Commit graph

519 commits

Author SHA1 Message Date
Jacques Distler 5cbdccec2a MIME-Types for WEBrick 2007-10-08 04:16:31 +00:00
Jacques Distler ab7f429a10 Security: Enforce POSTs
Spammers can bypass form_spam_protect plugin by using GET instead of POST.

Fix this, by ensuring that unsafe operations are POSTs, rather than GETs.
2007-10-07 17:59:20 +00:00
Matthias Tarasiewicz 4199843e08 changing back some 'require_dependency' to 'require' since it is not needed for all (info from jacques distler) 2007-09-28 08:40:24 +00:00
Jacques Distler 10b0561aca Category lists and WikiReferences restrict to current Web.
Fix one sanitization test.
2007-09-28 03:57:52 +00:00
Matthias Tarasiewicz 2cd2b2746e change of 'require_dependencies' to 'require' which should fix the 'superclass mismatch error' that occurred. 2007-09-27 06:09:58 +00:00
Jacques Distler a3d3f1c536 Fix XSS vulnerabilities in chunk-handling 2007-09-23 19:30:39 +00:00
Matt MacGillivray 36b86a9d41 Removed deprecation errors for rails 1.2.3. Corrected test case failures as a result of updated features and functionality 2007-05-07 22:46:00 +00:00
Matthias Tarasiewicz 322a09274f in response to #406 - commented out parts in the css that would render the admin part ununsable. still needs research. 2007-04-08 20:12:23 +00:00
Matthias Tarasiewicz 40a71e80d9 fixes #439 by patch from alex eagle 2007-04-08 19:37:47 +00:00
Matthias Tarasiewicz ca9e155c17 reverted redcloth to 3.0.3 (fixes formatting bugs)
upgraded integrated rails to 1.2.3
2007-03-18 10:20:35 +00:00
Michal Wlodkowski 8fb8517156 css updates 2007-02-27 21:56:13 +00:00
Jacques Distler 552cf4cff0 XSS Security fixes 2007-02-25 15:13:50 +00:00
Matthias Tarasiewicz c9a9b7d315 adding the form_spam_protection plugin that was missing from the last commit 2007-02-13 13:27:54 +00:00
Matthias Tarasiewicz 113223f364 - AntiSPAM: included form-spam-protection rails plugin (Hivelogic Enkoder)
- update: updated scripts and javascripts to rails 1.2.1
2007-02-13 13:24:03 +00:00
Matthias Tarasiewicz ad22579668 cookie fix: being logged in on more Webs at once works now [Jaques Distler] 2007-02-10 09:47:36 +00:00
Matthias Tarasiewicz 49032a99c6 svn:external rails updated to 1.2.2
fixed ticket #372 typo in db-query
sqlite3-ruby updated to 1.2.1
2007-02-08 22:01:36 +00:00
Matthias Tarasiewicz 7378ce9610 reverted to rails 1.1.6 since there were problems reported 2007-01-18 19:31:07 +00:00
Matthias Tarasiewicz 1877f66f17 big update to the web_list - statistics: last update, last document, created or revised; plus css updates to make small fonts look better in firefox 2007-01-18 17:57:16 +00:00
Matthias Tarasiewicz 2e558d5222 fixed the correct display of authors per web. added singular/plural for authors and pages. css optimizations 2007-01-18 13:33:52 +00:00
Matthias Tarasiewicz 4eefc3c979 updated to rails 1.2 stable 2007-01-18 08:42:39 +00:00
Matthias Tarasiewicz 95d794cfcb fixes Ticket #259 html_options minor fix 2007-01-17 21:28:20 +00:00
Matthias Tarasiewicz 85a568fe79 added back jcode 2007-01-17 21:00:17 +00:00
