• last updated 38 mins ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Protect against potential XSS vectors

replace catch by ad_try

    • -9
    • +9
    ./packages/acs-templating/tcl/filter-procs.tcl
Remove "catch {unset var}" idiom by "unset -nocomplain var"

    • -2
    • +2
    ./packages/acs-tcl/tcl/xml-0-sgml-procs.tcl
    • -11
    • +12
    ./packages/acs-tcl/tcl/xml-1-dom-procs.tcl
    • -2
    • +2
    ./packages/acs-templating/tcl/widget-procs.tcl
    • -2
    • +2
    ./packages/xowiki/tcl/xowiki-www-procs.tcl
- fix potential XSS attack vector

- reduce quoting hell

- use ad_try instead of "catch"

- factor out common code

    • -93
    • +138
    ./packages/acs-templating/tcl/tag-init.tcl
typesetting changes

extend README and improve title of admin page

Bump version number and add site-wide admin management scripts

    • -4
    • +6
    ./packages/boomerang/tcl/boomerang-procs.tcl
    • -0
    • +28
    ./packages/boomerang/www/sitewide-admin/index.adp
    • -0
    • +28
    ./packages/boomerang/www/sitewide-admin/index.tcl
Fix typo in error message

fix and comment strange construct in api_read_script_documentation

remove spurious brace

Fix cut&paste error

Bump version number on HEAD in agreement with version on 5-9 branch

Backport fix for https://openacs.org/forums/message-view?message_id=5386710 on the oacs-5-9 branch (requires bumping the version number)

    • -1
    • +1
    ./packages/fs-portlet/www/fs-portlet.adp
update documentation and bump version number

reduce number of swallowing catch operations

    • -3
    • +3
    ./packages/acs-api-browser/www/display-sql.tcl
    • -4
    • +3
    ./packages/acs-api-browser/www/proc-search.tcl
Reduce number of swallowing catches

    • -4
    • +13
    ./packages/acs-admin/www/send-email.tcl
Fix boolean expressions in .adp files

    • -3
    • +3
    ./packages/oct-election/www/election.adp
Fix typo chartype->charset

    • -2
    • +2
    ./packages/xotcl-core/tcl/bgdelivery-procs.tcl
add negative nt_total_time to sanity check

    • -2
    • +5
    ./packages/boomerang/tcl/boomerang-procs.tcl
reduce verbosity: no need to add message about missing "r" value

    • -5
    • +5
    ./packages/boomerang/tcl/boomerang-procs.tcl
Make so that these clauses are really clauses and not time intervals, as downstream code will be hacky otherwise

- just warn on bog differences between t_done and nt_total_time

- reduce verbosity

    • -4
    • +4
    ./packages/boomerang/tcl/boomerang-procs.tcl
really fix variable access to nt_total_time (guess, i need a break)

    • -2
    • +2
    ./packages/boomerang/tcl/boomerang-procs.tcl
really fix variable access to nt_total_time

    • -2
    • +2
    ./packages/boomerang/tcl/boomerang-procs.tcl
Improve previous fix: don't specify root folder at all and let file-storage deal with this

    • -1
    • +1
    ./packages/fs-portlet/www/fs-portlet.adp
    • -4
    • +1
    ./packages/fs-portlet/www/fs-portlet.tcl
Bugfix: make sure root_folder_id exists or dotlrn won't display community folder correctly

    • -1
    • +4
    ./packages/fs-portlet/www/fs-portlet.tcl
fix variable access

    • -2
    • +2
    ./packages/boomerang/tcl/boomerang-procs.tcl
add nt_total_time, sine t_done has sometimes less real-world significance then hoped

    • -4
    • +9
    ./packages/boomerang/tcl/boomerang-procs.tcl
Fix missing default value

    • -2
    • +2
    ./packages/dotlrn/tcl/community-procs.tcl
Fix extra parenthesys

    • -3
    • +3
    ./packages/acs-lang/tcl/lang-catalog-procs.tcl
Bugfix: content variable was not define before access (thanks to Giulia Nencini)

I am also not reading file content anymore, as this is potentially unsafe when file is very big and also could need special encoding translation etc.

Better retrieve the path and let the user decide what to do afterwards.