OpenACS / openacs-4

www

Tools

Line History

Line Count Graph
Line Count Graph

Stats

Commits this week: 0
Total Committers: 33
Last Commit: 26 Nov
Commits this week: 0
Total Lines of Code (LoC): 1,150
Net change in LoC this week: 0

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated 22 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Wednesday 28 Mar 2018
9:24 pm

hectorr

Fix typo

Options
    • -2
    • +2
    ./blank-master.tcl
Tuesday 08 Aug 2017
1:47 am

gustafn

merged changes from the oacs-5-9 branch and resolved conflicts

Options
    • -6
    • +6
    ./blank-master.adp
    • -133
    • +146
    ./blank-master.tcl
    • -0
    • +2
    ./SYSTEM/csp-collector.tcl
  4. … 7832 more files in changeset.
Sunday 23 Jul 2017
8:43 pm

gustafn

commit after merge conflict

Options
    • -28
    • +36
    ./blank-master.tcl
Friday 21 Jul 2017
4:05 pm

antoniop

Prevent errors in between of a release upgrade when system still has not render_widgets proc defined. Users should restart the server asap anyway.

Options
    • -2
    • +9
    ./blank-master.tcl
Thursday 15 Sep 2016
9:21 am

gustafn

bootstrap installer:

- added csp policy to the files upgradeable via apm

- bumped version number to 5.9.1d5

Options
    • -1
    • +1
    ./SYSTEM/csp-collector.tcl
  2. … 3 more files in changeset.
Monday 12 Sep 2016
8:08 pm

gustafn

-- handle ie 11 (uses a different header field for CSP)

- move CSP generation to the end

Options
    • -2
    • +10
    ./blank-master.tcl
  2. … 1 more file in changeset.
10:29 am

gustafn

- Refine security policies: when necessary, define both a nonce and a

'unsafe-inline' to ensure compatibility on some less adavanced

browsers

- use same "secure" setting for ad_session_id, otherwise, just the

last one is honored

- fix linefeed and semicolon in js for focus handling

Options
    • -2
    • +3
    ./blank-master.tcl
  2. … 2 more files in changeset.
Sunday 11 Sep 2016
2:49 am

gustafn

- add csp-collector

Options
    • -0
    • +2
    ./SYSTEM/csp-collector.tcl
2:49 am

gustafn

file csp-collector.tcl was initially added on branch oacs-5-9.

Options
    • -0
    • +0
    ./SYSTEM/csp-collector.tcl
Friday 09 Sep 2016
10:12 am

gustafn

- add CSP nonce to script tags if nonce value is available

- turn function definition of acs_Focus() into a conditionally defined

body-script

- turn "body_event_handlers" into "window.addEventListener"

Options
    • -2
    • +2
    ./blank-master.adp
    • -20
    • +23
    ./blank-master.tcl
  3. … 3 more files in changeset.
Tuesday 06 Sep 2016
7:33 pm

gustafn

- Added support for W3C Content Security Policy(CSP)

* For details about CSP, see https://www.w3.org/TR/CSP/

* New calls:

security::csp::nonce:

Generate a CSP nonce token token

security::csp::require /directive/ /value/:

Add a requirements of a page to the CSP in order to generate

later a tailored policy with the minimal permissions for

this page. For example, the following requirement is

currently added per default to the oacs-master template to

permit style tags and style attribites in the markup.

security::csp::require style-src 'unsafe-inline'

security::csp::render:

Generate a policy from the requirements

* Added Kernel Parameter CSPEnabledP to activate/desctivate CSP

(default on)

- Bump version numbers

acs-tcl to 5.9.1d11

acs-bootstrap-installer to 5.9.1d4

acs-kernel to 5.9.1d17

Options
    • -3
    • +3
    ./blank-master.adp
    • -5
    • +19
    ./blank-master.tcl
  3. … 6 more files in changeset.
Monday 05 Sep 2016
1:34 pm

gustafn

- add support for W3C Subresource Integrity (SRI)

* For details about SRI, see https://www.w3.org/TR/SRI/

* Added arguments -crossorigin and -integrity

to the following functions

template::add_body_script

template::add_script

template::head::add_javascript

template::head::add_link

template::head::add_script

* Updated blank-master.adp

- some more cleanup:

* remove commented out code

* add missing argument documentation

(template::head::add_javascript)

