Joey Hess
24a57423b8
releasing version 3.20130710
2013-07-10 18:39:18 -04:00
Joey Hess
acb07ef416
Fix crash that could occur when a needsbuild hook returned a file that does not exist.
...
I saw this happen with calendar, when it wanted to update a page, that
had a calendar on it, but the page had just been deleted. This caused
srcfile_stat to crash.
2013-07-10 17:02:24 -04:00
Joey Hess
533793ee46
The ip() pagespec can now contain glob characters to match eg, a subnet full of spammers.
2013-07-08 11:49:38 -04:00
Joey Hess
c849a9f409
openid: Automatically upgrade openid_realm to https when accessed via https.
2013-06-29 13:31:47 -04:00
Joey Hess
a5f81918c8
page.tmpl: omit searchform, trails, sidebar and most metadata in CGI (smcv)
2013-06-26 11:25:40 -04:00
Joey Hess
c5f9b01662
osm: Remove trailing slash from KML maps icon.
2013-06-23 14:14:52 -04:00
Joey Hess
b8d65da266
calendar: When there are multiple pages for a given day, they're displayed in a popup on mouseover. Thanks, Louis
2013-06-23 14:11:39 -04:00
Joey Hess
c037714b77
comments: The formats allowed to be used in comments can be configured using comments_allowformats. Thanks, Michal Sojka
2013-06-23 14:05:32 -04:00
Joey Hess
c204de3ca2
blogspam: Fix encoding issue in RPC::XML call. Thanks, Changaco
2013-06-23 14:03:07 -04:00
Joey Hess
07d39ce5bf
bzr: bzr rm no longer has a --force option, remove
2013-05-18 16:33:32 -04:00
Joey Hess
9e4f0efe44
notifyemail: Fix bug that caused duplicate emails to be sent when site was rebuilt.
2013-05-18 16:26:48 -04:00
Joey Hess
67ebaf15d7
theme: Now <TMPL_IF THEME_$NAME> can be used in all templates when a theme is enabled.
2013-05-16 22:20:56 -04:00
Joey Hess
af05240cad
Fix test suite to not fail when XML::Twig is not installed. Closes : #707436
2013-05-09 10:47:45 -04:00
Joey Hess
82650b74f4
releasing version 3.20130504
2013-05-05 00:04:18 -04:00
Joey Hess
6c09c3e646
meta: Fix anchors used to link to the page's license and copyright. Closes : #706437
2013-04-30 13:35:04 -04:00
Joey Hess
29e10f0f8f
changelog
2013-03-30 13:44:34 -04:00
Joey Hess
00d23a23eb
map: Correct reversion introduced in version 3.20110225 that could generate invalid html. (smcv)
2013-03-04 18:30:27 -04:00
Joey Hess
8c8aa3fe47
Detect plugins with a broken getsetup and warn.
2013-03-04 13:19:05 -04:00
Joey Hess
1d6eb13e2b
Add missing plugin section, and deal with missing sections with a warning.
2013-03-04 13:03:34 -04:00
Joey Hess
e2405005e6
changelog
2013-02-15 17:24:34 -04:00
Joey Hess
02d855a393
releasing version 3.20130212
2013-02-12 23:58:51 -04:00
Joey Hess
480d6f93c1
highlight: Now adds a span with class highlight-<extension> around highlighted content, allowing for language-specific css styling.
2013-02-12 11:27:29 -04:00
Joey Hess
ba3494978b
cvs: Various fixes.
2013-02-03 10:40:34 +11:00
Joey Hess
82114f4451
Deal with empty diffurl in configuration.
2013-01-29 08:12:56 +11:00
Joey Hess
e5d82ef868
trail: Avoid massive slowdown caused by pagetemplate hook when displaying dynamic cgi pages, which cannot use trail anyway.
...
This seemed to be due to the pagetemplate hook calling prerender. I've
observed this making it take *minutes* for the signin page to be displayed.
ltracing ikiwiki showed it was matching pagespecs a lot.
It may be that this is still a speed pain point when rendering pages, not
just for CGI. So more work may be needed here.
2013-01-24 10:40:35 +11:00
Joey Hess
37cf511f06
poll: Add expandable option to allow users to easily add new choices to a poll.
2013-01-10 12:43:27 -04:00
Joey Hess
7173ef1b13
htmlscrubber: Allow the URI schemes of major VCS's.
2013-01-05 17:25:47 -04:00
Joey Hess
229ca60acb
changelog
2013-01-02 15:32:01 -04:00
Joey Hess
812a5a136d
changelog
2013-01-02 15:30:25 -04:00
Joey Hess
86519b047e
trail: Converted all dependencies to presence dependencies.
...
smcv please note this introduces another bug, which I've opened
2012-12-27 22:29:51 -04:00
Joey Hess
dc05125b0b
aggregate: When run with --aggregate, if an aggregation is already running, don't go on and --refresh.
...
This way, if a previous aggregation job is running, we don't add additional
load doing work that job will do anyway.
2012-12-27 21:25:59 -04:00
Joey Hess
3d6ee9eccd
htmlscrubber: Allow the bitcoin URI scheme.
2012-12-22 16:15:38 -04:00
Joey Hess
bcec11601f
releasing version 3.20121212
2012-12-11 13:03:19 -04:00
Joey Hess
c29413ba2a
openid: Display openid in Preferences page as a comment, so it can be selected in all browsers.
2012-12-04 13:59:19 -04:00
Joey Hess
286026877d
filecheck: Fix bug that prevented File::MimeInfo::Magic from ever being used.
2012-11-04 12:02:26 -04:00
Joey Hess
b6d556e5b2
releasing version 3.20121017
2012-10-17 13:36:36 -04:00
Joey Hess
45801c34bd
recentchangesdiff: fix further breakage to the template from 3.20120725
2012-10-16 20:49:26 -04:00
Joey Hess
bb07dc3f21
releasing version 3.20121016
2012-10-16 15:24:18 -04:00
Joey Hess
96bfdbf1be
really fix diff display to not show both types of diff
...
12fa9c031f
porported to fix this, but failed
2012-10-16 10:59:00 -04:00
Joey Hess
bad3c0089a
Add back a 1em margin between archivepage divs.
...
