_blank" class="text-blue-500 p-1">here</a>for help.
Welcome to the NexusPHP updater, if you have any questions, click<a href="https://nexusphp.org/" target="_blank" rel="noopener" class="text-blue-500 p-1">here</a>for help.
</div>
</body>
<script>
Expand Down
2 changes: 1 addition & 1 deletion nexus/PTGen/PTGen.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -230,7 +230,7 @@ private function buildTooltip(): string
{
$results = [];
foreach (self::$validSites as $site => $info) {
$results[] = sprintf('<a href="%s" target="_blank" /><strong>%s</strong></a>', $info['home_page'], $site);
$results[] = sprintf('<a href="%s" target="_blank" rel="noopener" /><strong>%s</strong></a>', $info['home_page'], $site);
}
return implode(' / ', $results);
}
Expand Down
Loading