OpenACS / openacs-4 / packages / acs-tcl

tcl

Tools

Line History

Line Count Graph
Line Count Graph

Stats

Commits this week: 0
Total Committers: 71
Last Commit: 17:09
Commits this week: 0
Total Lines of Code (LoC): 72,371
Net change in LoC this week: 0

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated 1 hour ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Thursday 29 Dec 2022
1:52 pm

gustafn

improved support for cluster-wide operations

Options
    • -4
    • +14
    ./01-database-procs.tcl
  2. … 2 more files in changeset.
1:05 pm

gustafn

added cluster-awareness

NOTE: one should use here the acs-cluster infrastructure instead to

achieve better scalability and easier cache maintenance

Options
    • -11
    • +11
    ./community-core-procs.tcl
Wednesday 28 Dec 2022
10:25 am

gustafn

update comments

Options
    • -5
    • +5
    ./exception-procs.tcl
Thursday 22 Dec 2022
3:39 am

gustafn

improve robustness

Options
    • -3
    • +3
    ./text-html-procs.tcl
    • -1
    • +1
    ./test/doc-check-procs.tcl
Tuesday 13 Dec 2022
4:05 pm

antoniop

Cleanup duplicated line

Options
    • -1
    • +0
    ./test/utilities-procs.tcl
Sunday 04 Dec 2022
12:36 pm

gustafn

make parsing more robust

Options
    • -2
    • +2
    ./text-html-procs.tcl
Tuesday 29 Nov 2022
7:19 pm

gustafn

Set "softrecreate" in nsf o avoid full cleanup on redefinition of classes

Options
    • -0
    • +6
    ./00-icanuse-procs.tcl
1:48 pm

trenner

fix typo

Options
    • -1
    • +1
    ./test/application-data-link-procs.tcl
Monday 28 Nov 2022
6:49 pm

gustafn

New package parameter for acs-tcl: DbLogMinDuration

This parameter can be used to adjust the time threshold for longdb

warnings in the log file. When SQL logging is turned on, it might

also adjust the threshold, unless it is already more sensitive.

Bump version number to 5.10.1d25.

Options
    • -4
    • +60
    ./01-database-procs.tcl
    • -1
    • +6
    ./database-init.tcl
  3. … 1 more file in changeset.
Sunday 27 Nov 2022
6:55 pm

gustafn

improve spelling

Options
    • -4
    • +4
    ./01-database-procs.tcl
    • -1
    • +1
    ./application-data-link-procs.tcl
    • -2
    • +2
    ./security-procs.tcl
    • -7
    • +7
    ./utilities-procs.tcl
    • -2
    • +2
    ./test/community-core-test-procs.tcl
    • -1
    • +1
    ./test/utilities-procs.tcl
  7. … 4 more files in changeset.
6:47 pm

gustafn

improve resolution in fallback case

Options
    • -1
    • +1
    ./00-icanuse-procs.tcl
Saturday 26 Nov 2022
5:53 pm

gustafn

Moved the experimental disk-cache from utilities to the other cacheing infrastructure

Options
    • -0
    • +76
    ./acs-cache-procs.tcl
5:47 pm

gustafn

Make use of new API "ad_mktmpdir" and "ad_opentmpfile" instead of "ad_tmpnam"

Options
    • -3
    • +2
    ./apm-file-procs.tcl
    • -2
    • +2
    ./http-client-procs.tcl
    • -2
    • +2
    ./security-procs.tcl
    • -3
    • +3
    ./test/application-data-link-procs.tcl
    • -5
    • +7
    ./test/community-core-test-procs.tcl
    • -15
    • +19
    ./test/http-client-procs.tcl
    • -32
    • +37
    ./test/security-procs.tcl
  8. … 1 more file in changeset.
5:46 pm

gustafn

New API "ad_mktmpdir" and "ad_opentmpfile"

Since "ns_mktemp" is deprecated (on the C level) and is prone

to vulnerabilities. This effects as well "ad_tmpnam" in OpenACS,

which uses "ns_mktemp".

Newer C-compilers complain about this more loudly:

Due to security concerns inherent in the design of mktemp(3),

it is highly recommended that you use mkstemp(3) instead.

The security concern is that when ns_mktemp() is used to generate a

(unique) file name, which is used for opening a file, an attacker can

intercept the running binary and sneak in a different file. Although

ns_mktemp() guarantees to return a unique file name, there is no

mechanism to prevent another process or an attacker from creating a

file with the same name before the application attempts to open it.

The problem with using mkstemp() instead is that it has different

semantics, since it returns the open file. So one cannot blindly

replace these calls, but it requires some refactoring. Unfortunately,

this also effects application code, since NaviServer offers

"ns_mktemp" on the Tcl level.

To make it short: one has to separate out different use_cases of

"ad_tmpnam":

(a) use it to obtain a name for creating a file, which is subsequently opened

(b) use it to obtain a name for creating a directory

(c) use it as a name, providing name as a unique name to some external programs.

Case (a) is similar to the "mkstemp(3)" recommendation above. For this

usage scenario, the call "file tmpfile..." in Tcl 8.6 can be used (but

it should also respect the configured tmp directory. This function

is also very similar to "ns_opentempdir" in NaviServer, which uses

as well "file tmpfile". Therefore, we have created a new API call

"ad_opentmpdir ..." which respects the OpenACS settings.

