urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
19,869 Commits
1 Branch
0 Tags
26 MiB
Commit Graph

19869 Commits (9cada49ed6ad24556dbe9861ad5b0a9f526167f9)

Author SHA1 Message Date
Simon McVittie 9cada49ed6 Tell `git revert` not to follow renames 
Otherwise, we have an authorization bypass vulnerability: rcs_preprevert
looks at what changed in the commit we are reverting, not at what would
result from reverting it now. In particular, if some files were renamed
since the commit we are reverting, a revert of changes that were within
the designated subdirectory and allowed by check_canchange() might now
affect files that are outside the designated subdirectory or disallowed
by check_canchange().

Signed-off-by: Simon McVittie <smcv@debian.org>
 2016-12-19 18:21:07 +00:00
smcv 7244b712c1 Added a comment: no, not supported 2016-12-19 13:23:06 -04:00
smcv 32493312c8 rename bugs/img_tag_should_support_relative_size.mdwn to todo/img_tag_should_support_relative_size.mdwn 2016-12-19 12:46:46 -04:00
smcv 8395e43099 Not possible as stated, but could be adapted into a valid feature request 2016-12-19 12:46:22 -04:00
smcv 7d35dc88f3 2016-12-19 09:55:58 -04:00
Simon McVittie b0b1428e62 cgitemplate: actually remove dead code 
Signed-off-by: Simon McVittie <smcv@debian.org>
 2016-12-19 13:20:55 +00:00
Simon McVittie bc89021523 cgitemplate: remove dead code 
blipvert points out in [[bugs/use of $topurl in cgitemplate]] that this
variable has not been used since commit a052771
"Now that we're always using HTML5, <base href> can be relative".

Signed-off-by: Simon McVittie <smcv@debian.org>
 2016-12-19 12:00:34 +00:00
intrigeri 706bf876ea Report authorization bypass via RCS revert. 2016-12-17 11:11:44 +00:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 bd46db3fb9 2016-12-14 19:07:00 -04:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 85c1fa60b8 2016-12-14 19:06:05 -04:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 bd6a4567fd 2016-12-14 19:04:05 -04:00
jeff+ikiwiki@b5854f0ab9935492e3dfefa98419b6530c92b049 9b0e02394b 2016-11-26 23:44:42 -04:00
intrigeri 2e865043d6 pagestats determinism: report bug + patch. 2016-11-20 07:00:20 +00:00
svetlana@192500fb6a2e2ef8e78d1a08cca64b1bca9833b9 021ae7050a svetlana.nfshost 2016-11-17 07:42:50 -04:00
Juego 3a36009158 Added custom solution 2016-11-16 18:17:48 -04:00
Juego 99e0945732 rename forum/FastCGI_problem_on_Arch.mdwn to forum/__91__Solved__93__FastCGI_problem_on_Arch.mdwn 2016-11-16 18:15:14 -04:00
Amitai Schleier 8e2e61836e Update my personal site URL. 2016-11-12 22:02:58 -05:00
james@2468840dc8f314e837e1fde99a5fb1b884fa993a aeb85c9d82 update my site links. 2016-11-12 20:08:40 -04:00
openmedi 7370816738 Added a comment 2016-11-10 13:09:41 -04:00
openmedi 24573d396f Added a comment 2016-11-10 13:06:23 -04:00
openmedi f7a5c57157 2016-11-10 13:03:00 -04:00
openmedi 4eb8f49209 Added a comment 2016-11-06 15:36:24 -04:00
openmedi 08a500cbb7 Added a comment 2016-11-03 18:13:15 -04:00
vegardv@75ae889e836bda8ce69bc038d8335c398a2f6f40 536f07d9ff 2016-11-03 08:42:03 -04:00
vegardv@75ae889e836bda8ce69bc038d8335c398a2f6f40 2f922120a1 2016-11-03 08:37:19 -04:00
https://id.koumbit.net/anarcat 705ad6d9d7 consider portier as a successor to OpenID? 2016-11-01 11:56:18 -04:00
https://id.koumbit.net/anarcat 1e6faf00b1 introduce portier here as well, while i'm here 2016-11-01 11:55:46 -04:00
https://id.koumbit.net/anarcat 596f723bb3 nextgen persona? 2016-11-01 11:49:48 -04:00
https://id.koumbit.net/anarcat e7cd4ac40b another look at bootstrap and packaging strategies 2016-11-01 11:45:31 -04:00
Amitai Schleier 7d48b885c9 The C2 wiki appears to have moved. 2016-10-23 21:00:36 -04:00
openmedi b6e7e54e0c 2016-10-16 12:38:47 -04:00
icydee 9892c426a1 2016-10-07 07:08:35 -04:00
karsk a9aa7c1c08 That was a (curious) mistake. 
This reverts commit 1bfe2e2e19
 2016-09-30 04:10:10 -04:00
karsk 1bfe2e2e19 removed 2016-09-30 04:09:12 -04:00
spalax 9833f0b7bd Added a comment: Translating "Last edited" 2016-09-27 15:08:30 -04:00
karsk 7ebb4cd3c5 2016-09-27 09:56:51 -04:00
karsk 0d5d26defa 2016-09-27 09:22:47 -04:00
karsk ae8862d087 2016-09-27 08:41:28 -04:00
alexjj 52f83112ed added actual progress bar 2016-09-25 00:51:03 -04:00
alexjj c5e4e781ad 2016-09-24 02:42:34 -04:00
alexjj 851d556d5b 2016-09-24 02:39:10 -04:00
alexjj 425685b7ef removed 2016-09-24 01:58:07 -04:00
alexjj e0b9749e3d 2016-09-24 01:53:46 -04:00
alexjj 9eb445c145 Created 2016-09-24 00:48:51 -04:00
alexjj 1e203ac71b 2016-09-24 00:22:08 -04:00
alexjj 8bc6d48dae formatting 2016-09-24 00:17:05 -04:00
alexjj 7f879de0d0 modern nginx settings suggestion 2016-09-24 00:16:00 -04:00
Joey Hess 68e2320696
inline: Prevent creating a file named ".mdwn" when the postform is submitted with an empty title. 2016-09-21 13:51:42 -04:00
Joey Hess 8a638d6b53
bug 2016-09-21 13:44:57 -04:00
alexjj@97b75209148c043997fe05b4341a629090820035 acd014e988 Added a comment: ever fix this? 2016-09-20 12:59:27 -04:00