• last updated 4 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
merge directory introduced in branch oacs-5-10

  1. … 59 more files in changeset.
Do not pass the __csrf_token via return_url when the user is not logged-in

Passing the token seems to cause problems with web vulnerability scanners, that poison

the token value. The value of passing the token value for unregistered users

is questionable.

If this change is kept, it should go as well to the openacs-bootstral3.theme.

Fix for sitebug #150 (security relevant)

The login widget at the navbar contained in its query variable

the password of a user in plain text (e.g. when the user has

mistyped the password, but as well on other error conditions).

Now, the password is filterer in the return_url in such cases.

Many thanks to Khy H for reporting this bug.

For details, see

https://openacs.org//bugtracker/openacs.org/bug?bug_number=150

  1. … 1 more file in changeset.
reduce verbosity

Fixed broken link in login and logout widgets

The problem were the links for the main subsite, since on the main subsite,

the resulting link is e.g. //register/logout, which is intpreted as

an URL without a schema (e.g. //openacs.org), leading the errors.

fix missing variable, make login/logout handling more consistent

  1. … 1 more file in changeset.
Make login and logout urls subsite specific (many thanks to Monika Andergassen)

  1. … 2 more files in changeset.
remove traces of md5::md5, since ns_md5 is emulated also for AOLserver

  1. … 2 more files in changeset.
file login.tcl was initially added on branch oacs-5-10.

  1. … 1 more file in changeset.
New package: openacs-bootstrap5-theme

This is the initial checking of the OpenACS Bootstrap 5 Theme,

which is a port of the OpenACS Bootstrap 3 Theme.

In its current, premature state, the basic functionality is there for

the openacs_bootstrap5 (openacs_bootstrap5_turquois untouched), but it

covers already the base functionality of xowiki (longer way to go for

e.g. xowf, or the various other packages). Also, the graphical

fine-tuning has to be done, but e.g. glyphicons are already replaced

by Bootstrap Icons, etc.

  1. … 59 more files in changeset.