4fdeda0e34
ikiwiki-mass-rebuild: Fix tty hijacking vulnerability by using su. (Once su's related bug #628843 is fixed.) Thanks, Ludwig Nussel. (CVE-2011-1408)
2011-06-08 17:42:07 -04:00
d7c4001748
search: Update search page when page.tmpl or searchquery.tmpl are locally modified.
2011-06-03 20:31:20 -04:00
0423cac6de
let's assume some web server will think OFF is a good idea..
2011-06-03 14:41:13 -04:00
254080bc85
Support the Hiawatha web server which sets HTTPS=off rather than not setting it. (There does not seem to be a standard here.)
2011-06-03 14:36:31 -04:00
3b8fc54717
merged po4a robustness workaround
2011-06-03 12:39:09 -04:00
50bc05e7fb
changelog
2011-06-03 12:32:42 -04:00
30c3ceeaa2
Changed license of madduck's python plugins from GPL-2 to BSD-2-clause.
...
Apparently the rst library is changing to a GPL-2 incompatable license.
"madduck: joeyh: so yes, do as you think is right."
2011-05-19 14:37:16 -04:00
b4dd83642a
merged quoting changes
2011-05-13 11:24:16 -04:00
97a8d30dc1
Support YAML::XS by not passing decoded unicode to Load. Closes : #625713
2011-05-12 17:50:25 -04:00
b2754fa272
openid: also use Net::INET6Glue if available
2011-05-09 18:15:35 -04:00
825f81340a
aggregate, pinger: Use Net::INET6Glue if available to support making ipv6 connections.
...
Making outgoing ipv6 connections for openid auth is still broken; the glue
module does not seem to solve that, so I did not make openid use it.
2011-05-09 14:00:48 -04:00
fc79f2252e
Add conflict with libyaml-libyaml-perl, since that library does not support utf8. Closes : #625713 (see https://rt.cpan.org/Public/Bug/Display.html?id=54683 )
2011-05-06 14:38:27 -04:00
adabab4cc6
changelog
2011-05-06 14:32:55 -04:00
4a27adfa72
Danish translation update. Closes : #625721
2011-05-05 13:02:31 -04:00
e02b903054
releasing version 3.20110430
2011-04-30 17:27:18 -04:00
be0833b856
close bug already fixed a month ago in git
2011-04-30 16:40:52 -04:00
bad5072c02
tag: Avoid autocreating multiple tag pages that vary only in capitalization. The first capitalization seen of a tag will be used for the tag page.
...
Arguably, the real bug is in the interface to add_autofile, but since
that does take a filename, not a page name, it cannot really do case
handling on its own. The only other users of add_autofile in ikiwiki proper
is autoindex, and it always uses one case. Other third party plugins might
also need to add similar workarounds though.
2011-04-30 16:30:07 -04:00
e258575c12
Promote Crypt::SSLeay to Recommends; needed for https openid auth.
2011-04-30 12:06:32 -04:00
270fd45c5d
meta: Add FOAF support. Closes : #623156 (Jonas Smedegaard)
2011-04-21 19:52:39 -04:00
795da42b29
changelog
2011-04-21 14:18:56 -04:00
df81a2d208
bug closure
2011-04-17 17:57:23 -04:00
d22489299a
meta: Fix bug in loading of HTML::Entities that can break inline archive=yes (mostly masked by other plugins that load the module).
2011-04-12 12:30:24 -04:00
5bdc7f4645
document fix I'm about to merge
2011-03-30 14:11:38 -04:00
21f3eb5bc0
fix
2011-03-30 11:32:47 -04:00
5013e6b0bd
update for libravatar support
...
* comments: Add avatar picture of comment author, using Libravatar::URL
when available. The avatar is looked up based on (Thanks, Francois Marier)
* Recommend libgravatar-url-perl, which contains Libravatar::URL.
2011-03-30 10:55:36 -04:00
0204dabccf
CVE assigned
2011-03-28 19:10:08 -04:00
e548b0c245
changelog
2011-03-28 13:09:03 -04:00
81abc4adfe
yaml is needed as a build dep now
2011-03-28 12:49:24 -04:00
232c8a6dfc
releasing version 3.20110328
2011-03-28 12:30:57 -04:00
be02a80b7a
meta: Security fix; don't allow alternative stylesheets to be added on pages where the htmlscrubber is enabled.
2011-03-28 12:21:12 -04:00
a0e31f38d5
comment: Better fix to avoid showing comments of subpages, while not breaking manual inlining of comments.
2011-03-28 11:53:55 -04:00
9df8971e57
Yaml formatted setup files are now produced by default
...
This has been a while coming. It turns out that non-excutable setup files
have a number of benefits. Also, I find YAML setup files easier to edit
myself, and I suspect many users will prefer not needing to deal with
perl syntax.
