• last updated 9 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Fix for sitebug #150 (security relevant)

The login widget at the navbar contained in its query variable

the password of a user in plain text (e.g. when the user has

mistyped the password, but as well on other error conditions).

Now, the password is filterer in the return_url in such cases.

Many thanks to Khy H for reporting this bug.

For details, see

https://openacs.org//bugtracker/openacs.org/bug?bug_number=150

  1. … 1 more file in changeset.
remove traces of md5::md5, since ns_md5 is emulated also for AOLserver

  1. … 2 more files in changeset.
added editor hints and white-space cleanupCVS: ----------------------------------------------------------------------

  1. … 14 more files in changeset.
Use finer grained api for person information and consider that new api won't fail when no person exists

Prefer again 'person::name', as the proc has been reimplemented using 'person::get_person_info', which uses the new 'person_info_cache' cache.

  1. … 13 more files in changeset.
Whitespace changes

  1. … 11 more files in changeset.
Prefer 'acs_user::get_element ...' to 'person::name ...', in cases when 'person' is a user, as it doesn't rely on util_memoize_cache.

  1. … 13 more files in changeset.
Fix typo in variable name

merged changes from the oacs-5-9 branch and resolved conflicts

  1. … 7834 more files in changeset.
- use export_vars to generate full URL

- fix gravatar image computation

- initial import of iopenacs-bootstrap3-theme

  1. … 53 more files in changeset.