| Tue, 11 Apr 2017 22:20:13 -0400 |
John Rouillard |
Fix issue with retreiving raw template files using the @@file mechanism.
|
| Wed, 05 Apr 2017 20:56:08 -0400 |
John Rouillard |
Reimplemented anti-csrf measures by raising exceptions rather than
|
| Mon, 27 Mar 2017 22:37:30 -0400 |
John Rouillard |
Added tests for csrf with xmlrpc.
|
| Sun, 19 Mar 2017 15:32:14 -0400 |
John Rouillard |
Remove csrf keys used with get
|
| Sun, 19 Mar 2017 00:24:16 -0400 |
John Rouillard |
fixing some tests due to changes to classic template by adding anti-csrf code
|
| Sat, 18 Mar 2017 22:19:51 -0400 |
John Rouillard |
Also rename test to testCsrfProtection
|
| Sat, 18 Mar 2017 16:59:01 -0400 |
John Rouillard |
issue 2550690 - Adding anti-csrf measures to roundup following
|
| Fri, 17 Feb 2017 19:44:15 -0500 |
John Rouillard |
Make @template support two alternate templates for error and ok cases.
|
| Thu, 01 Sep 2016 21:26:59 -0400 |
John Rouillard |
issue2550755: exceptions.NotFound(msg) msg is not reported to user in cgi fix tests
|
| Mon, 22 Aug 2016 22:19:48 +0200 |
Ralf Schlatterbeck |
issue1408570: fix that form values are lost
|
| Sat, 23 Jul 2016 15:22:06 -0400 |
John Rouillard |
rename clean_url method to examine_url. the method doesn't realy clean anything, it throws a ValueError if it finds a problem
|
| Sat, 23 Jul 2016 14:00:49 -0400 |
John Rouillard |
I realized that the __came_from and __redirect_to url parameters I
|
| Fri, 22 Jul 2016 20:59:44 -0400 |
John Rouillard |
add basic crappy test framework for the client.py::Client::renderFrontPage() ::determine_context() and ::renderContext() methods.
|
| Fri, 22 Jul 2016 19:39:24 -0400 |
John Rouillard |
adding test case for home templates in various incantations. Also added comment about possibly creating/raising PageTraversal exception. I don't think we need it since @@file doesn't do it but...
|
| Fri, 22 Jul 2016 15:19:40 -0400 |
John Rouillard |
issue2550891: Allow subdir in template value. Anthony (antmail)
|
| Tue, 21 Jun 2016 21:45:24 -0400 |
John Rouillard |
Validate properties specified for sorting and grouping in index
|
| Sun, 05 Jun 2016 00:17:26 -0400 |
John Rouillard |
Add support for an integer type to join the existing number type.
|
| Mon, 30 May 2016 17:23:35 +0200 |
Ralf Schlatterbeck |
Allow multiple file uploads
|
| Fri, 21 Aug 2015 13:08:02 +1000 |
John Kristensen |
Remove unneeded TestSuite code from tests
|
| Tue, 05 Jan 2016 21:34:56 +0100 |
Bernhard Reiter |
test code cleanup: remove unused variable (which should have been removed with 1873:f63aa57386b0 2003).
|
| Mon, 31 Mar 2014 18:19:23 +0200 |
Ralf Schlatterbeck |
Different approach to fix XSS in issue2550817
|
| Fri, 20 Dec 2013 18:24:10 +0100 |
Ralf Schlatterbeck |
Fix XSS in issue2550817
|
| Sat, 06 Jul 2013 12:10:50 +0200 |
Ralf Schlatterbeck |
Fix minor problems in tests
|
| Tue, 23 Apr 2013 23:06:09 -0400 |
John Rouillard |
Implementation for:
|
| Wed, 28 Nov 2012 03:44:34 +0300 |
anatoly techtonik |
windows: Fix cgi tests by explicitly closing db opened by test client
|
| Wed, 28 Nov 2012 03:23:39 +0300 |
anatoly techtonik |
windows: Fix another failing test due to missing 'crypt'
|
| Wed, 28 Nov 2012 02:56:33 +0300 |
anatoly techtonik |
windows: Fix failing password tests due to missing crypt module
|
| Mon, 14 May 2012 17:46:15 +0200 |
Bernhard Reiter |
Committed edited fix for issue2550712 by Cedric Krier.
|
| Mon, 14 May 2012 14:17:07 +0200 |
Ralf Schlatterbeck |
Fix another XSS with the ok- and error message, see issue2550724.
