• last updated 23 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
added "ad_conn bot_p" to check, whether request was initiated by a bot

This feature is based on a simple heuristic based on the user-agent

(which can be certainly extended). It is useful to avoid e.g. Google

bot to run into "notifications subscribe" + login attempts, which

are useful for not-logged-in user, but not for bots. These attemps

lead to failures in google statistics that might reduce the google

ranking of a web site.

  1. … 2 more files in changeset.
introduced "ad_file" as a means to avoid unexpected tilde substitution in file names

  1. … 50 more files in changeset.
- icanuse: added nsv_dict

- bumped version number to 5.10.0d37

  1. … 1 more file in changeset.
don't depend on the node-id cache, which is only available, when xotcl-core is loaded

  1. … 4 more files in changeset.
acs::per_request_cache: standardize per-request caching

- added per-request cache verfsy similar to acs::per_thread_cache

- use per-request-cache on several occasions

- bump version number of acs-tcl to 5.10.0d35

  1. … 9 more files in changeset.
acs::per_thread_cache: standardize per-thread caching

- added per-thread cache based on namespaced Tcl variables.

- use per-thread-cache on several occasions

- bump version number of acs-tcl to 5.10.0d34

  1. … 14 more files in changeset.
move ad_get_host_node_map and security-locations-host-names from db_cache_pool to partitioned cache

  1. … 3 more files in changeset.
provide compatibility function ns_dbquotelist, which is available in newer versions of NaviServer

  1. … 1 more file in changeset.
don't pass sensitive information (e.g. password) as query variable, but use client properties instead.

see also issue #3344

  1. … 5 more files in changeset.
bugfix: unmounting a package could lead to a deletion of services used in other packages

A new API call "site_node::unmount_services" can be used to unmount all services in a first step.

unmount services before calling "site_node::delete -node_id $node_id -delete_subnodes -delete_package"

prevents collateral damage.

  1. … 3 more files in changeset.
moved "populate_secrect" to "sec_*" prefix to reduce clobbering of global namespace

  1. … 6 more files in changeset.
backport security patch from oacs-5-10

  1. … 1 more file in changeset.
new API call "http_auth::basic_authentication_decode" to replace 3 distinct implementations of this logic

  1. … 6 more files in changeset.
new funcion: util::inline_svg_from_dot: refactored version from private api-procs function.

use new function in api-doc

CVS: ----------------------------------------------------------------------

  1. … 3 more files in changeset.
improve spelling

  1. … 13 more files in changeset.
new feature: 00-canisue-procs: generalization for feature testing in OpenACS installations

  1. … 2 more files in changeset.
bump version number to offer people upgrading via apm a new version

ad_sign: new optional parameter "user_binding"

The parameter user_binding allows to bind a signature to a user.

When the value is "-1" only the user who created the signature can

obtain the value again. A value of 0 (default) means no user binding.

The permissible values might be extended in the future.

bump version number to 5.10.0d24

  1. … 2 more files in changeset.
bump version number to 5.10.0d23

Allow ad_return_url to be called also, when connection is closed.

This might be the case e.g. for the search renderer. In this case, a default_url is used

  1. … 3 more files in changeset.
Bump acs-tcl version number to 5.10.0d21 to be able to refer to a version with the changes on tree_sortkeys on site nodes

Fixed bug with SuppressHttpPort on admin/index page of acs-subsite

for details see: https://openacs.org/forums/message-view?message_id=5399931

  1. … 2 more files in changeset.
fix bug with SuppressHttpPort on admin/index page of acs-subsite

see: https://openacs.org/forums/message-view?message_id=5399931

  1. … 3 more files in changeset.
fix for redirect-to-secure, when SuppressHttpPort is set

This changes as well:

- improve symmetry security::get_insecure_location and security::get_secure_location

- add regression test to cover basic cases

- bumb version number of acs-tcl to 5.10.0d19

  1. … 2 more files in changeset.
- Add support for dowloading archives

- add reusable adp-includes for handling resource downloads

- bump version number to 5.10.0d18

  1. … 4 more files in changeset.
make all keys of the resource_info dict camel case

  1. … 4 more files in changeset.
provide a common API for downloading resources from a CDN instead of maintaining per-packet variants

::util::resources::download

::util::resources::can_install_locally

::util::resources::is_installed_locally

- bump version number to 5.10.0d16

  1. … 1 more file in changeset.
reduce hammering on nsv for variables that never change. Use namespaced variables instead.

  1. … 3 more files in changeset.
bump version number to 5.10.0d14

provide both, more legacy and more finegrained functionality for cache management

  1. … 1 more file in changeset.