http://hg.code.sf.net:8000/p/roundup/code/atom-log/tip/doc/xmlrpc.txt Mercurial Repository: p/roundup/code: doc/xmlrpc.txt history 2024-12-29T19:11:01-05:00 issue2551116 - Replace xmlrpclib (xmlrpc.client) with defusedxml. http://hg.code.sf.net:8000/p/roundup/code/#changeset-57325fea99826845b4b8f2e8baaaf4eaeea59e48 John Rouillard rouilj@ieee.org 2024-12-29T19:11:01-05:00 2024-12-29T19:11:01-05:00
changeset 57325fea9982
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description issue2551116 - Replace xmlrpclib (xmlrpc.client) with defusedxml.

defusedxml will be used to moneypatch the problematic client and
server modules.

Test added using an xml bomb.
files
doc: more table call alignment; fix formatting http://hg.code.sf.net:8000/p/roundup/code/#changeset-e34b69d75ff71ef68732b6d47e61ff9dbc4d7a17 John Rouillard rouilj@ieee.org 2024-02-05T17:22:24-05:00 2024-02-05T17:22:24-05:00
changeset e34b69d75ff7
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description doc: more table call alignment; fix formatting
files
docs: clarify no login rate limit for roundup-xmlrpc-server http://hg.code.sf.net:8000/p/roundup/code/#changeset-c3a7b1aa06cfefd43e5864343ce0ce10fcb3b7ed John Rouillard rouilj@ieee.org 2023-08-19T19:14:27-04:00 2023-08-19T19:14:27-04:00
changeset c3a7b1aa06cf
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description docs: clarify no login rate limit for roundup-xmlrpc-server

Login rate limit only available for /xmlrpc endpoint not supplied by
roundup-xmlrpc-server endpoint.
files
fix(api): - issue2551063 - Rest/Xmlrpc interfaces needs failed login protection. http://hg.code.sf.net:8000/p/roundup/code/#changeset-273c8c2b504245a937efbd42604f77cb2d3d0d9d John Rouillard rouilj@ieee.org 2023-07-19T20:37:45-04:00 2023-07-19T20:37:45-04:00
changeset 273c8c2b5042
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description fix(api): - issue2551063 - Rest/Xmlrpc interfaces needs failed login protection.

Failed API login rate limiting with expiring lockout added.
files
Fix verb agreement, reword. http://hg.code.sf.net:8000/p/roundup/code/#changeset-924b07252412a59d40b217ec6aa68e300526c6e9 John Rouillard rouilj@ieee.org 2023-06-18T11:13:31-04:00 2023-06-18T11:13:31-04:00
changeset 924b07252412
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Fix verb agreement, reword.
files
Redo headers. Elevete lack of ssl to caution. http://hg.code.sf.net:8000/p/roundup/code/#changeset-db58a86aa29d8405922d3da0e8c57a904c3b1f73 John Rouillard rouilj@ieee.org 2023-06-08T09:01:17-04:00 2023-06-08T09:01:17-04:00
changeset db58a86aa29d
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Redo headers. Elevete lack of ssl to caution.
files
landmarks, skiplink, remove bad attrs, autocomplete search http://hg.code.sf.net:8000/p/roundup/code/#changeset-e7b4ad2c57ac1b3e471bdb60ceba105ce96c8804 John Rouillard rouilj@ieee.org 2022-07-12T15:00:30-04:00 2022-07-12T15:00:30-04:00
changeset e7b4ad2c57ac
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description landmarks, skiplink, remove bad attrs, autocomplete search

layout.html:
Add main and nav landmarks to layout templte.
Add skiplink to get to main.
Remove Description meta tag from layout template in favor of
description metadata in individual files.
Remove obsolete border attribute from sourceforge logo.
Add autocomplete="on" attribute for search input box.

doc/*.txt
Remove language attribute from description meta tags.


These changes also occur for other files not in this commit. Thse
other files have changes to files for the 2.2.0 release not yet tobe
committed.
files
Add meta description to some doc pages. http://hg.code.sf.net:8000/p/roundup/code/#changeset-24e2eeb2ed9a6b88e43ed2b7e3bb203219e20d59 John Rouillard rouilj@ieee.org 2022-01-21T14:29:46-05:00 2022-01-21T14:29:46-05:00
changeset 24e2eeb2ed9a
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Add meta description to some doc pages.

