Commit Graph

4987 Commits (eb288969b5c1628d4b1f881c69dfd515fccc38a2)

Author SHA1 Message Date
Joey Hess 545054c356 releasing version 2.45 2008-05-05 15:17:44 -04:00
Joey Hess a72c33c76c updates 2008-05-05 15:03:38 -04:00
Joey Hess b1b9c2c0d1 formatting 2008-05-05 14:58:21 -04:00
Joey Hess b428fb1b14 formatting 2008-05-05 14:53:31 -04:00
Joey Hess 3a9dfb8361 enhancesments for shared hosting
* Add a Bundle::Ikiwiki to the source for use with CPAN to install *all*
  the modules ikiwiki can use.
* Add a cpan directory containing a CPAN::MyConfig that can ease use of
  CPAN to install in a home directory on shared hosting providers.
* With these changes, it's pretty easy to install onto nearlyfreespeech.net
  and probably other shared hosting providers like dreamhost. Added
  a tip page documentng the process for nearlyfreespeech.
2008-05-05 14:51:26 -04:00
Joey Hess ad44c47977 rename to more specific name 2008-05-05 14:14:08 -04:00
Joey Hess c1196acadc linkify 2008-05-03 13:32:28 -04:00
Joey Hess 27ca70225e web commit by RichMorin 2008-05-03 10:17:35 -04:00
Joey Hess 1ad826eb94 web commit by RichMorin 2008-05-03 10:08:36 -04:00
Joey Hess b2dea99417 Fix ugly display when editing a page that has vanished.
srcfile now has an optional second parameter to avoid it throwing an error
if the source file does not exist.
2008-05-02 13:02:07 -04:00
Joey Hess 6f852e88e3 anonk: Add anonok_pagespec configuration setting that can be used to allow anonymous users to edit only matching pages. Closes: #478892 2008-05-01 14:58:23 -04:00
Joey Hess f39659277d web commit by http://vibrog.myopenid.com/ 2008-04-30 16:25:30 -04:00
Joey Hess a512904a9d web commit by http://alcopop.org/me/openid/: poll vote (Accept only OpenID for logins) 2008-04-30 16:00:48 -04:00
Joey Hess a2e0ef4572 web commit by http://alcopop.org/me/openid/: context 2008-04-30 15:54:27 -04:00
Joey Hess 6de5cbaaee web commit by http://alcopop.org/me/openid/: test comment 2008-04-30 15:52:33 -04:00
Joey Hess 7647109bac Merge branch 'master' of ssh://git.ikiwiki.info/srv/git/ikiwiki.info 2008-04-30 12:58:55 -04:00
Joey Hess bb51e81762 img: Support a title attribute, will be passed through to html. Closes: #478718 2008-04-30 12:58:36 -04:00
Joey Hess 3419cdfcbb web commit by buo: Web editing and mangled characters 2008-04-30 11:09:37 -04:00
Joey Hess 112737535c resp 2008-04-29 18:20:21 -04:00
Joey Hess 516908cc8e web commit by http://vibrog.myopenid.com/ 2008-04-29 01:37:57 -04:00
Joey Hess cafffef679 web commit by http://tychoish.livejournal.com/: sandbox test of wikilink 2008-04-28 22:31:48 -04:00
Joey Hess cf2652c139 web commit by JeremyReed: why if? 2008-04-28 17:54:32 -04:00
Joey Hess c25f0f7abd response 2008-04-28 17:01:59 -04:00
Joey Hess edaccbbb55 web commit by http://vibrog.myopenid.com/ 2008-04-28 16:39:22 -04:00
Joey Hess 66984deaeb thoughts 2008-04-28 15:57:17 -04:00
Joey Hess f37abf206e use a proper wiki link, not a html link 2008-04-28 15:52:42 -04:00
Joey Hess 72cedc59e9 fix formatting 2008-04-28 15:47:11 -04:00
Joey Hess 6412cbfe52 idea 2008-04-28 15:43:06 -04:00
Joey Hess dbb5d11196 Deal with different paths to perl when removing -T flag. 2008-04-28 15:37:17 -04:00
