• last updated 15 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Fix typo

Bump tinyMCE default version number to 8.0.1

This is a major release upgrade, with a couple breaking changes (see https://www.tiny.cloud/docs/tinymce/latest/migration-from-7x/).

As language pack for version 8 do not exist yet, we currently keep using those from 7 for any version >= 7. This should go away as soon as an own language pack is released for 8.

bumped version number

    • -2
    • +2
    ./packages/acs-subsite/acs-subsite.info
Fix accidental removal of root site‑node read permissions (#3477)

Submitting the “/” site‑map permissions form without any changes inadvertently

omitted direct (read‑only) permissions, causing not-logged-in users to see

“The page isn’t redirecting properly” when accessing the root node.

This change ensures that existing direct permissions are preserved when

the form is submitted, even if no changes were made.

Thanks to Khy H for reporting this!

Backport from main branch

Fix accidental removal of root site‑node read permissions (#3477)

Submitting the “/” site‑map permissions form without any changes inadvertently

omitted direct (read‑only) permissions, causing not-logged-in users to see

“The page isn’t redirecting properly” when accessing the root node.

This change ensures that existing direct permissions are preserved when

the form is submitted, even if no changes were made.

Thanks to Khy H for reporting this!

fix for bug #3476: ilike is not supported on Oracle

Many thanks to Sung Hong for the report and fix.

backport from HEAD

fix for bug #3476: ilike is not supported on Oracle

Many thanks to Sung Hong for the report and fix

Avoid noisy “table not found” errors on PostgreSQL

Previously, our localization script always queried the Oracle‐specific

view `v$nls_valid_values`. On PostgreSQL this table doesn’t exist, so

the DB driver logged a misleading “relation does not exist” error.

Now, we only perform that query when connected to Oracle. For all other

DBs (e.g. PostgreSQL) we skip it, eliminating spurious errors from

the logs.

In the the futures, one should introduce a new API call named in the

lines of "get_NLS_Info" that encapsulates the database‐specific logic

for determining language, charset, and territory.

    • -22
    • +23
    ./packages/acs-lang/www/admin/locale-edit.tcl
bumped upstream version to 5.3.7

bump upstream version number to 12.3.0

    • -1
    • +1
    ./packages/highcharts/tcl/resource-procs.tcl
improved clarity of the code and simplified structure

    • -16
    • +16
    ./packages/acs-tcl/tcl/security-procs.tcl
fix for using fallback interface and wrong results for non TLS installation

Many thanks to Antonio for flagging this and provide insights

    • -3
    • +8
    ./packages/acs-tcl/tcl/security-procs.tcl
Fixes to SSE notifications

- request for Notification permission at the time we are subscribing to it, so that it happens following a user interaction, required by the API

- find a plain-text format that will keep displaying the URLs as formatted in the notification, as the API does not support HTML

    • -0
    • +16
    ./packages/notifications/www/request-new.adp
    • -2
    • +4
    ./packages/notifications/www/request-new.tcl
provide complaints for invalid repository URLs

    • -2
    • +4
    ./packages/acs-admin/tcl/apm-admin-procs.tcl
Version and CDN maintenance for tinymce

- Switched from cdnjs to jsdelivr

- Bumped upstream version number from 5.3.3 to 5.3.6

- bumped version to 2.1.9

Version and CDN maintenance for bootstrap 5

- Switched from cdnjs to jsdelivr

- Bumped upstream version number from 5.3.3 to 5.3.6

- bumped version to 6.0.0d3

bumped version number to allow packages to use mutiple tags from jsdelivr

::util::resources::cdnjs_get_newest_version: support cases, where multiple tags are returned

    • -2
    • +3
    ./packages/acs-tcl/tcl/utilities-procs.tcl
Version and CDN maintenance

- Switched from cdnjs to jsdelivr

- Bumped upstream version number from 1.11.3 to 1.13.1

- bumped version to 0.3d1

bumped version number to 6.0.0d4

pass version number, since it is needed in the path

added support for jsdelivr, since cdnjs misses many new releases

    • -1
    • +1
    ./packages/acs-tcl/lib/check-installed.adp
    • -3
    • +3
    ./packages/acs-tcl/lib/check-installed.tcl
    • -18
    • +52
    ./packages/acs-tcl/tcl/utilities-procs.tcl
replaced hard-coded postgres version numbers, that were introduced for testing

    • -2
    • +2
    ./packages/acs-admin/www/posture-overview.tcl
backport from HEAD

    • -2
    • +23
    ./packages/acs-tcl/tcl/security-procs.tcl
fix for "security::get_secure_qualified_url" when no an old-style servername is used

    • -6
    • +27
    ./packages/acs-tcl/tcl/security-procs.tcl
Fix variable name

    • -2
    • +2
    ./packages/acs-subsite/tcl/rel-types-procs.tcl
bumped highcharts version to 12.2.0

    • -2
    • +2
    ./packages/highcharts/tcl/resource-procs.tcl
don't raise an exception, when invalid host header field is provided

Since this happens often with introsion attempts, provide a security warning.

    • -2
    • +9
    ./packages/acs-tcl/tcl/security-procs.tcl
use "ns_log security" when available

    • -3
    • +3
    ./packages/acs-tcl/tcl/security-init.tcl