Activity OpenACS/openacs-4/packages/file-storage/www

Tree
Accordion

Stats

Commits this week: 0

Total Committers:	45
Last Commit:	26 Nov
Commits this week:	0
Total Lines of Code (LoC):	5,928
Net change in LoC this week:	0

Commit Activity

last updated 22 hours ago

Constraints

Constraints: committers

Committer:

Log Comment:

Constraints: files

File Extension:

File Name:

Constraints: dates

Start Date:

End Date:

Thursday 30 Mar 2023

6:28 pm

antoniop

Make sure, that also when the number of days is supplied as empty, we set it to a valid default

- -2
- +6
./folder-chunk.tcl
- History
- Source
- Diff
./folder-chunk.tcl

Thursday 23 Mar 2023

1:18 pm

trenner

harden page_contract

- -3
- +5
./simple-add.tcl
- History
- Source
- Diff
./simple-add.tcl

Friday 17 Mar 2023

2:29 pm

antoniop

Deprecate trivial fs::get_archive_extension and inline its only upstream occurrence

- -2
- +2
./download-archive/index.vuh
- History
- Source
- Diff
./download-archive/index.vuh
… 1 more file in changeset.

Tuesday 14 Mar 2023

9:37 am

trenner

check permission before adding file to zip directory

- -0
- +1
./download-zip.tcl
- History
- Source
- Diff
./download-zip.tcl

Friday 27 Jan 2023

12:59 pm

gernst

Improve validation

- -1
- +3
./file-add.tcl
- History
- Source
- Diff
./file-add.tcl
- -1
- +2
./file-edit.tcl
- History
- Source
- Diff
./file-edit.tcl

Monday 16 Jan 2023

5:11 pm

antoniop

Fix typo

- -1
- +1
./folder-chunk-postgresql.xql
- History
- Source
- Diff
./folder-chunk-postgresql.xql

Wednesday 04 Jan 2023

1:21 pm

antoniop

Refactor the query in the folder-chunk page so that on postgres one can enforce permissions in bulk, rather than for each file

- -0
- +47
./folder-chunk-postgresql.xql
- History
- Source
- Diff
./folder-chunk-postgresql.xql
- -31
- +2
./folder-chunk.tcl
- History
- Source
- Diff
./folder-chunk.tcl
- -3
- +31
./folder-chunk.xql
- History
- Source
- Diff
./folder-chunk.xql

Wednesday 30 Nov 2022

9:18 am

gustafn

Make use of new API "ad_mktmpdir" and "ad_opentmpfile" instead of "ad_tmpnam"

- -5
- +3
./download-archive/index.vuh
- History
- Source
- Diff
./download-archive/index.vuh
… 2 more files in changeset.

Sunday 27 Nov 2022

11:52 am

gustafn

Make use of new API "ad_mktmpdir" and "ad_opentmpfile" instead of "ad_tmpnam"

- -2
- +1
./download-zip.tcl
- History
- Source
- Diff
./download-zip.tcl
- -5
- +3
./file-add.tcl
- History
- Source
- Diff
./file-add.tcl
- -3
- +2
./folder-zip-add.tcl
- History
- Source
- Diff
./folder-zip-add.tcl
… 4 more files in changeset.

Saturday 22 Oct 2022

7:47 pm

gustafn

provided a helper proc to query the mapping of a generic icon name to a concrete

This function is necessary in boundary cases, where e.g. a display_template passes the generic

name of the icon via template variables which have to be

@-substituted before adp-tag resolution, which performs the

regular icon name mapping (otherwise, the tag resolver receives

e.g. ...name=@icon@...)

- -5
- +5
./folder-chunk.tcl
- History
- Source
- Diff
./folder-chunk.tcl
… 3 more files in changeset.

Thursday 20 Oct 2022

9:07 pm

gustafn

prefer adp:icon over old-style .gif images

- -7
- +7
./folder-chunk.tcl
- History
- Source
- Diff
./folder-chunk.tcl
… 2 more files in changeset.

Thursday 13 Oct 2022

12:21 pm

antoniop

Don't go to the cache to tell if a command is available

- -2
- +2
./view/index.vuh
- History
- Source
- Diff
./view/index.vuh

12:19 pm

antoniop

Don't go to the cache to tell if commands are available

- -2
- +2
./file.tcl
- History
- Source
- Diff
./file.tcl
- -2
- +2
./index.vuh
- History
- Source
- Diff
./index.vuh
- -3
- +3
./download/index.vuh
- History
- Source
- Diff
./download/index.vuh

12:15 pm

antoniop

Don't go to the cache to tell if the views package is installed

- -3
- +4
./folder-chunk.tcl
- History
- Source
- Diff
./folder-chunk.tcl

Wednesday 24 Aug 2022

10:58 am

antoniop

Test the behavior of the file-storage when a malicious user would try to store a pre-existing file on the server as its own

The fix for the file-storage is a simple validation to make sure that the tmpfile exists, however, for the generic case of the file widget, we cannot trust the tmpfile value when this was not generated by the server. This will probably cause regression when one wants to show a "preview" of a form, to be continued.