• last updated 12 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
flag current request as being performed via aa_testing

modernize tcl

  1. … 1 more file in changeset.
white space changes

allow access via automated testing also via standard login interface

make spelling of names more consistent

  1. … 5 more files in changeset.
Revert massive replacement of empty list creation sentences. The use of '[list]' instead of '{}' adds semantics that could be used for performance improvements in the future, such as using a different internal representation. There is already work in this direction, avoiding the generation of the string representation during comparison of empty strings (huge thanks to Stefan Sobernig for the pointer: https://core.tcl.tk/tcl/info/44527c632ed609c2).

  1. … 475 more files in changeset.
improve CSP in accordance with Google's csp-evaluator.withgoogle.com

  1. … 1 more file in changeset.
Prefer '{}' to '[list]' when creating empty lists

  1. … 71 more files in changeset.
fix more typos

  1. … 5 more files in changeset.
revert escaped changes

  1. … 1 more file in changeset.
fix more typos

  1. … 4 more files in changeset.
Fix typos

  1. … 42 more files in changeset.
Factor out code for navisever and aolserver

  1. … 3 more files in changeset.
fix typo

  1. … 1 more file in changeset.
add comment

Add TODO item

- use "ad_try" instead of "with_catch"

- use "ad_try" instead of "with_finally"

  1. … 4 more files in changeset.
Bug fix: avoid confusion between command argument and option, when argument starts with "-"

  1. … 81 more files in changeset.
Bugfix ad_user_login

-expire flag for ad_set_signed_cookie (and therefore ad_set_cookie) was not specified by ad_user_login and set false per-default. This prevented parameters to set cookie expiration to have an effect, even when -max_age was correctly specified.

Now we set the -expire flag according to the -forever flag.

merged changes from the oacs-5-9 branch and resolved conflicts

  1. … 7834 more files in changeset.
- add [ad_conn behind_proxy_p] and [ad_conn behind_secure_proxy_p] to centralize logic

- use the new function fix [security::get_qualified_url] when running behind a proxy

  1. … 2 more files in changeset.
- Dont add host_node_id to query parameter when it is set to 0

Provide more infrastructure support for host-node-maps for more flexible domain handling

- add optional -cookie_domain parameter to the following functions

ad_user_login

ad_user_logout

sec_generate_session_id_cookie

auth::issue_login (wrapper for ad_user_login)

if not specified, the functions are full backward compatible

- add optional parameter -host_node_id to auth::authenticate

which refers to the node_id in the host-node-map

- pass host_node_id from from/to register pages

TODO:

1) probably, sec_generate_session_id_cookie picks up the wrong

session_id via [ad_conn session_id]

2) check interaction with CookieDomain (probably, we need

must not pass host_node_id wheren CookieDomain is non-empty)

  1. … 7 more files in changeset.
- fix bug for obtaining logout_url on host-node mapped subsites

- factor out security::get_register_subsite to streamline behavior of ad_get_login_url and ad_get_logout_url

security::driver: consider additionally nsssl_v4 nsssl_v6 as possible names

Make sure that driver dict d is set in host-node-mapped cases (many thanks to stefan sobernig for pointin that out)

- Refactor ad_get_login_url reduce replicated code and to make semantics clearer

- ad_get_login_url handles now as well cases, where a subsite is mapped to an application package on a subsite

- fix a bug in util_current_location in connection with hostnode map

  1. … 2 more files in changeset.
allow host header fields with trailing dots (as these are allowed from DNS)

Standardize spelling of names of products (Tcl, AOLserver, PostgreSQL, NaviServer)

  1. … 43 more files in changeset.
Fix editing bug