This was lost in commit 954e2e4ef1
2012-10-15 13:53:43 -04:00
Joey Hess
6bd8c6732e
add cgi_overload_delay tunable
...
Try to avoid a situation in which so many ikiwiki cgi wrapper programs are
running, all waiting on some long-running thing like a site rebuild, that
it prevents the web server from doing anything else. The current approach
only avoids this problem for GET requests; if multiple cgi's run GETs on a
site at the same time, one will display a "please wait" page for a
configurable number of seconds, which then redirects to retry. To enable
this protection, set cgi_overload_delay to the number of seconds to wait.
This is not enabled by default.
2012-10-09 17:12:04 -04:00
Joey Hess
7b78a21580
changelog
2012-09-29 11:45:11 -04:00
Joey Hess
150d2c0900
update copyright and changelog
2012-08-30 11:57:20 -04:00
Joey Hess
80fa5c82a5
releasing version 3.20120725
2012-08-25 11:08:57 -04:00
Joey Hess
a3c1768e10
comments: Remove ipv6 address specific code.
2012-08-25 10:43:24 -04:00
Joey Hess
93a12752ac
merged anarcat/osm_arbitrary_layers
2012-08-25 10:13:22 -04:00
Joey Hess
b09a73db13
responsen
2012-08-24 23:26:46 -04:00
Joey Hess
d926c4aca9
merged anarcat's osm fixes
2012-08-05 22:02:39 -04:00
Joey Hess
25ea99bc22
Split CFLAGS into words when building wrapper. Closes : #682237
2012-07-20 12:56:57 -04:00
Joey Hess
7f883f5203
recentchangesdiff: When diffurl is not set, provide inline diffs in the recentchanges page, with visibility toggleable via javascript. Thanks, Antoine Beaupré
2012-07-19 13:50:07 -04:00
Joey Hess
bfc9dc93c9
releasing version 3.20120629
2012-06-29 13:43:09 -04:00
Joey Hess
939d8c5675
mirrorlist: Add mirrorlist_use_cgi setting that avoids usedirs or other config differences by linking to the mirror's CGI. (intrigeri)
2012-06-03 13:16:31 -04:00
Joey Hess
22acf1872a
cve
2012-05-16 21:18:40 -04:00
Joey Hess
fbfcea89f8
meta: Security fix; add missing sanitization of author and authorurl. Thanks, Raúl Benencia
2012-05-16 19:54:41 -04:00
Joey Hess
e09eeb2436
releasing version 3.20120419
2012-04-19 15:41:53 -04:00
Joey Hess
7f0d58fce3
merged smcv/ready/trail
2012-04-18 15:46:47 -04:00
Joey Hess
30a3efda58
graphviz: Handle self-links.
2012-04-18 15:36:27 -04:00
Joey Hess
169550a926
link: Fix renaming wikilinks that contain embedded urls.
2012-04-18 15:15:11 -04:00
Joey Hess
e81e857ba6
add comment subscription checkbox to editpage
...
Reworded template, which also called the commit message a "comment".
2012-04-13 14:28:02 -04:00
Joey Hess
ab1ebf1ec6
inline, trail: The pagenames parameter is now a list of absolute pagenames, not relative wikilink type names. This is necessary to fix a bug, and makes pagenames more consistent with the pagespec used in the pages parameter. (smcv)
2012-04-08 16:07:17 -04:00
Joey Hess
358a95d7ad
remove: Support removing of pages in the transient underlay. (smcv)
2012-04-08 15:58:06 -04:00
Joey Hess
e4cdce4bce
rename: Allow rename to be started not from the edit page; return to the renamed page in this case.
2012-04-05 14:48:18 -04:00
Joey Hess
b481158c14
typo
2012-04-04 13:18:54 -04:00
Joey Hess
93bda514ba
httpauth: When it's the only auth method, avoid a pointless and confusing signin form, and just right to the httpauthurl.
2012-04-04 12:58:36 -04:00
Joey Hess
f9e96b0c32
passwordauth: Fix url in password recovery email to be absolute.
...
This got broken when cgiurl began often returning a relative url.
Added a cgiurl_abs for the things that need a guaranteed absolute cgiurl.
2012-04-02 12:24:14 -04:00
Joey Hess
89df287aaa
meta: Support keywords header. Closes : #664780 Thanks, Martin Michlmayr
2012-04-01 14:39:27 -04:00
Joey Hess
d68d255268
Added a "changes" hook. Renamed the "change" hook to "rendered", but
...
the old hook name is called for now for back-compat.
2012-03-28 18:43:07 -04:00
Joey Hess
723c5b97d3
changemail: New plugin, sends emails about changed pages.
2012-03-28 16:40:10 -04:00
Joey Hess
4250d389d3
meta: Export author information in html <meta> tag. Closes : #664779 Thanks, Martin Michlmayr
2012-03-27 15:52:35 -04:00
Joey Hess
aaa72a3a80
inline: When the pagenames list includes pages that do not exist, skip them.
...
bestlink returns '' if no existing page matches a link. This propigated
through inline and other plugins, causing uninitialized value warnings, and
in some cases (when filecheck was enabled) making the whole directive fail.
Skipping the empty results fixes that, but this is papering over another
problem: If the missing page is later added, there is not dependency
information to know that the inline needs to be updated. Perhaps smcv will
fix that later.
2012-03-21 15:48:25 -04:00
Joey Hess
662ea9971c
Remove dead link from plugins/teximg. Closes : #664885
2012-03-21 15:48:24 -04:00
Joey Hess
8d46f83756
releasing version 3.20120203
2012-03-19 14:44:17 -04:00
Joey Hess
223c6d487a
more updates for trail merge
2012-03-18 14:38:20 -04:00
Joey Hess
a812692a50
changelog
2012-03-18 14:22:28 -04:00
Joey Hess
f0733e6b96
URI escape filename when generating the diffurl.
...
ikiwiki source files can contain at least one character that
needs to be escaped in an url: +
2012-03-13 11:50:39 -04:00
Joey Hess
4c6e39cb07
Add a few missing jquery UI icons to attachment upload widget underlay.
