Mercurial > p > roundup > code
comparison CHANGES.txt @ 2366:1d46cd2f83f6
fix security hole in serve_static_file
| author | Richard Jones <richard@users.sourceforge.net> |
|---|---|
| date | Thu, 27 May 2004 21:53:44 +0000 |
| parents | 10fc45eea226 |
| children | c26bb78d2f0c |
comparison
equal
deleted
inserted
replaced
| 2365:3a80831ecebe | 2366:1d46cd2f83f6 |
|---|---|
| 6 - added MD5 scheme for password hiding | 6 - added MD5 scheme for password hiding |
| 7 - added support for HTTP charset selection | 7 - added support for HTTP charset selection |
| 8 - implement __nonzero__ for HTMLProperty | 8 - implement __nonzero__ for HTMLProperty |
| 9 | 9 |
| 10 | 10 |
| 11 2004-05-?? 0.7.3 | 11 2004-05-28 0.7.3 |
| 12 Fixed: | 12 Fixed: |
| 13 - add "checked" to truth values for Boolean input | 13 - add "checked" to truth values for Boolean input |
| 14 - fixed import in metakit backend | 14 - fixed import in metakit backend |
| 15 - fix SearchAction use of Class.filter(), and clarify API docs for same | 15 - fix SearchAction use of Class.filter(), and clarify API docs for same |
| 16 | 16 - ensure static files may only be served out of the tracker's "static |
| 17 | 17 files" directory |
| 18 2004-05-?? 0.7.2 | 18 |
| 19 | |
| 20 2004-05-17 0.7.2 | |
| 19 Fixed: | 21 Fixed: |
| 20 - anydbm sorting with None values (sf bug 952853) | 22 - anydbm sorting with None values (sf bug 952853) |
| 21 - roundup-server -g option not recognised (sf bug 952310) | 23 - roundup-server -g option not recognised (sf bug 952310) |
| 22 - HTML templating isset() inverted (sf bug 951779) | 24 - HTML templating isset() inverted (sf bug 951779) |
| 23 - otks manager missing (sf bug 952931) | 25 - otks manager missing (sf bug 952931) |
| 198 * exceptions.py - all exceptions | 200 * exceptions.py - all exceptions |
| 199 * form_parser.py - parsePropsFromForm & extractFormList in a FormParser | 201 * form_parser.py - parsePropsFromForm & extractFormList in a FormParser |
| 200 class | 202 class |
| 201 | 203 |
| 202 | 204 |
| 203 2004-??-?? 0.6.9 | 205 2004-05-17 0.6.10 |
| 206 Fixed: | |
| 207 - mysql backend wasn't locking tracker | |
| 208 - ensure static files may only be served out of the tracker's "static | |
| 209 files" directory | |
| 210 | |
| 211 | |
| 212 2004-04-18 0.6.9 | |
| 204 Fixed: | 213 Fixed: |
| 205 - paging in classhelp popup was broken | 214 - paging in classhelp popup was broken |
| 206 - socket timeout error logging can fail | 215 - socket timeout error logging can fail |
| 207 - hyperlink designators in message display (sf bug 931828) | 216 - hyperlink designators in message display (sf bug 931828) |
| 208 - don't match retired items in RDBMS stringFind | 217 - don't match retired items in RDBMS stringFind |