| Thu, 10 Aug 2017 22:38:13 -0400 |
John Rouillard |
Make sure that the name property is initialized to none.
|
| Thu, 10 Aug 2017 22:35:05 -0400 |
John Rouillard |
Suppress the "... - nothing changed" status banner presented when a
|
| Sat, 26 Aug 2017 00:24:01 -0400 |
Eric S. Raymond |
Make admin.py 2/3-agnostic.
|
| Fri, 25 Aug 2017 11:07:21 -0400 |
Eric S. Raymond |
More port planning.
|
| Thu, 24 Aug 2017 22:21:37 -0400 |
Eric S. Raymond |
Use Python-3-compatible 'as' syntax for except statements
|
| Thu, 24 Aug 2017 17:55:02 -0400 |
Eric S. Raymond |
Make demo.py run under either Python 2 or 3.
|
| Thu, 24 Aug 2017 17:41:38 -0400 |
Eric S. Raymond |
Make an import work with either Python 2 or 3.
|
| Thu, 24 Aug 2017 17:27:49 -0400 |
Eric S. Raymond |
Fix token_split() so its one error throws ValueError w/out extra arg.
|
| Thu, 24 Aug 2017 14:41:00 -0400 |
Eric S. Raymond |
Some porting advice from Joseph Myers.
|
| Thu, 24 Aug 2017 11:26:46 -0400 |
Eric S. Raymond |
Change floor version of Python to 2.7.2.
|
| Thu, 01 Jun 2017 08:59:18 +0200 |
Bernhard Reiter |
OpenPGP: Extends newissuecopy.py to encrypt if configured.
|
| Wed, 10 May 2017 10:53:16 +0200 |
Bernhard Reiter |
Mailer: Improves diagnostic messages for DEBUG.
|
| Wed, 10 May 2017 10:36:39 +0200 |
Bernhard Reiter |
Mailgw: Improves diagnostic messages for DEBUG.
|
| Sat, 22 Apr 2017 15:59:57 -0400 |
John Rouillard |
Spelling fix in design.txt.
|
| Sat, 15 Apr 2017 20:12:10 -0400 |
John Rouillard |
pylint flagged HeaderParseError as an Undefined variable.
|
| Sat, 15 Apr 2017 19:59:26 -0400 |
John Rouillard |
Iniitalize two variables to None.
|
| Sat, 15 Apr 2017 17:44:40 -0400 |
John Rouillard |
Pylint checks bark about:
|
| Sat, 15 Apr 2017 17:39:19 -0400 |
John Rouillard |
Add more sleeps to work around mysql timestamp issue.
|
| Sat, 15 Apr 2017 17:09:10 -0400 |
John Rouillard |
Work around for missing fractional second support in our use of mysql.
|
| Fri, 14 Apr 2017 23:58:35 -0400 |
John Rouillard |
looks like the testQuietJournal test is failing with mysql for some
|
| Fri, 14 Apr 2017 23:24:18 -0400 |
John Rouillard |
issue2550864 - Potential information leakage via journal/history
|
| Tue, 11 Apr 2017 22:20:13 -0400 |
John Rouillard |
Fix issue with retreiving raw template files using the @@file mechanism.
|
| Tue, 11 Apr 2017 21:51:28 -0400 |
John Rouillard |
Add new command updateconfig to admin command. This acts like
|
| Tue, 11 Apr 2017 21:49:18 -0400 |
John Rouillard |
Remove code for unsupported/removed config command.
|
| Sun, 09 Apr 2017 21:11:42 -0400 |
John Rouillard |
merge of Trent Gamblin
|
| Sun, 09 Apr 2017 20:41:40 -0400 |
John Rouillard |
Added missing documentation of the showall parameter to the history
|
| Sat, 08 Apr 2017 22:34:10 -0400 |
John Rouillard |
Changed function signature for properties to correspond to checkin:
|
| Thu, 06 Apr 2017 09:17:02 +0200 |
Ralf Schlatterbeck |
Add Trent Gamblin to acknowledgements
|
| Wed, 05 Apr 2017 22:04:04 -0400 |
John Rouillard |
Apply patch attached to issue2550937 traceback/crash due to passing
|
| Wed, 05 Apr 2017 21:40:56 -0400 |
John Rouillard |
Checkin in missing changenote for checkin: 24945480d24c
|
| Wed, 05 Apr 2017 21:38:32 -0400 |
John Rouillard |
Make properties method return only properties the user can search.