2012-03-05 16:54:54 -04:00
Joey Hess
1d27e8c111
add XML::Writer suggestion for osm plugin
2012-03-03 12:28:24 -04:00
Joey Hess
9f56a417a1
add osm plugin
2012-03-03 11:30:44 -04:00
Joey Hess
78737cbfbf
shortcut: Support Wikipedia's form of url-encoding for unicode characters
...
I think it's the wrong encoding, seems like mojibake to me, but it works
now. Closes : #661198
2012-03-03 11:27:59 -04:00
Joey Hess
3274b809f2
changelog
2012-03-03 11:01:55 -04:00
Joey Hess
7f755aa51e
updated debian copyright format url
2012-03-03 11:01:54 -04:00
Joey Hess
da0df8b40f
changelog
2012-02-19 19:27:25 -04:00
Joey Hess
38ff2b44c6
Fix a snail mail address. Closes : #659158
2012-02-08 16:07:20 -04:00
Joey Hess
c3f9ef8289
revert change to prettydate
...
Its strftime is from Date::Format, doesn't have the problem, and using the
POSIX one breaks its %o.
2012-02-02 22:27:55 -04:00
Joey Hess
cd879e4c4f
changelog
2012-01-30 15:25:56 -04:00
Joey Hess
2ebae85f9b
fix
2012-01-30 15:14:41 -04:00
Joey Hess
88465ae468
document a bug fix
...
Original bug was introduced 24 Nov 2011.
2012-01-30 15:13:55 -04:00
Joey Hess
a78126c55e
calendar, prettydate: Fix strftime encoding bug
...
strftime is a C function, it does not return decoded utf8.
Several places in ikiwiki manually decoded it, but at least two
forgot to.
Also, strftime might not return even encoded utf8, if LC_TIME is set
to a non-utf8 value. Went ahead and supported decoding whatever encoding
it uses.
The remaining direct calls to strftime() are all ones that first set
LC_TIME=C, in order to get times that are not for human display.
2012-01-30 15:09:37 -04:00
Joey Hess
01afd033cb
changelog
2012-01-30 14:44:52 -04:00
Joey Hess
6c3cdb04ac
Switch to YAML::XS to work around insanity in YAML::Mo. Closes : #657533
...
https://rt.cpan.org/Ticket/Display.html?id=74487
Gave up trying to support multiple YAML backends. The XS one requires ugly
manual encoding to get unicode right, and doesn't allow dumping yaml
fragments w/o the yaml header, but at least it doesn't randomly crash
on import like YAML::Mo has started to.
2012-01-28 22:36:14 -04:00
Joey Hess
18f35269c2
mdwn: Added nodiscount setting, which can be used to avoid using the markdown discount engine, when maximum compatability is needed.
2012-01-16 13:42:30 -04:00
Joey Hess
1572c3c376
attachment: Fix utf-8 display bug.
2012-01-15 16:39:13 -04:00
Joey Hess
01a1a20aad
releasing version 3.20120115
2012-01-15 16:27:32 -04:00
Joey Hess
b38261a03a
Workaround discount's eliding of <style> blocks.
2012-01-15 16:19:22 -04:00
Joey Hess
047d2c12e5
Make backlink(.) work. Thanks, Giuseppe Bilotta.
2012-01-13 13:43:31 -04:00
Joey Hess
cc4678e70d
releasing version 3.20120109
2012-01-09 12:17:24 -04:00
Joey Hess
c1a0fec9d7
correction
2012-01-04 13:43:37 -04:00
Joey Hess
8ed142afc9
On Debian, depend on libtext-markdown-discount.
2012-01-03 19:49:13 -04:00
Joey Hess
9dce803faf
discount support
...
mdwn: Can use the discount markdown library, via the
Text::Markdown::Discount perl module.
This is preferred if available since it's the fastest currently supported
markdown library, speeding up markdown rendering by a factor of 40.
That is to say, when only rendering a lot of markdown, discount is 40x
faster. When building a ikiwiki site, ikiwiki's other overhead gets in the
way, but I still see significant speedups. Building the ikiwiki docwiki
dropped from 62 to 45 seconds, for example.
However, when multimarkdown is enabled, Text::Markdown::Multimarkdown is
still used.
While discount contains some nonstandard markdown extensions,
including tables and footnotes, AFAICS most of them are not
enabled by default in the perl bindings.
I consider sticking to non-extended markdown a desirable thing, since this
is probably not the last markdown engine. In particular, sundown is waiting
in the wings to get packaged and get a perl binding.
----
Reviewing all the showdown extensions, here are the ones that are enabled:
centered paragraphs:
->centered<-
image sizes: [dust mite](http://dust.mite =150x150)
<style>..</style> blocks are eaten. The perl binding does not provide
access to the gathered CSS. This is not legal html anyway, so unlikely
to cause breakage.
2012-01-01 17:28:31 -04:00
Joey Hess
5e3e329063
releasing version 3.20111229
2011-12-29 12:08:59 -04:00
Joey Hess
bbf255276b
changelog
2011-12-24 19:43:17 -04:00
Joey Hess
3c10ca6a2c
remove vcs-browser
...
not a fan of this field, and it changed again
2011-12-07 12:42:09 -04:00
Joey Hess
f6440dd5e6
coverage merged
2011-12-06 15:04:56 -04:00
Joey Hess
5bf7ee5dea
done
2011-12-06 14:34:12 -04:00
Joey Hess
a165790ba7
typo
2011-12-05 15:19:25 -04:00
Joey Hess
aa226bbb6b
Consume all stdin when rcs_receive short-circuits, to avoid git SIPIPE race.
...
We had a weird problem where, after moving to a new, faster server,
"git push" would sometimes fail like this:
Unpacking objects: 100% (3/3), done.
fatal: The remote end hung up unexpectedly
fatal: The remote end hung up unexpectedly
What turned out to be going on was that git-receive-pack was dying due
to an uncaught SIGPIPE. The SIGPIPE occurred when it tried to write to
the pre-receive hook's stdin. The pre-receive hook, in this case, was
able to do all the checks it needed to do without the input, and so did
exit(0) without consuming it.
Apparently that causes a race. Most of the time, git forks the hook,
writes output to the hook, and then the hook runs, ignores it, and exits.
