Commit Graph

2291 Commits (2afb0dd66332136f47d08f2ee4de292eb73c8779)

Author SHA1 Message Date
Simon McVittie 2afb0dd663 Do not directly enable emailauth by default, only indirectly via openid
This avoids nasty surprises on upgrade if a site is using httpauth,
or passwordauth with an account_creation_password, and relying on
only a select group of users being able to edit the site. We can revisit
this for ikiwiki 4.
2015-05-27 08:52:01 +01:00
Joey Hess fecfa53988 changelog 2015-05-19 15:35:25 -04:00
Joey Hess 85a529db3d passwordauth: Don't allow registering accounts that look like openids.
Also prohibit @ in account names, in case the file regexp was relaxed to
allow it.
2015-05-14 10:57:56 -04:00
Joey Hess bf8b7fe2d1 changelog 2015-05-13 23:38:46 -04:00
Joey Hess 5b459737a5 Converted openid-selector into a more generic loginselector helper plugin. 2015-05-13 18:50:29 -04:00
Joey Hess f8add0adb3 rename openid selector files to login-selector 2015-05-13 17:58:59 -04:00
Joey Hess ec72b4c95b When openid and passwordauth are the only enabled auth plugins, make the openid selector display "Password" instead of "Other", so users are more likely to click on it when they don't have an openid. 2015-05-13 12:18:22 -04:00
Joey Hess aefb780eee Re-remove google from openid selector; their openid provider is gone for good. 2015-04-28 12:24:32 -04:00
Simon McVittie d8a550e7de release 3.20150329 2015-03-29 22:11:38 +01:00
Joey Hess 18dfba868f Fix XSS in openid selector. Thanks, Raghav Bisht. 2015-03-27 12:17:39 -04:00
Joey Hess 6ff7d4bba6 remove announcedir target
only I use this, and I moved it to my mrconfig
2015-03-14 15:56:52 -04:00
Simon McVittie 9497fc1b6c t/inline.t: accept translations of "Add a new post titled:" (Closes: #779365) 2015-03-01 17:15:13 +00:00
Simon McVittie a1fda0b516 Standardize on --long-option instead of -long-option
[[forum/refresh_and_setup]] indicates some confusion between --setup
and -setup. Both work, but it's clearer if we stick to one in
documentation and code.

A 2012 commit to [[plugins/theme]] claims that "-setup" is required
and "--setup" won't work, but I cannot find any evidence in ikiwiki's
source code that this has ever been the case.
2015-03-01 16:15:01 +00:00
Simon McVittie 943ec015da If neither timezone nor TZ is set, set both to :/etc/localtime if we're on a GNU system and that file exists, or GMT otherwise 2015-03-01 15:01:05 +00:00
Simon McVittie bd3eb42b02 changelog 2015-03-01 12:46:49 +00:00
Joey Hess b0861d8162 heh, MOM wants you 2015-01-25 00:03:43 -04:00
Joey Hess fe0eaf1870 Fix NULL ptr deref on ENOMOM in wrapper. (Thanks, igli)
Probably not exploitable, but who knows..
2015-01-25 00:00:40 -04:00
Simon McVittie c34b86f12e release 2015-01-07 09:14:47 +00:00
Joey Hess 0048442831 close debian bug I opened about blogspam 2015-01-02 16:45:26 -04:00
Amitai Schlair 0451dc4133 Update blogspam to the 2.0 API. 2015-01-02 13:55:10 -05:00
Joey Hess f88e109bec po: If msgmerge falls over on a problem po file, print a warning message, but don't let this problem crash ikiwiki entirely. 2014-12-30 15:51:50 -04:00
Amitai Schlair c668c2c7e2 Changelog the $(MAKE) patch. 2014-12-27 17:32:20 -05:00
Simon McVittie 5c30886dbf changelog, close bug 2014-12-09 22:19:15 +00:00
Simon McVittie 44e320c1d5 changelog and NEWS entry for responsive layout 2014-12-01 21:29:46 +00:00
Simon McVittie c01f53d74e core: generate HTML5 by default, but keep avoiding new elements like <section> that require specific browser support unless html5 is set to 1. 2014-11-26 12:00:31 +00:00
Simon McVittie 6c51b764bc Merge branch 'ready/html5' 2014-11-26 11:58:05 +00:00
Simon McVittie dc0744a423 search: add more classes as a hook for CSS. Thanks, sajolida 2014-11-26 11:57:58 +00:00
Simon McVittie 1ff99b19ca calendar: add calendar_autocreate option, with which "ikiwiki --refresh" can mostly supersede the ikiwiki-calendar command. Thanks, Louis Paternault 2014-11-26 09:28:18 +00:00
Joey Hess 33ca02581b Set Debian package maintainer to Simon McVittie as I'm retiring from Debian. 2014-11-08 00:08:33 -04:00
Joey Hess ea8c7a7e02 openid: Stop suppressing the email field on the Preferences page.
This is needed for notifyemail, and not all openid providers report an
email address, or necessarily the one the user wants to get email.
2014-11-06 15:00:09 -04:00
Joey Hess d858ce3e93 Add missing build-depends on libcgi-formbuilder-perl, needed for t/relativity.t 2014-10-20 12:28:54 -04:00
Joey Hess 82a4fb49ae add ikiwiki-comment program 2014-10-20 12:08:07 -04:00
Amitai Schlair 7a2446f798 Disambiguate myself a bit (like that's needed). 2014-10-16 21:51:18 -04:00
Simon McVittie a89dbd9892 release 2014-10-16 23:28:35 +01:00
Simon McVittie 44e05edaf4 debian: fix some wrong paths in the copyright file 2014-10-16 23:28:23 +01:00
Simon McVittie 0e783e915b debian: rename debian/link to debian/links so the intended symlinks appear 2014-10-16 23:04:11 +01:00
Simon McVittie 37296bcb5a close a bug 2014-10-16 23:03:48 +01:00
Simon McVittie 0c73a825d1 Drop unused python-support dependency 2014-10-16 22:48:09 +01:00
Simon McVittie 3429e81596 changelog so far 2014-10-16 22:44:29 +01:00
Simon McVittie e1deb28e08 build-depend on libcgi-pm-perl too, for tests 2014-10-16 22:40:52 +01:00
Simon McVittie edbc54ec6e Explicitly depend on CGI.pm, which is no longer in Perl core
I was going to depend on the version that has CGI->param_fetch,
but that has been supported since 2.37, which is older than oldstable.
2014-10-16 22:24:48 +01:00
Simon McVittie 490a1eca7b Always produce HTML5 doctype and new attributes, but not new elements
According to caniuse.com, a significant fraction of Web users are
still using Internet Explorer versions that do not support HTML5
sectioning elements. However, claiming we're XHTML 1.0 Strict
means we can't use features invented in the last 12 years, even if
they degrade gracefully in older browsers (like the role and placeholder
attributes).