Joey Hess 4723d5f9f1 response 2008-04-28 15:34:11 -04:00
Joey Hess bde6809e5b web commit by http://vibrog.myopenid.com/ 2008-04-28 15:03:22 -04:00
Joey Hess 1a4ba6cbcf web commit by JeremyReed: about news site 2008-04-28 14:57:25 -04:00
Joey Hess f3eda82c08 web commit by JeremyReed: reply about perl version in filename too. 2008-04-28 14:15:38 -04:00
Joey Hess 0d80b13738 web commit by JeremyReed: reply 2008-04-28 14:11:52 -04:00
Joey Hess bbfc613360 web commit by http://vibrog.myopenid.com/ 2008-04-28 14:08:04 -04:00
Joey Hess 6b316dd8e0 response 2008-04-28 13:48:33 -04:00
Joey Hess 453bdeaf55 response 2008-04-28 13:46:50 -04:00
Joey Hess 9f02ee8634 Add PREFIX/bin to the hardcoded PATH within ikiwiki. 2008-04-28 13:44:37 -04:00
Joey Hess aa4f9fe232 response 2008-04-28 13:38:53 -04:00
Joey Hess 74d98c69b1 web commit by JeremyReed: found problem 2008-04-28 12:47:29 -04:00
Joey Hess bc9a448c58 web commit by JeremyReed: more info. sid is defined in prefs just not edit 2008-04-28 12:32:54 -04:00
Joey Hess 3b16d472c0 web commit by JeremyReed: sid not in form. 2008-04-28 12:09:47 -04:00
Joey Hess b6435e9b7d web commit by JeremyReed: fix link to SharedHosting by prefixing with slash. 2008-04-28 11:48:34 -04:00
Joey Hess e56dd17bcf web commit by JeremyReed: Can't exec "ikiwiki-transition" 2008-04-28 11:44:01 -04:00
Joey Hess 4e0f75a75f web commit by JeremyReed: hard-coded perl path 2008-04-28 11:07:05 -04:00
Joey Hess fdffe02d39 web commit by http://vibrog.myopenid.com/ 2008-04-28 05:52:58 -04:00
Joey Hess 02da269465 web commit by http://edward.myopenid.com/: fix code block rendering 2008-04-28 02:42:50 -04:00
Joey Hess 29bf14fcc3 followup 2008-04-27 14:34:23 -04:00
Joey Hess 1d4bc83aec the sandbox is not a TODO list. Remove TODO item 2008-04-27 14:32:55 -04:00
Joey Hess cc26b153b4 move question to discussion page, where it belongs 2008-04-27 14:32:30 -04:00
Joey Hess a64bc76fbe response 2008-04-27 14:31:35 -04:00
Joey Hess 502197e9bb web commit by http://vibrog.myopenid.com/ 2008-04-27 04:29:12 -04:00
Joey Hess 008de43f67 web commit by http://vibrog.myopenid.com/ 2008-04-27 04:28:28 -04:00
Joey Hess 319bf45a37 web commit by http://vibrog.myopenid.com/ 2008-04-27 04:22:55 -04:00
Joey Hess 51042ff04a web commit by http://vibrog.myopenid.com/ 2008-04-27 04:19:58 -04:00
Joey Hess 35f943e6f8 web commit by http://harningt.eharning.us/: applied alterations according to comments/git reqs 2008-04-27 00:23:27 -04:00
Joey Hess 17c276dea5 web commit by JeremyReed: about taint and -T build failure 2008-04-26 20:54:08 -04:00
Joey Hess 9652cdfe2e toc: Add the table of contents at sanitize time, rather than at format time. This allows the toc to be displayed when previewing an edit. It also avoids headers in the page template from showing up in the toc. 2008-04-26 15:13:01 -04:00
Joey Hess 2d78c4d9a7 response; fixed 2008-04-26 15:07:21 -04:00
Joey Hess deba9c7af4 response 2008-04-26 15:05:26 -04:00
Joey Hess 562e24d695 response 2008-04-26 14:55:56 -04:00
Joey Hess 59c81f07fa add news item for ikiwiki 2.44 2008-04-24 13:52:41 -04:00
Joey Hess 7758dbb279 web commit by http://madduck.net/ 2008-04-24 03:57:49 -04:00
