| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | Make sure we do not pass multiple CGI parameters in function calls | Simon McVittie | 2014-10-16 |
| | | | | | | | | | | | | When CGI->param is called in list context, such as in function parameters, it expands to all the potentially multiple values of the parameter: for instance, if we parse query string a=b&a=c&d=e and call func($cgi->param('a')), that's equivalent to func('b', 'c'). Most of the functions we're calling do not expect that. I do not believe this is an exploitable security vulnerability in ikiwiki, but it was exploitable in Bugzilla. | ||
| * | use cgitemplate, remove misctemplate | Joey Hess | 2011-01-05 |
| | | |||
| * | use one-parameter form of urlto | Joey Hess | 2010-11-29 |
| | | |||
| * | Use local paths for redirection where possible | Simon McVittie | 2010-11-23 |
| | | |||
| * | squash undef | Joey Hess | 2010-10-25 |
| | | |||
| * | add 2 more missing getsetup hooks | Joey Hess | 2010-07-14 |
| | | |||
| * | avoid redir loop when going to an internal page that has no permalink | Joey Hess | 2010-05-07 |
| | | |||
| * | add section information | Joey Hess | 2010-02-12 |
| | | |||
| * | 404/goto: Fix 404 display of utf-8 pages. | Joey Hess | 2009-12-14 |
| | | | | | | | | Problem here was that no charset http header was being sent. I fixed this globally by making cgi_custom_failure send the header. Required changing its parameters. | ||
| * | goto: Support being passed a page title that is not a valid page name, to ↵ | Joey Hess | 2009-06-06 |
| | | | | | support several cases including mercurial's long user names on the RecentChanges page, and urls with spaces being handled by the 404 plugin. | ||
| * | goto: Fix typo that broke recentchanges_link compatability. | Joey Hess | 2009-02-27 |
| | | |||
| * | typo | Joey Hess | 2009-02-17 |
| | | |||
| * | goto: Fix redirect to comments. | Joey Hess | 2009-02-17 |
| | | |||
| * | factor out IE stupididy workaround | Joey Hess | 2009-01-31 |
| | | |||
| * | Split cgi_goto into a goto plugin | Simon McVittie | 2009-01-31 |