DVZ Secure Content
Filters and forwards user-generated content from insecure protocols (non-HTTPS).
Change Log for DVZ Secure Content
Version 1.2.2 stable Build #16
- Fixed a SQL injection vulnerability
Upgrading: Overwrite files.
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE346WhYk6su6vogTe4v2sXM44p30FAmOXQAkACgkQ4v2sXM44
p317rwf+KY6nKZFDh63kOOxmEUEPNw1OgXUo4MvQX8/63jld+M6ryGO8WDtBHsH7
jepLfs4yBmQWhaBWtPNmgKDtvuNwamuwe8+4LgIFmfFkA1u2j6mB0rzzk4uBQYKM
E4DTVO+nRen/g1h8YfEUU0s7ybyFFDq5jV6OyfBLmXNbIpeJhP8JHSquPyXet2Ss
knnvI3WwpKphXfQVGneFtYDNn3BcmDILudmxLLGFaFLaDWEBgDIgXVaamie/Xx//
2OfQO6Rxfp5olNrlpvOURljx0JrhFZUYzBVwZ7OaVRYapKpfUVkkDkS1bIU6Z4gH
iD2pxnrAY3zBu1dBS7wjtj5fi8J9JQ==
=pd9m
-----END PGP SIGNATURE-----
Version 1.2.1 stable Build #15
- Fixed PHP 8 compatibility issues
- Fixed PostgreSQL, SQLite compatibility issues
- Updated default video templates
Upgrading: Overwrite files.
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE346WhYk6su6vogTe4v2sXM44p30FAmIwy6QACgkQ4v2sXM44
p31Ptgf/Qal1zRNk7gvk1HE+fB5hN4q1dazLkm2IWQmUe5ai6xd3nmOvZ/VHojZh
LJxlvHKHyqAp67zB++2f1nvxXsP7GvrNeZumrim+izpAhAKZUSmTxxXeS3wXH21N
GjRqoe4ECYzj+gZNh59Nr6mnKyLPikXqS/zDXDpr8AiRoe+3LJmqHHLDg0UtW7Ak
kVn6OGeSl6YHaxNtgYyq9aVsr1zP5ed0fs2LOz+Pjz2/rERC8I7/9j9TgOGl87o9
/WlpbS6S7e7zWg3BguHNT+NbrcyBxrhSGYNAAMe1nUI6wr7DvRppKz1vkUeWnyXU
RGM5etBqycyp7fEzIX14AlIZjfvOLQ==
=6aVf
-----END PGP SIGNATURE-----
Version 1.2 stable Build #14
- Added Proxy hostname exceptions to allow specified domains to bypass the proxy when using HTTPS
- Added enforcement of Block non-HTTPS avatars in the Admin CP
- Changed behavior of Filter non-HTTPS MyCode images to apply regardless of Image proxy setting
- Added
data-original-url
attribute to<img>
tags
- Fixed unintended proxying when Image proxy was disabled
- Fixed behavior when setting avatar by Gravatar email
- Improved compatibility with MyCode in 3rd party plugins
- Minor improvements
Upgrading: Overwrite files and re-activate the plugin.
-----BEGIN PGP SIGNATURE-----
iQEyBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAl/Lm1EACgkQ4v2sXM44
p31TAwf49GX1oPAxcwmP2dOdl3RyepdYlN1eFc5Xxx8M5EIAftzeSgGkBtBSWQlq
zGKd0fisS98rspde0CZ/ei8JmsycqZ2OsTxzP1vjagKXWjDhhLudKvNj+1VP0FN7
eCF7amY4F657b7UViTKMhHVzNg7A9B2fvtwBtut2PyV4UaRICp/Lk4qbbSWlxk1o
fWKtCW1d8m/6hlfMMiqiwPryc6XyJrfgBl+6DzoZzFfqki7PpaNKBQpbF3uFfCa3
m0rL8vcic9y2rXi9/itzRlyEtUSicfdHjxYzvRIIQCE9OrJB0LqeN9JytYDYtCrO
Kf8ZEKYhNF7bNqBaoYWU563uy2/E
=GjRo
-----END PGP SIGNATURE-----
Version 1.1.6 stable Build #13
- Updated for compatibility with
[img]
changes in MyBB 1.8.23
- Fixed avatar URL length check in Proxy avatar URLs
- Minor improvements
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEE346WhYk6su6vogTe4v2sXM44p30FAl8RjgEACgkQ4v2sXM44
p33EQwf/V+cH1V6mDjhuKCLWpgwo07PQ1BuX1dnsB6IqAjkcUbSEkDnVFVLGKEFw
bzbMoqJOImesqaLbu7qm0EcM5wVDorsxFxEH9POFLnm8x/+gpefqVqYgEVjEodPd
ZWMP91ryj7RtAo0yRGQI3jnTSGVYPPL+8xlicyLUpf0E+S6Oe2bPoS5qxkEecFIc
UTyvfoqtN66ZczxjjPwb2eaEe+JweY0KmtRldrUx5Pk3LJ91hrKW1FLYSYOmVx/l
jG2mFQ2I1swEVWiE02NewENzcYkFYxeWRCE4Ue1sGyeurZK/V0xgk9uGaFBgRRbN
F1HOSAnyov2RqSmOQCPO5rutBBjZ0w==
=44bG
-----END PGP SIGNATURE-----
Version 1.1.5 stable Build #12
1.1.5:
- Fixed check for All remote avatars proxied
- Minor fixes
Upgrading: overwrite inc/plugins/dvz_secure_content.php.
