• last updated 7 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
change icon, since the old one is not clear when bootstrap3 is used

Prefer unset to array unset when we want to delete the entire array

See https://wiki.tcl-lang.org/page/Dict+VS+Array+Speed

Trap illegal encoding exception thrown by tcl9 when a file contains invalid UTF-8 and skip the package with a warning

Unmaintained packages may contain illegal characters and we do not want the UI to crash in this situation

merge with missing files

  1. … 1450 more files in changeset.
merge from oacs-5-10

  1. … 8085 more files in changeset.
bumped version number from development version to release version

  1. … 93 more files in changeset.
make acs-admin page a better starting place for site-wide admin tasks

notice in the system log, when require_site_wide_package returns empty

acs-admin/install: provide a hint that we never offer a package with maturity 0 via "install from repository"

use new API ::util::resources::resource_info_procs

reduced verbosity

minor cleanup: prefer list_of_lists, improved comments

    • -13
    • +13
    ./www/widely-accessible-packages.tcl
provide a stable order of list items by sorting

added link to "Security and Privacy Posture Overview" to acs-admin page

improved robustness, when cluster parameters are changed without a restart

reduced verbosity

provide posture overview for widely-accessible-packages when count == 1

    • -5
    • +13
    ./www/widely-accessible-packages.adp
    • -6
    • +24
    ./www/widely-accessible-packages.tcl
added test for xotcl/version-numbers

Added state of "robots.txt" and "security.txt" to posture overview

Prettify subsite admin page

- Made explicit that "Administration" means "Subsite Administration"

(use the term consistently)

- Changed message key of acs-subsite.administration to "Subsite Administration"

- added icons to subsite admin index page (full set only for bootstrap icons)

  1. … 8 more files in changeset.
increased timeout for checking requests on own site

fixed package_id in ADP page

improved PostgreSQL version compatibility

fixed URLs

New pages for admins: Security and Privacy Posture Overview

As expressed as a wish from OpenACS users at the last OpenACS

conference, a "Security and Privacy Posture Overview" was added that

offers a quick overview of the state of the system and eases access to

the parameters scattered over different packages in the system.

The page offers:

- Quick overview

- Check of security and privacy relevant package parameters

- Permission and accessibility check of mounted packages

- Response header check

- External library check (CDN vs local usage, vulnerable or outdated libraries)

TODO: One should probably reconsider the permissions of some of the standard site nodes

(similar to what we did with the API browser some time ago).

    • -0
    • +81
    ./www/widely-accessible-packages.adp
    • -0
    • +170
    ./www/widely-accessible-packages.tcl
file posture-overview.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/posture-overview.adp
file widely-accessible-packages.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/widely-accessible-packages.tcl
file widely-accessible-packages.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/widely-accessible-packages.adp
file posture-overview.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/posture-overview.tcl
spell "site-wide" consistently with a dash

  1. … 33 more files in changeset.