• last updated 22 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
- adding nonce values to script tags

  1. … 9 more files in changeset.
- add fallback for non CSP 2 compliant browsers for "head::add_script -script ..."

Removed dangerous catch idiom

Removed leftover count_query argument from template::paginator::create

- template::head::add_style: don't add identical entries multiple times

- avoid event bubbling for click listener

- add nonce to inline javascript

- make unsafe-inline optional in CSP for legacy browsers: add automatically "script-src 'unsafe-inline'" when scripted body_scripts are used

- add CSP nonce to script tags if nonce value is available

- turn function definition of acs_Focus() into a conditionally defined

body-script

- turn "body_event_handlers" into "window.addEventListener"

  1. … 4 more files in changeset.
- add support for W3C Subresource Integrity (SRI)

* For details about SRI, see https://www.w3.org/TR/SRI/

* Added arguments -crossorigin and -integrity

to the following functions

template::add_body_script

template::add_script

template::head::add_javascript

template::head::add_link

template::head::add_script

* Updated blank-master.adp

- some more cleanup:

* remove commented out code

* add missing argument documentation

(template::head::add_javascript)

* document arguments alphabetically

  1. … 3 more files in changeset.
- provide a better error message in case the request processor fails early

- provide default masters in case no theme provides a template

file plain-streaming-head.adp was initially added on branch oacs-5-9.

    • -0
    • +0
    ./resources/masters/plain-streaming-head.adp
file plain-streaming-head.tcl was initially added on branch oacs-5-9.

    • -0
    • +0
    ./resources/masters/plain-streaming-head.tcl
Prefer ns_quotehtml over ad_quotehtml, and quote fixing.

Value of within ad_quotehtml to avoid possible XSS attacks.

Added subst fixing acs_ListCheckAll variable substitutions not working.

- add validator for page-contract

- add title to pages

    • -1
    • +4
    ./www/resources/htmlarea/popups/blank.html
- use entities for single quotes in HTML text

  1. … 60 more files in changeset.
- reduce dependencies on acs_object_party_privilege_map (for PostgreSQL)

    • -7
    • +2
    ./www/doc/demo/list1a/index-postgresql.xql
    • -5
    • +1
    ./www/doc/demo/list1b/index-postgresql.xql
    • -6
    • +2
    ./www/doc/demo/list2/index-postgresql.xql
    • -7
    • +4
    ./www/doc/demo/list3/index-postgresql.xql
    • -7
    • +4
    ./www/doc/demo/list4/index-postgresql.xql
    • -7
    • +4
    ./www/doc/demo/list5/index-postgresql.xql
    • -7
    • +4
    ./www/doc/demo/list6/index-postgresql.xql
    • -7
    • +5
    ./www/doc/demo/list7/index-postgresql.xql
    • -14
    • +10
    ./www/doc/demo/list8/index-postgresql.xql
    • -14
    • +10
    ./www/doc/demo/list9/index-postgresql.xql
- regenerated file

- reduce dependencies on acs_object_party_privilege_map (for PostgreSQL)

    • -0
    • +32
    ./www/scripts/xinha/file-selector-oracle.xql
    • -0
    • +32
    ./www/scripts/xinha/file-selector-postgresql.xql
    • -27
    • +4
    ./www/scripts/xinha/file-selector.tcl
file file-selector-oracle.xql was initially added on branch oacs-5-9.

    • -0
    • +0
    ./www/scripts/xinha/file-selector-oracle.xql
file file-selector-postgresql.xql was initially added on branch oacs-5-9.

    • -0
    • +0
    ./www/scripts/xinha/file-selector-postgresql.xql
- modernize HTML

  1. … 192 more files in changeset.
- make sure, only swa try to execute this script

- updated version numbers, regenerated documentation

    • -15
    • +15
    ./www/doc/TclDocs/content_method.adp
  1. … 284 more files in changeset.
- regenerated documentation

  1. … 252 more files in changeset.
- hardening page contract