-----BEGIN PGP SIGNATURE-----
iQEcBAABCAAGBQJY8nC6AAoJEOL9rFzOOKd9WiEH/jvh85r3tvAgAO8G4D59m/H8
hz7c7XucmGTMNQL73VPjkJA+S08Pp3LSQDfi3pJ54EceU1xT2++BDyAEh8k2xEr8
NCFfE9DuY4Ynmqc9rEmvL+N1si8LkWxQ3b4ud80dTDGf2k4a+xXz1QnqW2+EemBd
o2HMZuaD7SZxQ3qZ7m3Yw5hRTvGRyWeL8sM4R9sGX/FBEvKlsl9Z5pn303H7qXKF
yK9ANCpljKRJOJfDHONV1SF6JYkbcMFjyFTqgjoM7BEhCdTM1YSTICedM7o3U7ca
nZ6xqIMkbS6SiHgrVD7q/rJmVTlLWTYgERoHRnUlx0vs7ZqiwG0A89kDDAT688I=
=ejZN
-----END PGP SIGNATURE-----
Version 1.1.4 stable Build #11
1.1.4:
- Fixed avatar handling in User CP (requires MyBB >= 1.8.11)
- Added base64 and base64url URL encoding
- Added All remote avatars proxied to the ACP Plugins page
- Updated insecure video embed services list
- minor plugin logic fixes
Upgrading: reinstall the plugin and adjust settings.
-----BEGIN PGP SIGNATURE-----
iQEcBAABCAAGBQJY5oMOAAoJEOL9rFzOOKd9qf0H/2BWpV64Pio3d+9EbdmBnLKR
uzq0SygJATnTyGukxLFWSmXsbNQveScPr9a4aPpNLDKyxFTitqHT0Oce77vrr07M
9uSR6iLaS7CwCl/I4SdTSTt3gV6Fl7ANzPLVbRyCRwIdSvKjuStvYj6s9sai53+I
HmpM8jOKS9ssRh/SePe/HNXDgGa64UgXga9tTUs0X4YMkSFPslRQAdpKb8Ey3Syn
gn0PG+pT6To0sg4rFduQPogRY49Rk3Z3oO28nQUmubb0wzdAYGfbVR0laRYW1myK
Ka4aa9vVYAPgdKiVTrI0n5REp47fJ3eTvlx4s6tTLqggt1Hny/qnDTySItvQbnI=
=PGcE
-----END PGP SIGNATURE-----
Version 1.1.3 stable Build #10
1.1.3:
- Fixed User CP avatar URL note and validation
- Third party plugin compatibility improvements
-----BEGIN PGP SIGNATURE-----
iQEcBAABCAAGBQJYmkgCAAoJEOL9rFzOOKd96rIH/iV8RZCR+d5rFypQxe+dTfLN
mNlfA4wl9MmdyKHzcrwMfEBthTpaC9LJDo0RyAEf+C2ZjuGutffWWLSKsT+cN7xQ
7W5/qWLwjSE5PA251P+8yXacocwUBPgoTKF4J1lmrqPb74lrx52FG2zIVPH6qajT
JCc8OGUnNirsMELvLzGzWrtJkd932LriM66WmUr/q+O+Fz6TTKpKTjypnsl389XS
Hnmjpwe2K2e97GX+bRKQAxQ5vQNbRXuLPa7FJ/111/WTYG6LKT3kj6/bTpL1wDO6
xgh2iiEcB/2OrH32VfUCtL4/AEo+WkMuWKRNLlny5WlOrwgTXmSa01CiBI/gOGk=
=V+Z9
-----END PGP SIGNATURE-----
Build #9 stable
1.1.2:
- Fixed too aggressive proxying of avatar URLs when saved from the ACP
- Compatibility with MyBB 1.8.8 MyCode parser changes
-----BEGIN PGP SIGNATURE-----
wsBcBAABCAAQBQJYCQwSCRDi/axczjinfQAA+wAIAEhmeorI70o4kvLNN+UzXVrP
0l9b+swSM76xZR/EDwz+CYPd5lliHmI70Uj+ckRWwJegi1G12/kGbrBeue4qStlY
nPdFRrWlfb16ZoltJfhKWFOaHxUvvkp/0qE2QEM7LTadkfuGPvgwcKfsbFxdkKGW
6Q5aDSRiC1Ox66KLgNTRIJYb4o17RANSKaI+O3tJN8shiN8wqwizYKZtz7dDicTr
8agH6G3v+vL3/wsfWPKcoz8hQYyUIL3qYlW+Jyg10+5ioL/xkUkmbmCT0DRcvcsh
buFcliFbXnkQs/ou9dfE5c6SY1OwRJnFGh083PS1qOHaJ074RGa2dHZ3SbLAScQ=
