• last updated 4 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
js-libraries: improved naming of variables

Changed name "installedVersion" to "configuredVersion", since

the former might lead to the impression, that it refers only

to the locally installed version. Instead, this refers as well

to a CDN version (when available)

  1. … 4 more files in changeset.
reduced verbosity

js-libraries: removed variable "resourceUrl"

The variable "resourceUrl" was always used in a single branch but set

for all branches before. To ease maintenance and simplify

comprehension, it was removed.

tdom: "dom parse -html" implies the "simple" parser

The flag "-simple" is not needed when parsing with the flag "-html". This meanse

that

dom parse -simple -html ...

is equivalent with

dom parse -html ...

    • -5
    • +5
    /openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
Always use "--" in "dom parse" when document is interpolated

This is a safety measure to make sure that the document parsed is

never confused with an option, when the document starts with a "-". In

the best case, the error message provided by "dom parse" might be

misleading. This might be a problem for user contributed documents

(passed as variables, or return values from functions).

The double dash is supported in tdom since version 0.9.0.

    • -2
    • +2
    /openacs-4/packages/caldav/tcl/caldav-procs.tcl
  1. … 4 more files in changeset.
In essence, this change renames "version_dir" to "version_segment" as

well as "versionDir" to "versionSegment" to reflect the fact, that

this variable does not denote a directory, but a part of the path

appended to path "resourceDir".

various small fixes for js libraries

- fixed page contract in case a non-default version is downloaded

- provide always an argument "-version" to resource_info procs

- obtain current version number always via resource_info.installedVersion

(it refers to CDN and locally installed version)

- pass always versionDir via resource_info to ::util::resources::download

- always obtain version_dir from resource_info

  1. … 11 more files in changeset.
add "--" to separate argument list from potentially confusing (and externaly provided) content

Port of downstream feature request:

when filtering for not graded questions, if the entire exam has not ungraded questions, hide the entire exam block. The purpose is to reduce distractions in the UI.

added handling of literal object "arraycontainer"

Improved resource information for external libraries

- added vulnerability check for a particular version

- centralized URL generation for cdnjs URLS (will reduce maintenance work, when external URL changes)

- improve behavior when running without an Internet connection

improved description of parameter

Fix permission::write_permission_p. Before, the check if the user was the creation_user was always made against the currently logged in user, not the party given by the caller.

Dont fail when pk_formatted is empty.

Fix default https port in security::configured_driver_info

Extended json2dict to cover literal objects named "objectcontainer"

Extended regression test as well

    • -13
    • +20
    /openacs-4/packages/acs-tcl/tcl/json-procs.tcl
use everywhere util::json2dict

bump version numbers to reflect the updated resource-info API in acs-tcl

    • -4
    • +5
    /openacs-4/packages/xowiki/xowiki.info
Improved consistency of resource-info for the cookieconsentlibraries, added vulnarability info

In addition, this change makes the package variable "Version" more consistent with

other occurences, where version is just the version number. Here, it was the version path.

Improved consistency of resource-info for javascript libraries, added vulnarability info

Tested the following cases:

download check

- bootstrap

- bootstrap-icons

- bootstrap-treeview

- ckeditor4

- font-awesome

- highcharts

- cookieconsent2 3.0.3

- cookieconsent2 3.1.1

CDN check

- bootstrap

- bootstrap-icons

- bootstrap-treeview

- font-awesome

- highcharts

- cookieconsent2 3.0.3

- cookieconsent2 3.1.1

Don't set result variables for "header_stuff"

The method "header_stuff" was changes ages ago to

side-effect via the standard OpenACS template::head

interface rather than outputting to a variable, which

has to be passed around. This change removes some

leftover of this time.

    • -3
    • +3
    /openacs-4/packages/xowiki/tcl/package-procs.tcl
Include available version number and vulnerability check on swa pages

This eases the use of external JavaScript libraries by adding

the available version number and a link for vulnerability checks

on the site-wide admin pages (when this information is available)

- bumped version number to 5.10.1b6

    • -2
    • +2
    /openacs-4/packages/acs-tcl/acs-tcl.info
fix broken variable name

Do not allow unusual schemas like base64 and json as local URLs

This case was flagged by a vulnerability scan, but at least at the found instance

it was a false positive...

Extended json2dict to cover arraycontainer

Many thank to Rolf for his feedback!

Extended resource info dict with explicit version number and an API call to obtain the newest version number

The two new optional resource info fields are

- versionCheckAPI

- installedVersion

These fields are necessary to provide an admin page to check

whether the installed versions are the most recent ones.

made spelling more consistent

New parameter "scroll_to" for parameter page

The new parameter allows the code to jump to a named parameter in the

parameter editing page. This is very useful for pages with a high

number of parameters, if just one parameter should be changed.

improve page title

The index page list not only the "system" test cases, but as well the

test cases from the application packages

Make parameter optional