Commit Graph

483 Commits (b8e096f96afd732a719a71f53cadd9fb081092da)

Author SHA1 Message Date
joey c8b4ba354f * Fix a security hole that allowed insertion of unsafe content via the meta
plugins's support for inserting html link and meta tags. Now such content
  is passed through the htmlscrubber like everything else.
* Unfortunatly, that means that some valid uses of those tags are no longer
  usable, and special case methods needed to be added for including
  stylesheets, and for doing openid delegation. If you use either of these
  in your wiki, it will need to be modified. See the meta plugin docs
  for details.
2007-03-21 18:52:56 +00:00
joey 72ed9e455c the real bug turned out to be in the meta plugin 2007-03-21 06:46:06 +00:00
joey 03e5438155 oh, this is confusing, it needs escaping in <title>, but not when it's used
inline, already escaped there
2007-03-21 06:22:06 +00:00
joey 1c65ca4922 * Fix a few bugs around page titles containing html. The worst of these
is an actual security hole as it allows insertion of html into the title
  element of a page, which is not processed by the htmlscrubber.
2007-03-21 06:05:21 +00:00
joey 16112c3294 response 2007-03-18 22:27:09 +00:00
joey cb0c642aed * Applied a patch from Michał to make the mercurial backend pass --quiet to
hg.
2007-03-18 22:20:44 +00:00
joey 26213f8ee4 * Detect the case of two people independently creating the same page at the
same time, and let the second person resolve the conflict.
2007-03-17 23:57:03 +00:00
joey 50a9ef4753 * Make ikiwiki -verbose -setup with a setup file that enabled syslog logging
output the verbose build log to stdout, rather than to the syslog.
2007-03-17 23:32:48 +00:00
joey 188f1931c2 * Fix some broken logic in cgi creation of a subpage when a toplevel page
with the same name already exists, and generally simplify the edit code.
2007-03-17 23:20:27 +00:00
joey b154c971a9 * French update. Closes: #414597 2007-03-12 19:52:52 +00:00
joey e5ddd9b581 * Fix a bug with inlined create page links, including Discussion links on
blog post pages. The links will now create pages relative to the page that
  actually contains the link.
2007-03-11 04:59:03 +00:00
joey ec1dc5b00f releasing version 1.45 2007-03-11 02:29:15 +00:00
joey 89673afc6b add postsparkline plugin, providing sparkliney stats goodness for blog
posts
2007-03-11 00:24:31 +00:00
joey 66a65b5ddd * Correct a deadlock that could occur in post-commit if the aggregate plugin
was enabled and tried to lock the already locked wiki.
2007-03-08 11:04:59 +00:00
joey c1b698e418 * The underscore escaping support exposed a bug in edit links: Such links
were titlepage escaped in the urls, and then doubly escaped by the CGI
  when editing. To fix this, I removed the titlepage escaping in the edit
  urls.
* That means that *every edit link* on the wiki is potentially changed.
  Rebuilding wikis on upgrade to this version therefore necessary; enabled
  that in postinst.
2007-03-08 06:03:59 +00:00
joey 5d57a8436f * Add a table plugin, derived from the one written by Victor Moral. 2007-03-07 11:40:22 +00:00
joey b365d864c5 My fix to support encoded underscores in page titles broke links to pages
with underscores in their filenames, since the link code also used
titlepage. Create a new linkpage function and have the link code use that
instead.
2007-03-07 09:48:59 +00:00
joey c69d6f669a * The slash escaping when adding to a blog from the CGI was not working
since it ended up being double-escaped. Instead, just remove slashes.
* Fix some nasty issues with page name escaping during previewing
  (introduced in 1.44).
2007-03-07 09:23:13 +00:00
joey 7629ca1768 mention git 2007-03-07 05:47:34 +00:00
joey 1af4def09a typo sparline => sparkline 2007-03-07 05:35:35 +00:00
joey d4d535f17c * Add a sparline plugin. 2007-03-07 05:33:45 +00:00
joey 1202b4fd7b * Add preview parameter to preprocesser calls, use this rather than the
previous ugly hack used to avoid writing rss feeds in previews.
* Fix the img plugin to avoid overwriting images in previews. Instead it
  does all the work to make sure the resizing works, and dummys up a resized
  image using width and height attributes.
* Also fixes img preview display, the links were wrong in preview before.
2007-03-06 22:37:05 +00:00
joey b9f7a57f94 * Add titlepage template for inline plugin. 2007-03-06 19:16:46 +00:00
joey 10b8557946 * Add "template" option to inline plugin to allow for use of customised
templates.
