Commit Graph

2907 Commits (efd35233405e48d439a103de1079368602086323)

Author SHA1 Message Date
Simon McVittie 4fe6dd0551 request more information 2017-06-22 15:37:19 +01:00
Joey Hess 52a9d23e2c
add bug report originally emailed to me by Peter Simons 2017-06-22 09:55:27 -04:00
smcv 8503f8ddaa Suggested syntax does work, and has a test 2017-05-19 09:57:28 -04:00
smcv 1e4e51754e it is (meant to be) possible, just not with that syntax 2017-05-19 09:43:08 -04:00
fmarier 219134beff 2017-05-18 13:33:44 -04:00
Simon McVittie 01f2a84360 color: Use markup for the preserved CSS, not character data
This still smuggles it past the sanitize step, but avoids having
other plugins that want to capture text content without markup
(notably toc) see the CSS as if it was text content.
2017-05-16 12:08:55 +01:00
smcv cad72ecfad close 2017-05-16 04:27:56 -04:00
Simon McVittie 4db4e589e4 mdwn: Enable footnotes by default when using Discount
A new mdwn_footnotes option can be used to disable footnotes in
MultiMarkdown and Discount.
2017-05-14 18:16:53 +01:00
Simon McVittie 81c3258269 mdwn: Don't mangle <style> into <elyts> under some circumstances
We can ask libdiscount not to elide <style> blocks, which means we
don't have to work around them.
2017-05-14 17:45:55 +01:00
Simon McVittie 31c89db246 httpauth: If REMOTE_USER is empty, behave as though it was unset
A frequently cut-and-pasted HTTP basic authentication configuration
for nginx sets it to the empty string when not authenticated, which
is not useful.
2017-05-14 15:37:45 +01:00
smcv 365a930c2c complete last paragraph 2017-05-14 08:31:49 -04:00
smcv f6fc4543fb I have a theory 2017-05-14 08:20:49 -04:00
desci 207666e903 Fixing format 2017-03-29 15:37:02 -04:00
desci 886610d85b As requested 2017-03-29 15:36:28 -04:00
desci 5c9d9b3213 Answering questions and updating links 2017-03-29 15:35:54 -04:00
Simon McVittie 28409cd358 Add CVE references for CVE-2016-10026 2016-12-21 13:03:36 +00:00
intrigeri bec3047aff Replied. 2016-12-20 10:26:22 +00:00
Simon McVittie cde2cc1862 Restrict CSS matches on .header to not affect <tr>
Pandoc generates <tr class="header"> to hold <th> elements, and
we don't want to make those be display: block.

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 18:21:07 +00:00
Simon McVittie 9cada49ed6 Tell `git revert` not to follow renames
Otherwise, we have an authorization bypass vulnerability: rcs_preprevert
looks at what changed in the commit we are reverting, not at what would
result from reverting it now. In particular, if some files were renamed
since the commit we are reverting, a revert of changes that were within
the designated subdirectory and allowed by check_canchange() might now
affect files that are outside the designated subdirectory or disallowed
by check_canchange().

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 18:21:07 +00:00
smcv 32493312c8 rename bugs/img_tag_should_support_relative_size.mdwn to todo/img_tag_should_support_relative_size.mdwn 2016-12-19 12:46:46 -04:00
smcv 8395e43099 Not possible as stated, but could be adapted into a valid feature request 2016-12-19 12:46:22 -04:00
smcv 7d35dc88f3 2016-12-19 09:55:58 -04:00
Simon McVittie bc89021523 cgitemplate: remove dead code
blipvert points out in [[bugs/use of $topurl in cgitemplate]] that this
variable has not been used since commit a052771
"Now that we're always using HTML5, <base href> can be relative".

Signed-off-by: Simon McVittie <smcv@debian.org>
2016-12-19 12:00:34 +00:00
intrigeri 706bf876ea Report authorization bypass via RCS revert. 2016-12-17 11:11:44 +00:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 85c1fa60b8 2016-12-14 19:06:05 -04:00
blipvert@b874dc05477cdc0dc8c9c8d9bbe2e39240253a85 bd6a4567fd 2016-12-14 19:04:05 -04:00
intrigeri 2e865043d6 pagestats determinism: report bug + patch. 2016-11-20 07:00:20 +00:00
vegardv@75ae889e836bda8ce69bc038d8335c398a2f6f40 536f07d9ff 2016-11-03 08:42:03 -04:00
vegardv@75ae889e836bda8ce69bc038d8335c398a2f6f40 2f922120a1 2016-11-03 08:37:19 -04:00
karsk a9aa7c1c08 That was a (curious) mistake.
