• last updated 19 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- standardize url construction to protect against injection attacks

- harden page contract

- provide link for deprecated functions

- harden page contracts

  1. … 1 more file in changeset.
- fix typo

- harden page contract

- fix validity of HTML

  1. … 5 more files in changeset.
- quote HTML attribute values

  1. … 9 more files in changeset.
- improve validity and security of HTML of admin pages

- improve page_contracts

  1. … 36 more files in changeset.
- use type checking for boolean parameters in page_contracts to improve security

  1. … 24 more files in changeset.
Merging back to HEAD branch oacs-5-8 (using tag vg-merge-oacs-5-8-from-20141027).

  1. … 2533 more files in changeset.
- add preview for images

- deactivate source view for images

  1. … 1 more file in changeset.
- fix typo

- improve handling of erroneous and malicious paths provided to the api browser

  1. … 1 more file in changeset.
- make procs-view more robust against invalid paths

- allow source view also for www/procs-file-view

- trim path for www/content-page-view and www/procs-file-view

- render not only objects with absolute names as xotcl-objects

- improve integration with xotcl code (especially for "content pages")

  1. … 1 more file in changeset.
- fix markup: <ul>/</ul> pair was inside a multiple, not wrapping it

- render www-files with syntax highligher (adding links)

- improve rendering of package-view calls (left column was to small)

- improve validity of HTML markup

- don't treat "@" as API command in syntax highlighter

- remove "api" prefix from functions in the "::apidoc::*" namespace

- mark externally called functions as public

  1. … 3 more files in changeset.
- make input more robust to leading/trailing spaces

- improve spelling in comments and string

  1. … 1 more file in changeset.
- show relevant XQL code instead of all XQL code

- provide links to full XQL code

- fix handling of absolute vs. relative command names

- show SQL code (and Tcl code not defined via apidoc) in sam style

- provide tooltips for Tcl commands, NaviServer/AOLserver commands and

API calls

  1. … 1 more file in changeset.
- modernize Tcl

- allow abbreviated man poges, document case

- remove unneeded loop

- move out configuration stuff

- generalizing code

- fix potential bug, when passed-in proc name contains wild-card

character * ("info procs|commands" return multiple results, "info

args" raises an error)

- enable proc-view to work with tcl-comands and naviserver/aolserver

commands as well

- fix outdated URLs

- improve performance of syntax highligher significantly (for large sites with many namespaces/procs by an order of magnitude, taks e.g. 100ms instead of 5secs)

- move private functions into a namespace

- replace nested proc-defintions by namespaced procs

- use thread-persistent dict instead of per-call array for formatting information

  1. … 1 more file in changeset.
- make sure, safe_p is always set

- check ids in page contracts

- use util::http::get instead of ns_httpget

  1. … 2 more files in changeset.
- point to naviserver doc

- use util::http::get instead of ns_httpget

- use consistently "naturalnum" instead of "integer" when accepting just positive values

  1. … 101 more files in changeset.