Joey Hess 49043e48fa web commit by http://madduck.net/ 2008-04-24 03:12:51 -04:00
Joey Hess 3635867493 web commit by http://harningt.eharning.us/: updated openid reference 2008-04-24 00:01:27 -04:00
Joey Hess 475429a917 web commit by http://harningt.eharning.us/: more git attribution corner-case ideas 2008-04-24 00:00:53 -04:00
Joey Hess 2987b08ec9 web commit by http://mlcastle.net/: poll vote (Accept only OpenID for logins) 2008-04-22 20:32:45 -04:00
Joey Hess 04a7003c5d web commit by http://mlcastle.net/: add hindi text. 2008-04-22 20:13:11 -04:00
Joey Hess 827f6b9bfc remove question that was added to a non-discussion page 2008-04-22 15:19:15 -04:00
Joey Hess 710b118b49 web commit by Dirk 2008-04-22 14:40:37 -04:00
Joey Hess 6dcb111310 web commit by Dirk 2008-04-22 14:38:23 -04:00
Joey Hess 42f4904f72 web commit by http://hendry.iki.fi/: anti-expert-exchange 2008-04-22 04:58:20 -04:00
Joey Hess 3bc9d474a3 web commit by bartuer: add a question about restructuredtext 2008-04-21 15:25:51 -04:00
Joey Hess 0405299f07 web commit by http://andreyvit.livejournal.com/ 2008-04-21 00:16:48 -04:00
Joey Hess 3912a9f5e9 add CVE link 2008-04-20 15:25:51 -04:00
Joey Hess e62f3f8f95 web commit by http://codehelp.myopenid.com/: Add QOF and estron 2008-04-20 13:34:15 -04:00
Joey Hess a516b2a63f web commit by http://hendry.iki.fi/: google search 2008-04-19 17:15:30 -04:00
Joey Hess e1842ce95c remove random html
This page documents markdown. Please use the sandbox for formatting
testing, and not this page.
2008-04-18 18:43:33 -04:00
Joey Hess 84b915d6d1 web commit by alccode 2008-04-18 17:06:22 -04:00
Joey Hess 81355cd4c6 Merge branch 'master' of ssh://git.ikiwiki.info/srv/git/ikiwiki.info 2008-04-17 14:38:16 -04:00
Joey Hess f1228946bd Bring back the svnrepo setup file option. This is needed for recentchangediff to work with svn repos. 2008-04-17 14:37:55 -04:00
Joey Hess 143c8770d1 web commit by http://sabr.myopenid.com/ 2008-04-17 08:40:07 -04:00
Joey Hess d420e032cc web commit by http://sabr.myopenid.com/: thanks belong at the end of the conversation, not the beginning! 2008-04-17 06:22:19 -04:00
Joey Hess 14b8d6369b web commit by http://sabr.myopenid.com/ 2008-04-17 06:12:21 -04:00
Joey Hess 4216b9590f web commit by http://sabr.myopenid.com/ 2008-04-17 03:12:49 -04:00
Joey Hess 543926c540 web commit by http://sabr.myopenid.com/ 2008-04-17 03:10:30 -04:00
Joey Hess cedb7c33f9 web commit by http://sabr.myopenid.com/ 2008-04-17 03:09:44 -04:00
Joey Hess 48976989e0 web commit by http://sabr.myopenid.com/ 2008-04-17 03:08:58 -04:00
Joey Hess cbe4f9ead5 web commit by http://sabr.myopenid.com/ 2008-04-17 03:08:36 -04:00
Joey Hess 9f44f60a89 web commit by http://sabr.myopenid.com/ 2008-04-17 03:08:11 -04:00
Joey Hess 2512ceebb0 web commit by http://sabr.myopenid.com/ 2008-04-17 02:29:18 -04:00
Joey Hess 21b8c3f94d web commit by JoshTriplett: Testing adding a page with page type not set. 2008-04-16 20:21:29 -04:00
Joey Hess 74d8a656da web commit by http://bruno.boulgour.com/: Typo 2008-04-16 19:14:58 -04:00
Joey Hess e8c9362c7f web commit by http://bruno.boulgour.com/: Problems with adminuser role 2008-04-16 19:14:07 -04:00
