DVZ Secure Content

by Devilshakerz 30 Stars 5,005 Downloads

Filters and forwards user-generated content from insecure protocols (non-HTTPS).

Change Log for DVZ Secure Content

Version 1.2.2 stable Build #16

  • Fixed a SQL injection vulnerability

Upgrading: Overwrite files.

-----BEGIN PGP SIGNATURE-----

iQEzBAABCAAdFiEE346WhYk6su6vogTe4v2sXM44p30FAmOXQAkACgkQ4v2sXM44
p317rwf+KY6nKZFDh63kOOxmEUEPNw1OgXUo4MvQX8/63jld+M6ryGO8WDtBHsH7
jepLfs4yBmQWhaBWtPNmgKDtvuNwamuwe8+4LgIFmfFkA1u2j6mB0rzzk4uBQYKM
E4DTVO+nRen/g1h8YfEUU0s7ybyFFDq5jV6OyfBLmXNbIpeJhP8JHSquPyXet2Ss
knnvI3WwpKphXfQVGneFtYDNn3BcmDILudmxLLGFaFLaDWEBgDIgXVaamie/Xx//
2OfQO6Rxfp5olNrlpvOURljx0JrhFZUYzBVwZ7OaVRYapKpfUVkkDkS1bIU6Z4gH
iD2pxnrAY3zBu1dBS7wjtj5fi8J9JQ==
=pd9m
-----END PGP SIGNATURE-----

Version 1.2.1 stable Build #15

  • Fixed PHP 8 compatibility issues
  • Fixed PostgreSQL, SQLite compatibility issues
  • Updated default video templates

Upgrading: Overwrite files.

-----BEGIN PGP SIGNATURE-----

iQEzBAABCAAdFiEE346WhYk6su6vogTe4v2sXM44p30FAmIwy6QACgkQ4v2sXM44
p31Ptgf/Qal1zRNk7gvk1HE+fB5hN4q1dazLkm2IWQmUe5ai6xd3nmOvZ/VHojZh
LJxlvHKHyqAp67zB++2f1nvxXsP7GvrNeZumrim+izpAhAKZUSmTxxXeS3wXH21N
GjRqoe4ECYzj+gZNh59Nr6mnKyLPikXqS/zDXDpr8AiRoe+3LJmqHHLDg0UtW7Ak
kVn6OGeSl6YHaxNtgYyq9aVsr1zP5ed0fs2LOz+Pjz2/rERC8I7/9j9TgOGl87o9
/WlpbS6S7e7zWg3BguHNT+NbrcyBxrhSGYNAAMe1nUI6wr7DvRppKz1vkUeWnyXU
RGM5etBqycyp7fEzIX14AlIZjfvOLQ==
=6aVf
-----END PGP SIGNATURE-----

Version 1.2 stable Build #14

  • Added Proxy hostname exceptions to allow specified domains to bypass the proxy when using HTTPS
  • Added enforcement of Block non-HTTPS avatars in the Admin CP
  • Changed behavior of Filter non-HTTPS MyCode images to apply regardless of Image proxy setting
  • Added data-original-url attribute to <img> tags
  • Fixed unintended proxying when Image proxy was disabled
  • Fixed behavior when setting avatar by Gravatar email
  • Improved compatibility with MyCode in 3rd party plugins
  • Minor improvements

Upgrading: Overwrite files and re-activate the plugin.

-----BEGIN PGP SIGNATURE-----

iQEyBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAl/Lm1EACgkQ4v2sXM44
p31TAwf49GX1oPAxcwmP2dOdl3RyepdYlN1eFc5Xxx8M5EIAftzeSgGkBtBSWQlq
zGKd0fisS98rspde0CZ/ei8JmsycqZ2OsTxzP1vjagKXWjDhhLudKvNj+1VP0FN7
eCF7amY4F657b7UViTKMhHVzNg7A9B2fvtwBtut2PyV4UaRICp/Lk4qbbSWlxk1o
fWKtCW1d8m/6hlfMMiqiwPryc6XyJrfgBl+6DzoZzFfqki7PpaNKBQpbF3uFfCa3
m0rL8vcic9y2rXi9/itzRlyEtUSicfdHjxYzvRIIQCE9OrJB0LqeN9JytYDYtCrO
Kf8ZEKYhNF7bNqBaoYWU563uy2/E
=GjRo
-----END PGP SIGNATURE-----

Version 1.1.6 stable Build #13

  • Updated for compatibility with [img] changes in MyBB 1.8.23
  • Fixed avatar URL length check in Proxy avatar URLs
  • Minor improvements

