Mercurial > p > roundup > code
graph
-
Checkin in missing changenote for checkin: 24945480d24cWed, 05 Apr 2017 21:40:56 -0400, by John Rouillard
-
Make properties method return only properties the user can search.Wed, 05 Apr 2017 21:38:32 -0400, by John Rouillard
-
Iterate over multilink items if they labelprop is accessible to theWed, 05 Apr 2017 21:20:20 -0400, by John Rouillard
-
Reimplemented anti-csrf measures by raising exceptions rather thanWed, 05 Apr 2017 20:56:08 -0400, by John Rouillard
-
Update the xmlrpc documentation for use with the CSRF defenses.Mon, 27 Mar 2017 23:04:30 -0400, by John Rouillard
-
Added tests for csrf with xmlrpc.Mon, 27 Mar 2017 22:37:30 -0400, by John Rouillard
-
Add nonce to embedded script references.Thu, 23 Mar 2017 21:08:30 -0400, by John Rouillard
-
make roundup-admin init function set the transaction source. Otherwise when initial_data.py is loaded as part of init, db.tx_Source is set to None and thus checks like db.tx_Source in [ 'cli' ] will fail.Wed, 22 Mar 2017 22:03:01 -0400, by John Rouillard
-
test_postgress isn't properly skipping tests when database is notMon, 20 Mar 2017 21:22:28 -0400, by John Rouillard
-
Fix text formatting, typos and, English grammar of the descriptive text.Mon, 20 Mar 2017 20:18:20 -0400, by John Rouillard
-
This change didn't make it into the last commit. Allow the user toSun, 19 Mar 2017 20:57:26 -0400, by John Rouillard
-
Added support for SameSite cookie option for CSRF preventionSun, 19 Mar 2017 19:01:41 -0400, by John Rouillard
-
Fix expiration dates and expire csrf tokens properlySun, 19 Mar 2017 17:10:13 -0400, by John Rouillard
-
Remove csrf keys used with getSun, 19 Mar 2017 15:32:14 -0400, by John Rouillard
-
Added .coveragerc to exclude the dist utilites from code coverage.Sun, 19 Mar 2017 11:21:21 -0400, by John Rouillard
-
fixing some tests due to changes to classic template by adding anti-csrf codeSun, 19 Mar 2017 00:24:16 -0400, by John Rouillard
-
changes to try to deploy anti-csrf defense to other templates.Sat, 18 Mar 2017 23:36:02 -0400, by John Rouillard
-
format fixSat, 18 Mar 2017 23:34:41 -0400, by John Rouillard
-
Added csrf defense to minimal template.Sat, 18 Mar 2017 23:02:30 -0400, by John Rouillard
-
convert classic template for csrf defenseSat, 18 Mar 2017 22:55:50 -0400, by John Rouillard
-
Also rename test to testCsrfProtectionSat, 18 Mar 2017 22:19:51 -0400, by John Rouillard
-
My testing was with dbm backends which do an automatic commit on theSat, 18 Mar 2017 19:16:56 -0400, by John Rouillard
-
issue 2550690 - Adding anti-csrf measures to roundup followingSat, 18 Mar 2017 16:59:01 -0400, by John Rouillard
-
Reset state of:Sat, 18 Mar 2017 15:12:39 -0400, by John Rouillard
-
Still trying to figure out why travis ci fails without a call toSat, 18 Mar 2017 14:42:05 -0400, by John Rouillard
-
More travis debugSat, 18 Mar 2017 12:25:30 -0400, by John Rouillard
-
Trying to debug test failures on travis-ci that I can't reproduceSat, 18 Mar 2017 11:37:46 -0400, by John Rouillard
-
Implement props_only feature for permissions.Sat, 18 Mar 2017 10:44:10 -0400, by rouilj
-
Remove left over debugging statements.Thu, 16 Mar 2017 23:06:16 -0400, by rouilj
-
Hopefully making the doc for the query editing feature less confusing.Tue, 14 Mar 2017 18:38:46 -0400, by rouilj
-
