47 Commits

Author SHA1 Message Date
Roardom
8b27413fe8 refactor: make laravel eloquent models final
We never plan to extend a model, and value composition over inheritance. We need to add the AllowDynamicProperties warning to prevent PHPStan errors that arise with pivot relations (https://www.github.com/larastan/larastan/issues/2256).
2025-10-29 10:19:39 +00:00
Roardom
3988eaaf70 update: model phpdocs
- `use` the relation types
- Use sentence case
- Write better summaries similar to laravel's documentation (don't just repeat the type and the model)
2025-09-20 01:35:37 +00:00
Roardom
047f10be36 add: bbcode and linkify blade directives
Also add escaping content inside joypixels blade directive where necessary.
2025-02-01 16:15:34 +00:00
Roardom
ad716d7cc3 update: remove XSS cleaner and remove XSS vulnerabilities
We've been mostly relying on the 3rd party xss cleaner to make sure user submitted content is clean. This PR fixes up any leftover holes in the bbcode parser that allow xss vulnerabilities, and as a result, the 3rd party library isn't needed anymore. It cleans responsibly by first, running `htmlspecialchars()` over the content, followed by sanitizing the untrusted urls and whitelisting their protocol.
2025-01-20 02:52:42 +00:00
Roardom
872d28d9c0 fix: larastan relations 2024-08-09 07:33:56 +00:00
HDVinnie
8ad0097fc9 fix: HasFactory types 2024-07-18 23:42:13 -04:00
Roardom
cdb063d8e0 add: private message threads 2024-06-07 20:47:36 +00:00
Roardom
b86475a732 add: strict types to all files 2024-05-23 13:58:29 +00:00
HDVinnie
8a03bec818 add: model docblocks
- this resolves some larastan property issues but in return has revealed quite a few issues with our castings and such. baseline has been regenerated so we can work through them. The properties in docblocks are in order and match everything in DB schema wise.
2024-02-07 16:39:43 -05:00
Roardom
f2066f4441 fix: add type hints to models 2023-08-26 07:43:07 +00:00
Roardom
649d6a3573 refactor: cruddify user pms
Also use route model binding.
2023-07-07 00:28:47 +00:00
HDVinnie
584c6db265 add: audit log searching 2023-05-22 19:52:12 -04:00
Roardom
d97ab002f2 remove: redundant bbcode converter 2023-02-07 23:51:10 -06:00
HDVinnie
472c820f99 update: UNIT3D linting
- github action updated with new ruleset in pint.json
- codebase linted with new ruleset
- contributors can now run `./vendor/bin/pint`
- action workflow will auto correct any lint issues upon commit/opened pull request
2023-02-02 08:02:34 -05:00
HDVinnie
9f7ff35e07 PSR12 Linting 2023-01-08 21:11:15 +00:00
Roardom
4bdbbdc64e refactor: move staff gift request to form request 2023-01-08 05:04:49 -06:00
HDVinnie
2ca429c4ce Revert "PSR12 Linting"
This reverts commit 7e65e1d589.
2022-09-11 19:51:58 -04:00
HDVinnie
7e65e1d589 PSR12 Linting 2022-09-11 23:50:41 +00:00
StyleCI Bot
2cc3d2b2cb Apply fixes from StyleCI 2022-01-23 22:42:35 +00:00
HDVinnie
00d00024e5 chore: cleanup 2022-01-23 17:42:16 -05:00
HDVinnie
98521378d2 chore: phpdoc blocks 2022-01-10 17:46:43 -05:00
HDVinnie
ebb5b72c2b fix: model type hints 2022-01-08 16:26:53 -05:00
HDVinnie
77ec35bea5 chore: apply the laravel code style linter 2022-01-08 00:03:12 -05:00
HDVinnie
97394c062f chore: adopt type hints 2022-01-07 23:35:33 -05:00
Oha-you
23122962c1 update: Improve Linkify, escape special chars for BBcode 2021-05-20 22:55:39 +03:00
HDVinnie
d06ebc9e2a cleanup: private message model 2020-12-28 23:50:08 -05:00
Laravel Shift
fac1da0b42 Shift cleanup 2020-09-08 22:25:06 +00:00
Laravel Shift
add31768f5 Shift to class based factories 2020-09-08 22:24:30 +00:00
HDVinnie
01093d711c Apply fixes from StyleCI
[ci skip] [skip ci]
2020-07-28 16:54:24 +00:00
HDVinnie
e47afe4ab4 chore: styleci 2020-02-12 14:51:22 -05:00
HDVinnie
80c842e39c chore: update license block
- make styleci happy
2020-02-12 14:49:18 -05:00
HDVinnie
dbb928f940 chore: update license block 2020-02-12 14:45:59 -05:00
HDVinnie
865a139038 Apply fixes from StyleCI
[ci skip] [skip ci]
2020-01-22 15:49:44 +00:00
HDVinnie
4e9a2d9304 (Update) XSS Protection 🔐
- close #1068
- update dependencies
- add JS obfuscator
- enable purgeCSS by default
2020-01-20 10:10:24 -05:00
HDVinnie
9a893662de Apply fixes from StyleCI
[ci skip] [skip ci]
2020-01-08 16:28:32 +00:00
HDVinnie
ef0b9e0203 Apply fixes from StyleCI
[ci skip] [skip ci]
2019-11-13 14:36:38 +00:00
HDVinnie
2a0affa30d (Update) Model PHPDocs 🚀 2019-11-11 20:52:59 -05:00
HDVinnie
e0379e5b95 (Add) Audit System 🆕
- filtering to follow
2019-11-06 06:42:17 -05:00
HDVinnie
77e178069a Merge branch 'master' into Cruddy-By-Design 2019-10-28 14:39:16 -04:00
HDVinnie
eed3b51c92 (Update) CRUDDY PT.7 🚀 2019-10-25 17:35:14 -04:00
HDVinnie
c9cf937e8b (Update) Purifier 🚀 2019-10-12 18:28:22 -04:00
HDVinnie
a3efd98e84 (Security Update) HTMLPurifier 🔐
- closes #875
- Fixes HTML Tags Not Being Contained / Elevated within user-generated bodies like (posts, comments, signature, etc.)
2019-10-11 11:57:17 -04:00
HDVinnie
9a735ba293 Apply fixes from StyleCI
[ci skip] [skip ci]
2019-06-12 18:49:32 +00:00
HDVinnie
1100e56c35 (Update) BBCode V2 🚀
- complete refactor of BBCODE
- updated wysibb
- removed decoda for internal BBCODE parser
2019-06-10 15:46:05 -04:00
Max Kovalenko
f42264247f StyleCI fix 2019-05-22 10:24:30 +03:00
Max Kovalenko
1a87a96e55 generated model phpdocs 2019-05-22 09:41:19 +03:00
Laravel Shift
46ddd8be75 Namespace models under App\Models 2019-02-22 03:22:57 +00:00