| Thu, 23 Feb 2012 18:10:03 +0100 |
Ralf Schlatterbeck |
New Chameleon templating engine, engine is now configurable.
|
| Mon, 30 Jan 2012 14:52:14 +0100 |
Ralf Schlatterbeck |
Fix override of TemplatingUtils in instance.py.
|
| Thu, 05 Jan 2012 15:56:15 +0100 |
Ralf Schlatterbeck |
issue2550711 Fix XSS vulnerability when username contains HTML code.
|
| Fri, 30 Sep 2011 09:35:34 +0000 |
Ralf Schlatterbeck |
Allow to turn off translation of generated html options in menu method...
|
| Fri, 15 Jul 2011 14:13:51 +0000 |
Ralf Schlatterbeck |
Allow HTMLRequest.batch to filter on other permissions than "View"...
|
| Thu, 14 Apr 2011 15:42:41 +0000 |
Ralf Schlatterbeck |
Second patch from issue2550688 -- with some changes:
|
| Thu, 14 Apr 2011 12:47:48 +0000 |
Stefan Seefeld |
Allow default value declaration in DB schema.
|
| Mon, 08 Nov 2010 16:21:02 +0000 |
Bernhard Reiter |
Multilinks can be filtered by combining elements with AND, OR and NOT now.
|
| Thu, 04 Nov 2010 22:34:20 +0000 |
Stefan Seefeld |
Make HTMLProperty report actual classname in repr().
|
| Tue, 19 Oct 2010 15:29:05 +0000 |
Ralf Schlatterbeck |
- Add explicit "Search" permissions, see Security Fix below.
|
| Fri, 10 Sep 2010 06:32:04 +0000 |
Richard Jones |
make sort more robust
|
| Thu, 12 Aug 2010 05:00:07 +0000 |
Richard Jones |
improve handling of '>' when URLs are converted to links
|
| Sat, 24 Jul 2010 09:44:58 +0000 |
Richard Jones |
allow trackers to override the classes used to render properties...
|
| Mon, 12 Jul 2010 04:14:02 +0000 |
Richard Jones |
make URL detection a little smarter about brackets per issue2550657
|
| Thu, 01 Jul 2010 01:41:54 +0000 |
Richard Jones |
fix potential XSS hole
|
| Fri, 19 Feb 2010 05:09:38 +0000 |
Richard Jones |
undo regression in 1.4.12: Multilink edit fields lose their values
1.4.13
|
| Mon, 01 Feb 2010 04:54:59 +0000 |
Richard Jones |
Allow value to be specified to multilink form element templating
|
| Sat, 30 Jan 2010 22:46:27 +0000 |
Richard Jones |
fix typo
|
| Fri, 29 Jan 2010 05:52:35 +0000 |
Richard Jones |
Display 'today' in the account user's timezone, thanks David Wolever
|
| Fri, 29 Jan 2010 05:46:59 +0000 |
Richard Jones |
fixes to make registration work again
|
| Fri, 29 Jan 2010 05:29:49 +0000 |
Richard Jones |
add web access check all over templating
|
| Tue, 15 Dec 2009 15:11:27 +0000 |
Ralf Schlatterbeck |
Clean up all the places where role processing occurs.
|
| Sat, 28 Nov 2009 22:44:02 +0000 |
Richard Jones |
issue2550549: Some bugs issue classifiers were causing database lookup errors
|
| Tue, 24 Nov 2009 20:39:51 +0000 |
Stefan Seefeld |
Do not create bogus non-anonymous objects.
|
| Fri, 09 Oct 2009 14:00:50 +0000 |
Stefan Seefeld |
Fix race condition.
|
| Fri, 09 Oct 2009 13:58:43 +0000 |
Stefan Seefeld |
Provide ability to specify arbitrary HTML attributes.
|
| Mon, 10 Aug 2009 02:02:00 +0000 |
Richard Jones |
don't show entire history by default
|
| Tue, 30 Jun 2009 01:41:11 +0000 |
Stefan Seefeld |
Fix issue2550553.
|
| Tue, 17 Mar 2009 22:59:40 +0000 |
Richard Jones |
handle bogus pagination values (issue 2550530)
|
| Mon, 16 Mar 2009 04:16:43 +0000 |
Richard Jones |
fix bug introduced into CSV export and view (issue 2550529)
|
| Thu, 12 Mar 2009 14:29:26 +0000 |
Stefan Seefeld |
Serve the correct ReST part in String.rst().
