e5f97777ad
update
2008-02-10 17:27:59 -05:00
bbcf878f75
* meta: Check that the urls provided for authorurl, permalink, and openid
...
are safe and can't contain javascript.
2008-02-10 17:17:44 -05:00
4bfdbd4858
export $safe_url_regexp
2008-02-10 17:07:21 -05:00
d20e24b636
Also filter the attributes cite, longdesc, and usemap, which can contain URIs
2008-02-10 13:59:37 -08:00
34115a34e0
Move about: fix to version 2.31.3 in the changelog
2008-02-10 13:36:52 -08:00
2078f706d6
add parens around scheme regexp
2008-02-10 16:29:46 -05:00
a7be7bdf56
Do not allow the about: URI scheme
...
Some browsers interpret about: URIs like a limited version of data:
URIs. In particular, some versions of Internet Explorer interpret
arbitrary HTML content in about: URIs.
2008-02-10 13:23:28 -08:00
71ccaf0751
a few thoughts on data: security
2008-02-10 15:55:42 -05:00
6aa25f2757
update
2008-02-10 15:38:57 -05:00
6e077c3617
add news item for ikiwiki 2.31.2
2008-02-10 15:38:11 -05:00
dfd6bb3854
fix data:image handling
2008-02-10 15:24:03 -05:00
852994d950
changelog munging
2008-02-10 14:17:27 -05:00
4e791ed695
document security fix
...
The backported fix for stable is tagged and waiting for the security team
to upload.
2008-02-10 14:00:00 -05:00
ab04d07733
announcing version 2.31.1
2008-02-10 13:28:52 -05:00
d7e0c035e5
* htmlscrubber security fix: Block javascript in uris.
...
* Add htmlscrubber test suite.
2008-02-10 13:16:40 -05:00
196d27cbbc
Merge branch 'master' of ssh://git.kitenet.net/srv/git/ikiwiki.info
2008-02-10 12:21:49 -05:00
5e47db9356
improved sanitiser test suite
2008-02-10 12:21:20 -05:00
f185ab4afc
web commit by PatrickWinnertz: add link to my templates
2008-02-10 06:47:25 -05:00
17246f6b45
add some more tests
2008-02-10 03:42:54 -05:00
e9a215982b
new test case
2008-02-10 03:38:30 -05:00
973ea50190
improve wording and fix an example that is intentionall un-prefixed
2008-02-10 02:29:19 -05:00
c041e97c29
fix versions
2008-02-10 02:13:09 -05:00
3a13c7508c
prefix-directives branch is merged so no need to list anymore
2008-02-10 02:11:05 -05:00
122f6df325
Merge branch 'master' into prefix-directives
...
Conflicts:
debian/changelog
templates/change.tmpl
2008-02-09 23:02:52 -08:00
fb82474be0
Tighten page name regex to not allow carriage returns or line feeds
2008-02-09 22:53:28 -08:00
8b577726ab
add news item for ikiwiki 2.31
2008-02-10 01:12:10 -05:00
1eeb683f1a
releasing version 2.31
2008-02-10 01:11:48 -05:00
f1fcb5be9c
* Page templates can now use CTIME to show when the page was created.
2008-02-09 23:05:48 -05:00
a72a620134
change wording
2008-02-09 22:59:50 -05:00
18d16309ce
reword to put the more important info (page names) nearer the front
2008-02-09 22:59:01 -05:00
f16b3f17c0
note that's there's a git branch for this
2008-02-09 22:56:29 -05:00
6cd7cb9d87
remove random page
2008-02-09 22:54:54 -05:00
a35dd1d806
Add --prefix-directives and --no-prefix-directives options to ikiwiki
...
This avoids the need to set prefix_directives with --set.
2008-02-08 18:35:12 -08:00
6b35ec682b
Mention user wikilists in README.Debian
2008-02-08 18:12:38 -08:00
e183aa198f
Use plural "wikis" for consistency
2008-02-08 17:58:43 -08:00
6717ea5b95
clarify slightly
2008-02-08 13:57:41 -05:00
825847af95
reply
2008-02-08 13:52:31 -05:00
8116a17230
Merge branch 'master' of ssh://git.kitenet.net/srv/git/ikiwiki.info
2008-02-08 13:49:14 -05:00
35547272c6
web commit by lnussel
2008-02-08 09:03:51 -05:00
63e316f362
* Don't die if running with --getctime and rcs_getctime throws an error.
...
There are several cases (recentchanges files, aggregated files)
where some source files are not in revision control.
2008-02-07 22:11:54 -05:00
d78e213371
web commit by http://marcell.mars.myopenid.com/
2008-02-07 18:49:39 -05:00
4084c9a655
web commit by greg
2008-02-07 17:04:24 -05:00
d599a5d339
web commit by greg
2008-02-07 17:01:36 -05:00
5296ab065d
web commit by http://edward.myopenid.com/ : add [[todo/shortcut_with_different_link_text]] to watchlist
2008-02-07 07:05:51 -05:00
830152d2a9
Update status of prefix-directives branch.
2008-02-06 21:40:23 -08:00
9c6b6df76a
Add commented example of prefix_directives to sample ikiwiki.setup
2008-02-06 21:25:30 -08:00
1bcfef8be8
Allow whitespace in page names.
...
Spaces in page names map to underscores in file names. Newlines and
tabs follow ikiwiki's usual filename escaping rules: __10__ and __9__.
2008-02-06 20:02:25 -08:00
f3efacb16d
add ! prefix to some directives in templates, and to the recentchanges page
2008-02-05 16:18:29 -05:00
a4b2e77077
add support for prefix_directives
2008-02-05 16:14:38 -05:00
ce0e242d21
update after merge
2008-02-05 16:06:50 -05:00
Joey Hess
Josh Triplett
Joey Hess