• last updated 15 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
backport from HEAD

Fixed snyk vulnerability check (backport from HEAD)

Snyk page has changed, we have to switch the pattern we are looking for.

Bumped version number to flage the change to "upgrade from repository"

  1. … 1 more file in changeset.
fixed bug security::validated_host_header

Many thanks to Claudio Pasolini for reporting and identifying the problem!

Fixed bug in install-from-repository (issue #3472)

Install from repository (e.g., of /dotlrn) was horribly broken, see,

e.g., issue #3472. Furthermore, this bug was hard to debug, since it

showed up just during a complex installation attempts involving

install.xml, and it requires fetching from the repository. Therefore,

the debug rounds were quite time-consuming.

There were several problems involved:

1) dotlrn/install.xml was trying to set the theme to the

dotlrn-bootstrap3-theme, which was not loaded from the repository

2) The loading order was not correct, since the theme requires an

existing dotlrn instance to register the theme templates there.

3) The tests in install::xml::action::mount checking, if the package

was already mounted were incorrect, probably since many years. It

looks to me as some refactorings of the "get_node_id" semantics

(many years ago) were not reflected in this code. This bug let

the code assume, that the package was already mounted. Therefore,

the package was never mounted, causing a long tail of subsequent

issues.

4) the site_node::instantiate_and_mount call in

install::xml::action::mount was called with incorrect parameters,

causing overwriting of the site root node, leaving the site

completely unusable.

Bumped version number of acs-tcl to 5.10.2d1

  1. … 1 more file in changeset.
fixed overquoting in "ad_progress_base_end"

fixed cut&paste problem

reset to released version to keep differences little

  1. … 1 more file in changeset.
keep theme-stetting for dotlrn themes in dotlrn, since it requires a dotlrn instance

but when the dotlrn is installed, it requires the dotlrn-theme package to be installed

  1. … 3 more files in changeset.
Continue working on the install.xml issue.

added more debugging info

undo one more recent change

undo recent change. This was not the problem

added debug statement

try to get a non-empty context id

added debugging line

Fixed incorrect result handling from ::acs::site_node get_node_id

When

::acs::site_node get_node_id -url /$mount_point

is executed with a non-existing mount point, the node info of the

parent_id is returned. The code assumed that for such cases, the

resulting "object_id" member is empty. Since this affects only the

two action procs

install::xml::action::mount

install::xml::action::mount-existing

i have adjusted the behavior there.

Furthermore, some tests are now less mind-twisted.

improved log messages

small fix, when cookie times out and dotlrn is active

improved test case

- load first mime package before loading it

- provide version of the mime package in the test log

- don't provide ns_set id as "error"

documented command result

Use "ns_mkdtemp" when available to create temporary directories

cleanup tmp directories created by the acs-tcl regression test

whitespace changes

  1. … 7 more files in changeset.
improve source code documentation

added icanuse handler for "ns_info meminfo"

new function: ad_unless_script_abort and bump version to 5.10.1b12

This convenience function eases handling of ad_script_abort exceptions

in cases, where the OpenACS request processor is not involved.

From the documentation:

Execute the provided body in the callers' environment. When the

body does not raise an "ad_script_abort" exception, the

"non_abort_action" is also executed. This pattern is useful when

handling client requests and where the "non_abort_action" is used

to return results to the client. When "ad_script_abort" is

executed, the connection is usually closed, and any attempt to

talk to the client over the closed connection will fail.

The handling of script_abort exceptions is done usually in the

request processor. The function is useful when registering own

request procs (e.g., via "ns_register_proc") where the OpenACS

request processor is not involved.

bumped version to 5.10.1b12

  1. … 1 more file in changeset.
take out "nsstats" from the tests for page_contracts

silence regression test

reduce verbosity during regression test

do not complain about expected behavior