b3fdb9374a
formatting
2017-12-08 08:01:02 -04:00
d5e3bf092c
2017-12-08 07:59:28 -04:00
e2d7c1e8f4
bug report re http redirect
2017-12-08 07:58:24 -04:00
354e50112b
file bug
2017-10-27 04:34:03 -04:00
0d0df05040
formatting
2017-10-27 04:27:40 -04:00
f16f326ec1
file bug
2017-10-27 04:23:52 -04:00
ebc5016cbb
file bug
2017-10-27 04:16:33 -04:00
14344f58f0
Update changelog and close bug
2017-09-28 11:30:13 +01:00
0208305f5c
Report bug + merge request: image resize is not deterministic.
2017-09-01 15:38:30 -04:00
056349a7f0
removed
2017-08-21 16:02:23 -04:00
e13f9dbe87
2017-08-21 10:28:51 -04:00
f0982b1fd4
2017-08-21 10:20:33 -04:00
bd7edde9d6
2017-08-07 02:49:07 -04:00
1958cf8af2
answer question, with reference.
2017-07-05 13:51:19 -04:00
4fe6dd0551
request more information
2017-06-22 15:37:19 +01:00
52a9d23e2c
add bug report originally emailed to me by Peter Simons
2017-06-22 09:55:27 -04:00
8503f8ddaa
Suggested syntax does work, and has a test
2017-05-19 09:57:28 -04:00
1e4e51754e
it is (meant to be) possible, just not with that syntax
2017-05-19 09:43:08 -04:00
219134beff
2017-05-18 13:33:44 -04:00
01f2a84360
color: Use markup for the preserved CSS, not character data
...
This still smuggles it past the sanitize step, but avoids having
other plugins that want to capture text content without markup
(notably toc) see the CSS as if it was text content.
2017-05-16 12:08:55 +01:00
cad72ecfad
close
2017-05-16 04:27:56 -04:00
4db4e589e4
mdwn: Enable footnotes by default when using Discount
...
A new mdwn_footnotes option can be used to disable footnotes in
MultiMarkdown and Discount.
2017-05-14 18:16:53 +01:00
81c3258269
mdwn: Don't mangle <style> into <elyts> under some circumstances
...
We can ask libdiscount not to elide <style> blocks, which means we
don't have to work around them.
2017-05-14 17:45:55 +01:00
31c89db246
httpauth: If REMOTE_USER is empty, behave as though it was unset
...
A frequently cut-and-pasted HTTP basic authentication configuration
for nginx sets it to the empty string when not authenticated, which
is not useful.
2017-05-14 15:37:45 +01:00
365a930c2c
complete last paragraph
2017-05-14 08:31:49 -04:00
f6fc4543fb
I have a theory
2017-05-14 08:20:49 -04:00
207666e903
Fixing format
2017-03-29 15:37:02 -04:00
886610d85b
As requested
2017-03-29 15:36:28 -04:00
5c9d9b3213
Answering questions and updating links
2017-03-29 15:35:54 -04:00
28409cd358
Add CVE references for CVE-2016-10026
2016-12-21 13:03:36 +00:00
bec3047aff
Replied.
2016-12-20 10:26:22 +00:00
cde2cc1862
Restrict CSS matches on .header to not affect <tr>
...
Pandoc generates <tr class="header"> to hold <th> elements, and
we don't want to make those be display: block.
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 18:21:07 +00:00
9cada49ed6
Tell `git revert` not to follow renames
...
Otherwise, we have an authorization bypass vulnerability: rcs_preprevert
looks at what changed in the commit we are reverting, not at what would
result from reverting it now. In particular, if some files were renamed
since the commit we are reverting, a revert of changes that were within
the designated subdirectory and allowed by check_canchange() might now
affect files that are outside the designated subdirectory or disallowed
by check_canchange().
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 18:21:07 +00:00
32493312c8
rename bugs/img_tag_should_support_relative_size.mdwn to todo/img_tag_should_support_relative_size.mdwn
2016-12-19 12:46:46 -04:00
8395e43099
Not possible as stated, but could be adapted into a valid feature request
2016-12-19 12:46:22 -04:00
7d35dc88f3
2016-12-19 09:55:58 -04:00
bc89021523
cgitemplate: remove dead code
...
blipvert points out in [[bugs/use of $topurl in cgitemplate]] that this
variable has not been used since commit a052771
2016-12-19 12:00:34 +00:00
706bf876ea
Report authorization bypass via RCS revert.
2016-12-17 11:11:44 +00:00
85c1fa60b8
2016-12-14 19:06:05 -04:00
bd6a4567fd
2016-12-14 19:04:05 -04:00
2e865043d6
pagestats determinism: report bug + patch.
2016-11-20 07:00:20 +00:00
536f07d9ff
2016-11-03 08:42:03 -04:00
2f922120a1
2016-11-03 08:37:19 -04:00
a9aa7c1c08
That was a (curious) mistake.
...
This reverts commit 1bfe2e2e19
2016-09-30 04:10:10 -04:00
1bfe2e2e19
removed
2016-09-30 04:09:12 -04:00
7ebb4cd3c5
2016-09-27 09:56:51 -04:00
0d5d26defa
2016-09-27 09:22:47 -04:00
68e2320696
inline: Prevent creating a file named ".mdwn" when the postform is submitted with an empty title.
2016-09-21 13:51:42 -04:00
8a638d6b53
bug
2016-09-21 13:44:57 -04:00
20e2f80ad4
2016-09-07 08:20:55 -04:00
jon+ikiwiki@663db4cb26e845748f3e7e6d51eeb26c6014f1c3
Edward
Simon McVittie
intrigeri
Keeh
vpelcak@b216e425210695d731d2673167c7dd45e5e9b1c9
DavidCary
Joey Hess
smcv
fmarier
desci
intrigeri
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85
vegardv@75ae889e836bda8ce69bc038d8335c398a2f6f40
karsk
holger