• last updated 5 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
-- handle ie 11 (uses a different header field for CSP)

- move CSP generation to the end

- update security settings

- use maxcdn rather than netdna CDN

    • -2
    • +2
    /openacs-4/packages/dotlrn/install.xml
- use maxcdn rather than netdna cdn

    • -2
    • +2
    /openacs-4/packages/xowiki/xowiki.info
- use attribute "placeholder" rather than onfocus handler

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

- replace deprecated "cc_lookup_email_user ..." by "party::get_by_email -email ..."

    • -2
    • +2
    /openacs-4/packages/dotlrn/www/member-email.tcl
- use "file rootname ..." rather than "file root ..."

- shorten export_vars argument list

- use "info procs" rather than "info proc"

- replace deprecated "cc_lookup_email_user ..." by "party::get_by_email -email ..."

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

    • -2
    • +2
    /openacs-4/packages/dotlrn/lib/member-email.tcl
    • -2
    • +2
    /openacs-4/packages/forums/www/message-email.tcl
- fix escaped change

- replace deprecated "cc_email_from_party ..." by "party::email -party_id ..."

- replace deprecated "cc_lookup_email_user ..." by "party::get_by_email -email ..."

- use export_vars to generate full URL

- use explicit "create" statement

- user "info commands" rather than "info command"

- use explicit create statement

- mark cc_* functions as deprecated, since more general functions exists in acs_user::, party::, or group:: namespaces

- make protocol-agnostic links for gravatar

- use ns_md5 when available

- add CSP directive

- make unsafe-inline optional in CSP for legacy browsers: add automatically "script-src 'unsafe-inline'" when scripted body_scripts are used

- setting namespaced variable ::acs::kernel_id for future use

- move comment to the right place

- Refine security policies: when necessary, define both a nonce and a

'unsafe-inline' to ensure compatibility on some less adavanced

browsers

- use same "secure" setting for ad_session_id, otherwise, just the

last one is honored

- fix linefeed and semicolon in js for focus handling

- fix gravatar image computation

- replace deprecated tags in documentation page

- replace depreacated tags in documentation pages

- replace deprecated tags in doc pages

- improve checking of image_ids

- replace deprecated tags in documentation pages

    • -189
    • +202
    /openacs-4/packages/workflow/www/doc/specification.adp