But sometimes, on our new faster server, git forked the hook, and it
ran, and exited, before git got around to writing to it, resulting in
the SIGPIPE.
write(7, "c9f98c67d70a1cfeba382ec27d87644a"..., 100) = -1 EPIPE (Broken
pipe)
--- SIGPIPE (Broken pipe) @ 0 (0) ---
I think git should ignore SIGPIPE when writing to hooks. Otherwise,
hooks may have to go out of their way to consume all input, and as I've
seen, the races when they fail to do this can lurk undiscovered.
I have written to the git mailing list about this.
As a workaround, consume all stdin before exiting.
2011-12-05 15:17:01 -04:00
Joey Hess
3b40790041
releasing version 3.20111107
2011-11-30 16:52:30 -04:00
Joey Hess
d13e86a6cb
add missing license text
2011-11-30 16:43:34 -04:00
Joey Hess
4cb343f348
graphviz: Support wikilinks embedded in the graph.
...
(Sponsored by The TOVA Company.)
2011-11-30 15:47:13 -04:00
Joey Hess
44863ea234
graphviz: Support urls embedded in the graph, by having graphviz generate an imagemap.
...
Also, I let preview mode write real files, rather than using data: uri.
Which is ok these days, since ikiwiki tracks files created during
previewing, and cleans them up later.
2011-11-30 15:47:12 -04:00
Joey Hess
3046dc4d30
The umask setting can now be set to private, group, or public, avoiding the need to enter octal correctly which is particularly difficult in yaml setup files. (smcv)
2011-11-27 18:35:05 -04:00
Joey Hess
41f6363a63
editpage: Fix FormattingHelp link on Discussion pages.
...
In 875d550f12
I for some reason
made $page be changed when creating a discussion page, which
broke the link on the edit page. Changing page seems unnecessary,
so reverted that part of the change.
2011-11-27 13:19:19 -04:00
Joey Hess
45edb2c99a
reorder depends; git first
2011-11-19 12:40:52 -04:00
Joey Hess
106d55bf47
img: Bugfix to width/height tags for scaled down image when only one dimension was provided. Thanks, Per Carlson.
2011-11-17 18:53:23 -04:00
Joey Hess
5fd076e630
releasing version 3.20111106
2011-11-06 16:35:53 -04:00
Joey Hess
875d550f12
Fix handling of discussion page creation links to make discussion pages in the right place and with the right case.
...
Broken by page case preservation feature added in 3.20110707.
2011-11-06 16:14:04 -04:00
Joey Hess
67b2beb1b0
Make the setup automator create YAML formatted files.
2011-11-06 16:01:50 -04:00
Joey Hess
3e69f6481f
changelog
2011-10-23 11:57:47 -07:00
Joey Hess
496874ab27
svn: Support subversion 1.7, which does not have .svn in each subdirectory.
...
Involved dropping some checks for .svn which didn't add anything, since if
svn is enabled and you point it at a non-svn checkout, you get both pieces.
The tricky part is add and rename, in both cases the new file can be in
some subdirectory that is not added to svn.
For add, turns out svn has a --parents that will deal with this by adding
the intermediate directories to svn as well.
For rename though, --parents fails if the directories exist but are not
yet in svn -- which is exactly the case, since ikiwiki makes them
by calling prep_writefile. So instead, svn add the parent directory,
recursively.
tldr; svn made a reasonable change in dropping the .svn directories from
everywhere, but the semantics of other svn commands, particularly their
pickiness about whether parent directories are in svn or not, means
that without the easy crutch of checking for those .svn directories,
code has to tiptoe around svn to avoid pissing it off.
2011-10-12 19:07:38 -04:00
Joey Hess
6321a75e0c
track escaping change in upstream template
...
This is not belived to be XSS exploitable due to other checks in ikiwiki.
Thanks Olly Betts for review.
2011-09-27 11:05:34 -04:00
Joey Hess
97caf03fa0
releasing version 3.20110905
2011-09-05 15:17:15 -04:00
Joey Hess
5cb0ecc000
Fix web revert of a file deletion.
...
When reverting, an add is a remove, and a remove is an add.
2011-09-05 14:51:49 -04:00
Joey Hess
acb0eb78c4
Promote RPC::XML to a Recommends, since it's used by auto-blog.setup. Closes : #637603
2011-09-05 13:25:05 -04:00
Joey Hess
35b69392c8
Avoid warning message when generating setup file if highlight is not installed. Closes : #637606
...
There's a nice message if the plugin is loaded and used and highlight is
not available, and a nice fallback. So no need for this other warning,
which can happen any time all plugins are loaded to generate a setup file.
2011-09-05 13:21:56 -04:00
Joey Hess
f774f20913
Fix comments testsuite to not rely on Date::Parse's ability to parse the date Columbus discovered America. Closes : #640350
...
This is such a pity. smcv had these great dates, but squeeze's Date::Parse
cannot parse them.
Oh well, at least it makes for a great bug closure title.
2011-09-05 13:17:36 -04:00
Joey Hess
7d2b68cd16
inline: When indexing internal pages for searching, use the url of the inlining page.
2011-09-01 11:38:10 -04:00
Joey Hess
4af7b2c14d
search: Fix encoding bug in calculation of maximum term size.
2011-08-30 11:37:38 -04:00
Joey Hess
c8f7dcbc31
Use lockf rather than flock when taking the cgilock, for better portability.
...
This kind of change is scary, but this particular lock is very simply
used and so it seems ok to make it even just for better portability to
SunOS. (People still use that?)
2011-08-24 17:35:53 -04:00
Joey Hess
73eb892ba2
jquery source cleanup
...
* Add unminified jquery js and css files to source.
* Update to jquery 1.6.2, and jquery-ui 1.8.14.
The full files are included in the source but not the binary.
I'm not minifying the files as part of build because I don't want ikiwiki
to build depend on a javascript minifier. (Let alone need one at runtime).
Nor do I want to deal with any breakage caused by the minifier. These
files were taken from the debian packages.
The jquery-tmpl full file was taken from revision
66bb852217c49ae8c9a8f2522150354ae80463de of its git repository, which
matches the minified file I already had. I did not want to deal with possible
breakage in newer versions; this thing claims to need an ancient version of
jquery (1.4.2), and is perhaps only working by luck with the newer versions
as it is.
2011-08-24 16:25:03 -04:00
Joey Hess
1873095484
Put in a workaround for #622591 , by ensuring Search::Xapian gets loaded before Image::Magick.