This reverts commit 1bfe2e2e19
2016-09-30 04:10:10 -04:00
karsk 1bfe2e2e19 removed 2016-09-30 04:09:12 -04:00
karsk 7ebb4cd3c5 2016-09-27 09:56:51 -04:00
karsk 0d5d26defa 2016-09-27 09:22:47 -04:00
Joey Hess 68e2320696
inline: Prevent creating a file named ".mdwn" when the postform is submitted with an empty title. 2016-09-21 13:51:42 -04:00
Joey Hess 8a638d6b53
bug 2016-09-21 13:44:57 -04:00
holger 20e2f80ad4 2016-09-07 08:20:55 -04:00
holger afa4274604 cleaned up, updated and submitted for patch 2016-09-07 08:17:16 -04:00
Simon McVittie 0b01e4f7b2 Revert spam 2016-08-22 19:11:49 +01:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 06fbc6297d update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:31 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 f378c1cc21 update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:31 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 57a41c515d update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:28 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 ecb59749e3 update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:27 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 f309938c9a update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:24 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 f73b2eb50a update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:22 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 785f93218c update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:21 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 1223a159ff update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:20 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 83c2e72b09 update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:17 -04:00
jhakasbaba76@c741fb7726e8ce4a230bc1a0d48fbeb496e46f89 59c7eb291a update for rename of recentchanges.mdwn to __8226____9__Get_CAll___64___1__42__855.709__126__2847___64___E.p.s.o.n_P.r.i.n.t.e.r_T.e.c.h.n.i.c.a.l_S.u.p.p.o.r.t_C.o.n.t.a.c.t_N.u.m.b.e.r.mdwn 2016-08-22 13:50:15 -04:00
smcv 13ccdebb5f No, this page is not C++ source code.
This reverts commit c35ab1e753
2016-05-18 13:56:35 -04:00
lazrak.zakaria.iga@c4885e46c85c8f3bc18a0b025856a958fc2cd924 c35ab1e753 rename bugs/garbled_non-ascii_characters_in_body_in_web_interface.mdwn to bugs/garbled_non-ascii_characters_in_body_in_web_interface.cpp 2016-05-18 13:55:05 -04:00
Simon McVittie d1ed45f4c1 Revert vandalism 2016-05-17 10:10:49 +01:00
CRAZYBATMAN 181419688f This reverts commit 855a7b5c6c 2016-05-17 02:26:20 -04:00
CRAZYBATMAN a72e29b6f5 This reverts commit 2d1615c340 2016-05-17 02:25:31 -04:00
https://id.koumbit.net/anarcat 0ee5cb719c thanks! 2016-05-08 17:10:50 -04:00
smcv dca4461c11 tag added 2016-05-08 16:44:56 -04:00
https://id.koumbit.net/anarcat f80fdeb044 dropping this. 2016-05-08 14:57:28 -04:00
https://id.koumbit.net/anarcat c7364a0567 2016-05-08 14:56:26 -04:00
smcv 855a7b5c6c respond 2016-05-06 15:29:51 -04:00
Simon McVittie cffc503e0c use intended filename 2016-05-06 20:16:58 +01:00
smcv 455be983c0 rename todo/Correctly_handle_filenames_starting_with_a_dash_in_add__47__rm__47__mv.mdwn to bugs/Correctly_handle_filenames_starting_with_a_dash_in_add/rm/mv.mdwn 2016-05-06 15:12:49 -04:00
https://id.koumbit.net/anarcat 355ba85137 all good 2016-05-04 18:53:24 -04:00
smcv e874ce623b 2016-05-04 18:35:33 -04:00
https://id.koumbit.net/anarcat bd881a8ee6 response: confirmation it's a bug in MMD and Discount doesn't have footnotes, and request for workaround 2016-05-04 09:45:25 -04:00