Joey Hess e91b128338 add news item for ikiwiki 2.43 2008-04-16 18:45:34 -04:00
Joey Hess 570f7e6594 web commit by http://hands.com/~phil/ 2008-04-15 06:39:46 -04:00
Joey Hess 982f969367 web commit by http://hands.com/id/phil/ 2008-04-13 16:54:58 -04:00
Joey Hess 10150e675d web commit by http://sabr.myopenid.com/ 2008-04-13 12:55:51 -04:00
Joey Hess 1efaa8e6ec web commit by http://sabr.myopenid.com/ 2008-04-13 12:55:02 -04:00
Joey Hess c8097457a7 web commit by http://sabr.myopenid.com/ 2008-04-13 12:52:22 -04:00
Joey Hess 9a2dfd21ab web commit by http://sabr.myopenid.com/ 2008-04-13 12:48:28 -04:00
Joey Hess 3f0de75332 web commit by http://sabr.myopenid.com/: add a toc to test it appearing in preview... it doesn't. 2008-04-13 12:21:33 -04:00
Joey Hess 40c03af378 web commit by http://sabr.myopenid.com/ 2008-04-13 12:08:44 -04:00
Joey Hess f4797af297 web commit by http://sabr.myopenid.com/ 2008-04-12 22:53:53 -04:00
Joey Hess 50e06351ca web commit by http://sabr.myopenid.com/ 2008-04-12 22:46:00 -04:00
Joey Hess 78e740f643 web commit by http://sabr.myopenid.com/ 2008-04-12 22:23:55 -04:00
Joey Hess c70160e995 web commit by http://sabr.myopenid.com/ 2008-04-12 22:15:21 -04:00
Joey Hess d97ca8c610 web commit by http://sabr.myopenid.com/ 2008-04-12 20:36:15 -04:00
Joey Hess 378c2696d9 web commit by http://sabr.myopenid.com/ 2008-04-12 20:13:42 -04:00
Joey Hess 7518b245f2 web commit by http://sabr.myopenid.com/ 2008-04-12 20:05:34 -04:00
Joey Hess 060ceaba1f web commit by http://sabr.myopenid.com/ 2008-04-12 20:04:59 -04:00
Joey Hess 4988a901c8 web commit by http://sabr.myopenid.com/ 2008-04-12 20:04:29 -04:00
Joey Hess 7178de28da web commit by tschwinge: Modify. 2008-04-12 18:01:54 -04:00
Joey Hess 461f907403 web commit by http://sabr.myopenid.com/ 2008-04-12 17:57:09 -04:00
Joey Hess 3b7b057e01 patch, thoughts 2008-04-12 17:19:32 -04:00
Joey Hess 57035d610e web commit by http://sabr.myopenid.com/ 2008-04-12 13:21:11 -04:00
Joey Hess 1f4dec34e2 web commit by cjb: Added wiktionary shortcut 2008-04-10 21:55:25 -04:00
Joey Hess 26c96e1f10 web commit by http://sabr.myopenid.com/ 2008-04-10 20:18:20 -04:00
Joey Hess 2718fc2b25 response 2008-04-10 19:54:38 -04:00
Joey Hess 92e39d7391 cannot reproduce 2008-04-10 19:32:43 -04:00
Joey Hess abde579038 response 2008-04-10 19:25:23 -04:00
Joey Hess 51f75484d7 let's move the access keys discussion out to the todo item about it 2008-04-10 19:18:34 -04:00
Joey Hess d9275303cc correct the command line used to generate the favicon 2008-04-10 18:51:21 -04:00
Joey Hess 58e346d229 correct utf-8 damage introduced by jblevins's modification of this page 2008-04-10 18:00:17 -04:00
Joey Hess 235b6d18b6 change wording 2008-04-10 17:59:11 -04:00
Joey Hess 04d601f419 response 2008-04-10 17:53:24 -04:00
Joey Hess 2beb279806 Give the full path to the hyperestraier helpfile in estseek.conf. 2008-04-10 17:50:43 -04:00
Joey Hess b698bf2408 Use bzr --quiet to avoid it outputting stuff and messing up http headers. (Scott Bronson) 2008-04-10 17:44:40 -04:00
Joey Hess e4395a567b Fix broken rcs_update for bzr. (Scott Bronson) 2008-04-10 17:41:43 -04:00
Joey Hess e1d456a86f Fix missing import of escapeHTML in userlink. (Scott Bronson) 2008-04-10 17:39:51 -04:00