This means our output is no longer valid according to any particular
DTD. Real browsers and other non-validator user-agents have never
cared about DTD compliance anyway, so I don't think this is a real loss.
2014-10-16 11:04:53 +01:00
Simon McVittie 1561fbb365 Replace PayPal and Flattr buttons with text links
In particular, this avoids loading third-party resources from the
offline documentation (see
<https://lintian.debian.org/tags/privacy-breach-donation.html>).
2014-10-16 09:47:07 +01:00
Joey Hess 6294894f31 Fix crash that can occur when only_committed_changes is set and a file is deleted from the underlay.
srcfile_stat got called on a file from the underlay that no longer existed.

I am not 100% sure of the circumstances of that; I was able to reproduce
the bug but neglected to snapshot the tree, and then accidentially
got it to stop crashing. I know that a transient tag page got deleted using
the web interface to trigger the crash.

It seems that process_changed_files must have returned the file, despite it
being deleted. And since the file was not checked into git, it seems it
must have not been included in @IkiWiki::underlayfiles, which would have
caused process_changed_files to not return it.

I do not know why a transient tag page would not be in
@IkiWiki::underlayfiles. There is a bug here that I don't understand.

This is just a workaround -- run srcfile_stat such that it won't crash,
and if it is unable to stat a file, find_changed knows it's not changed,
so it's ok to skip it.

Also made find_new_files run srcfile_stat such that it won't crash, just
because I was there.
2014-09-26 18:55:09 -04:00
Simon McVittie 84993495f3 Build-depend on libmagickcore-6.q16-2-extra | libmagickcore-extra so we can thumbnail SVGs in the docwiki 2014-09-16 11:22:05 +01:00
Simon McVittie 9d08f18a13 Add myself to Uploaders and release to Debian 2014-09-16 10:03:24 +01:00
Simon McVittie 30c23b5e72 Add package dependencies for scalable img support
- suggest ghostscript (required for PDF-to-PNG thumbnailing)
  and libmagickcore-extra (required for SVG-to-PNG thumbnailing)
- build-depend on ghostscript so the test for scalable images can be run
2014-09-16 10:00:40 +01:00
Simon McVittie 5ff68d5171 changelog, close bugs 2014-09-15 22:12:45 +01:00
Simon McVittie 7660979f74 changelog, close bug 2014-09-15 21:49:48 +01:00
Simon McVittie 3d1de970f1 changelog, close bug 2014-09-15 21:11:17 +01:00