2011-08-07 11:01:41 -04:00
Joey Hess
e07adcad7a
typo
2011-08-05 17:14:41 -04:00
Joey Hess
d2cf716876
Avoid using named capture groups in heredoc code for oldperl compatability.
...
Also reordered heredoc part of regexp for consistency.
2011-07-30 20:12:33 +02:00
Joey Hess
ed360d045a
Fix escaping of html entities in tag names.
...
Example case was a tag with & in its name, which resulted in a malformed
rss feed.
2011-07-29 12:54:30 +02:00
Joey Hess
65a7bc4e06
Fix escaping of html entities in permalinks.
2011-07-29 12:37:43 +02:00
Joey Hess
f2529edcab
Fix typo in Danish translation of shortcuts page that caused expoentional regexp blowup.
...
Complex regular subexpression recursion limit (32766) exceeded at
/home/joey/src/ikiwiki/IkiWiki.pm line 1532.
This doesn't fix the blowup potential itself, it just fixes the typo. :)
A sample page that causes the blowup is attached below for future
reference. The first directive is not terminated. Contributing are the
additional quotes around the following directives, which mean that they can
each be processed as a parameter to the first directive, or as an
individual directive. In resolving this ambiguity, the regexp blows up.
Happily, perl contains the explosion , so I don't think there is an exploit
here.
"[[!shortcut name=wiktionary url=\"https://secure.wikimedia.org/wiktionary/en/ "
"[[!shortcut name=debss url=\"http://snapshot.debian.net/package/%s \"]]"
"[[!shortcut name=debwiki url=\"http://wiki.debian.org/%s \"]]"
"[[!shortcut name=fdobug url=\"https://bugs.freedesktop.org/show_bug.cgi?id=%s \" desc=\"freedesktop.org bug #%s\"]]"
"[[!shortcut name=fdolist url=\"http://lists.freedesktop.org/mailman/listinfo/%s \" desc=\"%s@lists.freedesktop.org\"]]"
"[[!shortcut name=cpanrt url=\"https://rt.cpan.org/Ticket/Display.html?id=%s \" desc=\"CPAN RT#%s\"]]"
"[[!shortcut name=novellbug url=\"https://bugzilla.novell.com/show_bug.cgi?id=%s \" desc=\"bug %s\"]]"
"[[!shortcut name=fdolist url=\"http://lists.freedesktop.org/mailman/listinfo/%s \" desc=\"%s@lists.freedesktop.org\"]]"
"[[!shortcut name=gnomebug url=\"http://bugzilla.gnome.org/show_bug.cgi?id=%s \" desc=\"GNOME bug #%s\"]]"
"[[!shortcut name=linuxbug url=\"http://bugzilla.kernel.org/show_bug.cgi?id=%s \" desc=\"Linux bug #%s\"]]"
"[[!shortcut name=gmane url=\"http://dir.gmane.org/gmane.%s \" desc=\"gmane.%s\"]]"
"[[!shortcut name=gmanemsg url=\"http://mid.gmane.org/%s \"]]"
"[[!shortcut name=cpan url=\"http://search.cpan.org/search?mode=dist&query=%s \"]]"
"[[!shortcut name=ctan url=\"http://tug.ctan.org/cgi-bin/ctanPackageInformation.py?id=%s \"]]"
"[[!shortcut name=hoogle url=\"http://haskell.org/hoogle/?q=%s \"]]"
"[[!shortcut name=iki url=\"http://ikiwiki.info/%S/ \"]]"
"[[!shortcut name=ljuser url=\"http://%s.livejournal.com/ \"]]"
"[[!shortcut name=rfc url=\"http://www.ietf.org/rfc/rfc%s.txt \" desc=\"RFC %s\"]]"
"[[!shortcut name=c2 url=\"http://c2.com/cgi/wiki?%s \"]]"
"[[!shortcut name=meatballwiki url=\"http://www.usemod.com/cgi-bin/mb.pl?%s \"]]"
"[[!shortcut name=emacswiki url=\"http://www.emacswiki.org/cgi-bin/wiki/%s \"]]"
"[[!shortcut name=haskellwiki url=\"http://haskell.org/haskellwiki/%s \"]]"
"[[!shortcut name=dict url=\"http://www.dict.org/bin/Dict?Form=Dict1&Strategy=*&Database=*&Query=%s \"]]"
"[[!shortcut name=imdb url=\"http://imdb.com/find?q=%s \"]]"
"[[!shortcut name=gpg url=\"http://pgpkeys.mit.edu:11371/pks/lookup?op=vindex&exact=on&search=0x%s \"]]"
"[[!shortcut name=perldoc url=\"http://perldoc.perl.org/search.html?q=%s \"]]"
"[[!shortcut name=whois url=\"http://reports.internic.net/cgi/whois?whois_nic=%s&type=domain \"]]"
"[[!shortcut name=cve url=\"http://cve.mitre.org/cgi-bin/cvename.cgi?name=%s \"]]"
"[[!shortcut name=cia url=\"http://cia.vc/stats/project/%s \"]]"
"[[!shortcut name=ciauser url=\"http://cia.vc/stats/user/%s \"]]"
"[[!shortcut name=flickr url=\"http://www.flickr.com/photos/%s \"]]"
"[[!shortcut name=man url=\"http://linux.die.net/man/%s \"]]"
"[[!shortcut name=ohloh url=\"http://www.ohloh.net/projects/%s \"]]"
"[[!shortcut name=cpanrt url=\"https://rt.cpan.org/Ticket/Display.html?id=%s \" desc=\"CPAN RT#%s\"]]"
"[[!shortcut name=novellbug url=\"https://bugzilla.novell.com/show_bug.cgi?id=%s \" desc=\"bug %s\"]]"
2011-07-26 17:29:36 +02:00
Joey Hess
ca435801d9
po: Add `LANG_CODE` and `LANG_NAME` template variables. (intrigeri)
2011-07-19 14:12:45 -04:00
Joey Hess
e04cb1ffd3
mercurial: Implement rcs_diff. (Daniel Andersson)
2011-07-19 11:44:26 -04:00
Joey Hess
339b95e719
rcs_rename and rcs_remove also were in the big mercurial patch
2011-07-19 11:41:11 -04:00
Joey Hess
b4db945b34
mercurial: Make both rcs_getctime and rcs_getmtime fast. (Daniel Andersson)
2011-07-19 11:39:32 -04:00
Joey Hess
86e1dc492f
apply the big mercurial patch
...
