Commit Graph

20227 Commits (d58b25eb93beb84b30475546804066a15578d115)

Author SHA1 Message Date
smcv 7e78712782 mention security contacts here too 2016-12-19 16:33:48 -04:00
Amitai Schleier 952404edaa Opt in to whatever spam this may bring. 2016-12-19 20:23:43 +01:00
Simon McVittie 0fe2ff8579 changelog 2016-12-19 18:21:07 +00:00
intrigeri c1890c116d Make pagestats output more deterministic.
Sort in lexical order the pages that have the same number of hits.
2016-12-19 18:21:07 +00:00
Simon McVittie 592c13cc61 Update changelog 2016-12-19 18:21:07 +00:00
Simon McVittie cde2cc1862 Restrict CSS matches on .header to not affect <tr>
Pandoc generates <tr class="header"> to hold <th> elements, and
we don't want to make those be display: block.

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 18:21:07 +00:00
Simon McVittie 2a9e9f13f6 List security contacts
We still don't have a security@ alias; listing personal emails is
unfortunately the next-best thing.
2016-12-19 18:21:07 +00:00
Simon McVittie da395ac33c Add a manual test for reverting git commits
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 18:21:07 +00:00
Simon McVittie 9cada49ed6 Tell `git revert` not to follow renames
Otherwise, we have an authorization bypass vulnerability: rcs_preprevert
looks at what changed in the commit we are reverting, not at what would
result from reverting it now. In particular, if some files were renamed
since the commit we are reverting, a revert of changes that were within
the designated subdirectory and allowed by check_canchange() might now
affect files that are outside the designated subdirectory or disallowed
by check_canchange().

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 18:21:07 +00:00
smcv 7244b712c1 Added a comment: no, not supported 2016-12-19 13:23:06 -04:00
smcv 32493312c8 rename bugs/img_tag_should_support_relative_size.mdwn to todo/img_tag_should_support_relative_size.mdwn 2016-12-19 12:46:46 -04:00
smcv 8395e43099 Not possible as stated, but could be adapted into a valid feature request 2016-12-19 12:46:22 -04:00
smcv 7d35dc88f3 2016-12-19 09:55:58 -04:00
Simon McVittie b0b1428e62 cgitemplate: actually remove dead code
Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 13:20:55 +00:00
Simon McVittie bc89021523 cgitemplate: remove dead code
blipvert points out in [[bugs/use of $topurl in cgitemplate]] that this
variable has not been used since commit a052771
"Now that we're always using HTML5, <base href> can be relative".

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 12:00:34 +00:00
intrigeri 706bf876ea Report authorization bypass via RCS revert. 2016-12-17 11:11:44 +00:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 bd46db3fb9 2016-12-14 19:07:00 -04:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 85c1fa60b8 2016-12-14 19:06:05 -04:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 bd6a4567fd 2016-12-14 19:04:05 -04:00
jeff+ikiwiki@b5854f0ab9935492e3dfefa98419b6530c92b049 9b0e02394b 2016-11-26 23:44:42 -04:00
intrigeri 2e865043d6 pagestats determinism: report bug + patch. 2016-11-20 07:00:20 +00:00
svetlana@192500fb6a2e2ef8e78d1a08cca64b1bca9833b9 021ae7050a svetlana.nfshost 2016-11-17 07:42:50 -04:00
Juego 3a36009158 Added custom solution 2016-11-16 18:17:48 -04:00
Juego 99e0945732 rename forum/FastCGI_problem_on_Arch.mdwn to forum/__91__Solved__93__FastCGI_problem_on_Arch.mdwn 2016-11-16 18:15:14 -04:00
Amitai Schleier 8e2e61836e Update my personal site URL. 2016-11-12 22:02:58 -05:00
james@2468840dc8f314e837e1fde99a5fb1b884fa993a aeb85c9d82 update my site links. 2016-11-12 20:08:40 -04:00
openmedi 7370816738 Added a comment 2016-11-10 13:09:41 -04:00
openmedi 24573d396f Added a comment 2016-11-10 13:06:23 -04:00
openmedi f7a5c57157 2016-11-10 13:03:00 -04:00
openmedi 4eb8f49209 Added a comment 2016-11-06 15:36:24 -04:00
openmedi 08a500cbb7 Added a comment 2016-11-03 18:13:15 -04:00
vegardv@75ae889e836bda8ce69bc038d8335c398a2f6f40 536f07d9ff 2016-11-03 08:42:03 -04:00
vegardv@75ae889e836bda8ce69bc038d8335c398a2f6f40 2f922120a1 2016-11-03 08:37:19 -04:00
https://id.koumbit.net/anarcat 705ad6d9d7 consider portier as a successor to OpenID? 2016-11-01 11:56:18 -04:00
https://id.koumbit.net/anarcat 1e6faf00b1 introduce portier here as well, while i'm here 2016-11-01 11:55:46 -04:00
https://id.koumbit.net/anarcat 596f723bb3 nextgen persona? 2016-11-01 11:49:48 -04:00
https://id.koumbit.net/anarcat e7cd4ac40b another look at bootstrap and packaging strategies 2016-11-01 11:45:31 -04:00
Amitai Schleier 7d48b885c9 The C2 wiki appears to have moved. 2016-10-23 21:00:36 -04:00
openmedi b6e7e54e0c 2016-10-16 12:38:47 -04:00
icydee 9892c426a1 2016-10-07 07:08:35 -04:00
karsk a9aa7c1c08 That was a (curious) mistake.
This reverts commit 1bfe2e2e19
2016-09-30 04:10:10 -04:00
karsk 1bfe2e2e19 removed 2016-09-30 04:09:12 -04:00
spalax 9833f0b7bd Added a comment: Translating "Last edited" 2016-09-27 15:08:30 -04:00
karsk 7ebb4cd3c5 2016-09-27 09:56:51 -04:00
karsk 0d5d26defa 2016-09-27 09:22:47 -04:00
karsk ae8862d087 2016-09-27 08:41:28 -04:00
alexjj 52f83112ed added actual progress bar 2016-09-25 00:51:03 -04:00
alexjj c5e4e781ad 2016-09-24 02:42:34 -04:00
alexjj 851d556d5b 2016-09-24 02:39:10 -04:00
alexjj 425685b7ef removed 2016-09-24 01:58:07 -04:00