• last updated 5 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Fallback to datatype mapping based on acs_datatypes when no direct mapping is available

Replace inline js event when sending the message to comply with CSP

Comment link to inactive email

Acknowledge the original maintainer, but remove link to nonexistant domain

Update documentation to encourage CSP best practice Commented obsolete email contact

Update documentation to encourage CSP best practice

Commented obsolete email contact

Update documentation to encourage CSP best practice

Commented obsolete email contact

Update documentation so best practice is suggested

Commented out obsolete and broken proc

    • -183
    • +187
    /openacs-4/packages/acs-tcl/tcl/navigation-procs.tcl
Fix event name in handler

    • -1
    • +1
    /openacs-4/packages/forums/www/messages-get.tcl
- perform nonce-computation independent of user_id computation

- put resetting of untrusted user_id to the right place

- provide initial value for untrusted user_id

- setting nonce always (also for non-authenticated requests)

Fix event name

Removed inline js handlers to comply with CSP

Removed deprecated html attributes bgcolor and align

Fixed markup

Removed inline js handlers to comply with CSP

Removed deprecated html attributes bgcolor and align

Removed exec mv and used file rename instead

Fixed markup

Removed redundant files: they are duplicated in attach-file.adp and attach-file.tcl

in the same folder, actually used by the OacsAttach plugin and revised for CSP already.

Removed commented markup

Remove inline js handlers to comply with CSP

Remove inline event handlers to comply with CSP

    • -5
    • +18
    /openacs-4/packages/xowiki/tcl/chat-procs.tcl
Creating a transcript is an administrative action, regular users can already

see every transcript created, including the current conversation.

Therefore, disable create transcript button for people without privilege.

(Privilege would be enforced anyway afterwards)

    • -6
    • +17
    /openacs-4/packages/chat/lib/transcripts.tcl
Fix class instead of id so events can fire

- improve breadcrums

- prettify long-calls page

- fixed some prev/next links

- made don't provide empty links in navigation arrows

  1. … 31 more files in changeset.
- use "-is_latest true" also for save_new

- remove commented out lines

    • -3
    • +1
    /openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
- improve comments

Fix wrong localization key

- avoid call of deprecated sql variant with 12 args via API (many thnaks to Guenter Ernst)

- handling of NULL values in cr_revision_latest_tr (many thanks to Guenter Ernst)

- bump version to 5.9.1d24