Try to improve SEO a bit. Get more users/contributors.
files
Update links in documentation http://hg.code.sf.net:8000/p/roundup/code/#changeset-45e8d10a9609defa61667501b2e66086bd59d0de John Rouillard rouilj@ieee.org 2021-03-31T18:56:08-04:00 2021-03-31T18:56:08-04:00
changeset 45e8d10a9609
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Update links in documentation

Only broken link is for whoosh indexer. Have email to author
to find out if it's dead or what URL I shoud use.
files
Update advanced script to python3; other doc updates http://hg.code.sf.net:8000/p/roundup/code/#changeset-31bac6f2dd8b7c3c0eae80fff9c24bcfce31ce03 John Rouillard rouilj@ieee.org 2021-03-13T21:48:59-05:00 2021-03-13T21:48:59-05:00
changeset 31bac6f2dd8b
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Update advanced script to python3; other doc updates
files
more index entries. http://hg.code.sf.net:8000/p/roundup/code/#changeset-81ae33038ec58bd7a2c6f846ee04941a8aa642af John Rouillard rouilj@ieee.org 2020-05-13T13:01:08-04:00 2020-05-13T13:01:08-04:00
changeset 81ae33038ec5
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description more index entries.
files
Document issues with xmlrpc security of python built in libraries http://hg.code.sf.net:8000/p/roundup/code/#changeset-e2b70d43d0fc6bb705010a852350a6a2cd30a1b4 John Rouillard rouilj@ieee.org 2020-01-03T19:22:54-05:00 2020-01-03T19:22:54-05:00
changeset e2b70d43d0fc
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Document issues with xmlrpc security of python built in libraries

Added note to changes with better description and link to defusedxml
in the xmlrpc doc.
files
add permissions to control user of rest and xmlrpc API interfaces. http://hg.code.sf.net:8000/p/roundup/code/#changeset-94a7669677ae229ff639da90a98eee7f0392b171 John Rouillard rouilj@ieee.org 2019-09-27T23:29:59-04:00 2019-09-27T23:29:59-04:00
changeset 94a7669677ae
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description add permissions to control user of rest and xmlrpc API interfaces.

issue2551058: Add new permissions: 'Rest Access' and 'Xmlrpc Access'
to allow per-user access control to rest and xmlrpc interfaces using
roles.

Updated all schemas to add these new perms to all authenticated roles.

Error conditions in handle_xmlrpc were not working right in manual
testing. I tried to make it a little better, but I don't actually
understand how the fault xmlrpc object is supposed to be used. So I
may have messed something up. I'll try to ping the people who wrote
the xmlrpc code to have them review.
files
Applied patch 0038 from issue2550960 to upgrade code examples in http://hg.code.sf.net:8000/p/roundup/code/#changeset-d0689aaa83db5aed5a065eb9a8bb1afa1b83baca John Rouillard rouilj@ieee.org 2018-06-12T20:27:04-04:00 2018-06-12T20:27:04-04:00
changeset d0689aaa83db
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Applied patch 0038 from issue2550960 to upgrade code examples in
documentation to be compatible with both python 2 and 3. Patch
supplied by Joseph Myers.
files
Add doc for xmlrpc changes and errors related to anti-csrf protections. http://hg.code.sf.net:8000/p/roundup/code/#changeset-6efa6d44c27a10f6aae18301954a9288d9f8d831 John Rouillard rouilj@ieee.org 2017-10-04T22:31:44-04:00 2017-10-04T22:31:44-04:00
changeset 6efa6d44c27a
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Add doc for xmlrpc changes and errors related to anti-csrf protections.
files
Use Python-3-compatible 'as' syntax for except statements http://hg.code.sf.net:8000/p/roundup/code/#changeset-198b6e810c67c4e7e38f1aa41edbc864783fe6e6 Eric S. Raymond esr@thyrsus.com 2017-08-24T22:21:37-04:00 2017-08-24T22:21:37-04:00
changeset 198b6e810c67
branch
bookmark
tag
user Eric S. Raymond <esr@thyrsus.com>
description Use Python-3-compatible 'as' syntax for except statements

