Activity OpenACS/openacs-4/packages/acs-tcl/tcl/security-procs.tcl

Tree
Accordion

Stats

Commits this week: 3

Total Committers:	22
Last Commit:	14:28
Commits this week:	3
Total Lines of Code (LoC):	2,822
Net change in LoC this week:	0

Commit Activity

last updated 7 hours ago

Constraints

Constraints: committers

Committer:

Log Comment:

Constraints: files

File Extension:

File Name:

Constraints: dates

Start Date:

End Date:

Tuesday 09 Sep 2014

10:31 am

gustafn

More
oacs-5-8:gustafn:20140909083153
changed 65 files
oacs-5-8

- change spelling of TCL to Tcl

- change requirements to Tcl 8.5

- -3
- +3
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 64 more files in changeset.

Tuesday 26 Aug 2014

3:25 pm

- only variables in a non-top namespace survive session cleanup. The logic of the old code assumed that global variables survive the request-cleanup. now, the cached values is kept in the ::acs::* namespace

- -7
- +7
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Wednesday 30 Jul 2014

1:22 pm

gustafn

- undo previous secure-cookie change since it interacts badly in situations where "RestrictLoginToSSLP" is "1" and https is available: In such cases, e.g. the login page is redirected from a http (insecure) url to an https (secure) page. But when later continuing on the http connection, the user appears to be not logged in, since a well-behaved browser does not send the "secure" login coockie over the insecure connection.

- -3
- +3
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

12:37 pm

gustafn

- white space changes: replace tabs by spaces

- -233
- +250
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

12:12 pm

gustafn

- replace "global" statement by variables with namespace paths

- -15
- +11
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

12:08 pm

gustafn

- move deprecated procs to file with deprecated functions

- -81
- +3
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 1 more file in changeset.

11:41 am

gustafn

- setting login-cookie to "secure" when set over secure connection

- -4
- +4
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

11:24 am

gustafn

- just set secure flag for secure connections

- -4
- +4
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

12:54 am

gustafn

- use signed cookie for session_id

- -2
- +2
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Saturday 26 Jul 2014

1:33 am

gustafn

- renew the session_id after privilege level change from unidentified to identified user

- -1
- +7
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Friday 14 Feb 2014

8:38 pm

gustafn

- fix typo

- -2
- +2
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Thursday 10 Oct 2013

10:44 pm

gustafn

More
oacs-5-8:gustafn:20131010204407
changed 10 files
oacs-5-8

- brace while expressions

- don't use expr within while expression

- use numeric comparison for truth values

- normalize string expressions

- -10
- +10
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 9 more files in changeset.

9:35 pm

gustafn

- use per-thread caching for security::driver and ad_server_modules

- -6
- +14
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

2:06 pm

gustafn

- new functions security::driver and ad_server_modules to simplify

redundant logic for determining secure drivers

- -32
- +47
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Tuesday 08 Oct 2013

12:13 pm

gustafn

- remove default value from ns_config, otherwise the function determines 443 also for non-configured ssl

- -2
- +2
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

12:02 pm

gustafn

- fix uninitialized variable

- -4
- +5
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

11:55 am

gustafn

- try to simplify logic to determine drivers

- dropped nsunix

- use string ops instead of regexp

- -72
- +59
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Sunday 29 Sep 2013

4:55 pm

gustafn

More
oacs-5-8:gustafn:20130929145532
changed 10 files
oacs-5-8

- modernize tcl

- -3
- +3
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 9 more files in changeset.

Saturday 07 Sep 2013

10:37 am

gustafn

- replace deprecated "ad_get_user_id" by "ad_conn user_id"

- -2
- +2
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 8 more files in changeset.

Friday 16 Aug 2013

8:57 pm

gustafn

- reduce hard-coded config-section names in code

- -9
- +38
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Monday 08 Apr 2013

5:50 pm

gustafn

More
MAIN:gustafn:20130408155025
changed 9 files
MAIN

Performance improvements for rp_filter and parameter:

- improve performance of rp_filter (which is run on every

non-resources request) significantly (often a factor of 2)

- improve scalability by reducing number of required mutex locks

(e.g. for secret token handling)

- -52
- +68
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl
… 8 more files in changeset.

Friday 29 Mar 2013

5:30 pm

gustafn

More
MAIN:gustafn:20130329163056
changed 1 file
MAIN

- store secret tokens as described in the comment per thread (previously it did not)

- use tcl 8.5 language construct to shorten code

- -34
- +12
./security-procs.tcl
- History
- Source
- Diff
./security-procs.tcl

Tuesday 19 Apr 2011

2:08 am

daveb

More
MAIN:daveb:20110419000801
changed 1 file
MAIN

Fixed to handler cookies from previous version correctly. Add back in inf max_age for session cookie when Remember Me is checked so it passes the expiration test.