• last updated a few minutes ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
add include contract

    • -8
    • +25
    /openacs-4/packages/search/lib/navbar.tcl
Fix broken test case (broken in many dimensions)

improve spelling and comma settings

  1. … 13 more files in changeset.
improve spelling

improve spelling and comma settings

    • -3
    • +3
    /openacs-4/packages/xowiki/tcl/package-procs.tcl
    • -3
    • +3
    /openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
allow empty string as value for locale

    • -1
    • +1
    /openacs-4/packages/xowiki/tcl/weblog-procs.tcl
improve spelling

improve comments

    • -4
    • +5
    /openacs-4/packages/forums/www/message-post.tcl
add documentation to includelet

modernize Tcl

improve spelling

remove unneeded flag

make return arguments explicit

modernize Tcl

remove uneeded flag

use existing api

improve query parameter validation

    • -1
    • +1
    /openacs-4/packages/xowf/tcl/xowf-procs.tcl
improve error message in case the value is not validated: return the proper variable name

improve input validaton on query variables

    • -3
    • +3
    /openacs-4/packages/xowiki/tcl/folder-procs.tcl
    • -51
    • +32
    /openacs-4/packages/xowiki/tcl/package-procs.tcl
    • -30
    • +33
    /openacs-4/packages/xowiki/tcl/weblog-procs.tcl
    • -3
    • +3
    /openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
validate user_locale

security improvements: add value constraints for query parameters

Revert cache flushing, as it was solved differently downstream

use value checker in xotcl-core in get_query_parameter_return_url

    • -1
    • +1
    /openacs-4/packages/xowiki/xowiki.info
    • -7
    • +7
    /openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
bump version number to 5.10.0d21

Allow valuecheckers to be specified in query_parameter calls (implemented via argument checking)

Example: :query_parameter return_url:localurl /

add value checker for localurls

improve handling of invalid (hacked) ad_locale cookies.

Previously, invalid ad_locale cookies lead to an error, which in turn

prevented all communication with OpenACS. So, a user had to delete the

cookie manually. Now, we just produce a warning, ignore and delete such

broken cookies.

improve spelling

Force a complete flush also when setting a global parameter, other than when deleting

This operation seems superfluous upstream, but downstream code has some specific flushing behavior that would otherwise be applied only at deletion. The change is supposed to be merged in a way that will enable such specific flushing downstream