request-processor-procs.tcl

  • last updated 8 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- move comment to the right place

- Implements "Upgrade Insecure Requests" headers:

W3C Candidate Recommendation

https://www.w3.org/TR/upgrade-insecure-requests/

- added kernel parameter MaxUrlLength (default 2000) to remove

hard-coded length in request-processor-procs.

- lifted data model restriction of 100 characters for url-segments

(changing types of "site_nodes.name" from "varchar(100)" to "text")

(PostgreSQL only)

- site_node__node_id

* use built-in string functions instead of characterwise loop

* use default for last argument

* Improve source-code documentation

- bumped version number of kernel to 5.9.1d15

  1. … 3 more files in changeset.
Improving root_of_host_

- reduce dependency of the paths in the configuration script

- treat not only http, but as well https locations

- improve comments

- don't complain in rp_lookup_node_from_host when pass-in host is emtpy (return empty node_id as well)

- removed escaped testing code

- regenerated documentation to fix escaping problem in docbook: when a "programlisting" contains a message key, it is properly escaped when putting a ­ after the first hash

  1. … 124 more files in changeset.
- improve behavior on invalid host headers and comment the purpose in more detail

  1. … 1 more file in changeset.
- terminate filter with filter_return when errors occur

- fix error message

- return for unset host entry ""

- add validation against invalid host header fields

  1. … 3 more files in changeset.
- use filter_return to terminate filter on errors

- return complaint in case of invalid lanuguage setup

- don't swallow sliently exceptions

- reject requests where host contains invalid characters

- split ad_log into two parts; util::request_info returns now the request information as a string, can be used in web-interface as well

  1. … 1 more file in changeset.
- use consistently "clock clicks -microseconds"

- bump version number to 5.9.1d8

  1. … 1 more file in changeset.
- check for invalid UTF-8 characters in url (would lead to errors at

least in postgres).

- bump version number to 5.9.1d5

  1. … 1 more file in changeset.
- fix regular expressions for pretty-times

- increasing max url size from 100 to 132 as needed on openacs.org (should be probably a package parameter)

- don't swallow error message in case site_node::get fails

- provide better message, when URL is doomed to fail

- don't try to show broken richtext editor on mobile devices

(it is better to show plain textarea than a display where nothing can be entered)

  1. … 5 more files in changeset.
.xql-file reform of acs-tcl (part 1)

- remove sql statements from the code, where these are provided via .xql

- prefer empty sql statements over various forms of *SQL*

  1. … 7 more files in changeset.
- add PUT and DELETE to accepted HTTP methods (see http://openacs.org/forums/message-view?message_id=4867987)

- don't write error messages to the error.log, when acs-subsite/www/resources are accessed via the resource filter

- new function: "ad_log" (same interface like "ns_log") to output

calling context to log file (calling URL and callstack)

  1. … 2 more files in changeset.
- prefer ns_quotehtml over ad_quotehtml

  1. … 36 more files in changeset.
- remove .html from link to documentation

- fix indentation

  1. … 1 more file in changeset.