* mercurial: openid nicknames are now used when committing. (Daniel Andersson)
* mercurial: implement rcs_commit_staged so comments, attachments, etc
can be used. (Daniel Andersson)
* mercurial: fix viewing of a diff containing non-utf8 changes.
(Daniel Andersson)
2011-07-19 11:26:14 -04:00
Joey Hess
98d2356ad0
releasing version 3.20110715
2011-07-15 18:57:24 -04:00
Joey Hess
4cd2efef8c
fix two recently introduced bugs in rename
...
* rename: Fix logic error that broke renaming pages when the attachment
plugin was disabled.
* rename: Fix logic error that bypassed the usual pagespec checks.
2011-07-15 18:46:16 -04:00
Joey Hess
70ce708b02
releasing version 3.20110712
2011-07-12 12:40:30 -04:00
Joey Hess
20577d8ecb
Display attachment manipulation links always, since attachments can be uploaded via javascript.
...
Could arrange for them to be in a span that is hidden when there are no
attachments and make the javascript upload unhide it; this is a quick fix.
2011-07-11 21:38:48 -04:00
Joey Hess
d23786cb6c
attachment: Bugfix to create directory when moving attachment out of holding area.
2011-07-11 21:35:46 -04:00
Joey Hess
4ce2490e01
releasing version 3.20110711
2011-07-11 18:41:30 -04:00
Joey Hess
258b75c4f7
attachment: Bugfix to move upload attachments out of holding area when saving.
2011-07-11 18:34:17 -04:00
Joey Hess
45a058a2c7
Add build dep on python-support. Closes : #633536
2011-07-11 13:07:28 -04:00
Joey Hess
a40b58c514
releasing version 3.20110707
2011-07-07 20:48:48 -04:00
Joey Hess
9f7d9ab356
Bugfix for trying to attach files to a subpage of the index page.
2011-07-07 20:32:14 -04:00
Joey Hess
a965e02430
Bugfix for wikilink containing an email address not showing up in brokenlinks list.
2011-06-29 18:35:29 -04:00
Joey Hess
a18a62aa30
inline: Handle obfuscated urls, such as the mailto urls generated by markdown when forcing urls absolute.
...
That took me 5 minutes. If anyone thinks obfuscated email urls stops, or
even slows down spammers, think again.
2011-06-29 18:12:58 -04:00
Joey Hess
add72de71a
merged smcv/comments-metadata
2011-06-29 17:57:53 -04:00
Joey Hess
9d7c1d5f7d
Fix ikiwiki-update-wikilist -r to actually work.
2011-06-29 17:38:26 -04:00
Joey Hess
25b01f9404
Preserve mixed case in page creation links, and when creating a page whose title is mixed case, allow selecting between the mixed case and all lower-case names.
2011-06-29 16:38:32 -04:00
Joey Hess
ae1857b43c
img: Generate png format thumbnails for svg images.
...
Imagemagick does not generate svg images very well, but it can convert
them to png quite well.
For browsers that don't yet support displaying svg, this also provides a
workaround; just scale the svg down to get a png. But the workaround is
partial, since scaling the image larger, or leaving it the same size will
cause the original svg to be displayed. Since browsers are actively
improving svg support, this is good enough for me.
2011-06-29 14:40:30 -04:00
Joey Hess
c90bc78d44
Support svg as a inlinable image type
...
svg images can be included on a page by simply linking to them, or by using
the img directive. Note that sanitizing svg files is still not addressed.
2011-06-29 14:17:47 -04:00
Joey Hess
46064d6d63
html5 is not experimental anymore. But not the default either, quite yet.
2011-06-23 09:41:21 -04:00
Joey Hess
886890b82d
move headinganchors out of contrib
2011-06-21 15:22:35 -04:00
Joey Hess
d82fa99426
add JSON dep
2011-06-16 14:34:44 -04:00
Joey Hess
d96edbbe68
Add libtext-multimarkdown-perl to Suggests. Closes : #630705
2011-06-16 13:13:08 -04:00
Joey Hess
6ebb4e262e
show ikiwiki error when attachment is rejected
2011-06-16 13:01:23 -04:00
Joey Hess
d4a0732752
let thru HTTP_ACCEPT
...
Needed for attachment to return json when requested.
I think some browsers send Accept: * , so I made sure to check that json
was explicitly listed as to be accepted, as well as having a high
priority.
2011-06-15 20:02:14 -04:00
Joey Hess
c9781b20bf
added jquery templates
2011-06-15 19:33:22 -04:00
Joey Hess
f3fd7696cf
added jquery-ui for attachment interface
2011-06-15 19:30:34 -04:00
Joey Hess
a695b5b2f8
updated jquery and made it its own underlay
2011-06-15 19:15:06 -04:00
Joey Hess
3a939f05c5
update copyright
2011-06-15 18:56:36 -04:00
Joey Hess
8e15f664c4
aggregate: Improve checking for too long aggregated filenames.
...
Two problems fixed:
1. Files are written with a .ikiwiki-new suffix, which has to be taken into
account.
2. Need to count length of bytes, not of unicode characters.
2011-06-10 18:47:57 -04:00
Joey Hess
cf707d1654
userlist: New plugin, lets admins see a list of users and their info.
2011-06-09 10:10:27 -04:00
Joey Hess
4fdeda0e34
ikiwiki-mass-rebuild: Fix tty hijacking vulnerability by using su. (Once su's related bug #628843 is fixed.) Thanks, Ludwig Nussel. (CVE-2011-1408)
2011-06-08 17:42:07 -04:00
Joey Hess
d7c4001748
search: Update search page when page.tmpl or searchquery.tmpl are locally modified.
2011-06-03 20:31:20 -04:00
Joey Hess
0423cac6de
let's assume some web server will think OFF is a good idea..
2011-06-03 14:41:13 -04:00
Joey Hess
254080bc85
Support the Hiawatha web server which sets HTTPS=off rather than not setting it. (There does not seem to be a standard here.)
