• last updated 6 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- bump version number to 1.3d14

- improve security of return_urls

    • -3
    • +3
    /openacs-4/packages/forums/forums.info
- bump version number to 5.9.1d1

- improve security of page_contracts

- improve security of page_contracts

- bump version number to 5.9.1d5

- bump version number to 2.9.1d2

- improve security of page_contracts

  1. … 4 more files in changeset.
- bump version to 2.9.1d2

- improve security of page_contracts

    • -2
    • +2
    /openacs-4/packages/dotlrn/dotlrn.info
- prefer "localurl" over "return_url" as name of page_filter

    • -0
    • +1
    /openacs-4/packages/dotlrn/dotlrn.info
- prefer "localurl" over "return_url" as name of page_filter

  1. … 13 more files in changeset.
- prefer "localurl" over "return_url" of name of page filter

  1. … 76 more files in changeset.
- prefer "localurl" over "return_url" as name of page filter

- prefer localurl as name for page filter

  1. … 3 more files in changeset.
- bump version numnber to 5.9.1d7

    • -2
    • +2
    /openacs-4/packages/acs-tcl/acs-tcl.info
- prefer "localurl" over "return_url" as name of page_filter

- improve checking of return_urls in page_contracts

- bumb version number to 5.9.1d1 and update dependencies

- bump version numner to 5.9.1d1 and update dependencies

- improve security of page_contracts

- improve checking of return_urls in page_contracts

- improve checking of return_urls in page_contracts

  1. … 73 more files in changeset.
- improve checking for return_urls in page_contracts

- improve checking for return_url handling in page_contracts

CVS: ----------------------------------------------------------------------

- don't call tclcode_to_html on non-tcl files, since it might loop on e.g. /api-doc/content-page-view?version_id=4404&path=packages/acs-core-docs/www/xml/kernel/ext-auth.xml

- use page_contract_filter for return_url (can be used on many more

places as well)

- bump version to 5.9.1d2

- add page_contract_filter for return_url

- add generic "name not valid" message key

- bump version to 5.9.1d6

    • -2
    • +2
    /openacs-4/packages/acs-tcl/acs-tcl.info
- improve performance of util::external_url_p

- hardening page contract

- provide title property

- don't produce errors on too-large or invalid object_ids

- hardening validator

- minor cleanup

- validate show_patch_status properly