• last updated 21 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Reduce usage of ns_mktemp in OpenACS

ns_mktemp uses the deprecated old POSIX call mktemp(), which should

not be used anymore for security reasons (race between the name

creation and opening the file). This change removes several usages of

"ns_mktemp" from OpenACS and replaces it with calls to the

safe Tcl call "file tempfile ..." (introduced by Tcl 8.6).

    • -5
    • +6
    ./packages/xotcl-core/tcl/bgdelivery-procs.tcl
    • -2
    • +1
    ./packages/xotcl-core/www/show-class-graph.tcl
    • -9
    • +7
    ./packages/xotcl-core/www/show-object.tcl
added function xo::write_tmp_file

The new function uses an atomic call to create a temporary file and

is therefore lass prone to attacks.

bumped verison number to 5.10.0d41

    • -0
    • +8
    ./packages/xotcl-core/tcl/utilities-procs.tcl
reinstantiate accidentially deleted code

    • -0
    • +9
    ./packages/xowf/tcl/test-item-procs.tcl
fix header generation

since the headers are set in a loop, "ns_set put" is incorrect

since it is additive. "ns_set update" is correct.

make using page-filter "object_id" backwards compatible by allowing it to be used also during update scripts

improve spelling

    • -1
    • +1
    ./packages/acs-tcl/tcl/test/security-procs.tcl
improve log message

    • -2
    • +2
    ./packages/acs-admin/tcl/apm-admin-procs.tcl
Do not urlencode the return URL in every case, but only when this falls back to the current URL from the connection context, normally coming from "ns_conn url" which will return it "raw", as in not encoded for any purpose

    • -2
    • +3
    ./packages/xowiki/tcl/xowiki-www-procs.tcl
add comments with class names to ease navigation in the source file

    • -2
    • +169
    ./packages/xowf/tcl/test-item-procs.tcl
URLencode the return URL, or the server might complain for invalid characters (e.g. unencoded umlaut characters)

    • -1
    • +2
    ./packages/xowiki/tcl/xowiki-www-procs.tcl
whitespace change

    • -2
    • +2
    ./packages/xotcl-core/tcl/30-widget-procs.tcl
Remove hard-coded styling with the "style" element to get a more consistent appearance

(many thanks to Monika Andergassen for looking into this).

    • -7
    • +2
    ./packages/xowiki/tcl/bootstrap-procs.tcl
    • -2
    • +2
    ./packages/xowiki/tcl/includelet-procs.tcl
    • -5
    • +5
    ./packages/xowiki/tcl/table-widget-procs.tcl
Document behavior

Whitespace cleanup

improve query variable checking

    • -1
    • +1
    ./packages/xowiki/tcl/folder-procs.tcl
Adapt 'ad_urlencode_url' to the new 'ns_parseurl' stricter behavior

    • -17
    • +33
    ./packages/acs-tcl/tcl/utilities-procs.tcl
added CSS properties for adding scrollbars to overly large exam texts. Not sure, these are always wanted.

    • -0
    • +2
    ./packages/xowf/www/resources/test-item.css
Initial support for composite questions

A composite question is a test-item containing other regular test

items. This makes it possible to define a larger test item case for

which arbitrary other questions can be associated (e.g. short text

question plus an MC and ordering question etc.). The randomization

features (shuffling, x out of N, etc.) of the included test-items are

preserved such that it is possible to present the student e.g. a sub

question where only 2 out of 5 possible alternatives are displayed.

The provided implementation builds for a composite question consisting

of a constant exam intro text and the selected sub items including

points, minutes etc. The points and minutes of the composite question

are computed as the sum of the points and minutes of the

sub-items. The actual sub-items are constructed at runtime such that

per-user randomization can be applied.

Current shortcoming: question with percent-substitutions are not

supported (since the exam intro text is placed at composite form

creation time already into the form, therefore, it is the same for all

students). Furthermore, the substitution semantics are not clear

concerning the included content.

    • -116
    • +196
    ./packages/xowf/tcl/test-item-procs.tcl
include form-vars in log messages for workflows since this eases debugging

add checker for object_ids. In order to use this, a recent version of nsf is required, no accepting abbreviations for all types

    • -0
    • +13
    ./packages/xotcl-core/tcl/01-debug-procs.tcl
tighten checking on input parameters

    • -3
    • +3
    ./packages/xotcl-core/tcl/01-debug-procs.tcl
    • -2
    • +3
    ./packages/xotcl-core/tcl/06-package-procs.tcl
allow user to open exam answering in multiple tabs in try-out mode

    • -1
    • +6
    ./packages/xowf/lib/inclass-exam-answer.wf
fix creating/editing of xowiki::Forms

This change essentially reverts the change of July 2, which broke

the feature to specify "editor=none". This is important for the

"form" form-field entry, which requires a FORM tag, that is

usually removed by actual version of the ckeditor.

    • -17
    • +32
    ./packages/xowiki/tcl/form-field-procs.tcl
    • -2
    • +2
    ./packages/xowiki/tcl/xowiki-form-procs.tcl
added value checker, improved comments and logging statements

    • -12
    • +13
    ./packages/xowiki/tcl/xowiki-www-procs.tcl
file q-and-a-new-2-postgresql.xql was initially added on branch oacs-5-10.

    • -0
    • +0
    ./packages/faq/www/admin/q-and-a-new-2-postgresql.xql
file q-and-a-new.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./packages/faq/www/admin/q-and-a-new.tcl
file q-and-a-new.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./packages/faq/www/admin/q-and-a-new.adp
file q-and-a-new-2.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./packages/faq/www/admin/q-and-a-new-2.tcl
file q-and-a-edit.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./packages/faq/www/admin/q-and-a-edit.tcl
file q-and-a-edit.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./packages/faq/www/admin/q-and-a-edit.adp