• last updated 4 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
merge with missing files

  1. … 1464 more files in changeset.
merge from oacs-5-10

  1. … 8099 more files in changeset.
strengthen boolean parameters in page contracts

  1. … 31 more files in changeset.
Make use of new API "ad_mktmpdir" and "ad_opentmpfile" instead of "ad_tmpnam"

  1. … 6 more files in changeset.
Make use of util::file_content_check and check also in other cases

This change also covers the case, where the checkmark for uploading

zip files was added marked in "upload file". It will also report

errors which were silently swalled before.

Bumped version number to 5.10.1d1

  1. … 2 more files in changeset.
added validator for zip files

use util::unzip instead of plain "exec unzip" commands

  1. … 3 more files in changeset.
improve spelling

  1. … 5 more files in changeset.
Fix typo

Do not allow backslashes in folders created via zipfile upload

As the folder name is used also for looking up for existing folders, the safest approach is to block the user: the risk with an automatic sanitization would be to overwrite existing folders without the user realizing

use "ad_file" as a means to avoid unexpected tilde substitution in file names

  1. … 12 more files in changeset.
Move 'util::content_size_pretty' into 'acs-lang' and rename it to 'lc_content_size_pretty', localicing 'bytes' and adapting automated tests. Bump 'acs-lang' version.

  1. … 41 more files in changeset.
Prettify data size using 'util::content_size_pretty'

  1. … 1 more file in changeset.
Bring files on oacs-5-10 in sync with HEAD

  1. … 162 more files in changeset.
Refactoring of 'folder-zip-add'

Fix folder creation in 'folder-zip-add'

Whitespace changes

File storage max upload limit reform:

the max upload limit will now default to empty. Rationale: this value is

one that ages quickly with respect to new storage requirements, and is

currently set to something incompatible with the vanilla Naviserver configuration

(500MB fs vs 20MB ns).

The upgrade script will make so that instances setting this parameter

higher than the server upload limit configuration will be

set empty as well (this would never have an effect, as server

will prevent the upload altogheter anyway).

Max upload limit in bytes is now retrieved from a proc implementing

this fallback to server configuration logics. Other than centralizing,

its purpose is to be used in client-side code checks in the future

so we could prevent a doomed upload in advance.

  1. … 6 more files in changeset.
create folder only if it not already exists

remove conditions, which are always true

remove parens

  1. … 2 more files in changeset.
merged changes from the oacs-5-9 branch and resolved conflicts

  1. … 7834 more files in changeset.
Improve robustness of "file delete" operations

  1. … 19 more files in changeset.
- bump version number to 5.9.1d1

- improve security of page_contracts

  1. … 8 more files in changeset.
- fix robustness on mangeled query parameters

.xql-file reform of file-storage

  1. … 18 more files in changeset.
- add editor hints to keep spaces/tabs in the future more consistent

  1. … 350 more files in changeset.
- standardize url construction to protect against injection attacks

- hardening page contracts

  1. … 8 more files in changeset.
- use type checking for boolean parameters in page_contracts to improve security

  1. … 14 more files in changeset.
Merging back to HEAD branch oacs-5-8 (using tag vg-merge-oacs-5-8-from-20141027).

  1. … 2547 more files in changeset.
- fix for bug #3233