| Sat, 15 Apr 2017 17:39:19 -0400 |
John Rouillard |
Add more sleeps to work around mysql timestamp issue.
|
| Sat, 15 Apr 2017 17:09:10 -0400 |
John Rouillard |
Work around for missing fractional second support in our use of mysql.
|
| Fri, 14 Apr 2017 23:58:35 -0400 |
John Rouillard |
looks like the testQuietJournal test is failing with mysql for some
|
| Fri, 14 Apr 2017 23:24:18 -0400 |
John Rouillard |
issue2550864 - Potential information leakage via journal/history
|
| Tue, 11 Apr 2017 22:20:13 -0400 |
John Rouillard |
Fix issue with retreiving raw template files using the @@file mechanism.
|
| Tue, 11 Apr 2017 21:51:28 -0400 |
John Rouillard |
Add new command updateconfig to admin command. This acts like
|
| Tue, 11 Apr 2017 21:49:18 -0400 |
John Rouillard |
Remove code for unsupported/removed config command.
|
| Sun, 09 Apr 2017 21:11:42 -0400 |
John Rouillard |
merge of Trent Gamblin
|
| Sun, 09 Apr 2017 20:41:40 -0400 |
John Rouillard |
Added missing documentation of the showall parameter to the history
|
| Sat, 08 Apr 2017 22:34:10 -0400 |
John Rouillard |
Changed function signature for properties to correspond to checkin:
|
| Thu, 06 Apr 2017 09:17:02 +0200 |
Ralf Schlatterbeck |
Add Trent Gamblin to acknowledgements
|
| Wed, 05 Apr 2017 22:04:04 -0400 |
John Rouillard |
Apply patch attached to issue2550937 traceback/crash due to passing
|
| Wed, 05 Apr 2017 21:40:56 -0400 |
John Rouillard |
Checkin in missing changenote for checkin: 24945480d24c
|
| Wed, 05 Apr 2017 21:38:32 -0400 |
John Rouillard |
Make properties method return only properties the user can search.
|
| Wed, 05 Apr 2017 21:20:20 -0400 |
John Rouillard |
Iterate over multilink items if they labelprop is accessible to the
|
| Wed, 05 Apr 2017 20:56:08 -0400 |
John Rouillard |
Reimplemented anti-csrf measures by raising exceptions rather than
|
| Mon, 27 Mar 2017 23:04:30 -0400 |
John Rouillard |
Update the xmlrpc documentation for use with the CSRF defenses.
|
| Mon, 27 Mar 2017 22:37:30 -0400 |
John Rouillard |
Added tests for csrf with xmlrpc.
|
| Thu, 23 Mar 2017 21:08:30 -0400 |
John Rouillard |
Add nonce to embedded script references.
|
| Wed, 22 Mar 2017 22:03:01 -0400 |
John Rouillard |
make roundup-admin init function set the transaction source. Otherwise when initial_data.py is loaded as part of init, db.tx_Source is set to None and thus checks like db.tx_Source in [ 'cli' ] will fail.
|
| Mon, 20 Mar 2017 21:22:28 -0400 |
John Rouillard |
test_postgress isn't properly skipping tests when database is not
|
| Mon, 20 Mar 2017 20:18:20 -0400 |
John Rouillard |
Fix text formatting, typos and, English grammar of the descriptive text.
|
| Sun, 19 Mar 2017 20:57:26 -0400 |
John Rouillard |
This change didn't make it into the last commit. Allow the user to
|
| Sun, 19 Mar 2017 19:01:41 -0400 |
John Rouillard |
Added support for SameSite cookie option for CSRF prevention
|
| Sun, 19 Mar 2017 17:10:13 -0400 |
John Rouillard |
Fix expiration dates and expire csrf tokens properly
|
| Sun, 19 Mar 2017 15:32:14 -0400 |
John Rouillard |
Remove csrf keys used with get
|
| Sun, 19 Mar 2017 11:21:21 -0400 |
John Rouillard |
Added .coveragerc to exclude the dist utilites from code coverage.
|
| Sun, 19 Mar 2017 00:24:16 -0400 |
John Rouillard |
fixing some tests due to changes to classic template by adding anti-csrf code
|
| Sat, 18 Mar 2017 23:36:02 -0400 |
John Rouillard |
changes to try to deploy anti-csrf defense to other templates.
