| Commit message (Expand) | Author | Age |
* | improve error message when postsignin is not set | Joey Hess | 2018-01-04 |
* | cgierror: When the CGI fails, print the error to stderr, not "Died" | Simon McVittie | 2017-05-14 |
* | Defend against empty session names | Simon McVittie | 2017-05-14 |
* | CGI, attachment, passwordauth: harden against repeated parameters | Simon McVittie | 2017-01-11 |
* | cgitemplate: actually remove dead code | Simon McVittie | 2016-12-19 |
* | HTML-escape error messages (OVE-20160505-0012) | Simon McVittie | 2016-05-05 |
* | Silence "used only once: possible typo" warnings for variables that are part ... | Simon McVittie | 2016-01-19 |
* | cloak user PII when making commits etc, and let cloaked PII be used in banned... | Joey Hess | 2015-05-14 |
* | Fix double UTF-8 decode on Perl < 5.20 with upgraded Encode.pm | Anders Kaseorg | 2015-03-01 |
* | Merge branch 'ready/html5' | Simon McVittie | 2014-11-26 |
|\ |
|
| * | Now that we're always using HTML5, <base href> can be relative | Simon McVittie | 2014-10-16 |
* | | Call CGI->param_fetch instead of CGI->param in array context | Amitai Schlair | 2014-10-16 |
|/ |
|
* | In html5 mode, generate a host- or protocol-relative <base> for the CGI | Simon McVittie | 2014-10-05 |
* | Add reverse_proxy option which hard-codes cgiurl in CGI output | Simon McVittie | 2014-10-05 |
* | Force use of $config{url} as top URL in w3mmode | Simon McVittie | 2014-10-05 |
* | do not double-decode unicode in CGI forms | Antoine Beaupré | 2014-09-09 |
* | protect $@ whenever a block using $@ is non-trivial | Simon McVittie | 2014-02-21 |
* | save whole form state, not just QUERY_STRING, for postsignin | Joey Hess | 2012-04-08 |
* | record email of new users in userinfo for userlist | Joey Hess | 2011-06-09 |
* | let's assume some web server will think OFF is a good idea.. | Joey Hess | 2011-06-03 |
* | Support the Hiawatha web server which sets HTTPS=off rather than not setting ... | Joey Hess | 2011-06-03 |
* | Fix broken baseurl in cgi mode when usedirs is disabled. Bug introduced in 3.... | Joey Hess | 2011-02-21 |
* | fix urlto(undef) | Joey Hess | 2011-01-05 |
* | add cgitemplate | Joey Hess | 2011-01-05 |
* | factored out an urlabs from aggregate and cgi | Joey Hess | 2011-01-05 |
* | oops | Joey Hess | 2011-01-05 |
* | typo | Joey Hess | 2011-01-05 |
* | Fix redirect to use a full url. | Joey Hess | 2011-01-05 |
* | Fix base url when previewing. Was broken by urlto changes in last release. | Joey Hess | 2011-01-05 |
* | Merge remote branch 'smcv/ready/sslcookie-auto' | Joey Hess | 2010-11-29 |
|\ |
|
| * | Always set secure cookies if logging in via HTTPS | Simon McVittie | 2010-11-29 |
* | | Use local path for even more CGI URLs | Simon McVittie | 2010-11-23 |
* | | Use local paths for redirection where possible | Simon McVittie | 2010-11-23 |
|/ |
|
* | stop using REMOTE_ADDR | Joey Hess | 2010-06-23 |
* | allow misctemplate callers to pass params to suppress actions etc | Joey Hess | 2010-05-14 |
* | moved non-openid signin form into same page as openid selector; show/hide as ... | Joey Hess | 2010-05-08 |
* | simplify formbuilder stylesheet specification | Joey Hess | 2010-05-06 |
* | brace style | Joey Hess | 2010-01-18 |
* | typos | Joey Hess | 2010-01-18 |
* | make decode_form_utf8 safe for arrays | Joey Hess | 2010-01-09 |
* | 404/goto: Fix 404 display of utf-8 pages. | Joey Hess | 2009-12-14 |
* | fix url encoding in redir | Joey Hess | 2009-10-29 |
* | Expand banned_users; it can now include PageSpecs, which allows banning by IP... | Joey Hess | 2009-09-08 |
* | Fix typo attepting→attempting | Jonas Smedegaard | 2009-07-23 |
* | detect sslcookie set and no https | Joey Hess | 2009-02-26 |
* | factor out IE stupididy workaround | Joey Hess | 2009-01-31 |
* | Split cgi_goto into a goto plugin | Simon McVittie | 2009-01-31 |
* | Split apache404 into an independent plugin | Simon McVittie | 2009-01-31 |
* | CGI: pad error responses with 512 bytes of spaces so IE will display them | Simon McVittie | 2009-01-31 |
* | CGI: set up goto hook so that /ikiwiki.cgi?do=goto can be an Apache ErrorDocu... | Simon McVittie | 2009-01-31 |