• last updated 7 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
use new API ::util::resources::resource_info_procs

reduced verbosity

minor cleanup: prefer list_of_lists, improved comments

    • -13
    • +13
    ./www/widely-accessible-packages.tcl
provide a stable order of list items by sorting

added link to "Security and Privacy Posture Overview" to acs-admin page

improved robustness, when cluster parameters are changed without a restart

reduced verbosity

provide posture overview for widely-accessible-packages when count == 1

    • -5
    • +13
    ./www/widely-accessible-packages.adp
    • -6
    • +24
    ./www/widely-accessible-packages.tcl
added test for xotcl/version-numbers

Added state of "robots.txt" and "security.txt" to posture overview

Prettify subsite admin page

- Made explicit that "Administration" means "Subsite Administration"

(use the term consistently)

- Changed message key of acs-subsite.administration to "Subsite Administration"

- added icons to subsite admin index page (full set only for bootstrap icons)

  1. … 8 more files in changeset.
increased timeout for checking requests on own site

fixed package_id in ADP page

improved PostgreSQL version compatibility

fixed URLs

New pages for admins: Security and Privacy Posture Overview

As expressed as a wish from OpenACS users at the last OpenACS

conference, a "Security and Privacy Posture Overview" was added that

offers a quick overview of the state of the system and eases access to

the parameters scattered over different packages in the system.

The page offers:

- Quick overview

- Check of security and privacy relevant package parameters

- Permission and accessibility check of mounted packages

- Response header check

- External library check (CDN vs local usage, vulnerable or outdated libraries)

TODO: One should probably reconsider the permissions of some of the standard site nodes

(similar to what we did with the API browser some time ago).

    • -0
    • +81
    ./www/widely-accessible-packages.adp
    • -0
    • +170
    ./www/widely-accessible-packages.tcl
file posture-overview.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/posture-overview.adp
file widely-accessible-packages.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/widely-accessible-packages.tcl
file widely-accessible-packages.adp was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/widely-accessible-packages.adp
file posture-overview.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./www/posture-overview.tcl
spell "site-wide" consistently with a dash

  1. … 33 more files in changeset.
fixed typo

removed obsolete file

Made in parameter-add/edit/delete operations update of info file optional

    • -2
    • +5
    ./www/apm/version-dependency-add-2.tcl
Support default values and return:url for parameter management pages

The internationalization admin page is not only package specific, move it up

adapt to latest cluster management changes in acs-tcl

added link to cluster info to acs-admin main page when cluster is enabled

Cleanup of external binaries: always use "util::which" to resolve binaries

Background: it is important to always use the same binaries of some

programs. This is important for security reasons, consistency, and

configurability (some operating systems have read-only file systems,

which might be on the path and should be avoided for some operations).

  1. … 3 more files in changeset.
improved spelling

  1. … 1 more file in changeset.