• last updated 6 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
define templating caches

The original code had at least two OpenACS caused memory leaks: it led

to an unbounded growth for __template_cache_value and did not unset

the nsv variables __template_*_timeout. This bug led openacs.org to a

broken state (forums posting lead to the message "Not enough memory to

allocate the list internal rep"). The new code makes use of the per

entry expire feature of ns_cache and emulates the behavior otherwise.

don't change idioms without need

- fix variable name in validator (many thanks to Richard Hamilton)

remove extra colons

produce more efficient code from the adp-compiler (using byte compiled functions, using local vars)

make test for user_switching more robust

New package parameter MenuBarWithFolder to allow to deactivate the automatic display of the folders when the menubar is displayed

- use the proper delivery context for download operations in inherited file objects

- Support for cross package symlinks to folders containing folders

    • -2
    • +1
    /openacs-4/packages/xowiki/tcl/folder-procs.tcl
    • -27
    • +63
    /openacs-4/packages/xowiki/tcl/package-procs.tcl
Adding dotlrn-xowiki pkg as a module.

Removing unneeded --

Minor 18n improvements.

- use naviserver writer thread if configured

correct parentesis

- fix syntax of regex (many thanks to Stefan Sobernig)

Add version of the external files of the flowplayer to the repository to ease hunting for working versions

require at least Tcl 8.5.4 for this version (see as well TIP #143)

Avoid potential attacks via too many open files.

Background: Tcl uses still select() for event processing, which has a pretty much hardcoded limit of max 1024 files (one has to recompile Tcl, libc, and maybe the kernel). With bgdelivery it is possible to deliver more than 1000 files simultaneously, but Tcl panics, when the number of descriptors is too large. We experienced the problem in a sitation, where the 1000+ requests were produced from a incorrect browser behavior (e.g. iPad issues a series of range requests rapidly without closing the last requests); bgdelivery allows now just one spooling request for a file from a user at one time.

- define global variable ::xo::naviserver for quick test, whether we are running under NaviServer

- fix ns_ur[en|de]code of "--" and "-charset" etc. This fixes the behavior of NaviServer, which has a "--" option terminator

- close a few opportunities for cross-site scripting attacks (e.g. via error messages)

    • -1
    • +8
    /openacs-4/packages/xowiki/tcl/package-procs.tcl
    • -1
    • +2
    /openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
fixed Bug #3210 as suggested by Malte

- guard rename-commands to improve robustness for reloading in newer tcl versions

added xo::broadcast -- a simple mechanism to send commands to different connection and scheduled threads

- make sure to avoid namespace overwrite due to form-vars with colons

- added ::xowiki::virus check based on clamav (http://sourceforge.net/projects/clamav/)

- added virus validator for uploaded ::xowiki::Files

- added virus valudator for formfield of type "file"

- add simple link checker for formfield "url" (force http, https, or ftp)

Treating ad_set_cookie's boolean switches as such.

- fixed bug (backport of fix in rev 1.74 of postgresql/apm-create.sql)

- bump version number to 5.6.1

file upgrade-5.6.0-5.6.1.sql was initially added on branch oacs-5-6.