• last updated 22 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
merge from oacs-5-10

  1. … 8099 more files in changeset.
release work

  1. … 4 more files in changeset.
address issue #3435 (many thanks to Michael Aram)

  1. … 1 more file in changeset.
merged changes from the oacs-5-9 branch and resolved conflicts

  1. … 7834 more files in changeset.
- add CSP nonce to script tags if nonce value is available

- turn function definition of acs_Focus() into a conditionally defined

body-script

- turn "body_event_handlers" into "window.addEventListener"

  1. … 4 more files in changeset.
- Added support for W3C Content Security Policy(CSP)

* For details about CSP, see https://www.w3.org/TR/CSP/

* New calls:

security::csp::nonce:

Generate a CSP nonce token token

security::csp::require /directive/ /value/:

Add a requirements of a page to the CSP in order to generate

later a tailored policy with the minimal permissions for

this page. For example, the following requirement is

currently added per default to the oacs-master template to

permit style tags and style attribites in the markup.

security::csp::require style-src 'unsafe-inline'

security::csp::render:

Generate a policy from the requirements

* Added Kernel Parameter CSPEnabledP to activate/desctivate CSP

(default on)

- Bump version numbers

acs-tcl to 5.9.1d11

acs-bootstrap-installer to 5.9.1d4

acs-kernel to 5.9.1d17

  1. … 7 more files in changeset.
- add support for W3C Subresource Integrity (SRI)

* For details about SRI, see https://www.w3.org/TR/SRI/

* Added arguments -crossorigin and -integrity

to the following functions

template::add_body_script

template::add_script

template::head::add_javascript

template::head::add_link

template::head::add_script

* Updated blank-master.adp

- some more cleanup:

* remove commented out code

* add missing argument documentation

(template::head::add_javascript)

* document arguments alphabetically

  1. … 3 more files in changeset.
- improve safety of HTML

  1. … 1 more file in changeset.
Merging back to HEAD branch oacs-5-8 (using tag vg-merge-oacs-5-8-from-20141027).

  1. … 2547 more files in changeset.
- allow message keys in javascript

- produce more efficient compiled adp template code (using preferably byte-compiled functions)

  1. … 1 more file in changeset.
- add support for the script async attribute (http://www.w3schools.com/tags/att_script_async.asp)

  1. … 2 more files in changeset.
Added content type and charset in HEAD block.

INcludes also previous changes from Gustaf for xinha support

  1. … 1 more file in changeset.
Merged from 5.4.2

  1. … 283 more files in changeset.
Type attribute of the style tag was rendered twice

Remove properties not used in default master.

Remove link multirow in default master, its not used.

Add skip_link property

  1. … 3 more files in changeset.
don't crash, if no xinha is available (<if @::array.field@ not nil> does not seem to work)

adding support for Xinha to new master templates

  1. … 1 more file in changeset.
Fixed the blank master as headscript was not defined (called script) and the foreach did not work either. Not to mention the fact that the <list> tag is unknown to OpenACS templating

  1. … 1 more file in changeset.
commit template::head and the needed modifications in the master templates to make it work to CVS HEAD

  1. … 6 more files in changeset.
Added missing @ for meta.http_equiv

Merged the 5.3 branch with HEAD. Look for tags with the pattern

drb-*-20070513

  1. … 324 more files in changeset.
Fixed typo in declared script type which prevented xinha from loading.

  1. … 3 more files in changeset.
Reluctantly moved the dotlrn toolbar here so it will work with existing sites.

  1. … 1 more file in changeset.
Moved some stuff to blank master from site master.

  1. … 2 more files in changeset.
Moved devsup here, it's css must be clashing with something else because

the formating is non-existent.

  1. … 1 more file in changeset.
got this stuff to load xinha stuff correctly however it's not rendering...

  1. … 1 more file in changeset.
Removed more xml stuff

More stuff related to using html transitional rather than xhtml

  1. … 1 more file in changeset.
Removed extraneous meta tag, and trailing "/" chars