• last updated 16 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Insert content-length only when transfer-encoding is not chunked

- Aligned and fixed behavior for encoding of request with respect to redirect in the two implementations

- Use only binary encoding in curl implementation for the file used to spool the body, to avoid

corruption of content (eventual encoding has already happened in its proper place)

- Allow only for curl to exploit native file POSTing capability (only way to POST files > 2GB)

TODO: wrap this behavior in the generic API

- Add content-length header when POSTing content, as some servers will require it (curl did this already)

Don't put empty site node folders into the breadcrumbs (that is, site nodes not having a package underneath)

Move requirement of packages into proc.

Fix typo, allow to resuse tDOM object built when fixing markup instead of parsing again

- new utility to try 'fixing' invalid HTML

- fixed recognition of protocol agnostic urls

- use location from connection context and configurations to determine whether full urls are local

- optionally use new utility when plain parsing fails to try accepting a broader kind of invalid markup

- some update in test cases

- rename of the utilities with the 'dom' prefix, to make clear that this is the dom approach for sanitizing markup.

As it is sometimes prone to format and content loss, its use should be carefully considered.

    • -41
    • +140
    ./tcl/test/text-html-procs.tcl
- move test cases from utility procs into regression test

Improved behavior on links by using RFC compliant URL recognition.

Created (working) test cases

file text-html-procs.tcl was initially added on branch oacs-5-9.

    • -0
    • +0
    ./tcl/test/text-html-procs.tcl
Fix typo

New utility to sanitize HTML allowing to specify different sets of tags,

attributes and protocols to allow and two generic policies: strip javascript

and remove external references. It can also be used only for validation.

Removed leftover statement

Keep old proc behavior regarding deletion of the package so we don't break any previous code

  1. … 1 more file in changeset.
Use lreverse instead of inverting the list manually

Use better idiom to concatenate subnodes

- remove trailing white-space

- white space changes (replace tabs, remove trailing white space, fix indentation)

    • -408
    • +407
    ./tcl/00-database-procs.tcl
- white space change (replace trailing spaces)

    • -84
    • +84
    ./tcl/request-processor-procs.tcl
- white space change

- white space change

- use list operator for a more declarative reading

- fix indentation

- avoid nesting double quotes

Allow to delete node_ids having subnodes. This simply triggers unmount and delete

of site node, package instances and all its tree structure as one could do manually,

but packages themself are still responsible to "clean their own mess".

    • -124
    • +158
    ./tcl/site-nodes-procs.tcl
  1. … 1 more file in changeset.
- use ns_parseurl when available

- provide emulation for ns_parseurl for older versions of NaviServer or AOLserver

security::validated_host_header:

- check also in nssock sections for v4 and v6

- check as well virtual server configuration

Commented out obsolete and broken proc

    • -183
    • +187
    ./tcl/navigation-procs.tcl
- perform nonce-computation independent of user_id computation

- put resetting of untrusted user_id to the right place

- provide initial value for untrusted user_id