Many raise statements near these are also fixed.
So are two ivorrect file encoding marks ('utf8'->'utf-8').
files
Reimplemented anti-csrf measures by raising exceptions rather than http://hg.code.sf.net:8000/p/roundup/code/#changeset-14d8f61e6ef2d9e57d11f3fb1d2605b94ac32d46 John Rouillard rouilj@ieee.org 2017-04-05T20:56:08-04:00 2017-04-05T20:56:08-04:00
changeset 14d8f61e6ef2
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Reimplemented anti-csrf measures by raising exceptions rather than
returning booleans.

Redoing it using exceptions was the easiest way to return proper
xmlrpc fault messages to the clients.

Also this code should now properly make values set in the form
override values from the database. So no lost work under some
circumstances if the csrf requirements are not met.

Also this code does a better job of cleaning up old csrf tokens.
files
Update the xmlrpc documentation for use with the CSRF defenses. http://hg.code.sf.net:8000/p/roundup/code/#changeset-ade4bbc2716d41f8bcb11a2453a6e60efba76661 John Rouillard rouilj@ieee.org 2017-03-27T23:04:30-04:00 2017-03-27T23:04:30-04:00
changeset ade4bbc2716d
branch
bookmark
tag
user John Rouillard <rouilj@ieee.org>
description Update the xmlrpc documentation for use with the CSRF defenses.
files
doc/xmlrpc: Fix headers http://hg.code.sf.net:8000/p/roundup/code/#changeset-47cc50617e19c8e7bebf2892802f4aa349ea320f anatoly techtonik techtonik@gmail.com 2014-10-05T15:27:34+03:00 2014-10-05T15:27:34+03:00
changeset 47cc50617e19
branch
bookmark
tag
user anatoly techtonik <techtonik@gmail.com>
description doc/xmlrpc: Fix headers
files
doc: Update XML-RPC documentation with example that points to demo http://hg.code.sf.net:8000/p/roundup/code/#changeset-eeb9572b05089b01ac26a6b3951049bb35f31452 anatoly techtonik techtonik@gmail.com 2014-10-02T21:26:37+03:00 2014-10-02T21:26:37+03:00
changeset eeb9572b0508
branch
bookmark
tag
user anatoly techtonik <techtonik@gmail.com>
description doc: Update XML-RPC documentation with example that points to demo
files
Add missing doc for xmlrpc schema (fixes issue2550735) http://hg.code.sf.net:8000/p/roundup/code/#changeset-f47c35727b3e3b429b0bb9f12e2c513372249d20 Cédric Krier ced@b2ck.com 2014-10-01T05:29:42+03:00 2014-10-01T05:29:42+03:00
changeset f47c35727b3e
branch
bookmark
tag
user Cédric Krier <ced@b2ck.com>
description Add missing doc for xmlrpc schema (fixes issue2550735)
files
doc: Link XMLRPC `filter` doc to User Guide chapter about querying http://hg.code.sf.net:8000/p/roundup/code/#changeset-57a482110a24aec31a229e837388c67f1e237c1e anatoly techtonik techtonik@gmail.com 2014-09-29T18:37:26+03:00 2014-09-29T18:37:26+03:00
changeset 57a482110a24
branch
bookmark
tag
user anatoly techtonik <techtonik@gmail.com>
description doc: Link XMLRPC `filter` doc to User Guide chapter about querying
files
Fix XMLRPC endpoint in documentation example (changed in 1.4.21) http://hg.code.sf.net:8000/p/roundup/code/#changeset-08a5a47855cba1b26c1d995a49192cb9ace1ba7e anatoly techtonik techtonik@gmail.com 2014-08-03T12:52:41+03:00 2014-08-03T12:52:41+03:00
changeset 08a5a47855cb
branch
bookmark
tag
user anatoly techtonik <techtonik@gmail.com>
description Fix XMLRPC endpoint in documentation example (changed in 1.4.21)