Joey Hess 15237c74fc response 2008-04-10 17:31:39 -04:00
Joey Hess a91f044044 add news item for ikiwiki 2.42 2008-04-10 17:24:24 -04:00
Joey Hess 7f51c69491 releasing version 2.42 2008-04-10 17:24:08 -04:00
Joey Hess d5c964508f Merge branch 'master' of ssh://git.ikiwiki.info/srv/git/ikiwiki.info 2008-04-10 17:12:55 -04:00
Joey Hess ab0e0e807a perl dumping core is not an ikiwiki bug, sorry 2008-04-10 17:09:58 -04:00
Joey Hess 555f1d0512 web commit by http://joey.kitenet.net/: test 2008-04-10 16:46:23 -04:00
Joey Hess 243739e1c3 Merge branch 'master' of ssh://git.ikiwiki.info/srv/git/ikiwiki.info 2008-04-10 16:35:50 -04:00
Joey Hess 72b5ef2c5f Fix CSRF attacks against the preferences and edit forms. Closes: #475445
The fix involved embedding the session id in the forms, and not allowing the
forms to be submitted if the embedded id does not match the session id.

In the case of the preferences form, if the session id is not embedded,
then the CGI parameters are cleared. This avoids a secondary attack where the
link to the preferences form prefills password or other fields, and
the user hits "submit" without noticing these prefilled values.

In the case of the editpage form, the anonok plugin can allow anyone to edit,
and so I chose not to guard against CSRF attacks against users who are not
logged in. Otherwise, it also embeds the session id and checks it.

For page editing, I assume that the user will notice if content or commit
message is changed because of CGI parameters, and won't blndly hit save page.
So I didn't block those CGI paramters. (It's even possible to use those CGI
parameters, for good, not for evil, I guess..)

The only other CSRF attack I can think of in ikiwiki involves the poll plugin.
It's certianly possible to set up a link that causes the user to unknowingly
vote in a poll. However, the poll plugin is not intended to be used for things
that people would want to attack, since anyone can after all edit the poll page
and fill in any values they like. So this "attack" is ignorable.
2008-04-10 16:35:30 -04:00
Joey Hess 609e74bbd8 fix what I think is a typo 2008-04-10 16:08:59 -04:00
Joey Hess c69c811d64 web commit by http://joey.kitenet.net/: oops :-) 2008-04-10 14:45:00 -04:00
Joey Hess ff363cf9a0 web commit by http://joey.kitenet.net/ 2008-04-10 14:43:58 -04:00
Joey Hess 5647448501 web commit by ScottSwalwell: Fixed my fix. 2008-04-10 13:01:27 -04:00
Joey Hess 7921d9456c web commit by ScottSwalwell: Fixed this link. 2008-04-10 13:00:36 -04:00
Joey Hess 04528ba259 web commit by cjb: Fixed URL 2008-04-10 01:06:21 -04:00
Joey Hess e8728aa894 web commit by cjb: Tagged 2008-04-10 00:09:07 -04:00
Joey Hess 675236d251 web commit by cjb: Suggested patch for 302 redirect after page creation when using bzr 2008-04-10 00:07:59 -04:00
Joey Hess 914a5645a5 web commit by http://sabr.myopenid.com/ 2008-04-09 22:34:44 -04:00
Joey Hess 61012a1e8d web commit by http://sabr.myopenid.com/ 2008-04-09 21:56:41 -04:00
Joey Hess beea66a711 web commit by http://sabr.myopenid.com/ 2008-04-09 21:55:32 -04:00
Joey Hess 50d653ad11 web commit by http://sabr.myopenid.com/ 2008-04-09 21:33:30 -04:00