2011-06-03 14:36:31 -04:00
Joey Hess
3b8fc54717
merged po4a robustness workaround
2011-06-03 12:39:09 -04:00
Joey Hess
50bc05e7fb
changelog
2011-06-03 12:32:42 -04:00
Joey Hess
30c3ceeaa2
Changed license of madduck's python plugins from GPL-2 to BSD-2-clause.
...
Apparently the rst library is changing to a GPL-2 incompatable license.
"madduck: joeyh: so yes, do as you think is right."
2011-05-19 14:37:16 -04:00
Joey Hess
b4dd83642a
merged quoting changes
2011-05-13 11:24:16 -04:00
Joey Hess
97a8d30dc1
Support YAML::XS by not passing decoded unicode to Load. Closes : #625713
2011-05-12 17:50:25 -04:00
Joey Hess
b2754fa272
openid: also use Net::INET6Glue if available
2011-05-09 18:15:35 -04:00
Joey Hess
825f81340a
aggregate, pinger: Use Net::INET6Glue if available to support making ipv6 connections.
...
Making outgoing ipv6 connections for openid auth is still broken; the glue
module does not seem to solve that, so I did not make openid use it.
2011-05-09 14:00:48 -04:00
Joey Hess
fc79f2252e
Add conflict with libyaml-libyaml-perl, since that library does not support utf8. Closes : #625713 (see https://rt.cpan.org/Public/Bug/Display.html?id=54683 )
2011-05-06 14:38:27 -04:00
Joey Hess
adabab4cc6
changelog
2011-05-06 14:32:55 -04:00
Joey Hess
4a27adfa72
Danish translation update. Closes : #625721
2011-05-05 13:02:31 -04:00
Joey Hess
e02b903054
releasing version 3.20110430
2011-04-30 17:27:18 -04:00
Joey Hess
be0833b856
close bug already fixed a month ago in git
2011-04-30 16:40:52 -04:00
Joey Hess
bad5072c02
tag: Avoid autocreating multiple tag pages that vary only in capitalization. The first capitalization seen of a tag will be used for the tag page.
...
Arguably, the real bug is in the interface to add_autofile, but since
that does take a filename, not a page name, it cannot really do case
handling on its own. The only other users of add_autofile in ikiwiki proper
is autoindex, and it always uses one case. Other third party plugins might
also need to add similar workarounds though.
2011-04-30 16:30:07 -04:00
Joey Hess
e258575c12
Promote Crypt::SSLeay to Recommends; needed for https openid auth.
2011-04-30 12:06:32 -04:00
Joey Hess
270fd45c5d
meta: Add FOAF support. Closes : #623156 (Jonas Smedegaard)
2011-04-21 19:52:39 -04:00
Joey Hess
795da42b29
changelog
2011-04-21 14:18:56 -04:00
Joey Hess
df81a2d208
bug closure
2011-04-17 17:57:23 -04:00
Joey Hess
d22489299a
meta: Fix bug in loading of HTML::Entities that can break inline archive=yes (mostly masked by other plugins that load the module).
2011-04-12 12:30:24 -04:00
Joey Hess
5bdc7f4645
document fix I'm about to merge
2011-03-30 14:11:38 -04:00
Joey Hess
21f3eb5bc0
fix
2011-03-30 11:32:47 -04:00
Joey Hess
5013e6b0bd
update for libravatar support
...
* comments: Add avatar picture of comment author, using Libravatar::URL
when available. The avatar is looked up based on (Thanks, Francois Marier)
* Recommend libgravatar-url-perl, which contains Libravatar::URL.
2011-03-30 10:55:36 -04:00
Joey Hess
0204dabccf
CVE assigned
2011-03-28 19:10:08 -04:00
Joey Hess
e548b0c245
changelog
2011-03-28 13:09:03 -04:00
Joey Hess
81abc4adfe
yaml is needed as a build dep now
2011-03-28 12:49:24 -04:00
Joey Hess
232c8a6dfc
releasing version 3.20110328
2011-03-28 12:30:57 -04:00
Joey Hess
be02a80b7a
meta: Security fix; don't allow alternative stylesheets to be added on pages where the htmlscrubber is enabled.
2011-03-28 12:21:12 -04:00
Joey Hess
a0e31f38d5
comment: Better fix to avoid showing comments of subpages, while not breaking manual inlining of comments.
2011-03-28 11:53:55 -04:00
Joey Hess
9df8971e57
Yaml formatted setup files are now produced by default
...
This has been a while coming. It turns out that non-excutable setup files
have a number of benefits. Also, I find YAML setup files easier to edit
myself, and I suspect many users will prefer not needing to deal with
perl syntax.
2011-03-24 21:30:18 -04:00
Joey Hess
78c750f2d2
Add timezone setting in setup file. This alows time zone to be configured via the web.
2011-03-24 13:36:16 -04:00
Joey Hess
5c2ba98bcc
releasing version 3.20110321
2011-03-21 15:01:19 -04:00
Joey Hess
26eb86d903
Avoid escaping / characters in filenames when building the cgiurl, as this confuses eg, cvsweb.
2011-03-21 14:21:55 -04:00
Joey Hess
b02d3746e1
aggregate: Read cookies from ~/.ikiwiki/cookies by default. Also, the cookiejar configuration setting can be used by other plugins to provide a custom `cookie_jar` object for LWP::UserAgent. (Thanks, schmonz)
2011-03-21 14:19:21 -04:00
Joey Hess
7e4a0c2930
darcs: Fix multiple issues preventing rcs_diff from working.
2011-03-02 12:39:58 -04:00
Joey Hess
b34d31142b
comment: Don't show comments of subpages on parent pages. (Fixes bug introduced in version 3.20100505.)
2011-02-27 18:16:07 -04:00
Joey Hess
c58e0a97bf
releasing version 3.20110225
2011-02-25 19:59:06 -04:00
Joey Hess
b2a8f0f5b4
bookeeping
2011-02-22 17:34:19 -04:00
Joey Hess
9836bceaa5
bookeeping
2011-02-22 17:25:53 -04:00
Joey Hess
04498cdeb4
Fix broken baseurl in cgi mode when usedirs is disabled. Bug introduced in 3.20101231.
