• last updated 21 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
    • -1
    • +7
    ./packages/xowiki/tcl/includelet-procs.tcl
    • -3
    • +4
    ./packages/xowiki/tcl/package-procs.tcl
- fixed severe vulnerability with path traversal attack

Translate messages

Fix call to is_content_type, parameter was fixed to be object_type to match oracle pl/sql

Set charset for xml so rss support works correctly. Without the charset set for the mime type it sends iso-8859-1 which is wrong.

Rolling back previos commit for 2 reasons: 1. this branch is closed; 2. the change not needed.

    • -1
    • +1
    ./packages/acs-admin/www/apm/parameter-add.xql
Retriving nextvalue of sequence using nextval sequence function.

    • -1
    • +1
    ./packages/acs-admin/www/apm/parameter-add.xql
- factor out adp name checking code

- allow adp includes from sub-packages (names are resolved relative to the package key)

    • -22
    • +37
    ./packages/xowiki/tcl/xowiki-procs.tcl
Require in all shipped policies swa permissions to create ::xowiki::Objects

    • -2
    • +2
    ./packages/xowiki/tcl/package-procs.tcl
Require in all shipped policies swa permissions to edit ::xowiki::Objects, since these can contain Tcl code

    • -2
    • +2
    ./packages/xowiki/tcl/package-procs.tcl
perform permission checks on included xowiki pages

    • -1
    • +11
    ./packages/xowiki/tcl/xowiki-procs.tcl
bump version number

security update for adp includes

    • -2
    • +25
    ./packages/xowiki/tcl/xowiki-procs.tcl
bump version number to make sure, apm picks up the newest version

fix parameter setting where a new parameter was defined after startup, and its value is being modified.

    • -6
    • +32
    ./packages/xotcl-core/tcl/06-param-procs.tcl
bump version numbers to pick up fixes from last weeks via apm-tools

allow dot in page order

    • -2
    • +2
    ./packages/xowiki/tcl/xowiki-procs.tcl
ensure to return package_id with a site-nodes entry in Package->first_instance

    • -2
    • +3
    ./packages/xotcl-core/tcl/06-package-procs.tcl
for locating the tcl script directory for xinha, use the actual package instance, if it is plain xowiki instance

    • -9
    • +19
    ./packages/xowiki/tcl/xowiki-www-procs.tcl
Don't barf, when cattree is empty

    • -0
    • +1
    ./packages/xowiki/tcl/category-procs.tcl
fix for bug #109

    • -19
    • +36
    ./packages/xowiki/tcl/xowiki-form-procs.tcl
    • -1
    • +2
    ./packages/xowiki/tcl/xowiki-procs.tcl
Fix admin priv check (thks Raul for catching that)

    • -10
    • +1
    ./packages/dotlrn/tcl/community-procs.tcl
    • -4
    • +1
    ./packages/dotlrn/www/applet-remove.tcl
Check permission before internal-redirecting to default template for that content type

    • -5
    • +13
    ./packages/file-storage/www/view/index.vuh
- deletegate delete to package_object to ensure cache flushing

    • -3
    • +3
    ./packages/xowiki/www/admin/delete-type.tcl
- check, if a prototype page was imported with language en, but the current language is different

    • -1
    • +11
    ./packages/xowiki/tcl/package-procs.tcl
- fetch always the parent_id for weblog entries

    • -4
    • +4
    ./packages/xowiki/tcl/weblog-procs.tcl
- don't let folder_path call get_instance_from_db with a folder_id

    • -3
    • +7
    ./packages/xowiki/tcl/package-procs.tcl
- ignore errors during at_delete in destroy operations

    • -2
    • +2
    ./packages/xotcl-core/tcl/01-debug-procs.tcl
- send bulk actions via POST

    • -3
    • +3
    ./packages/xotcl-core/tcl/30-widget-procs.tcl
- reduce verbosity

    • -2
    • +2
    ./packages/xowiki/tcl/xowiki-www-procs.tcl