Matthias Tarasiewicz 4f312bc336 removed jcode unicode reference, since this is included in rails 1.2 2007-01-17 20:53:46 +00:00
Matthias Tarasiewicz 692a1beffe updated rubyzip from 0.5.8 to 0.9.1 and moved plugin into the right folder 2007-01-17 12:47:46 +00:00
Matthias Tarasiewicz 78ebbed446 updating environment.rb to reflect sqlite3-ruby move 2007-01-17 12:26:46 +00:00
Matthias Tarasiewicz 80028814a6 moved sqlite3-ruby in the right directory (preparing for proper rails 1.2 directory structure) 2007-01-17 12:25:48 +00:00
Matthias Tarasiewicz 1596d84333 updated recloth to 3.0.4 2007-01-17 12:08:16 +00:00
Matthias Tarasiewicz 69945c9d9d updated svn:external rails to 1.2rc1 to implement changes like unicode and other rails 1.2 features 2007-01-17 11:37:02 +00:00
Matthias Tarasiewicz c39ca54b8c config_load path for dnsbl_check 2007-01-16 07:28:48 +00:00
Matthias Tarasiewicz 1005d92bd1 web list does not show a link to a published version if it has none [Jesse Newland]
visual display if webs are pass-protected (div background)
2007-01-16 07:23:53 +00:00
Matthias Tarasiewicz 8bfe83fa20 fix PDF output not to contain garbage chars [Jesse Newland] 2007-01-16 07:21:16 +00:00
Matthias Tarasiewicz bdf5ab51ef ANTISPAM: included dnsbl_check - DNS Blackhole Lists check [thanks to joost from http://www.spacebabies.nl ] 2007-01-16 07:16:56 +00:00
Matthias Tarasiewicz d7508a34ab updated packaged sqlite3-ruby to 1.2.0 2007-01-16 07:13:14 +00:00
Matthias Tarasiewicz 4481c8bdf6 ANTISPAM: added spam_patterns from the main instiki site wikispam 2007-01-16 07:07:31 +00:00
Matthias Tarasiewicz 9aaf45a810 added support for delete_web 2007-01-16 07:05:04 +00:00
Matthias Tarasiewicz 26024acddc added Rails 1.2 compatibility information, after checking 2007-01-14 06:11:14 +00:00
Alexey Verkhovsky 8323b12795 get_page_and_revision handles the case of no rev parameter explicitly, rather than by chance 2006-09-19 19:13:02 +00:00
Alexey Verkhovsky 453968a08b made gray a lighter shade 2006-09-14 16:49:15 +00:00
Alexey Verkhovsky 84a8f66505 documented the last change 2006-09-07 04:10:01 +00:00
Alexey Verkhovsky 4b29a843e5 Fixes #248 2006-09-07 04:07:51 +00:00
Alexey Verkhovsky 839dc364dd fixes #280 2006-09-07 03:11:53 +00:00
Alexey Verkhovsky 8f48a19827 documented the last change 2006-09-07 03:04:34 +00:00
Alexey Verkhovsky 1454fbf14a expire page cache for diff 2006-09-07 02:56:55 +00:00
Alexey Verkhovsky 5f7e569737 Replaced auto-generated shebangs in public/dispatch.* with something more meaningful 2006-05-04 06:19:15 +00:00
Alexey Verkhovsky 02658b6d51 Fixed migration for compatibility with Postgres 2006-05-04 06:18:33 +00:00
Alexey Verkhovsky 9c52933cbe Reverting a strange change to favicon.ico, step 2 2006-05-04 05:55:20 +00:00
Alexey Verkhovsky 7ebd2d5437 Reverting a strange change to favicon.ico 2006-05-04 05:53:57 +00:00
Alexey Verkhovsky dfdc718425 Enable fragment caching in ./cache 2006-05-04 05:38:18 +00:00
Alexey Verkhovsky 709d28dc4b /wiki/published renders a home page 2006-05-04 04:45:05 +00:00
Alexey Verkhovsky cbca2ba318 Fixed a silly bug 2006-05-04 04:31:55 +00:00