• last updated 13 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- fix syntax in conditional page contract

- strengthen page contract

- improve error message

    • -2
    • +2
    /openacs-4/packages/calendar/www/view.tcl
- strengthen page contract

    • -2
    • +2
    /openacs-4/packages/calendar/www/view.tcl
- return always, when the parameter obj was found, the value (which might be the default)

- don't overquote general comments

- generalize tag validation

    • -6
    • +9
    /openacs-4/packages/xowiki/tcl/package-procs.tcl
    • -6
    • +8
    /openacs-4/packages/xowiki/tcl/weblog-procs.tcl
- hardening page contract

- improve handling of incorrect input

- terminate filter with filter_return when errors occur

- fix error message

- return for unset host entry ""

- add validate to user search

- fix HTML display of error message

- validate template id (rather than throwing an SQL error)

- allow post requests only from logged-in users

- allow empty port from provided host header

- add validation against invalid host header fields

- strenthen token checking of login form

- allow empty locale cookie

- return the invalid cookie in the error

- use filter_return to terminate filter on errors

- return complaint in case of invalid lanuguage setup

- add validator for locale (useful, when headers or locale-cookie were hacked)

- strengthen page contracts for return_urls

- provide an error message for invalid locale values

- don't swallow sliently exceptions

- improve robustness against incorrect input

Fix indentation from previous commit

Fixed problem when exporting empty variables pointed by Gustaf:

when one exported something like {{var ""} ... this was seen as absence of value,

so $var was searched for one in the caller scope. Hardened check for presence of an explicit value.

- validate email

- reject requests where host contains invalid characters