• last updated 4 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Setting global var as well in -procs file (debuggin install from repo)

setting global variable in -init proc (actually a last option for upgrades from repository)

Debug "upgrade from repo strangeness": don't skip loading of acs-tcl files

Remove useless quotes

bump version numbers to 5.9.1b9 respectively to 2.9.1b9 to prepare for release

  1. … 91 more files in changeset.
Standardize spellings of names

  1. … 4 more files in changeset.
- additional subcommand [ad_conn vhost_url] to obtain the url of host-node-mapped subsites

- solve the problem with util_current_directory via [ad_conn vhost_url]

- Make util_current_directory subsite aware

- add [ad_conn behind_proxy_p] and [ad_conn behind_secure_proxy_p] to centralize logic

- use the new function fix [security::get_qualified_url] when running behind a proxy

- Dont add host_node_id to query parameter when it is set to 0

- add [ad_conn ajax_p] to check, whether the request was an ajax requests (assumption: ajax-request sets header-field -Requested-With: XMLHttpRequest")

- extend permission::require_permission to omit redirection of unauthenticaed users to the login page for ajax requests

- Introduce new proc ad_sanitize_filename implementing current best practices for ensuring a valid filename on most filesystems.

- Use it in every place where filename sanitization is performed in the code and deprecate fs::remove_special_file_system_characters.

TODO deprecate also util_text_to_html? Use case of sanitizing urls and filenames might have different requirements.

  1. … 5 more files in changeset.
Provide more infrastructure support for host-node-maps for more flexible domain handling

- add optional -cookie_domain parameter to the following functions

ad_user_login

ad_user_logout

sec_generate_session_id_cookie

auth::issue_login (wrapper for ad_user_login)

if not specified, the functions are full backward compatible

- add optional parameter -host_node_id to auth::authenticate

which refers to the node_id in the host-node-map

- pass host_node_id from from/to register pages

TODO:

1) probably, sec_generate_session_id_cookie picks up the wrong

session_id via [ad_conn session_id]

2) check interaction with CookieDomain (probably, we need

must not pass host_node_id wheren CookieDomain is non-empty)

  1. … 5 more files in changeset.
- fix bug for obtaining logout_url on host-node mapped subsites

- factor out security::get_register_subsite to streamline behavior of ad_get_login_url and ad_get_logout_url

security::driver: consider additionally nsssl_v4 nsssl_v6 as possible names

Make sure that driver dict d is set in host-node-mapped cases (many thanks to stefan sobernig for pointin that out)

- Refactor ad_get_login_url reduce replicated code and to make semantics clearer

- ad_get_login_url handles now as well cases, where a subsite is mapped to an application package on a subsite

- fix a bug in util_current_location in connection with hostnode map

Fix typo in comment

Use per-thread caching instead of nsv for never-changing variable (use ::acs::database_type instead of nsv ad_database_type; when available)

This improves concurrency and performance for tight loops (e.g. in developer support)

  1. … 1 more file in changeset.
- use shortcut for "select" in db_exec_plsql to bypass anonymous function creation

Fix code in cases, were object_type is not provided

Improve translation of ad-return-complaint message. Add missing translation

    • -2
    • +3
    ./catalog/acs-tcl.it_IT.ISO-8859-1.xml
- Remove duplicate processing of tags (was duplicated since 16 (!!) years, many thanks to Franz Penz for noticing)

- remove unneeded variable

allow host header fields with trailing dots (as these are allowed from DNS)

Correct square braces

Bump version number to make dependency on kernel changes (i18n) explicit

Add as well API functions [membership_rel::get] and

[membership_rel::get_group_id] analogous to [membership_rel::get_user_id]

Add new API call membership_rel::get_user_id to avoid code duplication

Make encoding the url part the default behavior. Add extra exception for the trivial case of dummy url '#'.

Make url part encoding in export_vars optional by the -base_encode flag to avoid regressions in existing code (e.g. urls containing anchors)