• last updated 1 hour ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- move test cases from utility procs into regression test

Improved behavior on links by using RFC compliant URL recognition.

Created (working) test cases

file text-html-procs.tcl was initially added on branch oacs-5-9.

    • -0
    • +0
    ./tcl/test/text-html-procs.tcl
Fix typo

New utility to sanitize HTML allowing to specify different sets of tags,

attributes and protocols to allow and two generic policies: strip javascript

and remove external references. It can also be used only for validation.

Removed leftover statement

Keep old proc behavior regarding deletion of the package so we don't break any previous code

  1. … 1 more file in changeset.
Use lreverse instead of inverting the list manually

Use better idiom to concatenate subnodes

- remove trailing white-space

- white space changes (replace tabs, remove trailing white space, fix indentation)

    • -408
    • +407
    ./tcl/00-database-procs.tcl
- white space change (replace trailing spaces)

    • -84
    • +84
    ./tcl/request-processor-procs.tcl
- white space change

- white space change

- use list operator for a more declarative reading

- fix indentation

- avoid nesting double quotes

Allow to delete node_ids having subnodes. This simply triggers unmount and delete

of site node, package instances and all its tree structure as one could do manually,

but packages themself are still responsible to "clean their own mess".

    • -124
    • +158
    ./tcl/site-nodes-procs.tcl
  1. … 1 more file in changeset.
- use ns_parseurl when available

- provide emulation for ns_parseurl for older versions of NaviServer or AOLserver

security::validated_host_header:

- check also in nssock sections for v4 and v6

- check as well virtual server configuration

Commented out obsolete and broken proc

    • -183
    • +187
    ./tcl/navigation-procs.tcl
- perform nonce-computation independent of user_id computation

- put resetting of untrusted user_id to the right place

- provide initial value for untrusted user_id

- setting nonce always (also for non-authenticated requests)

Some more Tcl cleanup

- use curly brackes to enable byte code compilation

- don't use "[expr ...]" when not needed

- prefer "incr i -1" over "set i [expr {$i - 1}] "

  1. … 14 more files in changeset.
- imporve ad_html_qualify_links in various ways (better argument name, better comments, removed superflous slashes, ...

- add a function ad_html_qualify_links to make e.g. relative URL handing in notifications easier

- use variable names consistently

- fix handling of csrf token