• last updated 11 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- add support for W3C Subresource Integrity (SRI)

* For details about SRI, see https://www.w3.org/TR/SRI/

* Added arguments -crossorigin and -integrity

to the following functions

template::add_body_script

template::add_script

template::head::add_javascript

template::head::add_link

template::head::add_script

* Updated blank-master.adp

- some more cleanup:

* remove commented out code

* add missing argument documentation

(template::head::add_javascript)

* document arguments alphabetically

- bring version in www (in cvs) in sync with version from packages/acs-bootstrap-installer/installer/www/

- provide a better error message in case the request processor fails early

- Implements "Upgrade Insecure Requests" headers:

W3C Candidate Recommendation

https://www.w3.org/TR/upgrade-insecure-requests/

- security::redirect_to_secure: add flag "-script_abort" to make it

usable in filter procs (ad_script_abort triggers errors without

error message)

- security::get_secure_location:

* align implementation to function documentation (to make it usable

for sub-sites). Last version returned always the "configured

secure" location, not the "current secure location"

* replace regexps by util::split_location/util::join_location/

- add missing expand operator

- add kernel parameter to make ad_session_id cookies secure (useful on sites, where all sessions are via https, improves security rating on e.g. mozillas observatory tool)

- provide default masters in case no theme provides a template

file plain-streaming-head.adp was initially added on branch oacs-5-9.

file plain-streaming-head.tcl was initially added on branch oacs-5-9.

- reduce redundancy handling legacy network drivers

- simplify code

- fix bug for host-node-mapped subsites: on the (subsite) admin-page

of a host-node-mapped subsites, the link to site-wide-admin should

always point to the main site.

- add new helper function util::configured_location to address the bug

above to return the configured location as configured for the

current network driver. While [util_current_location] honors the

virtual host information of the host header field,

util::configured_location returns the main configured location

(probably the main subsite).

- extend [util_driver_info]

* make the passed-in array name optional and to return always a dict

* include the configured host name in the result (dict/array)

- add cross references via @see to make it easier to switch between

related functions

- bump version number of acs-tcl to 5.9.1d10 and acs-subsite to

5.9.1d7 to address dependencies

    • -2
    • +2
    /openacs-4/packages/acs-tcl/acs-tcl.info
- improve labels on "install from repo" (distinguish between "install" and "upgrade")

- fix potential problem, when form objs is already preloaded

    • -2
    • +5
    /openacs-4/packages/xowf/tcl/xowf-procs.tcl
Removed unnecesary exists, causing problems at least when form field file is used as repeat field, not showing the add button properly

- adding missing $ sign

Deactivating commit hook for now, for testing

- don't change names of arguments unless necessary, since such cases require a DROP FUNCTION

composition-rel reform:

- apply changes developed by Michael Steigman for making rel-types

configurable whether these should be composable or not

(default is: these are composable, which was up to now the only

choice)

- improved documentation of log argument lists of SQL functions

- Background:

http://openacs.org/forums/message-view?message_id=5330734

http://openacs.org/forums/message-view?message_id=4031049

- bump version number of acs-kernel to 5.9.1d16

  1. … 20 more files in changeset.
file upgrade--5.9.1d15-5.9.1d16.sql was initially added on branch oacs-5-9.

file upgrade-5.9.1d15-5.9.1d16.sql was initially added on branch oacs-5-9.

- fix incorrect links

- distinguish in apm_package_selection_widget between operations (updates/installs/or both)

- remove unneeded quoting

- use dollar quoting for SQL comments

- add verbosity setting

- make it easy to log SQL statements as these are executed

- remove initial-install-p flag

- updated package info

- bump version number to 0.149 to allow other packages to rely on the initialize parameter of "get_instance_from_db"

- add optional parameter "-initialize true|false" to "get_instance_from_db"