Thanks Ezio for the notice.
files
docs: Remove one nesting level from ToC on subpages http://hg.code.sf.net:8000/p/roundup/code/#changeset-609edf9de0a57fdffa35986b97a8d40a8c55ac37 anatoly techtonik techtonik@gmail.com 2014-04-15T15:07:30+03:00 2014-04-15T15:07:30+03:00
changeset 609edf9de0a5
branch
bookmark
tag
user anatoly techtonik <techtonik@gmail.com>
description docs: Remove one nesting level from ToC on subpages
files
doc: Fix some Sphinx warnings. http://hg.code.sf.net:8000/p/roundup/code/#changeset-8ee41c7372e7eda6c3b76c5f62fdf67fb07b8840 anatoly techtonik techtonik@gmail.com 2013-01-14T17:00:27+03:00 2013-01-14T17:00:27+03:00
changeset 8ee41c7372e7
branch
bookmark
tag
user anatoly techtonik <techtonik@gmail.com>
description doc: Fix some Sphinx warnings.
files
issue2550749 - the xmlrpc interface is invoked on content type http://hg.code.sf.net:8000/p/roundup/code/#changeset-23de24f5756692dd81f78e38bcf689d1427a8823 rouilj rouilj 2012-11-25T18:24:28-05:00 2012-11-25T18:24:28-05:00
changeset 23de24f57566
branch
bookmark
tag
user rouilj
description issue2550749 - the xmlrpc interface is invoked on content type
and not url path. Sending any text/xml data to roundup results in
invoking the xml-rpc interface, but a REST or other interface could
also consume xml data and do something different. So require the use
of 'http(s)://.../xmlrpc' uri to trigger the xmlrpc interface.
files
Add "lookup" method to xmlrpc interface (Ralf Schlatterbeck) http://hg.code.sf.net:8000/p/roundup/code/#changeset-3f251efd5f48744e446f70e2887889e7dce599fd Ralf Schlatterbeck schlatterbeck@users.sourceforge.net 2010-10-29T10:41:39+00:00 2010-10-29T10:41:39+00:00
changeset 3f251efd5f48
branch
bookmark
tag
user Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net>
description Add "lookup" method to xmlrpc interface (Ralf Schlatterbeck)
files
Document filter method of xmlrpc interface http://hg.code.sf.net:8000/p/roundup/code/#changeset-a70dbbc7f967f580aee39530ebb1099631c26236 Ralf Schlatterbeck schlatterbeck@users.sourceforge.net 2009-10-02T15:03:44+00:00 2009-10-02T15:03:44+00:00
changeset a70dbbc7f967
branch
bookmark
tag
user Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net>
description Document filter method of xmlrpc interface
files
fix mysql breakage in 1.4.2 http://hg.code.sf.net:8000/p/roundup/code/#changeset-905faf52a51f1d308e902ff6a9b13bb973407d1a Richard Jones richard@users.sourceforge.net 2008-02-27T08:32:51+00:00 2008-02-27T08:32:51+00:00
changeset 905faf52a51f
branch
bookmark
tag 1.4.3
user Richard Jones <richard@users.sourceforge.net>
description fix mysql breakage in 1.4.2
files
typo in docs for xmlrpc http://hg.code.sf.net:8000/p/roundup/code/#changeset-53b922e0d2b7d28520131410498d943ceea7bcb0 Justus Pendleton jpend@users.sourceforge.net 2007-11-25T17:04:12+00:00 2007-11-25T17:04:12+00:00
changeset 53b922e0d2b7
branch
bookmark
tag
user Justus Pendleton <jpend@users.sourceforge.net>
description typo in docs for xmlrpc
files
Documentation for the XML-RPC interface http://hg.code.sf.net:8000/p/roundup/code/#changeset-257b4eab3bb2f4d652fece03a2a56e6beb6d21fa Justus Pendleton jpend@users.sourceforge.net 2007-11-23T20:57:50+00:00 2007-11-23T20:57:50+00:00
changeset 257b4eab3bb2
branch
bookmark
tag
user Justus Pendleton <jpend@users.sourceforge.net>
description Documentation for the XML-RPC interface

Also make "all" the default rule again :(
files