• last updated 23 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- add validation against invalid host header fields

- use filter_return to terminate filter on errors

- return complaint in case of invalid lanuguage setup

- don't swallow sliently exceptions

Fix indentation from previous commit

Fixed problem when exporting empty variables pointed by Gustaf:

when one exported something like {{var ""} ... this was seen as absence of value,

so $var was searched for one in the caller scope. Hardened check for presence of an explicit value.

- reject requests where host contains invalid characters

- improve formatting

- don't log errors on abort script operations

- split ad_log into two parts; util::request_info returns now the request information as a string, can be used in web-interface as well

- write content only for POST data

- fix stupid cut&paste bug

- improve error handling of closed connections

- output more detail for errors

- only subst value, when it was provided explicitely in the "- -export" list. (see also change in www/register/user-new.tcl in http://cvs.openacs.org/changelog/OpenACS?cs=oacs-5-9%3Agustafn%3A20160525130725)

- add errorCode to reported context information

- Add safety belt to prevent recursive loop

    • -18
    • +25
    ./tcl/tcl-documentation-procs.tcl
- add return link for complaint pages

- make ::security::csrf::token public

Fix bug http://openacs.org/bugtracker/openacs/bug?bug_number=3292:

Native and curl implementation of util::http behave inconsistently when dealing with json content and special characters

Also fix another inconsistency: curl added an extra space after pager content.

- comment on "export_vars" function

- modularize CSRF handling

- use consistently "clock clicks -microseconds"

- bump version number to 5.9.1d8

    • -25
    • +26
    ./tcl/request-processor-procs.tcl
- add infrastructure support for CSRF protection

- make "*_not_cached" versions hidden

- bump version numnber to 5.9.1d7

- prefer "localurl" over "return_url" as name of page_filter

- add page_contract_filter for return_url

- add generic "name not valid" message key

- bump version to 5.9.1d6

    • -0
    • +1
    ./catalog/acs-tcl.en_US.ISO-8859-1.xml
- improve performance of util::external_url_p

- improve the correctness of the numeric range test, otherwise leading zeros is causing troubles, or e.g. "num=0;copy" is accepted for e.g. "range(0|5)"