• last updated 11 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
fixed bug #3469

First submenu item was missing. This bug is identical in the bootstrap3

and bootstrap5 theme packages. Many thanks to Keith Paskett for

rpeoprting and suggesting a fix.

  1. … 1 more file in changeset.
fixed vertical placement of login link

Do not pass the __csrf_token via return_url when the user is not logged-in

Passing the token seems to cause problems with web vulnerability scanners, that poison

the token value. The value of passing the token value for unregistered users

is questionable.

If this change is kept, it should go as well to the openacs-bootstral3.theme.

Fix for sitebug #150 (security relevant)

The login widget at the navbar contained in its query variable

the password of a user in plain text (e.g. when the user has

mistyped the password, but as well on other error conditions).

Now, the password is filterer in the return_url in such cases.

Many thanks to Khy H for reporting this bug.

For details, see

https://openacs.org//bugtracker/openacs.org/bug?bug_number=150

  1. … 1 more file in changeset.
reduce verbosity

Fixed broken link in login and logout widgets

The problem were the links for the main subsite, since on the main subsite,

the resulting link is e.g. //register/logout, which is intpreted as

an URL without a schema (e.g. //openacs.org), leading the errors.

fix missing variable, make login/logout handling more consistent

switched to Bootstrap 5 idioms

  1. … 5 more files in changeset.
Added navbar-dark style to header nav, remove obsolete CSS defs (many thanks to Monika Andergassen)

  1. … 1 more file in changeset.
Make login and logout urls subsite specific (many thanks to Monika Andergassen)

cleanup of subsite_link and subsite_url variables and reduce to subsite_url (many thanks to Monika Andergassen)

  1. … 8 more files in changeset.
adapt markup for navbar and dropdown elements to bootstrap5 notation (many thanks to Monika Andergassen)

  1. … 1 more file in changeset.
remove traces of md5::md5, since ns_md5 is emulated also for AOLserver

  1. … 2 more files in changeset.
fix nesting and indentation

remove all occurrences of glyphicons

  1. … 7 more files in changeset.
minor style updates

- remove obsolete odd/even

- removed middle "xs" as required by Bootstrap4, made e.g. "col-xs-6" to "col-6"

- Bootstrap4 has new sm grid tier, so bumped former grid tier for md"

and "lg" up one level up

  1. … 5 more files in changeset.
New package: openacs-bootstrap5-theme

This is the initial checking of the OpenACS Bootstrap 5 Theme,

which is a port of the OpenACS Bootstrap 3 Theme.

In its current, premature state, the basic functionality is there for

the openacs_bootstrap5 (openacs_bootstrap5_turquois untouched), but it

covers already the base functionality of xowiki (longer way to go for

e.g. xowf, or the various other packages). Also, the graphical

fine-tuning has to be done, but e.g. glyphicons are already replaced

by Bootstrap Icons, etc.

  1. … 54 more files in changeset.