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAl8RjgEACgkQ4v2sXM44
p33EQwf/V+cH1V6mDjhuKCLWpgwo07PQ1BuX1dnsB6IqAjkcUbSEkDnVFVLGKEFw
bzbMoqJOImesqaLbu7qm0EcM5wVDorsxFxEH9POFLnm8x/+gpefqVqYgEVjEodPd
ZWMP91ryj7RtAo0yRGQI3jnTSGVYPPL+8xlicyLUpf0E+S6Oe2bPoS5qxkEecFIc
UTyvfoqtN66ZczxjjPwb2eaEe+JweY0KmtRldrUx5Pk3LJ91hrKW1FLYSYOmVx/l
jG2mFQ2I1swEVWiE02NewENzcYkFYxeWRCE4Ue1sGyeurZK/V0xgk9uGaFBgRRbN
F1HOSAnyov2RqSmOQCPO5rutBBjZ0w==
=44bG
-----END PGP SIGNATURE-----

Version 1.1.5 stable Build #12

1.1.5:

  • Fixed check for All remote avatars proxied
  • Minor fixes

Upgrading: overwrite inc/plugins/dvz_secure_content.php.

-----BEGIN PGP SIGNATURE-----

iQEcBAABCAAGBQJY8nC6AAoJEOL9rFzOOKd9WiEH/jvh85r3tvAgAO8G4D59m/H8
hz7c7XucmGTMNQL73VPjkJA+S08Pp3LSQDfi3pJ54EceU1xT2++BDyAEh8k2xEr8
NCFfE9DuY4Ynmqc9rEmvL+N1si8LkWxQ3b4ud80dTDGf2k4a+xXz1QnqW2+EemBd
o2HMZuaD7SZxQ3qZ7m3Yw5hRTvGRyWeL8sM4R9sGX/FBEvKlsl9Z5pn303H7qXKF
yK9ANCpljKRJOJfDHONV1SF6JYkbcMFjyFTqgjoM7BEhCdTM1YSTICedM7o3U7ca
nZ6xqIMkbS6SiHgrVD7q/rJmVTlLWTYgERoHRnUlx0vs7ZqiwG0A89kDDAT688I=
=ejZN
-----END PGP SIGNATURE-----

Version 1.1.4 stable Build #11

1.1.4:

  • Fixed avatar handling in User CP (requires MyBB >= 1.8.11)
  • Added base64 and base64url URL encoding
  • Added All remote avatars proxied to the ACP Plugins page
  • Updated insecure video embed services list
  • minor plugin logic fixes

Upgrading: reinstall the plugin and adjust settings.

-----BEGIN PGP SIGNATURE-----

iQEcBAABCAAGBQJY5oMOAAoJEOL9rFzOOKd9qf0H/2BWpV64Pio3d+9EbdmBnLKR
uzq0SygJATnTyGukxLFWSmXsbNQveScPr9a4aPpNLDKyxFTitqHT0Oce77vrr07M
9uSR6iLaS7CwCl/I4SdTSTt3gV6Fl7ANzPLVbRyCRwIdSvKjuStvYj6s9sai53+I
HmpM8jOKS9ssRh/SePe/HNXDgGa64UgXga9tTUs0X4YMkSFPslRQAdpKb8Ey3Syn
gn0PG+pT6To0sg4rFduQPogRY49Rk3Z3oO28nQUmubb0wzdAYGfbVR0laRYW1myK
Ka4aa9vVYAPgdKiVTrI0n5REp47fJ3eTvlx4s6tTLqggt1Hny/qnDTySItvQbnI=
=PGcE
-----END PGP SIGNATURE-----





Version 1.1.3 stable Build #10

1.1.3:

  • Fixed User CP avatar URL note and validation
  • Third party plugin compatibility improvements
-----BEGIN PGP SIGNATURE-----

iQEcBAABCAAGBQJYmkgCAAoJEOL9rFzOOKd96rIH/iV8RZCR+d5rFypQxe+dTfLN
mNlfA4wl9MmdyKHzcrwMfEBthTpaC9LJDo0RyAEf+C2ZjuGutffWWLSKsT+cN7xQ
7W5/qWLwjSE5PA251P+8yXacocwUBPgoTKF4J1lmrqPb74lrx52FG2zIVPH6qajT
JCc8OGUnNirsMELvLzGzWrtJkd932LriM66WmUr/q+O+Fz6TTKpKTjypnsl389XS
Hnmjpwe2K2e97GX+bRKQAxQ5vQNbRXuLPa7FJ/111/WTYG6LKT3kj6/bTpL1wDO6
xgh2iiEcB/2OrH32VfUCtL4/AEo+WkMuWKRNLlny5WlOrwgTXmSa01CiBI/gOGk=
=V+Z9
-----END PGP SIGNATURE-----



Build #9 stable

1.1.2:

  • Fixed too aggressive proxying of avatar URLs when saved from the ACP
  • Compatibility with MyBB 1.8.8 MyCode parser changes