=tePt
-----END PGP SIGNATURE-----
Build #8 stable
1.1.1:
- fixed possible SQL errors when avatar URLs are too long for storage in Proxy avatars tool
-----BEGIN PGP SIGNATURE-----
wsBcBAABCAAQBQJXpgDOCRDi/axczjinfQAA5C8IAJYDnIZsVIqTMBMbXS7PyGjG
N4ZwZaL51Kpx94r6vsoWosboU/M42wfJCO7wBM9VCLtI+DzIGHPI90MTVs1I9RAt
snmb2I64i/T3oirFAgyQ/wsS8tXO0UeOOSC+db7XyA7YXKuPh2IJebgjSygA//eB
+q580jjH+M8uRu9O57dI+GL4srZP1BONSVZYPiL0BDJflncKfeAIuAdweOYBpqrC
QWiHbl9ir0mY4dAVDKe0RQvk6gbs+kBAXz+lue4A2n0VWcoXGUVYwUmSOgWYZl7/
+hEXVPdsyT+wOMcAXpwNfPGYCmarIijeJV4K9eHeVhUpt+2urT5JzLMYNob/qVo=
=YvJk
-----END PGP SIGNATURE-----
Build #7 stable
1.1:
- MyCode & avatar images proxy support
- Some Gravatar corrections removed (included in MyBB 1.8.7)
- minor fixes and improvements
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAABCAAGBQJXikOoAAoJEOL9rFzOOKd9IwcH+wRiwQprUQwo6G2tXlVlbchr
Mxsr9MDQWsi+VdQ5FMi+aTHMx0AdJWOnwjN4qiUddrrepCnKpLEMqkMJGKRoPxr6
TbU4JdXHph75XVSV+WjM4zyK+tN7kTqr6J1NvyQRP1uTJpolGYPetvjPtQK5LIz5
7tDZ+dGbiZy4RwrV5JLN8atYNmlfYKBacRVeHOh7oWUecMcrLF34VHs8qEcld89x
+rtk1FxiYtuFjeUQQ+GAA3yYSUFqiPKcB6TfFbkBIg9bvmZ9WR9Md/jJP/BH4lqF
Jpq492ZDZWMsbuwDvlXKTfBm7akfaBsX9oA2OUEHslBP+bP7GrVEY7VLg2KXoO0=
=qvwe
-----END PGP SIGNATURE-----
Build #6 stable
1.0.3:
- template replacements compatible with MyBB 1.8.7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAABCAAGBQJXAwIdAAoJEOL9rFzOOKd9g8kH/0T1BJxuTE56h0jBjdej0Pan
5NXet59fP+3ehsq3eeqozwP9zXlSQ/HoNcWJ4bhd27saA7hUTifYBCQRlFdMIybW
1sl89v3xWwml+7uQkEEhiP2SGIY1CK02TWvIhD0okYY8QVFIeAasMUOaQxmxA8Pi
9W27YpkCepqGDuP16IODqjehzOSBmK0y/I6tcPvx34Ud0t5u5F17hbrQbQhUOOYR
+ydmIsyVSjolEZhJ+tCSZ3I94jUIVQgC4RUrXTgaZgvVg7A/zwPAzosgS+R+++7l
bByYle4p8ItkDxSNZBf+fBOylwS1FJRl2OmBiZAH6xyyRY1QWoLnfWlkcoRlJuE=
=iG/4
-----END PGP SIGNATURE-----
Build #5 stable
1.0.2
- fixed avatar overwriting when using Gravatar
- minor corrections
Build #4 stable
1.0.1
- MyCode images replacing operation case insensitive
- fixed replacing non-HTTPS Gravatar avatars, set the operation as case insensitive
- non-HTTPS avatars removal operation case insensitive
Re-upload with compatibility set to 18*
Build #3 stable
1.0.1
- MyCode images replacing operation case insensitive
- fixed replacing non-HTTPS Gravatar avatars, set the operation as case insensitive
- non-HTTPS avatars removal operation case insensitive
Build #2 dev
1.0
Build #1 dev
The first build has no changes.