• last updated 23 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
switch from security::nonce_token to ::security::csp::nonce and update comments

Allow ad_return_url to be called also, when connection is closed.

This might be the case e.g. for the search renderer. In this case, a default_url is used

  1. … 2 more files in changeset.
Deprecate duplicated api and replace its only occurence in upstream codebase

  1. … 2 more files in changeset.
Add '`' to the list of sanitazable characters by 'ad_sanitize_filename'

fixed embedded variable name in message-key

    • -1
    • +1
    ./catalog/acs-tcl.de_DE.ISO-8859-1.xml
Whitespace changes

Fix typos

Remove trailing whitespace

replace broken redirect with standard redirect function (auth::require_login)

Greatly reduce complexity of code required to support -export flag for ad_form:

instead of juggle variables around to mimick export_vars, just set -export flag

value as a form property, then use the real export_vars on it later when form

is rendered. This will support all current features (e.g. :multiple, :sign, :array)

more reliably and reduce code duplication.

  1. … 1 more file in changeset.
no need for eagerly releasing handles

make sure not to release handles active in an transaction, transactions are based on handles

revert escaped change

allow parameter::get_from_package_key to be called before acs-tcl/tcl/utilities-procs.tcl are called

don't raise exception when folder_path is empty

activate usage of "ns_db currenthandles" when available

add error, when we are running out of handles

reduce verbosity, deactivate usage 'ns_db currenthandles' for now

fix typo

db_handle reform

Use "ns_db currenthandles" (when available) to implement "db_with_handle"

instead of the old approach based on the global db_state variables.

The enws approach has the advantantge that it is

- more robust (deletion and creation of the per-request variables,

no coherency problem),

- simpler, and

- faster (less overhead per db_with_handle call, simple queries up to 20% faster)

time {db_string . {select object_id from acs_objects limit 1}} 1000

old: 200-230 microseconds per iteration

new: 160-180 microseconds per iteration

    • -113
    • +334
    ./tcl/00-database-procs.tcl
fix typo

perform javascript escaping with more regular semantics

Introduce new ad_js_escape with the purpose of sanitizing tcl strings used inside javascript code from escape sequences and from quotes in particular and provide some test cases

TODO: consider its usage into templates when e.g. we are putting a URL into javascript functions such as acs_ListBulkActionClick. URLs might in fact contain single and double quotes.

Proc "util_get_subset_missing": make sure to return the found elements.

Added test case for this proc.

Make 'util_user_message' quote the message when the parameter 'html_p' is false, not otherwise, restoring pre-refactoring behavior and making it coherent with the parameter doc

Simplify code and exploit parameter contract (we know flags are boolean)

Put some sanity in ancient proc docs with 'pre' tags that were breaking api-doc

Whitespace changes

Fix typo in proc doc

Whitespace changes