-----BEGIN PGP SIGNATURE-----

wsBcBAABCAAQBQJYCQwSCRDi/axczjinfQAA+wAIAEhmeorI70o4kvLNN+UzXVrP
0l9b+swSM76xZR/EDwz+CYPd5lliHmI70Uj+ckRWwJegi1G12/kGbrBeue4qStlY
nPdFRrWlfb16ZoltJfhKWFOaHxUvvkp/0qE2QEM7LTadkfuGPvgwcKfsbFxdkKGW
6Q5aDSRiC1Ox66KLgNTRIJYb4o17RANSKaI+O3tJN8shiN8wqwizYKZtz7dDicTr
8agH6G3v+vL3/wsfWPKcoz8hQYyUIL3qYlW+Jyg10+5ioL/xkUkmbmCT0DRcvcsh
buFcliFbXnkQs/ou9dfE5c6SY1OwRJnFGh083PS1qOHaJ074RGa2dHZ3SbLAScQ=
=tePt
-----END PGP SIGNATURE-----

Build #8 stable

1.1.1:

  • fixed possible SQL errors when avatar URLs are too long for storage in Proxy avatars tool

-----BEGIN PGP SIGNATURE-----

wsBcBAABCAAQBQJXpgDOCRDi/axczjinfQAA5C8IAJYDnIZsVIqTMBMbXS7PyGjG
N4ZwZaL51Kpx94r6vsoWosboU/M42wfJCO7wBM9VCLtI+DzIGHPI90MTVs1I9RAt
snmb2I64i/T3oirFAgyQ/wsS8tXO0UeOOSC+db7XyA7YXKuPh2IJebgjSygA//eB
+q580jjH+M8uRu9O57dI+GL4srZP1BONSVZYPiL0BDJflncKfeAIuAdweOYBpqrC
QWiHbl9ir0mY4dAVDKe0RQvk6gbs+kBAXz+lue4A2n0VWcoXGUVYwUmSOgWYZl7/
+hEXVPdsyT+wOMcAXpwNfPGYCmarIijeJV4K9eHeVhUpt+2urT5JzLMYNob/qVo=
=YvJk
-----END PGP SIGNATURE-----

Build #7 stable

1.1:

  • MyCode & avatar images proxy support
  • Some Gravatar corrections removed (included in MyBB 1.8.7)
  • minor fixes and improvements

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAABCAAGBQJXikOoAAoJEOL9rFzOOKd9IwcH+wRiwQprUQwo6G2tXlVlbchr
Mxsr9MDQWsi+VdQ5FMi+aTHMx0AdJWOnwjN4qiUddrrepCnKpLEMqkMJGKRoPxr6
TbU4JdXHph75XVSV+WjM4zyK+tN7kTqr6J1NvyQRP1uTJpolGYPetvjPtQK5LIz5
7tDZ+dGbiZy4RwrV5JLN8atYNmlfYKBacRVeHOh7oWUecMcrLF34VHs8qEcld89x
+rtk1FxiYtuFjeUQQ+GAA3yYSUFqiPKcB6TfFbkBIg9bvmZ9WR9Md/jJP/BH4lqF
Jpq492ZDZWMsbuwDvlXKTfBm7akfaBsX9oA2OUEHslBP+bP7GrVEY7VLg2KXoO0=
=qvwe
-----END PGP SIGNATURE-----

Build #6 stable

1.0.3:

  • template replacements compatible with MyBB 1.8.7

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAABCAAGBQJXAwIdAAoJEOL9rFzOOKd9g8kH/0T1BJxuTE56h0jBjdej0Pan
5NXet59fP+3ehsq3eeqozwP9zXlSQ/HoNcWJ4bhd27saA7hUTifYBCQRlFdMIybW
1sl89v3xWwml+7uQkEEhiP2SGIY1CK02TWvIhD0okYY8QVFIeAasMUOaQxmxA8Pi
9W27YpkCepqGDuP16IODqjehzOSBmK0y/I6tcPvx34Ud0t5u5F17hbrQbQhUOOYR
+ydmIsyVSjolEZhJ+tCSZ3I94jUIVQgC4RUrXTgaZgvVg7A/zwPAzosgS+R+++7l
bByYle4p8ItkDxSNZBf+fBOylwS1FJRl2OmBiZAH6xyyRY1QWoLnfWlkcoRlJuE=
=iG/4
-----END PGP SIGNATURE-----

Build #5 stable

1.0.2

  • fixed avatar overwriting when using Gravatar
  • minor corrections

Build #4 stable

1.0.1

  • MyCode images replacing operation case insensitive
  • fixed replacing non-HTTPS Gravatar avatars, set the operation as case insensitive
  • non-HTTPS avatars removal operation case insensitive

Re-upload with compatibility set to 18*

Build #3 stable

1.0.1

  • MyCode images replacing operation case insensitive
  • fixed replacing non-HTTPS Gravatar avatars, set the operation as case insensitive
  • non-HTTPS avatars removal operation case insensitive

Build #2 dev

1.0

Build #1 dev

The first build has no changes.