• last updated 7 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
provide a stable order of list items by sorting

added link to "Security and Privacy Posture Overview" to acs-admin page

improved robustness, when cluster parameters are changed without a restart

reduced verbosity

provide posture overview for widely-accessible-packages when count == 1

    • -5
    • +13
    ./www/widely-accessible-packages.adp
    • -6
    • +24
    ./www/widely-accessible-packages.tcl
added test for xotcl/version-numbers

Added state of "robots.txt" and "security.txt" to posture overview

Prettify subsite admin page

- Made explicit that "Administration" means "Subsite Administration"

(use the term consistently)

- Changed message key of acs-subsite.administration to "Subsite Administration"

- added icons to subsite admin index page (full set only for bootstrap icons)

  1. … 8 more files in changeset.
increased timeout for checking requests on own site

fixed package_id in ADP page

improved PostgreSQL version compatibility

fixed URLs

New pages for admins: Security and Privacy Posture Overview

As expressed as a wish from OpenACS users at the last OpenACS

conference, a "Security and Privacy Posture Overview" was added that

offers a quick overview of the state of the system and eases access to

the parameters scattered over different packages in the system.

The page offers:

- Quick overview

- Check of security and privacy relevant package parameters

- Permission and accessibility check of mounted packages

- Response header check

- External library check (CDN vs local usage, vulnerable or outdated libraries)

TODO: One should probably reconsider the permissions of some of the standard site nodes

(similar to what we did with the API browser some time ago).

    • -0
    • +81
    ./www/widely-accessible-packages.adp
    • -0
    • +170
    ./www/widely-accessible-packages.tcl
file posture-overview.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/posture-overview.adp
file widely-accessible-packages.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/widely-accessible-packages.tcl
file widely-accessible-packages.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/widely-accessible-packages.adp
file posture-overview.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/posture-overview.tcl
spell "site-wide" consistently with a dash

  1. … 33 more files in changeset.
fixed typo

removed obsolete file

Made in parameter-add/edit/delete operations update of info file optional

    • -2
    • +5
    ./www/apm/version-dependency-add-2.tcl
Support default values and return:url for parameter management pages

The internationalization admin page is not only package specific, move it up

adapt to latest cluster management changes in acs-tcl

added link to cluster info to acs-admin main page when cluster is enabled

Cleanup of external binaries: always use "util::which" to resolve binaries

Background: it is important to always use the same binaries of some

programs. This is important for security reasons, consistency, and

configurability (some operating systems have read-only file systems,

which might be on the path and should be avoided for some operations).

  1. … 3 more files in changeset.
improved spelling

  1. … 1 more file in changeset.
Added support for automatic disconnect when a dynamic cluster node is shut down

When the dynamic cluster configuration has scale for certain

occasions, it makes sense to provide down scaling support when these

occasions are over, which does not rely on the configured cluster

disconnect timeout (ClusterAutodeleteInterval). The new code will send

automatically a disconnect request when a dynamic cluster node is

terminating gracefully.

Depending on the configuration, a new version of NaviServer will be

necessary to reliably execute disconnect requests. Appropriate changes

are in the NaviServer release/4.99 and main branches.

- Bumped version numbers:

* acs-tcl to 5.10.1b4

* acs-admin to 5.10.1b4

  1. … 3 more files in changeset.
Adding auto-deletion of dynamic cluster nodes and small refactoring

- New kernel parameter "ClusterAutodeleteInterval" to specify, when a

dynamic cluster node is not regarded as temporarily unavailable but

as definitely gone. The default value for this parameter is 2m (2

minutes).

- small refactoring to reduce duplicated logic

- Bumped version numbers:

* acs-kernel to 5.10.1b4

* acs-tcl to 5.10.1b3

* acs-admin to 5.10.1b3

  1. … 4 more files in changeset.
Small update for cluster support

- Improved visualization of cluster nodes that we lost contact to

- New kernel parameters to reduce hard-coded values and to make purpose more explicit

* new parameter ClusterHeartbeatInterval (default 20s),

was hardcoded before to the new default value

* renamed PreferredLocationRegexp -> ClusterPreferredLocationRegexp

* renamed EnableLoggingP -> ClusterEnableLoggingP

- Bumped version numbers:

* acs-kernel to 5.10.1b3

* acs-tcl to 5.10.1b2

* acs-admin to 5.10.1b2

acs-kernel acs-admin acs-tcl/

  1. … 6 more files in changeset.