• last updated 6 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
remove javascript urls and onclick handlers from xowiki menubar (yui and bootstrap)

- add nonce attribute to javascript created via tdom

- add HTML IDs to menu items

- add ability to add listener (list with 2 elements: type (such as

"click") and script (body of a function to be executed).

    • -1
    • +1
    /openacs-4/packages/xowiki/tcl/folder-procs.tcl
    • -11
    • +48
    /openacs-4/packages/xowiki/tcl/yui-procs.tcl
- replace onclick handle by event listener

- remove onlick handler be event listener

- avoid event bubbling for click listener

- add nonce to inline javascript

- use "-force" flag for CSP "script-src 'unsafe-inline'" for ckeditor4

- update version dependency to acs-tcl

- bump version number to 0.7

- use "-force" flag for CSP "script-src 'unsafe-inline'" for ckeditor4

- update version dependency to acs-tcl

- bump version number to 5.9.1d13

    • -3
    • +3
    /openacs-4/packages/xowiki/xowiki.info
- adding "-force" parameter to security::csp::require

- bump version number to 5.9.1d12

    • -2
    • +2
    /openacs-4/packages/acs-tcl/acs-tcl.info
- add conditional name normalization to simple_item_ref

    • -1
    • +4
    /openacs-4/packages/xowiki/tcl/package-procs.tcl
- use "www-" prefix

-- handle ie 11 (uses a different header field for CSP)

- move CSP generation to the end

- update security settings

- use maxcdn rather than netdna CDN

    • -2
    • +2
    /openacs-4/packages/dotlrn/install.xml
- use maxcdn rather than netdna cdn

    • -2
    • +2
    /openacs-4/packages/xowiki/xowiki.info
- use attribute "placeholder" rather than onfocus handler

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

- replace deprecated "cc_lookup_email_user ..." by "party::get_by_email -email ..."

    • -2
    • +2
    /openacs-4/packages/dotlrn/www/member-email.tcl
- use "file rootname ..." rather than "file root ..."

- shorten export_vars argument list

- use "info procs" rather than "info proc"

- replace deprecated "cc_lookup_email_user ..." by "party::get_by_email -email ..."

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

    • -2
    • +2
    /openacs-4/packages/dotlrn/lib/member-email.tcl
    • -2
    • +2
    /openacs-4/packages/forums/www/message-email.tcl
- fix escaped change

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

- replace deprecated "cc_lookup_email_user ..." by "party::get_by_email -email ..."

- use export_vars to generate full URL

- use explicit "create" statement

- user "info commands" rather than "info command"

- use explicit create statement

- mark cc_* functions as deprecated, since more general functions exists in acs_user::, party::, or group:: namespaces

- make protocol-agnostic links for gravatar

- use ns_md5 when available

- add CSP directive