• last updated 8 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- standardize url construction to protect against injection attacks

  1. … 42 more files in changeset.
- protect against xss

- protect against cross site scripting

- fix demo

- add missing message key

- hardening page contracts

  1. … 6 more files in changeset.
- harden page contracts

- harden page contracts

- imporve readability

- improve safety of page contracts

- replace (probably incorrect) query based on acs_object.tree_sortkey by a (probably sufficiently correct) recursive query based on cr_items (parent_ids)

- mark broken (and unused except from package "cms") function content::get_folder_labels as deprecated

- remove (broken) xql query for function that does not exist

- remove obsolete functions

- message catalog for russian (contributed by v.v.; see issue #3252)

    • -0
    • +84
    /openacs-4/packages/acs-admin/catalog/acs-admin.ru_RU.utf-8.xml
- improve validity of HTML

- message catalog for russian (contributed by v.v.; see issue #3253)

    • -0
    • +20
    /openacs-4/packages/xotcl-core/catalog/xotcl-core.ru_RU.utf-8.xml
- message catalog for russian (contributed by v.v.; see issue #3254)

- ensure quoting in urls

- fix for bug #3255

- harden page contract

- provide link for deprecated functions

- harden page contracts

- return error when invalid mode was specified

porting performance improvement on tags related query from oacs-5-8.

    • -4
    • +4
    /openacs-4/packages/xowiki/tcl/weblog-procs.tcl
Joining explicitly xowiki_tags table with xowiki_pagei so that query planner can react better, improving query execution time from mins to ms.

    • -4
    • +4
    /openacs-4/packages/xowiki/tcl/weblog-procs.tcl
- remove deprecated calls to cr::keyword::get_keyword_id,

cr::keyword::new, and cr::keyword::set_heading

- harden page-contract (backport from HEAD)

- harden page contract

- remove calls to deprecated function cr::keyword::item_get_assigned

- harden page-contracts against injections

- update version dependeny for acs-tcl

- bump version number

- bump version number to 5.8.3d3

    • -2
    • +2
    /openacs-4/packages/acs-tcl/acs-tcl.info
- rename "wordplus" by "token"