• last updated 35 mins ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Standardize spellings

- use links more consistent: add prefix /api-doc/ to urls for "see also" (like in other cases)

Fix spelling errors

  1. … 25 more files in changeset.
- Tcl idioms: simplify access to first character

  1. … 8 more files in changeset.
- Tcl idioms: simplify access to last character

  1. … 3 more files in changeset.
- fix broken call (ns_htmlencode must be ns_quotehtml)

- bump version number of OpenACS to 5.9.1b3 and DotLRN to 2.9.1b3

  1. … 79 more files in changeset.
Bump version numbers for OpenACS 5.9.1b1

  1. … 81 more files in changeset.
- use ::template::csrf::validate instead of security::csrf::validate

- add package parameter ValidateCSRFP

- bump version number to 5.9.1d4

- make boolean tests in .adp files more uniform

  1. … 53 more files in changeset.
- move global declaration up the file

- add csrf token to exported list on "show deprecated" link

- bug-fix (old bug): not sure, why "proc" was removed from the @see tag. the consequence was, that "@see ad_proc" as converted into "ad_", which is incorrect (see occurence e.g. in http://openacs.org/api-doc/proc-view?proc=callback&source_p=1)

- improve URL on error page

- apidoc::get_doc_url: factor out common code to reduce redundancy

- OpenACS PL/SQL API Search: add number ot arguments, modernize adp,

better separation of multiple psql functions

- fix postgres search url on api-doc/index page

- add missing csrf protection to NaviServer/AOLserver search box

- bump version number to 5.9.1d3

    • -4
    • +37
    ./tcl/acs-api-documentation-procs.tcl
    • -1
    • +1
    ./www/plsql-subprograms-all-oracle.xql
    • -2
    • +2
    ./www/plsql-subprograms-all-postgresql.xql
- replace <b> and <i> tags by <strong> and <em> tags

- add editor hints to .vuh files

  1. … 30 more files in changeset.
- simplify script

- handle source_p set to empty via client property in all cases the same way

- add scrf token for show/hide cases

- add CSRF protection

- prefer localurl as name for page filter

  1. … 17 more files in changeset.
- don't call tclcode_to_html on non-tcl files, since it might loop on e.g. /api-doc/content-page-view?version_id=4404&path=packages/acs-core-docs/www/xml/kernel/ext-auth.xml

- use page_contract_filter for return_url (can be used on many more

places as well)

- bump version to 5.9.1d2

- hardening page contract

  1. … 1 more file in changeset.
- harding page contract

- fix trim operation

- handle leading / returned by the hardened apidoc::sanitize_path function

- fix potential traversal attack

    • -10
    • +2
    ./tcl/acs-api-documentation-procs.tcl
- hardening page contracts