|
| Wed, 05 Apr 2017 21:20:20 -0400 |
John Rouillard |
Iterate over multilink items if they labelprop is accessible to the
|
| Wed, 05 Apr 2017 20:56:08 -0400 |
John Rouillard |
Reimplemented anti-csrf measures by raising exceptions rather than
|
| Mon, 27 Mar 2017 23:04:30 -0400 |
John Rouillard |
Update the xmlrpc documentation for use with the CSRF defenses.
|
| Mon, 27 Mar 2017 22:37:30 -0400 |
John Rouillard |
Added tests for csrf with xmlrpc.
|
| Thu, 23 Mar 2017 21:08:30 -0400 |
John Rouillard |
Add nonce to embedded script references.
|
| Wed, 22 Mar 2017 22:03:01 -0400 |
John Rouillard |
make roundup-admin init function set the transaction source. Otherwise when initial_data.py is loaded as part of init, db.tx_Source is set to None and thus checks like db.tx_Source in [ 'cli' ] will fail.
|
| Mon, 20 Mar 2017 21:22:28 -0400 |
John Rouillard |
test_postgress isn't properly skipping tests when database is not
|
| Mon, 20 Mar 2017 20:18:20 -0400 |
John Rouillard |
Fix text formatting, typos and, English grammar of the descriptive text.
|
| Sun, 19 Mar 2017 20:57:26 -0400 |
John Rouillard |
This change didn't make it into the last commit. Allow the user to
|
| Sun, 19 Mar 2017 19:01:41 -0400 |
John Rouillard |
Added support for SameSite cookie option for CSRF prevention
|
| Sun, 19 Mar 2017 17:10:13 -0400 |
John Rouillard |
Fix expiration dates and expire csrf tokens properly
|
| Sun, 19 Mar 2017 15:32:14 -0400 |
John Rouillard |
Remove csrf keys used with get
|
| Sun, 19 Mar 2017 11:21:21 -0400 |
John Rouillard |
Added .coveragerc to exclude the dist utilites from code coverage.
|
| Sun, 19 Mar 2017 00:24:16 -0400 |
John Rouillard |
fixing some tests due to changes to classic template by adding anti-csrf code
|
| Sat, 18 Mar 2017 23:36:02 -0400 |
John Rouillard |
changes to try to deploy anti-csrf defense to other templates.
|
| Sat, 18 Mar 2017 23:34:41 -0400 |
John Rouillard |
format fix
|
| Sat, 18 Mar 2017 23:02:30 -0400 |
John Rouillard |
Added csrf defense to minimal template.
|
| Sat, 18 Mar 2017 22:55:50 -0400 |
John Rouillard |
convert classic template for csrf defense
|
| Sat, 18 Mar 2017 22:19:51 -0400 |
John Rouillard |
Also rename test to testCsrfProtection
|
| Sat, 18 Mar 2017 19:16:56 -0400 |
John Rouillard |
My testing was with dbm backends which do an automatic commit on the
|
| Sat, 18 Mar 2017 16:59:01 -0400 |
John Rouillard |
issue 2550690 - Adding anti-csrf measures to roundup following
|
| Sat, 18 Mar 2017 15:12:39 -0400 |
John Rouillard |
Reset state of:
|
| Sat, 18 Mar 2017 14:42:05 -0400 |
John Rouillard |
Still trying to figure out why travis ci fails without a call to
|
| Sat, 18 Mar 2017 12:25:30 -0400 |
John Rouillard |
More travis debug
|
| Sat, 18 Mar 2017 11:37:46 -0400 |
John Rouillard |
Trying to debug test failures on travis-ci that I can't reproduce
|
| Sat, 18 Mar 2017 10:44:10 -0400 |
rouilj |
Implement props_only feature for permissions.
|
| Thu, 16 Mar 2017 23:06:16 -0400 |
rouilj |
Remove left over debugging statements.
|
| Tue, 14 Mar 2017 18:38:46 -0400 |
rouilj |
Hopefully making the doc for the query editing feature less confusing.
|
| Fri, 10 Mar 2017 00:22:55 +1100 |
John Kristensen |
Fix incorrect indentation using tabs
|