5f1a97d954
retroactively add bug closure and CVE ids
2008-02-20 16:46:31 -05:00
a59af82bb8
* tla: Remove call to escapeHTML when constructing recentchanges message;
...
the html is escaped at a different level. Closes : #466495
* bzr, mercurial: Remove unused import of escapeHTML.
2008-02-20 16:45:02 -05:00
1c06aed378
* monotone: Add code to default mergerc file to run
...
_MTN/ikiwiki-netsync-hook when a commit is merged in from the net.
2008-02-14 16:10:33 -05:00
553136ec1f
* Preview limits the page dropdown to what's selected previously
...
(as preserving the full list across preview would be tricky). Userdirs
were still being offered as an option there, remove them.
* Fix a bug where user A created a page concurrently with user B, and
when B previewed it would redirect B to A's new page, losing B's work.
Instead, don't redirect and let conflict handling resolve it.
2008-02-14 15:42:14 -05:00
8be2b60aac
* The search plugin needs to override <base> to point to the directory
...
containing ikiwiki.cgi, but this should not change the urls to the style
sheets etc. Add a new forcebareurl parameter to misctemplate to allow
it to do that.
2008-02-14 15:20:49 -05:00
4eabe04ced
* Depend on HTML::Scrubber, since the scrubber is enabled by default and
...
dies if its can't be loaded.
2008-02-13 13:17:07 -05:00
49adc59474
* Setting NOTAINT=1 had no effect when building ikiwiki itself, fix this.
2008-02-12 17:17:49 -05:00
491c62f5b0
fix name of plugin in changelog
2008-02-11 23:05:18 -05:00
1de1fb15a0
* camelcase: Convert to use new linkify and scan hooks rather than the old
...
hack.
2008-02-11 23:04:19 -05:00
4763514861
* Add the linkify and scan hooks. These hooks can be used to implement
...
custom, first-class types of wikilinks.
* Move standard wikilink implementation to a new wikilink plugin, which
will of course be enabled by default.
2008-02-11 22:48:27 -05:00
5163646e26
Remove trailing whitespace from README.Debian
2008-02-10 22:55:48 -08:00
2294200e70
Remove trailing whitespace
2008-02-10 22:54:56 -08:00
4aab5f0a73
* Generate XML RPC messages with the encoding set to utf-8 instead
...
of XML::RPC's default of us-ascii. Allows interoperation with
python's xmlrpc library, which threw invalid encoding exceptions and
caused the rst plugin to hang.
2008-02-11 00:11:49 -05:00
1510725aef
* Danish translation update from Jonas Smedegaard. Closes : #465152
2008-02-10 19:05:33 -05:00
78c7f4dc71
attribution
2008-02-10 18:46:53 -05:00
728dfd9595
Allow the smb: URI scheme.
2008-02-10 15:08:56 -08:00
502cd00ec7
Allow the snews: URI scheme.
2008-02-10 15:05:11 -08:00
ec9d3ab549
Do not allow the steam: URI scheme.
2008-02-10 14:59:08 -08:00
3cda22a27f
Match literal '.' in URI schemas containing '.', rather than matching any character
2008-02-10 14:50:30 -08:00
bbcf878f75
* meta: Check that the urls provided for authorurl, permalink, and openid
...
are safe and can't contain javascript.
2008-02-10 17:17:44 -05:00
d20e24b636
Also filter the attributes cite, longdesc, and usemap, which can contain URIs
2008-02-10 13:59:37 -08:00
34115a34e0
Move about: fix to version 2.31.3 in the changelog
2008-02-10 13:36:52 -08:00
a7be7bdf56
Do not allow the about: URI scheme
...
Some browsers interpret about: URIs like a limited version of data:
URIs. In particular, some versions of Internet Explorer interpret
arbitrary HTML content in about: URIs.
2008-02-10 13:23:28 -08:00
6aa25f2757
update
2008-02-10 15:38:57 -05:00
852994d950
changelog munging
2008-02-10 14:17:27 -05:00
d7e0c035e5
* htmlscrubber security fix: Block javascript in uris.
...
* Add htmlscrubber test suite.
2008-02-10 13:16:40 -05:00
c041e97c29
fix versions
2008-02-10 02:13:09 -05:00
122f6df325
Merge branch 'master' into prefix-directives
...
