• last updated 1 hour ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
set focus via HTML "autofocus" attribute

improved comments

    • -12
    • +13
    ./packages/acs-subsite/lib/login.tcl
added a log message, when login page expires (happens seldomly)

Enhanced security logging and debugging in security-procs.tcl

- Updated the internal log procedure to accept multiple arguments (using join) for more flexible logging.

- Replace several ns_log calls with ::security::log to standardize logging of session_id, login_cookie, timeout, and other events.

- Add additional log statements in critical functions (e.g. sec_handler, sec_setup_session, __ad_verify_signature, and CSRF token handling)

to provide better traceability of session allocation, cookie generation, session invalidation, and signature verification.

- Improve debug output for CSRF token generation and verification, including logging differences in computed hash values.

    • -14
    • +32
    ./packages/acs-tcl/tcl/security-procs.tcl
added debugging hook for tracing CSRF livecyle

improved log messages to pinpoint location and reason

    • -2
    • +2
    ./packages/acs-tcl/tcl/01-database-procs.tcl
    • -2
    • +2
    ./packages/xotcl-core/tcl/05-db-procs.tcl
removed manual default entries from the info texts.

The actual default value is displayed by the parameter page, there is no need

to duplicate this information.

New feature: Display defaults together with actual values in parameter page.

This features makes it easier to see, what paramters were changed locally from

the defaults, without relying on the info messages.

fixed variable name

    • -3
    • +3
    ./packages/acs-tcl/tcl/utilities-procs.tcl
provent passwords from form being logged via ad_log

    • -18
    • +11
    ./packages/acs-tcl/tcl/utilities-procs.tcl
Replace deprecated proc call

    • -2
    • +2
    ./packages/notifications/www/request-new.tcl
Fix proc doc

Whitespace changes

New method 'group renew' for the MS Graph API support.

    • -0
    • +16
    ./packages/xooauth/tcl/ms-procs.tcl
Introduce SSE notifications on the page, but bind their availability and usage to a package parameter set to false by default

    • -1
    • +12
    ./packages/notifications/www/request-new.tcl
    • -4
    • +9
    ./packages/acs-templating/tcl/widget-procs.tcl
Provide a Notification API implementation for rendering notifications obtained via the SSE backend

This include should be used e.g. on the website master so that SSE notifications are displayed whenever occurring. We do not do it by default for now.

    • -0
    • +50
    ./packages/notifications/lib/notification-sse.adp
Consume element(html) when attributes are merged, to prevent possible subsequent executions from repeating the same attributes

See https://openacs.org/forums/message-view?message_id=7392341

    • -1
    • +2
    ./packages/acs-templating/tcl/widget-procs.tcl
ad_return_url: provide a positive list and a negative list for selecting included query variables

The new parameters follow the terminology of the "export_vars" command.

    • -3
    • +11
    ./packages/acs-tcl/tcl/defs-procs.tcl
Fix typo

many thanks to Simone Pesci for the report

ad_return_url: new parameter "-exclude"

This change allows to exclude certain variables (which are e.g. considered as

confidential) from the form, which computes the return_url.

The change is based on a feature request in the OpenACS forums by Josue Cardona.

added tclhttp to system statistics

    • -11
    • +12
    ./packages/xotcl-core/tcl/01-debug-procs.tcl
reapplied post 5-10 release fix

Many thanks to Claudio Pasolini for reporting and identifying the problem!

    • -2
    • +2
    ./packages/acs-tcl/tcl/security-procs.tcl
fixed bug security::validated_host_header

Many thanks to Claudio Pasolini for reporting and identifying the problem!

    • -2
    • +2
    ./packages/acs-tcl/tcl/security-procs.tcl
Fixed 2 bugs: with remote code repository

- fixed repository URL when trying to "install-from-repositry"

on a checkout from the HEAD channel. The code tried to fetch

from a channel "6-0", which does not exist.

- determine the exact repository tag for repository channels

    • -3
    • +11
    ./packages/acs-admin/www/install/install.tcl
    • -3
    • +14
    ./packages/acs-tcl/tcl/apm-install-procs.tcl
unset temporary variables which would be kept in the in the ::xowiki namespace

    • -1
    • +3
    ./packages/xowiki/tcl/xowiki-procs.tcl
streamline spelling

fixed typo

    • -1
    • +1
    ./packages/acs-templating/tcl/head-procs.tcl
Bumped upstream version of highcharts to 12.1.2

    • -2
    • +2
    ./packages/highcharts/tcl/resource-procs.tcl
bumped version of fa icons to 6.7.2

    • -2
    • +2
    ./packages/fa-icons/tcl/resource-procs.tcl