El RIDO

PHP `strict_types` seems to have been introduced with php 7. It will throw an error when you try to set it in PHP 5.

The keyword needs to be `3day`, not `3days`. The calculation mechanism supports the following keywords: https://github.com/PrivateBin/PrivateBin/blob/5f2daa5cd6e609bd88ef95e0c2b3ab27a6c75298/js/privatebin.js#L330-L332

The created paste will send the string and the backend will use the number of seconds given in the configuration file and not actually calculate anything. In your case that...

The `unsafe-eval` is required in Chrome and Safari for WASM loading. If not set, calling WebAssembly.instantiate will trigger an error in those browsers. https://github.com/PrivateBin/PrivateBin/blob/8232dce395e421450779bd710e5872399f792085/js/zlib-1.2.11.js#L34-L35 - [Technical background](https://github.com/WebAssembly/content-security-policy/blob/master/proposals/CSP.md#summary-of-webassembly-apis-and-their-risks) - [Browser comparison...

I'll add this to the 1.3 release track as a task to update the prettify library (and the others) before we publish the release. This may or may not solve...

I have updated all of the JS libs, but there was no change published for this one over the last year, so it remains unresolved. We probably will have to...

We are still using the prettify libraries for this functionality, so you would need to fix this upstream over in that project. Or you could look into switching privatebin to...

Note to self: When testing new icon libraries, use the script for size and speed comparisons from https://github.com/PrivateBin/PrivateBin/issues/148#issuecomment-502426961

Tainted file handling: I think they detect that there is a code path that extracts the paste ID as a file name from the $_GET parameters and finally might unlink...

According to our code coverage report, there are 79 tests exercising that line in our unit tests: https://privatebin.info/coverage/Model/AbstractModel.php.html#159