• last updated 19 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Avoid markup in documentation

Reduce people expectations

Fix acs-tcl.logout_from_everywhere test case and support again invalidating of all existing user logins, useful e.g. to make sure no device still holds a valid login when we change our password on a device

Test the use case supposedly supported by sec_change_user_auth_token: invalidate all existing login cookies (e.g. when the users change their password) so that all devices need to log in again

the test exposes a long standing regression (~17 years) where this was broken in order to support persistent login. See e.g. https://openacs.org/forums/message-view?message_id=1691183#msg_1691183

file security-procs.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./test/security-procs.tcl
improve spelling (follow LDP)

  1. … 12 more files in changeset.
the Linux Documentation Project recommends to write "lowercase" as a single word

perform a more sane test to check, whether the util_memoize cache was created already

fix for issue #3448

Don't rely on configured "location" value of driver, since this does not work for virtual hosting

Instead, get the "host", "port" and "defaultport" directly from "ns_driver info" when available

"ns_driver info" has no key "host", but "address" (which might be multiple addresses)

Exclude deprecated procs from the test

Include tests with string containing an extension, put also a ß in the mix

Basic test for ad_sanitize_filename

file utilities-procs.tcl was initially added on branch oacs-5-10.

    • -0
    • +0
    ./test/utilities-procs.tcl
Bring existing doc in the api-doc, so that documentation__check_proc_doc test case does not complain

Add semicolon ";" to the list of forbidden characters to be stripped when a filename is sanitized

It is not allowed to create a filename with a semicolon on Windows, but it is e.g. on MacOS and Linux, creating a possible interoperability issue

added backward compatibility proc for AOLserver "ns_trim"

  1. … 1 more file in changeset.
whitespace changes: break overlong lines

don't throw error message on transaction rollbacks (these are no errors, but use the same exception handling)

modernize Tcl code: replace array by dict

improved wording in comment

added commit for extending usage of OpenACS filters for other HTTP methods (e.g. in the REST context)

fix typo

reduce verbosity

added example line to ease spotting of the creation of unnamed mutexes

provide name for mutexes to ease spotting potential locks

avoid burst cache hits by using nsvs instead of ns_cache for secret token caching

The problem with the prevision version was that ns_cache has no equivalent

to nsv_array to get in an atomic fashion all key value pairs from the cache.

thefore, for the per-thread caching, a tight loop was used processing

the result of ns_cache_keys. If this was necessary in a high number of

threads, higher lock times were possible (~100ms). The new version

should not face this problem.

Important, although very simple reform in the page-contract filters: do not kill the case in the filter specs, or filters such as "w:oneof(One|Two)" or "locale:oneof(en_US|de_DE)" would not have a chance to match

Note that this makes the contracts stricter with respect to case, which might break obscure use cases...

avoid to try to return an error to client in request processor when connection was already closed