2011-03-24 21:30:18 -04:00
78c750f2d2
Add timezone setting in setup file. This alows time zone to be configured via the web.
2011-03-24 13:36:16 -04:00
5c2ba98bcc
releasing version 3.20110321
2011-03-21 15:01:19 -04:00
26eb86d903
Avoid escaping / characters in filenames when building the cgiurl, as this confuses eg, cvsweb.
2011-03-21 14:21:55 -04:00
b02d3746e1
aggregate: Read cookies from ~/.ikiwiki/cookies by default. Also, the cookiejar configuration setting can be used by other plugins to provide a custom `cookie_jar` object for LWP::UserAgent. (Thanks, schmonz)
2011-03-21 14:19:21 -04:00
7e4a0c2930
darcs: Fix multiple issues preventing rcs_diff from working.
2011-03-02 12:39:58 -04:00
b34d31142b
comment: Don't show comments of subpages on parent pages. (Fixes bug introduced in version 3.20100505.)
2011-02-27 18:16:07 -04:00
c58e0a97bf
releasing version 3.20110225
2011-02-25 19:59:06 -04:00
b2a8f0f5b4
bookeeping
2011-02-22 17:34:19 -04:00
9836bceaa5
bookeeping
2011-02-22 17:25:53 -04:00
04498cdeb4
Fix broken baseurl in cgi mode when usedirs is disabled. Bug introduced in 3.20101231.
2011-02-21 14:57:15 -04:00
44695122bf
map: Avoid unnecessary ul's in maps with nested directories. (Giuseppe Bilotta)
2011-02-09 14:46:38 -04:00
7fef6fdc38
add paths to plugin files in copyright
2011-02-09 14:29:51 -04:00
1879fe63be
transient merged; bookkeeping
2011-02-09 14:18:48 -04:00
8e604c0f0a
htmltidy: Avoid breaking the sidebar when websetup is running.
...
Problem was this: websetup loads all plugins, but does not checkconfig
them. So, htmltidy's recently added configurable command setting was unset;
this resulted in its sanitize hook failing; the sanitize hook is called
when a sidebar was enabled, and this caused the sidebar to not display.
I put in a fix, but the underlying problem is that websetup loads all
plugins but leaves them in an unconfigured and possibly broken state while
trying to display its forms.
Probably the long-term fix is to have it cache the original hook states from
before loading the plugins, and restore it after getting their configuration.
Or, even to get the configuration using a subprocess, as plugins may do things
outside the hook system.
2011-02-03 12:49:13 -04:00
b752e7fec4
editpage: Avoid inheriting internal page types.
2011-02-01 21:01:26 -04:00
2c8cb980bb
releasing version 3.20110124
2011-01-24 17:11:53 -04:00
80452eba92
inline: Fix regression in feed titles. Closes : #610878 (Thanks, Paul Wise)
2011-01-24 17:01:01 -04:00
1640d12102
blogspam: Don't check modifications from admins for spam, and also allow the blogspam_pagespec to do other matches against who the user is.
2011-01-24 16:59:15 -04:00
2be49b623a
bleagh
2011-01-24 16:56:28 -04:00
4d79b58381
releasing version 3.20110123
2011-01-23 10:26:12 -04:00
0e224058e7
Adapt autoindex test suite to work with old Test::More.
2011-01-22 11:00:57 -04:00
24792dabe4
releasing version 3.20110122
2011-01-22 10:44:33 -04:00
b5d7469830
rename: Fix crash when renaming a page that is linked to by a page in an underlay.
...
Skip fixing links in such pages. The user will get a list of pages that
still link to the old page.
2011-01-22 10:20:38 -04:00
dcfeaaad5b
comments: Fix XSS security hole due to missing validation of page name.
...
Values have to be checked against wiki_file_regexp, not just file_pruned.
Audited the rest of the code base for similar problems, found none.
2011-01-22 10:15:33 -04:00
9b6e333170
picked
2011-01-14 14:37:43 -04:00
d75c1209a5
update copyright format to DEP-5
2011-01-13 17:48:22 -04:00
e112372a38
update
2011-01-06 14:42:13 -04:00
2cd8988648
releasing version 3.20110105
2011-01-05 18:19:26 -04:00
d991ccf134
use cgitemplate, remove misctemplate
2011-01-05 17:15:38 -04:00
4dbb8120f7
Export three cgi env vars needed for CGI->url to work.
2011-01-05 16:08:21 -04:00
3eabf323f0
Fix permalinks to recentchanges items and comments, broken by last release.
...
permalinks always need to be full urls
2011-01-05 15:22:55 -04:00
6b5b0a3282
Temporarily revert one part of the multiple url support in the last release. Non-edit pages are now back to having `<base>` set to the site's main url.
2011-01-05 15:01:31 -04:00
270cbd7cf5
Fix redirect to use a full url.
