Commit graph

122 commits

Author SHA1 Message Date
Jakub Vrana 5e9df49fd1 Move inline event handlers to <script> 2018-01-12 17:11:29 +01:00
Jakub Vrana e645693147 Use script() for <script> 2018-01-12 17:10:33 +01:00
Jakub Vrana 4be72a2a0d Allow customizing CSP 2018-01-11 18:39:49 +01:00
Jakub Vrana 541c3c1fed Allow img-src data: common in skins 2018-01-11 18:39:49 +01:00
Jakub Vrana 3408d4ad78 Use JSON.parse if available 2018-01-11 18:39:49 +01:00
Jakub Vrana e614ae08c4 Add Content Security Policy 2018-01-11 18:39:49 +01:00
Jakub Vrana 552d2a6be4 Always send security headers in customization 2018-01-11 18:39:49 +01:00
Jakub Vrana 415253b1b1 Add nosniff header 2018-01-11 18:39:22 +01:00
Jakub Vrana d07b7e3773 Use Referrer-Policy instead of <meta name="referrer">
To make securityheaders.io happy.

Also fix a typo in the value (https://lists.w3.org/Archives/Public/public-webappsec/2015May/0059.html).
2018-01-11 18:38:15 +01:00
Jakub Vrana 14778165a8 Use @this in JavaScript (prepares for removing inline event handlers) 2018-01-11 17:01:29 +01:00
Jakub Vrana dc85ba2d86 Delete type="text/javascript" from <script> as it is the default in HTML5 2018-01-11 14:13:43 +01:00
Jakub Vrana ced05d8a44 Fix going back to search result after edit 2015-03-06 10:20:10 -08:00
Jakub Vrana 060c006875 Add referrer: never meta tag 2015-02-06 09:00:48 -08:00
Jakub Vrana 37c8a3a123 Report offline and other AJAX errors (bug #419) 2014-09-14 15:47:09 -07:00
Jakub Vrana 147957cef7 Activate JUSH before loading databases 2014-01-30 09:06:58 -08:00
Jakub Vrana ad00e5e965 Move JUSH loading to Adminer customization 2014-01-10 10:05:57 -08:00
Jakub Vrana 9995e35659 Update JUSH 2014-01-07 13:03:48 -08:00
Jakub Vrana 2c8d81c1ae Include JUSH in the compiled version 2013-12-19 12:34:15 -08:00
Jakub Vrana 61cdde0797 Don't execute external JavaScript when verifying version 2013-12-19 09:29:16 -08:00
Jakub Vrana cfe76ffaf0 Hide Logout button on login screen 2013-10-24 19:12:53 -07:00
Jakub Vrana e0ef072bd0 Keep form values after refresh in Firefox 2013-07-22 19:40:03 -07:00
Jakub Vrana 9e2592f35f Ignore mousing over border of select 2013-07-19 13:04:14 -07:00
Jakub Vrana a338f9bf58 Display help in tooltip
Also rename Analyze to Vacuum outside MySQL
2013-07-19 10:35:31 -07:00
Jakub Vrana ffc1fa000f Move logout button 2013-07-09 00:34:25 -07:00
Jakub Vrana f4addc5259 Avoid double escaping in second page title 2013-07-05 01:34:15 -07:00
Jakub Vrana 679e818fca Avoid double escaping in breadcrumbs 2013-07-04 21:07:52 -07:00
Jakub Vrana 1aa3144d05 Use stricter regexp in URL 2013-07-03 10:34:19 -07:00
Jakub Vrana 749f51afe6 Save and continue edit by AJAX 2013-06-29 12:41:35 -07:00
Jakub Vrana b7021c9c7f Highlight default submit button 2013-05-06 09:27:35 -07:00
Jakub Vrana 8caa889635 Add iOS touch icon 2013-02-19 16:31:51 -08:00
Jakub Vrana 2fb1ebc7f1 HTML5 input fields 2012-12-05 13:17:42 -08:00
Jakub Vrana 4cb14deac1 Open form to a new window on Ctrl+click or Shift+click 2012-09-04 15:40:57 -07:00
Jakub Vrana 5e0038b62d Improve session management 2012-08-19 13:42:13 -07:00
Jakub Vrana a71b99096c Remove CodeMirror
- uses other colors than JUSH
- not used everywhere (triggers, routines, ...)
- Ctrl+Left and similar works bad
- missing autocomplete
- blocking loader
2012-06-30 01:51:35 -07:00
Jakub Vrana 6591d485e9 Replace isset($var) by $var !== null 2012-05-14 01:11:08 -07:00
Jakub Vrana 4815c7d020 Don't use AJAX links and forms 2012-04-15 22:22:47 -07:00
Jakub Vrana bf54c13dfe Highlight code in textarea by CodeMirror 2012-04-15 22:00:33 -07:00
Jakub Vrana 70994abcbd Move loading indicator to the right, add CSS cursor: progress 2012-02-17 15:48:33 -08:00
Jakub Vrana ed25431f3c Error message with no response from server in AJAX 2011-09-17 15:24:18 +02:00
Jakub Vrana 037c547365 Fix XSS (thanks to Jigal van Hemert) 2011-07-27 08:01:51 +02:00
Jakub Vrana c561d70486 Keyboard shortcuts (thanks to Konrad Cerny) 2011-06-08 14:09:20 +02:00
Jakub Vrana 0f00277b82 Easier sending of default headers (customization) 2011-05-31 08:01:48 +02:00
Jakub Vrana d94aad0f69 Avoid re-post confirmation in AJAX (bug #3282288) 2011-04-13 06:30:21 -07:00
Jakub Vrana d55ba18b43 Customizable favicon 2011-04-03 08:17:26 -07:00
Jakub Vrana 8bda0b64ba Allow replacing JS functions in head method 2011-03-25 16:03:36 +01:00
Jakub Vrana ce9270ba66 Typo 2011-03-24 16:57:43 +01:00
Jakub Vrana 07e4476e78 Register events after loading JS functions 2011-03-24 01:30:32 +01:00
Jakub Vrana 06e3746510 No HTML tags in <title> 2011-03-23 21:07:21 +01:00
Jakub Vrana d8cba0eb5d Allow own code in <head> (thanks to Nikolaj Vasilcuk) 2011-03-23 11:57:35 +01:00
Jakub Vrana 04e5250044 Better translation 2011-03-22 14:10:25 +01:00