Conflicts:
debian/changelog
templates/change.tmpl
2008-02-09 23:02:52 -08:00
1eeb683f1a
releasing version 2.31
2008-02-10 01:11:48 -05:00
f1fcb5be9c
* Page templates can now use CTIME to show when the page was created.
2008-02-09 23:05:48 -05:00
6b35ec682b
Mention user wikilists in README.Debian
2008-02-08 18:12:38 -08:00
e183aa198f
Use plural "wikis" for consistency
2008-02-08 17:58:43 -08:00
63e316f362
* Don't die if running with --getctime and rcs_getctime throws an error.
...
There are several cases (recentchanges files, aggregated files)
where some source files are not in revision control.
2008-02-07 22:11:54 -05:00
ce0e242d21
update after merge
2008-02-05 16:06:50 -05:00
f92505d78b
Merge branch 'master' into prefix-directives
2008-02-05 15:59:42 -05:00
bf522a347f
* inline: Add new `allowrss` and `allowatom` config options. These can be
...
used if you want a wiki that doesn't default to generating rss or atom
feeds, but that does allow them to be turned on for specific blogs.
2008-02-04 18:36:50 -05:00
d1c4899a22
* inline: When previewing, still call will_render on rss/atom files,
...
just avoid actually writing the files. This is necessary because ikiwiki
saves state after a preview (in case it actually *did* write files),
and if will_render isn't called its security checks will get upset
when the page is saved. Thanks to Edward Betts for his help tracking this
tricky bug down.
2008-02-04 17:58:23 -05:00
1c60510600
add monotone to list
2008-02-03 18:23:31 -05:00
749c1e36d9
* monotone changes by Brian May:
...
- On commits, replace "mtn sync" bidirectional with "mtn push" single
direction. No need to pull changes when doing a commit. mtn sync
is still called in rcs_update.
- Support for viewing differences via patches using viewmtn.
2008-02-03 18:14:39 -05:00
9d54cc4659
implement aggregate_locking design
...
Now aggregation will not lock the wiki. Any changes made during aggregaton are
merged in with the changed state accumulated while aggregating. A separate
lock file prevents multiple concurrent aggregators. Garbage collection
of orphaned guids is much improved. loadstate() is only called once
per process, so tricky support for reloading wiki state is not needed.
(Tested fairly thuroughly.)
2008-02-03 16:48:26 -05:00
e57749b702
* recentchanges: Exipre all *._change pages, even if the directory
...
they're in has changed.
2008-02-03 14:51:03 -05:00
340fe9707c
* recentchanges: Improve handling of links on the very static changes pages
...
by thunking to the CGI, which can redirect to the page, or allow it to be
created if it doesn't exist.
2008-02-03 14:48:20 -05:00
1f6591f0a6
* aggregate: Revert use of forking to not save state, that was not the right
...
approach.
2008-02-03 03:04:19 -05:00
9f60272831
* poll: This plugin turns out to have edited pages w/o doing any locking.
...
Oops. Convert it from a cgi to a sessioncgi hook, which will work
much better.
2008-02-03 00:26:00 -05:00
80915c830a
* cgi hooks are now run before ikiwiki state is loaded.
...
* This allows locking the wiki before loading state, which avoids some
tricky locking code when saving a web edit.
2008-02-03 00:23:04 -05:00
0779013683
* aggregate: Forking a child broke the one state that mattered: Forcing
...
the aggregating page to be rebuilt. Fix this.
2008-02-02 23:56:13 -05:00
6a7c3d1209
* Revert preservation of input file modification times in output files,
...
since this leads to too many problems with web caching, especially with
inlined pages. Properly solving this would involve tracking every page
that contributes to a page's content and using the youngest of them all,
as well as special cases for things like the version plugin, and it's just
too complex to do.
2008-02-02 23:40:57 -05:00
e3c21fd5e8
releasing version 2.30
2008-02-02 17:51:04 -05:00
07abbabd6a
remove mention of commit mails
2008-02-02 17:41:06 -05:00
fbe2ab4419
remove mention of commit mails
2008-02-02 17:40:05 -05:00
Joey Hess
Josh Triplett