OpenACS / openacs-4 / packages / acs-tcl / tcl

request-processor-procs.tcl

Tools

Line History

Line Count Graph
Line Count Graph

Stats

Commits this week: 1
Total Committers: 25
Last Commit: 11 Sep
Commits this week: 1
Total Lines of Code (LoC): 2,098
Net change in LoC this week: 0

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated 15 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Wednesday 11 Sep
8:11 am

gustafn

merge with missing files

Options
    • -0
    • +0
    ./request-processor-procs.tcl
  2. … 1464 more files in changeset.
Tuesday 03 Sep
5:37 pm

gustafn

merge from oacs-5-10

Options
    • -209
    • +406
    ./request-processor-procs.tcl
  2. … 8099 more files in changeset.
Wednesday 28 Aug
8:32 am

gustafn

improve source code documentation

Options
    • -3
    • +6
    ./request-processor-procs.tcl
Sunday 07 Jul
12:18 pm

gustafn

fixed indentation of braces

Options
    • -2
    • +2
    ./request-processor-procs.tcl
  2. … 2 more files in changeset.
Tuesday 04 Jun
2:14 pm

gustafn

Improved comments and make code more robust in regards of legacy setups

Options
    • -12
    • +20
    ./request-processor-procs.tcl
Friday 31 May
2:00 pm

gustafn

improved spelling

Options
    • -2
    • +2
    ./request-processor-procs.tcl
  2. … 5 more files in changeset.
Wednesday 29 May
11:24 am

gustafn

Extended "ad_conn behind_secure_proxy_p"

This test will be now true, when either the recieved request

contains one of those request header fields.

- "X-SSL-Request: 1"

- "X-Forwarded-Proto: https"

Before, only the first variant was accepted.

The AWS load balancer uses the second variant.

Options
    • -2
    • +5
    ./request-processor-procs.tcl
Wednesday 22 May
10:34 am

trenner

fix typo

Options
    • -2
    • +2
    ./request-processor-procs.tcl
Friday 17 May
4:05 pm

gustafn

Base "ad_conn behind_proxy_p" on "ns_conn details" when available

Options
    • -10
    • +27
    ./request-processor-procs.tcl
  2. … 1 more file in changeset.
Monday 24 Jul 2023
2:59 pm

gustafn

skip "-url" in "export_vars -url" since it is the default

Options
    • -3
    • +3
    ./request-processor-procs.tcl
  2. … 11 more files in changeset.
Friday 19 May 2023
2:13 pm

gustafn

call directly ns_getform

Options
    • -3
    • +3
    ./request-processor-procs.tcl
Wednesday 03 May 2023
2:33 pm

gustafn

improve spelling

Options
    • -3
    • +3
    ./request-processor-procs.tcl
  2. … 1 more file in changeset.
Tuesday 28 Mar 2023
4:04 pm

antoniop

Deprecate trivial wrappers to the NaviServer API

Modern ns_getform will not return the empty string for empty requests, but only when we are operating outside of a connection. In such circumstances is arguably useful to manipulate the request parameters.

Options
    • -6
    • +27
    ./request-processor-procs.tcl
  2. … 2 more files in changeset.
Tuesday 06 Sep 2022
1:17 pm

antoniop

Deprecate export_entire_form_as_url_vars and replace occurrences, add a new -formvars flag to export vars to implement the behavior of the proc, that is, export a subset of the variables coming from the current request

Options
    • -3
    • +3
    ./request-processor-procs.tcl
  2. … 5 more files in changeset.
Friday 01 Apr 2022
3:54 pm

gustafn

new API call ::security::csp::add_static_resource_header

The API call set the CSP rule on the current connection for a static

resource depending on the MIME type.

# Sample definition for custom CSP rules for static files in the

# OpenACS configuration file.

#

# ns_section ns/server/$server/acs {

# ...

# ns_param StaticCSP {

# image/svg+xml "script-src 'none'"

# }

# ...

# }

bump version number of acs-tcl to 5.10.1d13

Options
    • -1
    • +4
    ./request-processor-procs.tcl
  2. … 3 more files in changeset.
Tuesday 29 Mar 2022
10:50 am

gustafn

remove commented out coude

Options
    • -2
    • +1
    ./request-processor-procs.tcl
Friday 18 Mar 2022
10:13 am

antoniop

Revert additional fallbacks, one should take care that ad_conn is invoked correctly

Options
    • -14
    • +3
    ./request-processor-procs.tcl
Thursday 17 Mar 2022
10:15 am

antoniop

Provide further fallbacks for ad_conn

Options
    • -3
    • +14
    ./request-processor-procs.tcl
Monday 21 Feb 2022
9:49 am

gustafn

improve spelling and formulations

Options
    • -2
    • +2
    ./request-processor-procs.tcl
  2. … 2 more files in changeset.
Thursday 03 Feb 2022
2:58 pm

antoniop

Provide a fallback for vhost_url in ad_conn for code executed before this value has been set by the request processor

Options
    • -1
    • +6
    ./request-processor-procs.tcl
Wednesday 26 Jan 2022
12:10 am

gustafn

improve comment

Options
    • -4
    • +7
    ./request-processor-procs.tcl
Tuesday 11 Jan 2022
9:18 am

gustafn

avoid errors on attacks against request header field "Upgrade-Insecure-Requests"

Options
    • -2
    • +6
    ./request-processor-procs.tcl
Wednesday 05 Jan 2022
3:00 pm

gustafn

added a partial backwards compatibility implementation of for ns_baseunit (as used in request processor)

Options
    • -12
    • +7
    ./request-processor-procs.tcl
  2. … 1 more file in changeset.
2:10 pm

gustafn

move broken procs based on undefined function to decprecated procs and comment it out

Options
    • -9
    • +1
    ./request-processor-procs.tcl
  2. … 2 more files in changeset.
Tuesday 28 Dec 2021
5:39 pm

antoniop

Fix typo

Options
    • -1
    • +2
    ./request-processor-procs.tcl
4:51 pm

antoniop

Streamline idiom and merge if condition

Options
    • -13
    • +6
    ./request-processor-procs.tcl
Thursday 04 Nov 2021
5:11 pm

gustafn

mitigate attacks, where the referer header field is changed to a malicious value

The problem does not exist, when CSP is defined properly.

Many thanks to Frank Bergmann for sharing the pen-test protocol

Options
    • -2
    • +2
    ./request-processor-procs.tcl
  2. … 2 more files in changeset.
Monday 27 Sep 2021
1:28 pm

antoniop

Add missing argument expansion and comply with automated test

Options
    • -3
    • +3
    ./request-processor-procs.tcl
Monday 06 Sep 2021
5:34 pm

gustafn

prettify error message

Options
    • -2
    • +2
    ./request-processor-procs.tcl
Friday 27 Aug 2021
8:36 pm

gustafn

fixed bug in redirects and disabled acs-testing package, changed node info from array to dict

Options
    • -20
    • +22
    ./request-processor-procs.tcl