Fix incorrect indentation using tabsFri, 10 Mar 2017 00:22:55 +1100, by John Kristensen
-
Three sets of changes:Wed, 08 Mar 2017 22:04:15 -0500, by rouilj
-
issue2550932 - html_calendar produces templating errors for bad date stringsSat, 25 Feb 2017 22:21:15 -0500, by John Rouillard
-
Make url's in messages identified as http://... or https://...Sat, 25 Feb 2017 21:01:50 -0500, by John Rouillard
-
Fix spelling error. Make it match the name of the field.Sat, 25 Feb 2017 17:48:46 -0500, by John Rouillard
-
Small fix. Make sure view is defined before trying to find('|') in it.Sat, 18 Feb 2017 00:58:34 -0500, by John Rouillard
-
Added missing change entry for the indexargs_form() fix.Fri, 17 Feb 2017 21:41:24 -0500, by John Rouillard
-
Check in enhanced form for check command used by addPermission.Fri, 17 Feb 2017 21:18:34 -0500, by John Rouillard
-
Make @template support two alternate templates for error and ok cases.Fri, 17 Feb 2017 19:44:15 -0500, by John Rouillard
-
Issue2550934 - templating.py-indexargs_form() returns id's as space separated list not comma separatedFri, 17 Feb 2017 19:33:01 -0500, by John Rouillard
-
merge from upstream.Sat, 11 Feb 2017 17:25:05 -0500, by John Rouillard
-
- issue2550933 - Fix Traceback in cgi/templating.py when a string isSat, 11 Feb 2017 17:20:47 -0500, by John Rouillard
-
Add a new argument "showdef" to the template function menu(). When setMon, 30 Jan 2017 22:09:32 -0500, by John Rouillard
-
got the indent wrong in the last change for templating.pySat, 28 Jan 2017 21:15:49 -0500, by John Rouillard
-
- issue2550796: Calendar and Classhelp selection tools don't causeSat, 28 Jan 2017 20:58:19 -0500, by John Rouillard
-
TravisCI: Fix fetching of xapian-bindings (issue2550931)Tue, 24 Jan 2017 16:58:05 +1100, by John Kristensen
-
Check in the signed cert needed to complete an http connection to aThu, 12 Jan 2017 21:24:18 -0500, by John Rouillard
-
Add ca-certficates package so that wget can pull https url's.Thu, 12 Jan 2017 20:22:44 -0500, by John Rouillard
-
Implement double-precision NumberMon, 12 Dec 2016 13:53:47 +0100, by Ralf Schlatterbeck
-
Fix Traceback in backends/portalocker.py (windows)Fri, 09 Dec 2016 10:52:59 +0100, by Ralf Schlatterbeck
-
Store template name with saved queryFri, 09 Dec 2016 09:49:25 +0100, by Ralf Schlatterbeck
-
Fix submit_once Javascript functionMon, 28 Nov 2016 16:09:39 +0100, by Ralf Schlatterbeck
-
issue2550929 fix for my use case, need Ralf to check for his.Sat, 22 Oct 2016 17:23:18 -0400, by John Rouillard
-
Hopefully fix issue2550929Fri, 21 Oct 2016 14:12:44 +0200, by Ralf Schlatterbeck
-
fix multilink support of try_id_parsing=no and add test for multilink cases.Fri, 02 Sep 2016 23:45:57 -0400, by John Rouillard
-
issue2550755: exceptions.NotFound(msg) msg is not reported to user in cgi fix testsThu, 01 Sep 2016 21:26:59 -0400, by John Rouillard
-
Re-add changelog entry lost when mergingTue, 23 Aug 2016 11:08:28 +0200, by Ralf Schlatterbeck
-
issue1408570: fix that form values are lostMon, 22 Aug 2016 22:19:48 +0200, by Ralf Schlatterbeck
-
issue2550755: exceptions.NotFound(msg) msg is not reported to user in cgi.Mon, 15 Aug 2016 20:53:37 -0400, by John Rouillard
-
Fixed a couple of failing tests for *LoginRedirect in test_actions.py after url validation. Also raise ValueError from examine_url if base url is None.Sat, 23 Jul 2016 17:21:14 -0400, by John Rouillard