|
| Thu, 12 Mar 2009 03:04:10 +0000 |
Richard Jones |
fix missed hole in the CSV editing - could still view items in the generic index editor
|
| Thu, 12 Mar 2009 02:25:03 +0000 |
Richard Jones |
Plug a number of security holes:
|
| Fri, 20 Feb 2009 04:07:04 +0000 |
Stefan Seefeld |
Robustify (Multi)linkHTMLProperty.plain.
|
| Fri, 20 Feb 2009 04:02:38 +0000 |
Stefan Seefeld |
Fix context for query form to be a class.
|
| Thu, 19 Feb 2009 23:32:23 +0000 |
Stefan Seefeld |
Fix issue2550512
|
| Thu, 19 Feb 2009 23:23:35 +0000 |
Stefan Seefeld |
Fix designator regular expression in HTMLDatabase.__getitem__.
|
| Thu, 19 Feb 2009 23:16:00 +0000 |
Stefan Seefeld |
Provide a a "no selection" option; cleanup.
|
| Thu, 19 Feb 2009 21:59:14 +0000 |
Stefan Seefeld |
Extend "additional" parameter to work with (multi)links.
|
| Thu, 19 Feb 2009 21:52:35 +0000 |
Stefan Seefeld |
Quote ampersands in URLs.
|
| Thu, 19 Feb 2009 21:46:12 +0000 |
Stefan Seefeld |
Handle transitive properties.
|
| Mon, 16 Feb 2009 21:26:29 +0000 |
Stefan Seefeld |
Allow 'no value' to be selected in LinkHTMLProperty.menu()
|
| Mon, 16 Feb 2009 21:19:51 +0000 |
Stefan Seefeld |
Fix height calculation for Multilink.menu()
|
| Mon, 16 Feb 2009 21:02:23 +0000 |
Stefan Seefeld |
Make cgi.templating more fault-tolerant towards invalid requests.
|
| Thu, 12 Feb 2009 05:10:59 +0000 |
Stefan Seefeld |
Fix issue2550500
|
| Mon, 01 Sep 2008 01:45:33 +0000 |
Richard Jones |
add tests for and fix alex's examples
|
| Mon, 01 Sep 2008 01:37:00 +0000 |
Richard Jones |
Make URL matching code less matchy
|
| Mon, 18 Aug 2008 06:03:06 +0000 |
Richard Jones |
improved URL matching
|
| Fri, 07 Mar 2008 00:35:47 +0000 |
Richard Jones |
'Make a Copy' failed with more than one person in nosy list [SF#1906147]
|
| Sat, 01 Mar 2008 08:18:07 +0000 |
Richard Jones |
security fixes
1.4.4
|
| Tue, 19 Feb 2008 23:45:33 +0000 |
Richard Jones |
add language to the "request" template var
|
| Fri, 02 Nov 2007 23:17:59 +0000 |
Richard Jones |
make LinkHTMLProperty handle non-existing keys (patch [SF#1815895])
|
| Tue, 18 Sep 2007 16:59:42 +0000 |
Justus Pendleton |
indexargs_url force ids to int
|
| Sun, 16 Sep 2007 05:39:11 +0000 |
Justus Pendleton |
multiline pass through extra keywords args
|
| Fri, 14 Sep 2007 15:55:25 +0000 |
Justus Pendleton |
LinkHTMLProperty wasn't translating menus
|
| Mon, 10 Sep 2007 19:30:27 +0000 |
Erik Forsberg |
Cope with spam robots posting with multiple instances of the same form
|
| Wed, 01 Aug 2007 12:42:31 +0000 |
Ralf Schlatterbeck |
Add a rst method to StringHTMLProperty...
|
| Mon, 09 Jul 2007 17:27:04 +0000 |
Ralf Schlatterbeck |
Update on recent fix, better version suggested by alexander smishlajev
|
| Thu, 05 Jul 2007 21:11:28 +0000 |
Ralf Schlatterbeck |
- fix id-lookup in case we already *know* that the value is an id (in
|
| Wed, 16 May 2007 09:42:36 +0000 |
Ralf Schlatterbeck |
allow customisation of the edit action for the submit button
|