2011-02-21 14:57:15 -04:00
Joey Hess
44695122bf
map: Avoid unnecessary ul's in maps with nested directories. (Giuseppe Bilotta)
2011-02-09 14:46:38 -04:00
Joey Hess
7fef6fdc38
add paths to plugin files in copyright
2011-02-09 14:29:51 -04:00
Joey Hess
1879fe63be
transient merged; bookkeeping
2011-02-09 14:18:48 -04:00
Joey Hess
8e604c0f0a
htmltidy: Avoid breaking the sidebar when websetup is running.
...
Problem was this: websetup loads all plugins, but does not checkconfig
them. So, htmltidy's recently added configurable command setting was unset;
this resulted in its sanitize hook failing; the sanitize hook is called
when a sidebar was enabled, and this caused the sidebar to not display.
I put in a fix, but the underlying problem is that websetup loads all
plugins but leaves them in an unconfigured and possibly broken state while
trying to display its forms.
Probably the long-term fix is to have it cache the original hook states from
before loading the plugins, and restore it after getting their configuration.
Or, even to get the configuration using a subprocess, as plugins may do things
outside the hook system.
2011-02-03 12:49:13 -04:00
Joey Hess
b752e7fec4
editpage: Avoid inheriting internal page types.
2011-02-01 21:01:26 -04:00
Joey Hess
2c8cb980bb
releasing version 3.20110124
2011-01-24 17:11:53 -04:00
Joey Hess
80452eba92
inline: Fix regression in feed titles. Closes : #610878 (Thanks, Paul Wise)
2011-01-24 17:01:01 -04:00
Joey Hess
1640d12102
blogspam: Don't check modifications from admins for spam, and also allow the blogspam_pagespec to do other matches against who the user is.
2011-01-24 16:59:15 -04:00
Joey Hess
2be49b623a
bleagh
2011-01-24 16:56:28 -04:00
Joey Hess
4d79b58381
releasing version 3.20110123
2011-01-23 10:26:12 -04:00
Joey Hess
0e224058e7
Adapt autoindex test suite to work with old Test::More.
2011-01-22 11:00:57 -04:00
Joey Hess
24792dabe4
releasing version 3.20110122
2011-01-22 10:44:33 -04:00
Joey Hess
b5d7469830
rename: Fix crash when renaming a page that is linked to by a page in an underlay.
...
Skip fixing links in such pages. The user will get a list of pages that
still link to the old page.
2011-01-22 10:20:38 -04:00
Joey Hess
dcfeaaad5b
comments: Fix XSS security hole due to missing validation of page name.
...
Values have to be checked against wiki_file_regexp, not just file_pruned.
Audited the rest of the code base for similar problems, found none.
2011-01-22 10:15:33 -04:00
Joey Hess
9b6e333170
picked
2011-01-14 14:37:43 -04:00
Joey Hess
d75c1209a5
update copyright format to DEP-5
2011-01-13 17:48:22 -04:00
Joey Hess
e112372a38
update
2011-01-06 14:42:13 -04:00
Joey Hess
2cd8988648
releasing version 3.20110105
2011-01-05 18:19:26 -04:00
Joey Hess
d991ccf134
use cgitemplate, remove misctemplate
2011-01-05 17:15:38 -04:00
Joey Hess
4dbb8120f7
Export three cgi env vars needed for CGI->url to work.
2011-01-05 16:08:21 -04:00
Joey Hess
3eabf323f0
Fix permalinks to recentchanges items and comments, broken by last release.
...
permalinks always need to be full urls
2011-01-05 15:22:55 -04:00
Joey Hess
6b5b0a3282
Temporarily revert one part of the multiple url support in the last release. Non-edit pages are now back to having `<base>` set to the site's main url.
2011-01-05 15:01:31 -04:00
Joey Hess
270cbd7cf5
Fix redirect to use a full url.
...
Was broken (in theory) by baseurl changes in last release.
2011-01-05 14:57:04 -04:00
Joey Hess
8c9c3915ec
Fix base url when previewing. Was broken by urlto changes in last release.
...
Added a showform_preview that is like showform, but sets forcebaseurl
to point to the page being previewed.
2011-01-05 13:50:42 -04:00
Joey Hess
3841d709d7
bugfix
2011-01-04 16:02:31 -04:00
Joey Hess
84224c78a0
releasing version 3.20101231
2010-12-31 21:34:52 -04:00
Joey Hess
7d0ef85d80
git: Fix bug involving attempting to web revert a commit that included changes to attachments.
2010-12-29 20:19:58 -04:00
Joey Hess
4fb26f4e60
Add a second parameter to the rcs_diff hook, and avoid bloating memory reading in enormous commits.
2010-12-29 19:58:49 -04:00
Joey Hess
1c430def77
highlight: Support highlight 3.2+svn19 (note that released version 3.2 is not supported). Closes : #605779 (David Bremner)
2010-12-29 13:08:09 -04:00
Joey Hess
83b685abb5
changelog
2010-12-28 13:52:01 -04:00
Joey Hess
961a119986
changelog
2010-12-26 14:46:55 -04:00
Joey Hess
beae7ef9db
editpage, comment: Clean up title when editing or creating a page or comment.
...
Now that page.tmpl is used for cgi, the parentlinks are able to be
displayed even when creating or editing a page. So it's redundant to
include the path to the page in the title, remove it.
2010-12-25 13:38:26 -04:00
Joey Hess
9741a3f979
inline: Force an absolute page location when the inline postform is used.
...
There seems no need to allow selecting a location when creating a page this
way; the user should always want it to appear in the inline whose form they
submitted.
2010-12-25 13:32:57 -04:00
Joey Hess
77907fb380
merge po
2010-12-25 12:38:31 -04:00
Joey Hess
338a04190f
goldtype: New theme, based on blueview, contributed by Lars Wirzenius.
2010-12-11 16:04:06 -04:00
Joey Hess
efe702479a
changelog
2010-12-05 16:38:38 -04:00
Joey Hess
ca7e3a5923
update changelog to reflect bugfix-only release
2010-12-01 20:36:42 -04:00
Joey Hess
017f335aff
Merge branch 'bugfix'
2010-12-01 20:36:07 -04:00
Joey Hess
9c0f98de02
releasing version 3.20101201
2010-12-01 20:34:30 -04:00