Case (b) can be addressed by "file tempdir" in Tcl 8.7, or by a function

in tcllib. The new API function "ad_mktmpdir" provides respects the

OpenACS settings, and works for Tcl 8.6 or newer.

Case (c) is somewhat different, since it just wants to create a unique name. This case has not received a special API so far

Options
    • -65
    • +42
    ./utilities-procs.tcl
  2. … 1 more file in changeset.
Friday 25 Nov 2022
2:07 pm

gustafn

Bugfix: Get database name from postgres connection string keywords

The connection string can be provided for libpq either as the plain

dbname (old style) or as a list of keywords (new style).

In the latter case, the full keyword string was returned

instead of the dbname.

Options
    • -7
    • +25
    ./01-database-procs.tcl
1:20 pm

gustafn

fixed typo (many thanks to Franz Penz for spotting this)

Options
    • -2
    • +2
    ./defs-procs.tcl
Thursday 24 Nov 2022
3:45 pm

gustafn

Replaced "ns_mktemp" by "ad_tmpnam" to ease code maintenance

The underlying C library API for "ns_mktemp" is deprecated

for security reasons, we will have to do something about it.

Options
    • -3
    • +3
    ./test/application-data-link-procs.tcl
  2. … 8 more files in changeset.
1:44 pm

gustafn

document right changes on new installs for api-doc

Options
    • -1
    • +4
    ./apm-install-procs.tcl
Wednesday 23 Nov 2022
8:45 am

gustafn

make behavior more robust when (erronously) called without a connection

without handling no-connection, the error message is swallowed

Options
    • -2
    • +6
    ./defs-procs.tcl
Monday 14 Nov 2022
3:26 am

raulr

improve Oracle compatibility

Options
    • -0
    • +5
    ./site-nodes-procs.tcl
Sunday 13 Nov 2022
10:37 am

gustafn

Minor CSP improvements

- provided ability to add "trusted-types" and "require-trusted-types-for"

directives (Trusted Types policies)

For details, see:

https://blog.bitsrc.io/trusted-types-api-for-javascript-dom-security-fcdafa927e73

- changed default "object-src" from 'self' to 'none'

Options
    • -5
    • +8
    ./security-procs.tcl
6:11 am

raulr

improve Oracle compatibility

Options
    • -8
    • +18
    ./security-procs.tcl
Tuesday 08 Nov 2022
7:04 pm

gustafn

Deescalation: the usage of the pairs in export_vars is not so dangerous as it looked at first sight.

The problem case was originating from the call

lappend __vars [lindex $_var 0] [uplevel subst [lindex $_var 1]]

which calls Tcl's "uplevel" with two arguments. In this case, the arguments

are concatenated and the evaluated in the caller's frame. There is a substitution

before the evaluation. When just one argument is passed in, this problem there

is only one evaluation:

lappend __vars [lindex $_var 0] [uplevel [list subst [lindex $_var 1]]]

Options
    • -5
    • +5
    ./utilities-procs.tcl
  2. … 1 more file in changeset.
2:59 pm

gustafn

added warning to export_vars

Options
    • -1
    • +8
    ./utilities-procs.tcl
1:45 pm

gustafn

added optional parameter "-timeout" to "CACHE eval ..." method

Options
    • -8
    • +12
    ./acs-cache-procs.tcl
10:55 am

trenner

make ad_sanitize_filename more robust to filenames with parentheses + extend automated tests

Options
    • -4
    • +7
    ./utilities-procs.tcl
    • -0
    • +4
    ./test/utilities-procs.tcl
Monday 07 Nov 2022
2:34 pm

gustafn

new API call util::potentially_unsafe_eval_p

Check content of the string to identify potentially unsafe content

in the provided string. The content is unsafe, when it contains

externally provided content, which might be provided e.g. via

query variables, or via user values stored in the database. When

such content contains square braces, a "subst" command on

theses can evaluate arbitrary commands, which is dangerous.

The new API call is used in "::xo::Package->return_page", where the

"subst" command stripped from its command substitution capabilities.

In case, command subsitution is needed, perform this prior this call.

bumped acs-tcl to 5.10.1d23

bumped xotcl-core to 5.10.1d13

Options
    • -1
    • +40
    ./utilities-procs.tcl
  2. … 3 more files in changeset.
Thursday 27 Oct 2022
12:57 pm

gustafn

Deactivate api-doc access for all registered users by default

Over many years, all "Registered Users" got per default access

to /api-doc. This is probably OK, when one assumes that the

registered users are developers. However, providing source code

access to all registered users can pose a security thread,

especially on large sites.

For new installs, api-doc is now just accessible for site-wide admins.

Providing more liberal rights for users can be achieved via

setting the permissions via the sitemap.

Options
    • -8
    • +21
    ./apm-install-procs.tcl
Sunday 23 Oct 2022
8:19 pm

gustafn

don't create version directory in a checking function

Options
    • -1
    • +6
    ./utilities-procs.tcl
Friday 21 Oct 2022
1:30 pm

trenner

fix typo

Options
    • -2
    • +2
    ./text-html-procs.tcl