• last updated 14 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- fixed severe vulnerability with path traversal attack

- reset filename in case of attack

- fixed severe vulnerability with path traversal attack

- fixed severe vulnerability with path traversal attack

- allow returnredirect to external url, which is under control of the script

- fix api-browser to allow returnredirect to aolserver documentation

- factor out api_tclcode_to_html from api_tcl_to_html to improve reusability

  1. … 1 more file in changeset.
Normalizing string comparison operations into tcl 8.4 operations, enabling byte-code compilation for expressions and many conditionals

  1. … 364 more files in changeset.
modifying api-doc/index to accept a package-key, returns a package-view from a package-key if it is installed etc. for example /api-doc/index?about_package_key=acs-datetime would be the same as browsing to /api-doc/package-view?version_id=x where x is the local version_id. This feature will help static docs link to evolving api automatically. oracle sql is untested, but should work.

    • -0
    • +20
    ./index-postgresql.xql
maintains chain-of-crumb links when toggling show/hide source

adds package to trail-of-crumbs for proc-view as it is in procs-file-view, display-sql, etc

fix markup, make @see /file/path/foo.tcl, @see /doc/db-api.html @see http://openacs.org/foo work

  1. … 1 more file in changeset.
removed the remaining procs which were -deprecated -warn in 5.0 and fixed most occurances of those procs in the code

  1. … 43 more files in changeset.
can't use regular adp variable interpolation since when displaying source you don't want to translate tags, you want to display the 'real source'

merge of changes between oacs-5-0-0b4 and oacs-5-0-0-final to HEAD

  1. … 286 more files in changeset.
add -public and -private for some procs, minor bug in acs_object::get some @see notes

  1. … 12 more files in changeset.
- Changed link to tcl.tk instead of dev.scriptics.com

- Added more descriptive error message when the page doesn't respond

Get rid of the list of uninstalled, not-enabled packages when there are none

Removed colon from title

Hide private procs by default

Hide deprecated procedures by default

Refactored search widget out into separate includeable template

  1. … 2 more files in changeset.
noquote on the dimensional_slider html fragment

fixed noquote problem some more

fixed noquote problem

adding noquote to errmsg adp var

- Merged to HEAD.

    • -1
    • +1
    ./plsql-subprograms-all-postgresql.xql
  1. … 1 more file in changeset.
- Changed query to use pg_user instead of pg_shadow. Patch 235 by Gabriel Durca.

    • -1
    • +1
    ./plsql-subprograms-all-postgresql.xql
add a br clear=both so that the footer does not step on left side boxes

noquote changes (Dirk Gomez)

  1. … 40 more files in changeset.
merge of 4.6.3b1 to HEAD

  1. … 95 more files in changeset.