• last updated 22 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
provide complaints for invalid repository URLs

replaced hard-coded postgres version numbers, that were introduced for testing

new feature: added database vulnerability checks to posture overview

Extended the /acs-admin/posture-overview page to include known CVEs

for both the database client library and the database server in

use. Previously, the overview displayed privacy and privilege analyses

and flagged vulnerable JavaScript libraries; it now also surfaces

database‐related vulnerabilities.

* Leverage the NaviServer–nsdbpg API to fetch and display client‐ and

server‐side version numbers

* Drive this feature via a database‐agnostic interface—only the nsdbpg

driver currently returns versions, but support for other databases

can be added by updating their drivers (no NaviServer core changes

required)

To use this new feature, use the latest NaviServer and nsdbpg releases.

Otherwise, the section "Database Vulnerability Check" won't appear.

  1. … 1 more file in changeset.
Fixed 2 bugs: with remote code repository

- fixed repository URL when trying to "install-from-repositry"

on a checkout from the HEAD channel. The code tried to fetch

from a channel "6-0", which does not exist.

- determine the exact repository tag for repository channels

  1. … 1 more file in changeset.
Allow HTML in the default value for parameters, as this could contain markup, e.g. , if the value is some kind of snippet.

change icon, since the old one is not clear when bootstrap3 is used

Prefer unset to array unset when we want to delete the entire array

See https://wiki.tcl-lang.org/page/Dict+VS+Array+Speed

Trap illegal encoding exception thrown by tcl9 when a file contains invalid UTF-8 and skip the package with a warning

Unmaintained packages may contain illegal characters and we do not want the UI to crash in this situation

merge with missing files

  1. … 1450 more files in changeset.
merge from oacs-5-10

  1. … 8085 more files in changeset.
bumped version number from development version to release version

  1. … 93 more files in changeset.
make acs-admin page a better starting place for site-wide admin tasks

notice in the system log, when require_site_wide_package returns empty

acs-admin/install: provide a hint that we never offer a package with maturity 0 via "install from repository"

use new API ::util::resources::resource_info_procs

reduced verbosity

minor cleanup: prefer list_of_lists, improved comments

    • -13
    • +13
    ./www/widely-accessible-packages.tcl
provide a stable order of list items by sorting

added link to "Security and Privacy Posture Overview" to acs-admin page

improved robustness, when cluster parameters are changed without a restart

reduced verbosity

provide posture overview for widely-accessible-packages when count == 1

    • -5
    • +13
    ./www/widely-accessible-packages.adp
    • -6
    • +24
    ./www/widely-accessible-packages.tcl
added test for xotcl/version-numbers

Added state of "robots.txt" and "security.txt" to posture overview

Prettify subsite admin page

- Made explicit that "Administration" means "Subsite Administration"

(use the term consistently)

- Changed message key of acs-subsite.administration to "Subsite Administration"

- added icons to subsite admin index page (full set only for bootstrap icons)

  1. … 8 more files in changeset.
increased timeout for checking requests on own site

fixed package_id in ADP page

improved PostgreSQL version compatibility

fixed URLs