smcv 291a09e537 discount (as used on this wiki) can do footnotes, but they aren't enabled by ikiwiki 2016-05-04 05:48:01 -04:00
smcv 337736663b response 2016-05-04 05:38:27 -04:00
Joey Hess f4b75b3b2c
response 2016-05-02 09:33:59 -04:00
https://id.koumbit.net/anarcat 467f501d90 response 2016-04-28 20:13:05 -04:00
Joey Hess fe7ec461d4
Merge branch 'master' of ssh://git.ikiwiki.info 2016-04-28 19:34:51 -04:00
Joey Hess 3aa705b38a
response 2016-04-28 19:32:58 -04:00
https://id.koumbit.net/anarcat 1e38006bbc 2016-04-28 10:12:52 -04:00
https://id.koumbit.net/anarcat 965aa5c6fa http/https issue 2016-04-28 10:08:05 -04:00
Antoine Beaupré 81852a7db7 smaller is too small for large blocks 2016-04-26 18:52:25 -04:00
Antoine Beaupré e316ea9a7c fix typo and comment 2016-04-26 18:50:47 -04:00
Antoine Beaupré 093ad8b890 new CSS bug 2016-04-26 18:46:59 -04:00
desci 053f96e80b Changed the expired domain and added question 2016-04-18 22:08:50 -04:00
Antoine Beaupré e5c93a6ac0 can't login again 2016-04-15 11:07:14 -04:00
Antoine Beaupré 568b0fe11d a weird authentication bug 2016-04-15 10:14:50 -04:00
desci 9bb481ccd7 2016-04-14 17:14:47 -04:00
Antoine Beaupré 2d1615c340 new bug 2016-03-21 19:24:53 -04:00
holger 38ceeb4336 2016-03-12 11:35:49 -04:00
holger 2fe0b0551c 2016-03-12 11:32:35 -04:00
holger 5a02db562f 2016-03-11 11:29:56 -04:00
mx.david.rix@3bf9592fa655d6681eedf8add3d3b830d00a40d3 d0e9e07765 thanks 2016-03-11 05:31:20 -04:00
smcv 693e87fe18 believed to be fixed already 2016-02-14 07:48:19 -04:00
hiller895@a522927d23f463bd72913cb32f7addf168d78edb 25d8c0fa93 2016-02-13 06:49:16 -04:00
hiller895@a522927d23f463bd72913cb32f7addf168d78edb b5b2f29ced 2016-02-13 06:44:32 -04:00
mx.david.rix@3bf9592fa655d6681eedf8add3d3b830d00a40d3 9daecb7ed0 2016-02-12 07:58:01 -04:00
https://launchpad.net/~eliasson 28701b02de 2016-01-31 15:39:07 -04:00
Mich_Hein@757185527c4a9401c60f158c059d40255dbeacee 24b7e6f408 2016-01-28 08:34:55 -04:00
smcv 2903b913a1 point to Ubuntu packages since the bug report is from Ubuntu 2016-01-24 07:38:21 -04:00
smcv 32c192bb1a additional packages required 2016-01-24 07:37:34 -04:00
smcv 6b65bdb005 not a bug 2016-01-24 07:06:28 -04:00
mx.david.rix@3bf9592fa655d6681eedf8add3d3b830d00a40d3 9740331067 created 2016-01-22 12:04:56 -04:00
mx.david.rix@3bf9592fa655d6681eedf8add3d3b830d00a40d3 8f2bb4a971 created 2016-01-22 11:40:33 -04:00
mx.david.rix@3bf9592fa655d6681eedf8add3d3b830d00a40d3 98f0eb2e00 created 2016-01-22 11:26:54 -04:00
Simon McVittie 7aca0d40a3 Compose relative URLs in RSS feeds correctly
If the relative link from the (page generating the) RSS to the target
would start with "./" or "../", just concatenating it with the URL to
the directory containing the RSS is not sufficient. Go via
URI::new_abs to fix this.
2016-01-21 08:40:14 +00:00
Simon McVittie 816c856a46 close 2016-01-21 08:12:06 +00:00
smcv e890a703a0 couldn't reproduce this :-( 2016-01-20 17:41:58 -04:00
Simon McVittie 5dceeb28d8 img test: skip testing PDFs if unsupported 2016-01-19 11:24:18 +00:00
smcv b21a38ed0b escape pagespec so the HTML is more legible 2016-01-18 17:47:38 -04:00
Mich_Hein@757185527c4a9401c60f158c059d40255dbeacee 430df83d09 further invastigation on the rebuilding crash 2016-01-15 17:36:51 -04:00
Joey Hess 3cbc16abd6
underlays/javascript/* use ikiwiki's permissive license
I'm the sole author and copyright holder of these files.