|
| Wed, 16 Nov 2011 09:51:38 -0500 |
Eric S. Raymond |
Remove keyword expansions from CVS. All regression tests passed afterwards.
|
| Fri, 15 Jul 2011 12:36:47 +0000 |
Ralf Schlatterbeck |
Fix StringIO issue2550713:
|
| Fri, 15 Apr 2011 08:09:59 +0000 |
Ralf Schlatterbeck |
Add new config-option 'password_pbkdf2_default_rounds'...
|
| Thu, 14 Apr 2011 18:27:51 +0000 |
Ralf Schlatterbeck |
use idea from Eli Collins to use a list of deprecated password encoding schemes
|
| Thu, 14 Apr 2011 18:10:58 +0000 |
Ralf Schlatterbeck |
Add new config-option 'migrate_passwords' in section 'web'...
|
| Thu, 21 Oct 2010 19:53:51 +0000 |
Ralf Schlatterbeck |
fix broken tests by adding additional permissions...
|
| Tue, 19 Oct 2010 15:29:05 +0000 |
Ralf Schlatterbeck |
- Add explicit "Search" permissions, see Security Fix below.
|
| Mon, 21 Dec 2009 12:00:57 +0000 |
Ralf Schlatterbeck |
Proper handling of 'Create' permissions in both mail gateway...
|
| Tue, 15 Dec 2009 15:11:27 +0000 |
Ralf Schlatterbeck |
Clean up all the places where role processing occurs.
|
| Mon, 16 Mar 2009 04:16:43 +0000 |
Richard Jones |
fix bug introduced into CSV export and view (issue 2550529)
|
| Thu, 12 Mar 2009 02:25:03 +0000 |
Richard Jones |
Plug a number of security holes:
|
| Thu, 07 Aug 2008 06:12:57 +0000 |
Richard Jones |
add new test for multiple message creation
|
| Thu, 07 Aug 2008 05:59:18 +0000 |
Richard Jones |
Allow negative ids other than -1 for item generation [SF#982481]
|
| Wed, 27 Feb 2008 08:32:51 +0000 |
Richard Jones |
fix mysql breakage in 1.4.2
1.4.3
|
| Fri, 05 Oct 2007 03:07:14 +0000 |
Richard Jones |
add tests for through-the-web permission checking
|
| Sun, 16 Sep 2007 02:45:11 +0000 |
Justus Pendleton |
retire "topic" usage
|
| Wed, 12 Sep 2007 21:11:14 +0000 |
Justus Pendleton |
fuller email validition (request [SF#216291])
|
| Thu, 05 Jul 2007 19:21:57 +0000 |
Ralf Schlatterbeck |
Added two new tests for Links and Multilinks in HTMLItems:
|
| Mon, 11 Dec 2006 23:36:15 +0000 |
Richard Jones |
Sorry for the mega-patch - was all done on the train:
|
| Fri, 11 Aug 2006 00:18:59 +0000 |
Richard Jones |
@required in forms may now specify properties of linked items
|
| Wed, 25 Jan 2006 02:24:28 +0000 |
Richard Jones |
fix detection of "missing" existing values in CGI form parser [SF#1414149]
|
| Thu, 18 Nov 2004 16:23:58 +0000 |
Alexander Smishlajev |
backend is an attribute of tracker instances
|
| Sun, 24 Oct 2004 10:00:13 +0000 |
Alexander Smishlajev |
use tracker setup function from db_test_base;
|
| Tue, 28 Sep 2004 10:47:20 +0000 |
Alexander Smishlajev |
init.initialize() was removed in [[CVS:1.30]] (27-jul-2004)
|
| Tue, 17 Feb 2004 03:48:08 +0000 |
Richard Jones |
test fixes
|
| Sun, 15 Feb 2004 23:16:20 +0000 |
Richard Jones |
fix tests to match new parsePropsFromForm API
maint-0.6
|
| Wed, 11 Feb 2004 21:34:31 +0000 |
Johannes Gijsbers |
Move out parts of client.py to new modules:
|
| Sat, 25 Oct 2003 22:53:26 +0000 |
Richard Jones |
Backend improvements.
|
| Wed, 24 Sep 2003 14:54:23 +0000 |
Johannes Gijsbers |
Use FormError.
|
| Sun, 07 Sep 2003 20:37:33 +0000 |
Johannes Gijsbers |
Optimize mailgw and cgi tests...
|
| Mon, 11 Aug 2003 11:28:31 +0000 |
Johannes Gijsbers |
Regression test case to ensure FileClass attribute bug doesn't show up again.
|