2007-03-02 04:00:42 +00:00
joey 3660b1c7a1 * Allow for underscores to appear in page titles, if encoded appropriately
(__95__) in filenames. Previously, all underscores were replaced with
  spaces. Thanks, Enrico Zini for noticing that bug.
2007-03-02 00:37:22 +00:00
joey 1dbaf7a91c releasing version 1.44 2007-02-25 01:20:53 +00:00
joey 072967e62a * Patch from Ethan to improve behavior if a page is deleted or moved while
someone is editing it.
* Some cleanup of field setting in the failed edit and conflict handling
  code.
2007-02-24 00:39:06 +00:00
joey 2dfe3efcb7 * Correct a bug that could lead to infinite looping after signin in some
circumstances.
2007-02-24 00:20:36 +00:00
joey ba0d82e7ea * Patch from HenrikBrixAndersen to fix a broken use of foreach in the
search plugin.
2007-02-23 19:36:31 +00:00
joey 1e5d95e07b * French translation update. Closes: #411899 2007-02-21 18:34:36 +00:00
joey c60477228c * Since the CGI had to drop the wiki lock to avoid deadlocking the
commit hook, it was possible for one CGI to race another one and "win"
  the commit of both their files. This race has been fixed by adding a new
  commitlock, which when locked by the CGI, disables the commit hook
  (except for commit mails). The CGI then takes care of the updates the
  commit hook would have done.
2007-02-21 08:55:28 +00:00
joey 92e5781212 * Elegant patch from Ethan to clean up the display of page names in the
dropdown when creating a new page.
2007-02-21 00:17:50 +00:00
joey d0804acdc2 * Smarter detection of no-op changes to po files. 2007-02-20 23:13:49 +00:00
joey 135e5fc63a * perl is broken: print "" || die fails! Work around this insanity. 2007-02-20 22:19:28 +00:00
joey b90d4ccc06 test commit 2007-02-20 09:43:44 +00:00
joey e41cd25f4f typo 2007-02-20 04:28:16 +00:00
joey aae1bc4905 build ikiwiki.out and use it to build the wiki, so that NOTAINT can take effect during the build too if necessary 2007-02-20 04:24:54 +00:00
joey 0be3937a0f I belive that this patch was from Ben 2007-02-20 04:16:40 +00:00
joey 8b3a840a74 * Detect old versions of xgettext and avoid using them. 2007-02-20 04:10:31 +00:00
joey 2725887734 * Make img plugin not fail immediately if Image::Magick is not available.
This lets ikiwiki not build depend on perlmagic.
2007-02-20 03:59:35 +00:00
joey d442f1b2fc * Don't error out if estcmd fails, just print a warning message. estcmd is
to fragile to let it kill ikiwiki.
2007-02-20 03:17:09 +00:00
joey fa52a730ff * Changed calling convention for httmllink slightly. The first three
parameters remain the same, but additional options are now passed in using
  named parameters.
* Change plugin interface version to 1.02 to reflect this change.
* Add a new anchor option to htmllink. Thanks Ben for the idea.
* Support anchors in wikilinks.
* Add a "more" plugin based on one contributed by Ben to allow implementing
  those dreaded "Read more" links in blogs.
2007-02-20 03:05:47 +00:00
joey 1081aa1ee5 fix a bug 2007-02-20 01:49:52 +00:00
joey 34f1c2aee8 * Allow setting NOTAINT=1 when building the wiki to remove taint checking
flags, which can be useful on some hosting providers.
2007-02-20 01:09:48 +00:00
joey 7884f69eaf * Add a openidlogin-bg.gif to wikiicons and have the stylesheet use it for the
OpenID login form rather than linking to a remote logo, to avoid various
  issues. Since there is not yet a license for the actual OpenID logo, this
  file is currently a blank image. Users who want to can copy
  http://openid.net/login-bg.gif into their wiki.
2007-02-19 23:42:46 +00:00
joey 8bfcca5b47 * Patch to fix validaton of atom feeds by fixing the category tags. 2007-02-19 04:42:30 +00:00
joey 596019fb2b releasing version 1.43 2007-02-19 04:37:47 +00:00
joey c9d7926df4 * New domain name for ikiwiki: ikiwiki.info. Update your links. 2007-02-18 20:24:40 +00:00
joey fa386be22e * Add explicit module prereqs to Makefile.PL 2007-02-18 18:01:55 +00:00
joey ecf37caff9 * Avoid potential syslog format string issue, although only older versions
of perl are vulnerable and it is not known to really be exploitable from
  ikiwiki.
2007-02-17 21:34:42 +00:00