|
| Sat, 18 Mar 2017 23:34:41 -0400 |
John Rouillard |
format fix
|
| Sat, 18 Mar 2017 23:02:30 -0400 |
John Rouillard |
Added csrf defense to minimal template.
|
| Sat, 18 Mar 2017 22:55:50 -0400 |
John Rouillard |
convert classic template for csrf defense
|
| Sat, 18 Mar 2017 22:19:51 -0400 |
John Rouillard |
Also rename test to testCsrfProtection
|
| Sat, 18 Mar 2017 19:16:56 -0400 |
John Rouillard |
My testing was with dbm backends which do an automatic commit on the
|
| Sat, 18 Mar 2017 16:59:01 -0400 |
John Rouillard |
issue 2550690 - Adding anti-csrf measures to roundup following
|
| Sat, 18 Mar 2017 15:12:39 -0400 |
John Rouillard |
Reset state of:
|
| Sat, 18 Mar 2017 14:42:05 -0400 |
John Rouillard |
Still trying to figure out why travis ci fails without a call to
|
| Sat, 18 Mar 2017 12:25:30 -0400 |
John Rouillard |
More travis debug
|
| Sat, 18 Mar 2017 11:37:46 -0400 |
John Rouillard |
Trying to debug test failures on travis-ci that I can't reproduce
|
| Sat, 18 Mar 2017 10:44:10 -0400 |
rouilj |
Implement props_only feature for permissions.
|
| Thu, 16 Mar 2017 23:06:16 -0400 |
rouilj |
Remove left over debugging statements.
|
| Tue, 14 Mar 2017 18:38:46 -0400 |
rouilj |
Hopefully making the doc for the query editing feature less confusing.
|
| Fri, 10 Mar 2017 00:22:55 +1100 |
John Kristensen |
Fix incorrect indentation using tabs
|
| Wed, 08 Mar 2017 22:04:15 -0500 |
rouilj |
Three sets of changes:
|
| Sat, 25 Feb 2017 22:21:15 -0500 |
John Rouillard |
issue2550932 - html_calendar produces templating errors for bad date strings
|
| Sat, 25 Feb 2017 21:01:50 -0500 |
John Rouillard |
Make url's in messages identified as http://... or https://...
|
| Sat, 25 Feb 2017 17:48:46 -0500 |
John Rouillard |
Fix spelling error. Make it match the name of the field.
|
| Sat, 18 Feb 2017 00:58:34 -0500 |
John Rouillard |
Small fix. Make sure view is defined before trying to find('|') in it.
|
| Fri, 17 Feb 2017 21:41:24 -0500 |
John Rouillard |
Added missing change entry for the indexargs_form() fix.
|
| Fri, 17 Feb 2017 21:18:34 -0500 |
John Rouillard |
Check in enhanced form for check command used by addPermission.
|
| Fri, 17 Feb 2017 19:44:15 -0500 |
John Rouillard |
Make @template support two alternate templates for error and ok cases.
|
| Fri, 17 Feb 2017 19:33:01 -0500 |
John Rouillard |
Issue2550934 - templating.py-indexargs_form() returns id's as space separated list not comma separated
|
| Sat, 11 Feb 2017 17:25:05 -0500 |
John Rouillard |
merge from upstream.
|
| Sat, 11 Feb 2017 17:20:47 -0500 |
John Rouillard |
- issue2550933 - Fix Traceback in cgi/templating.py when a string is
|
| Mon, 30 Jan 2017 22:09:32 -0500 |
John Rouillard |
Add a new argument "showdef" to the template function menu(). When set
|
| Sat, 28 Jan 2017 21:15:49 -0500 |
John Rouillard |
got the indent wrong in the last change for templating.py
|
| Sat, 28 Jan 2017 20:58:19 -0500 |
John Rouillard |
- issue2550796: Calendar and Classhelp selection tools don't cause
|
| Tue, 24 Jan 2017 16:58:05 +1100 |
John Kristensen |
TravisCI: Fix fetching of xapian-bindings (issue2550931)
|
| Thu, 12 Jan 2017 21:24:18 -0500 |
John Rouillard |
Check in the signed cert needed to complete an http connection to a
|
| Thu, 12 Jan 2017 20:22:44 -0500 |
John Rouillard |
Add ca-certficates package so that wget can pull https url's.
|