• last updated 2 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- added kernel parameter MaxUrlLength (default 2000) to remove

hard-coded length in request-processor-procs.

- lifted data model restriction of 100 characters for url-segments

(changing types of "site_nodes.name" from "varchar(100)" to "text")

(PostgreSQL only)

- site_node__node_id

* use built-in string functions instead of characterwise loop

* use default for last argument

* Improve source-code documentation

- bumped version number of kernel to 5.9.1d15

  1. … 3 more files in changeset.
security-procs:

- fix broken comparisons when "UseHostnameDomainforReg" is set

(see also issue #3293).

- don't use string match/regesub when manipulating URLs

(causes troubles with IP-literal notation). Instead, us

"eq" or "util::split_location"/"util::join_location"

- added means to ease debugging of login_urls and login_cookie:

variables "::security::log(login_url)" and

"::security::log(login_cookie)" contain the log severity.

by setting these to e.g. "notice", this does not require

to activate full debugging (setting severity to debug) in order

to obtain log output.

- added new function "util::join_location" as counterpart of

"util::split_location" to use IP-literal notation when necessary

(IPv6). The function can be used in connection with

"util::split_location" to substitute hostnames/ports etc. in full

urls instead of insecure regsub operations.

- function "util::external_url_p":

* don't use "string match" for comparing locations, since this

will fail with IP-literal notation

* no need to compare with encoded name (if needed, on should provide

an option).

- address bug #3293: actual code in oacs-5-9 used full host header

(from request header fields) which might contain port.

db-query is now performed without the optional port

- improve Tcl coding (use defaults, break long lines)

- security::validated_host_header: Handle aliases for locations, which cannot be determined from config files, but which are supposed to be ok

Improving root_of_host_

- reduce dependency of the paths in the configuration script

- treat not only http, but as well https locations

- improve comments

- don't report urls in security::locations obtained form https drivers which loaded but not listening (identifiable via port number 0)

- don't complain in rp_lookup_node_from_host when pass-in host is emtpy (return empty node_id as well)

- proc get_referrer: add optional flag "-relative" to return the referrer without protocol and host

+CVS: ----------------------------------------------------------------------

- don't rely on abbreaviation "int"

- improve backward compatibility: although permission_p is boolean, the results of often compared with literal "0" and "1", so return an integer as well

- make test working as well for newer versions of nsf

- removed space

file acs-kernel-procs-postgresql.xql was initially added on branch oacs-5-9.

    • -0
    • +0
    ./tcl/acs-kernel-procs-postgresql.xql
- Add SQL schema acs_permission to allow to call sql-functions for

Oracle and PostgreSQL in exactly the same way

- Move postgres permission function to the new neamespace and provide

stubs for backward compatibility

- New function permission::get_parties_with_permission

to support a restricted form of reverse lookup for permssions

in order to reduce the dependencies on

acs_object_party_privilege_map for PostgreSQL

- make upgrade scripts more robust (support repeated loading)

- bump verison number of acs-tcl to 5.9.1d9

- bump version number of acs-kernel to 5.9.1d11

    • -0
    • +16
    ./tcl/acs-kernel-procs-postgresql.xql
    • -7
    • +6
    ./tcl/acs-permissions-procs-oracle.xql
    • -8
    • +8
    ./tcl/acs-permissions-procs-postgresql.xql
  1. … 5 more files in changeset.
file acs-kernel-procs-oracle.xql was initially added on branch oacs-5-9.

    • -0
    • +0
    ./tcl/acs-kernel-procs-oracle.xql
- replace obsolete all_object_party_privilege_map by acs_object_party_privilege_map

Bugfix:

- when a package is deleted, which is already disabled, the

"before-uninstall" callback was not executed.

- Reason: apm_version_id_from_package_key returns just enabled packages

- the new version of apm_version_id_from_package_key has an optional

argument "-all" to return enabled or disabled version_ids

- removed escaped testing code

- regenerated documentation to fix escaping problem in docbook: when a "programlisting" contains a message key, it is properly escaped when putting a ­ after the first hash

  1. … 124 more files in changeset.
- unset coockies with the same "-secure" setting, which was used when creating it (differed for ad_session_id and ad_user_login).

- improve documentation

- improve behavior on invalid host headers and comment the purpose in more detail

- fix typos in documentation

    • -12
    • +12
    ./tcl/tcl-documentation-procs.tcl
- terminate filter with filter_return when errors occur

- fix error message

- return for unset host entry ""

- allow empty port from provided host header

- add validation against invalid host header fields

- use filter_return to terminate filter on errors

- return complaint in case of invalid lanuguage setup