2015-12-01 12:11:50 -04:00
smcv 0be7cebb3d it is deliberate that internal options aren't saved 2015-11-30 17:52:14 -04:00
smcv 2693d2e518 it's either GPL-2+ or very permissive; copyright holder should clarify 2015-11-30 17:46:55 -04:00
smcv 49ec655589 request feedback 2015-11-30 17:32:56 -04:00
Joey Hess 2c0c4b8ee1 bug 2015-08-26 09:34:45 -07:00
Joey Hess e48ac02c07 format 2015-08-06 14:23:16 -04:00
Joey Hess 6d3ff9f649 forward an email about a bug to the bug tracker 2015-08-06 14:18:15 -04:00
https://id.koumbit.net/anarcat 44c2c2d542 style 2015-07-28 13:33:00 -04:00
https://id.koumbit.net/anarcat 73778e5110 2015-07-28 13:32:00 -04:00
samuel.thibault@8a4fd970cf5a707e94c3ee4419d0010e6a1c726e ca460da8a7 2015-07-09 05:46:55 -04:00
spalax 2ab400a8a7 Bug fix 2015-07-04 17:35:33 -04:00
student 1ed0f1eedf 2015-07-01 14:47:05 -04:00
student 069485b776 rename done/mathjax_doesn__39__t_work_anymore_after_upgrade.mdwn to bugs/mathjax_doesn__39__t_work_anymore_after_upgrade.mdwn 2015-07-01 14:44:53 -04:00
student 8ef67415c5 rename bugs/mathjax_doesn__39__t_work_anymore_after_upgrade.mdwn to done/mathjax_doesn__39__t_work_anymore_after_upgrade.mdwn 2015-07-01 14:44:02 -04:00
student a5331a6799 2015-07-01 13:53:00 -04:00
student 5531dcff82 2015-07-01 13:36:18 -04:00
student 5f6a06cc53 2015-07-01 13:35:12 -04:00
student 4230499c5b 2015-07-01 13:34:41 -04:00
student 040c2dac9e 2015-07-01 13:33:54 -04:00
student c37aee9c9c 2015-07-01 13:33:27 -04:00
spalax 9b8c9d74f5 Hints on debugging mathjax error 2015-07-01 12:43:03 -04:00
student 8d1970aa1c 2015-07-01 08:48:56 -04:00
student e97e3fa47f 2015-07-01 08:43:50 -04:00
student 585fb3094d 2015-07-01 08:41:47 -04:00
lkcl c462df8347 2015-07-01 07:58:24 -04:00
smcv 9828ada0d2 probably already fixed, but not in Ubuntu 2015-06-30 14:32:15 -04:00
spalax 6144d867ec RPC bug: Code formatting 2015-06-30 14:32:11 -04:00
Louis 08de927e67 RPC bug: using built-in debug mode instead of my own debug functions
Second time in less than a week than I rewrite something that already
exists. I should sleep or think more...
2015-06-30 20:28:15 +02:00
student@c3ba50b755700ef14f94bd9ad301de913e9d7e68 f64d8a4d05 2015-06-30 14:22:58 -04:00
student@c3ba50b755700ef14f94bd9ad301de913e9d7e68 edc630e9b3 2015-06-30 14:21:47 -04:00
spalax 0741ecd9b7 2015-06-29 03:33:24 -04:00
spalax caca06ee2b 2015-06-29 03:32:42 -04:00
sajolida 9c910a76e7 Fix recommendation about rel attribute for style sheets 2015-06-28 20:07:45 +00:00
spalax 0d2888e4ad Escaping directives 2015-06-28 14:39:58 -04:00
Louis f8999311a7 More info about the (possible) bug in the external plugin (RPC communication) 2015-06-28 20:35:47 +02:00
https://launchpad.net/~beaufils b98c4a9e03 add links to me (in order to follow the bugs) 2015-06-22 06:18:03 -04:00
spalax c56c6bdb81 More information about but 2015-06-19 15:48:53 -04:00
https://launchpad.net/~beaufils 7cedc1fee4 Initial report. 2015-06-19 07:35:41 -04:00
spalax 7a35c92cb9 Potential bug with external plugins 2015-06-14 22:00:55 -04:00
Simon McVittie 7a2117bf8c img: stop ImageMagick trying to be clever if filenames contain a colon
$im->Read() takes a filename-like argument with several sets of special
syntax. Most of the possible metacharacters are escaped by the
default `wiki_file_chars` (and in any case not particularly disruptive),
but the colon ":" is not.

It seems the way to force ImageMagick to treat colons within the
filename as literal is to prepend a colon, so do that.
2015-06-13 20:00:08 +01:00
Simon McVittie 020a9c8b40 follow up: optimization partially restored 2015-06-09 00:21:24 +01:00
smcv 971dfdd686 de-optimized to fix a bug 2015-06-08 19:07:46 -04:00
smcv 9d20373c25 hopefully fixed in master 2015-06-08 18:58:28 -04:00
guilhem f99850b5d3 2015-06-06 12:51:08 -04:00
sajolida dc6357d9c6 Add bug about default behaviour of meta plugin for style sheets 2015-05-29 14:22:36 +00:00
Simon McVittie 2f6f51cd66 rename icon instead of changing the Javascript
That can take effect on Branchable without rebuilding ikiwiki.deb, and
the shorter name is perhaps nicer anyway.
2015-05-27 09:03:34 +01:00
Simon McVittie f99a4b3545 correct name of emailauth icon 2015-05-27 08:58:21 +01:00
Jake1 b385373b69 http://i.imgur.com/0yo0VjC.png?1 2015-05-19 18:27:41 -04:00
kjs 8118abb558 local.css also blocking 2015-05-11 07:51:54 -04:00