Activity OpenACS/openacs-4/packages/acs-subsite/lib

Tree
Accordion

Stats

Commits this week: 0

Total Committers:	27
Last Commit:	05 Apr
Commits this week:	0
Total Lines of Code (LoC):	1,514
Net change in LoC this week:	0

Commit Activity

last updated 2 hours ago

Constraints

Constraints: committers

Committer:

Log Comment:

Constraints: files

File Extension:

File Name:

Constraints: dates

Start Date:

End Date:

Saturday 08 Aug 2020

1:19 pm

gustafn

improve spelling

- -1
- +1
./user-new.tcl
- History
- Source
- Diff
./user-new.tcl
… 16 more files in changeset.

Saturday 06 Jun 2020

6:28 pm

gustafn

use "-varname" parameter for message_exists_p

- -2
- +2
./user-info.tcl
- History
- Source
- Diff
./user-info.tcl
… 1 more file in changeset.

Thursday 02 Jan 2020

2:24 pm

antoniop

Fix remaining occurrence of "screen_name" variable used to actually tell HOW to display the screen_name

- -2
- +3
./user-info.tcl
- History
- Source
- Diff
./user-info.tcl

2:17 pm

antoniop

Use ad_include_contract

- -0
- +7
./user-subsites.tcl
- History
- Source
- Diff
./user-subsites.tcl

2:13 pm

antoniop

Add ad_include_contract

- -3
- +5
./services.tcl
- History
- Source
- Diff
./services.tcl

Friday 13 Dec 2019

1:22 pm

gustafn

bug-fix: don't use variable "screen_name" for controlling display of ScreenName,

since it used as value for the actual screen name as well.

as a consequence, user got e.g. a value of "none" set as their acutal screen name, which

lead to a conflict with the unique screen name constraint of the data model

the conflicst with CVS: ----------------------------------------------------------------------

- -11
- +9
./user-info.tcl
- History
- Source
- Diff
./user-info.tcl

Thursday 28 Nov 2019

1:10 pm

gustafn

provde a global variable as transitional code for controlling passing of password as query variable

- -3
- +9
./user-new.tcl
- History
- Source
- Diff
./user-new.tcl
… 2 more files in changeset.

12:06 pm

gustafn

don't pass sensitive information (e.g. password) as query variable, but use client properties instead.

hectorr

Add a new instance parameter 'LoginPasswordAutocomplete' with the value of the 'autocomplete' attribute of the password field of the login form, to let each subsite decide.

- -1
- +9
./login.tcl
- History
- Source
- Diff
./login.tcl
… 1 more file in changeset.

Wednesday 10 Jul 2019

5:44 pm

hectorr

Disable autocomplete on login password field. See: https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion#The_autocomplete_attribute_and_login_fields

- -1
- +1
./login.tcl
- History
- Source
- Diff
./login.tcl

Tuesday 09 Jul 2019

11:24 am

antoniop

Rework query to use permission api instead of just removed materialized views

- -5
- +1
./subsites.xql
- History
- Source
- Diff
./subsites.xql

Thursday 20 Jun 2019

2:44 pm

gustafn

Modernize logic for protecting against cached passwords from forms,

when users log out and other users use the back button (for Nora).

- switch to more modern caching prevention

- add CSRF protection to login form against forgery requests

- none of the cache-preventing mechanisms helps when the user

stores the password in the browser (no change to the past).

- For admins of existing sites: alter kernel parameter

"LoginPageExpirationTime" to 0 make use of this feature

- -19
- +30
./login.tcl
- History
- Source
- Diff
./login.tcl
… 2 more files in changeset.

Wednesday 10 Apr 2019

11:38 pm

gustafn

whitespace changes

- -3
- +3
./login.tcl
- History
- Source
- Diff
./login.tcl

11:05 pm

gustafn

obtain default authority_id via "auth::authority::get"

- -2
- +2
./login.tcl
- History
- Source
- Diff
./login.tcl
… 3 more files in changeset.

Friday 29 Mar 2019

2:46 pm

antoniop

Do not abort when returning a message

- -1
- +0
./email-confirm.tcl
- History
- Source
- Diff
./email-confirm.tcl

12:35 pm

antoniop

Fix regression retrieving the member state

- -1
- +1
./email-confirm.adp
- History
- Source
- Diff
./email-confirm.adp
- -0
- +1
./email-confirm.tcl
- History
- Source
- Diff
./email-confirm.tcl

Tuesday 19 Mar 2019

1:43 pm

Remove dead adp code: if user is found and token is correct, email_verified_p will be always true, because it is forcefully set by the proc. In any other case, we will execute a different adp (lib/message)