* document arguments alphabetically

Options
    • -3
    • +3
    ./blank-master.adp
  2. … 3 more files in changeset.
1:32 pm

gustafn

- bring version in www (in cvs) in sync with version from packages/acs-bootstrap-installer/installer/www/

Options
    • -98
    • +22
    ./blank-master.tcl
Tuesday 01 Dec 2015
3:38 pm

gustafn

- regenerated documentation, including changelog

Options
    • -0
    • +0
    ./blank-master.tcl
  2. … 123 more files in changeset.
Saturday 26 Sep 2015
2:57 pm

gustafn

- added version info

Options
    • -1
    • +7
    ./blank-master.tcl
Sunday 06 Sep 2015
10:46 am

gustafn

- update for js and flat list support

Options
    • -11
    • +46
    ./blank-master.tcl
Tuesday 18 Aug 2015
1:17 pm

gustafn

- improve validity for HTML5

Options
    • -7
    • +10
    ./blank-master.tcl
  2. … 1 more file in changeset.
Friday 14 Aug 2015
1:41 pm

gustafn

- provide minimal support for ckeditor4 (via CDN)

- added changes from antonio to pass handling for unknown editor to the master templates

Options
    • -1
    • +5
    ./blank-master.tcl
  2. … 2 more files in changeset.
Monday 15 Jun 2015
9:36 pm

gustafn

- improve safety of HTML

Options
    • -3
    • +3
    ./blank-master.adp
  2. … 1 more file in changeset.
Wednesday 10 Jun 2015
9:14 pm

gustafn

- provide defaults for Content-Style-Type and Content-Script-Type

Options
    • -1
    • +7
    ./blank-master.tcl
  2. … 1 more file in changeset.
Thursday 21 May 2015
12:03 pm

gustafn

- stick in oacs-5-8 to the old praxis and load core.js in oacs-5-9 as body script

Options
    • -7
    • +2
    ./blank-master.tcl
11:55 am

gustafn

- include js function acs_Focus() in head such that core.js can be

added safely as body_script

- remove obsolete handling for document.getElementById()

Options
    • -7
    • +15
    ./blank-master.tcl
  2. … 1 more file in changeset.
Monday 27 Apr 2015
5:28 pm

victorg

Merging back to HEAD all changes that happened in branch oacs-5-8 between tags: vg-merge-oacs-5-8-from-20141027 and vg-merge-oacs-5-8-from-20150427

Options
    • -2
    • +13
    ./blank-master.tcl
  2. … 520 more files in changeset.
Friday 27 Mar 2015
11:56 am

antoniop

- Moved core.js inclusion to bottom of the page to comply with web best practices

- Placed warnings for other non trivial cases of big js inclusion in the head

See http://www.openacs.org/forums/message-view?message_id=4266252

Options
    • -3
    • +14
    ./blank-master.tcl
Monday 27 Oct 2014
5:38 pm

victorg

Merging back to HEAD branch oacs-5-8 (using tag vg-merge-oacs-5-8-from-20141027).

Options
    • -3
    • +3
    ./blank-compat.tcl
    • -15
    • +15
    ./blank-master.adp
    • -10
    • +5
    ./blank-master.tcl
    • -1
    • +1
    ./default-master.tcl
  5. … 2544 more files in changeset.
Wednesday 10 Sep 2014
8:50 pm

gustafn

- allow message keys in javascript

Options
    • -1
    • +1
    ./blank-master.adp
Sunday 07 Sep 2014
8:40 pm

gustafn

- produce more efficient compiled adp template code (using preferably byte-compiled functions)

Options
    • -15
    • +15
    ./blank-master.adp
  2. … 1 more file in changeset.
Monday 12 May 2014
1:17 pm

gustafn

- add support for the script async attribute (http://www.w3schools.com/tags/att_script_async.asp)

Options
    • -2
    • +2
    ./blank-compat.tcl
    • -2
    • +2
    ./blank-master.adp
  3. … 1 more file in changeset.
Thursday 17 Oct 2013
9:41 am

gustafn

- use expand operator instead of eval

- simplify logic

- use ::acs::rootdir variable instead of call

Options
    • -9
    • +4
    ./blank-master.tcl
Wednesday 16 Oct 2013
12:01 pm

gustafn

- use "![info exists]" instead of "template::util::is_nil" on scalars

Options
    • -2
    • +2
    ./blank-compat.tcl
    • -3
    • +3
    ./blank-master.tcl
    • -2
    • +2
    ./default-master.tcl
  4. … 1 more file in changeset.