...
Was broken (in theory) by baseurl changes in last release.
2011-01-05 14:57:04 -04:00
8c9c3915ec
Fix base url when previewing. Was broken by urlto changes in last release.
...
Added a showform_preview that is like showform, but sets forcebaseurl
to point to the page being previewed.
2011-01-05 13:50:42 -04:00
3841d709d7
bugfix
2011-01-04 16:02:31 -04:00
84224c78a0
releasing version 3.20101231
2010-12-31 21:34:52 -04:00
7d0ef85d80
git: Fix bug involving attempting to web revert a commit that included changes to attachments.
2010-12-29 20:19:58 -04:00
4fb26f4e60
Add a second parameter to the rcs_diff hook, and avoid bloating memory reading in enormous commits.
2010-12-29 19:58:49 -04:00
1c430def77
highlight: Support highlight 3.2+svn19 (note that released version 3.2 is not supported). Closes : #605779 (David Bremner)
2010-12-29 13:08:09 -04:00
83b685abb5
changelog
2010-12-28 13:52:01 -04:00
961a119986
changelog
2010-12-26 14:46:55 -04:00
beae7ef9db
editpage, comment: Clean up title when editing or creating a page or comment.
...
Now that page.tmpl is used for cgi, the parentlinks are able to be
displayed even when creating or editing a page. So it's redundant to
include the path to the page in the title, remove it.
2010-12-25 13:38:26 -04:00
9741a3f979
inline: Force an absolute page location when the inline postform is used.
...
There seems no need to allow selecting a location when creating a page this
way; the user should always want it to appear in the inline whose form they
submitted.
2010-12-25 13:32:57 -04:00
77907fb380
merge po
2010-12-25 12:38:31 -04:00
338a04190f
goldtype: New theme, based on blueview, contributed by Lars Wirzenius.
2010-12-11 16:04:06 -04:00
efe702479a
changelog
2010-12-05 16:38:38 -04:00
ca7e3a5923
update changelog to reflect bugfix-only release
2010-12-01 20:36:42 -04:00
017f335aff
Merge branch 'bugfix'
2010-12-01 20:36:07 -04:00
9c0f98de02
releasing version 3.20101201
2010-12-01 20:34:30 -04:00
aa65300c2f
meta: Fix calling of htmlscrubber to pass the page parameter. The change of the htmlscrubber to look at page rather than destpage caused htmlscrubber_skip to not work for meta directives.
2010-12-01 20:25:05 -04:00
2884e3c6c7
smcv's https fix is actually also applicable to using multiple other urls
2010-12-01 11:51:51 -04:00
5f4f0b5bdd
merged sslcookie-auto
2010-11-29 16:32:23 -04:00
141dc37d36
merged localurl branch; changelog
2010-11-29 15:00:22 -04:00
853fcc2b56
releasing version 3.20101129
2010-11-29 14:12:41 -04:00
170cb02479
git: Avoid adding files when committing, so as not to implicitly add files like recentchanges files that are not normally checked in, when fixing links after rename.
2010-11-29 13:42:03 -04:00
a5120846cb
rename: Fix to pass named parameters to rcs_commit
2010-11-29 13:28:28 -04:00
78a22e2eb2
git: Fix temp file location.
2010-11-29 12:01:50 -04:00
31f0e459b8
edittemplate: Fix crash if using a .tmpl file or other non-page file as a template for a new page.
2010-11-20 14:54:43 -04:00
af5f162ca7
highlight: Support new format of filetypes.conf used by version 3.2 of the highlight package.
2010-11-20 12:55:26 -04:00
f8f8770a65
smcv/ready/glob-cache merged
2010-11-20 12:28:22 -04:00
b00c6c9640
inline: Improve RSS url munging to use a proper html parser
...
and support all elements that HTML::Tagset knows about.
(Which doesn't include html5 just yet, but then the old version didn't either.)
Bonus: 4 times faster than old regexp method.
2010-11-16 16:57:50 -04:00
cedf2c0af5
Fix escaping of filenames in historyurl. (Thanks, aj)
2010-11-16 15:12:52 -04:00
ec6c1269d2
more: Add pages parameter to limit where the more is displayed. (thanks, dark)
2010-11-16 15:00:04 -04:00
b85ca8603a
websetup: Fix encoding problem when restoring old setup file.
2010-11-16 14:24:15 -04:00
5f750e16b8
CVE id
2010-11-12 10:25:21 -04:00
5dbf25127f
releasing version 3.20101112
2010-11-12 00:45:00 -04:00
d8de98911e
comments: Make comment() pagespec also match comments that are being posted.
2010-11-12 00:36:03 -04:00
78de33d2ea
comments: Make postcomment() pagespec work when previewing a comment.
2010-11-12 00:28:27 -04:00
Joey Hess