aboutsummaryrefslogtreecommitdiff
path: root/IkiWiki/Plugin/po.pm
Commit message (Collapse)AuthorAge
* Force CGI::FormBuilder->field to scalar context where necessarySimon McVittie2016-12-28
| | | | | | | | | | | | | | | | | | | | | | | | | | CGI::FormBuilder->field has behaviour similar to the CGI.pm misfeature we avoided in f4ec7b0. Force it into scalar context where it is used in an argument list. This prevents two (relatively minor) commit metadata forgery vulnerabilities: * In the comments plugin, an attacker who was able to post a comment could give it a user-specified author and author-URL even if the wiki configuration did not allow for that, by crafting multiple values to other fields. * In the editpage plugin, an attacker who was able to edit a page could potentially forge commit authorship by crafting multiple values for the rcsinfo field. The remaining plugins changed in this commit appear to have been protected by use of explicit scalar prototypes for the called functions, but have been changed anyway to make them more obviously correct. In particular, checkpassword() in passwordauth has a known prototype, so an attacker cannot trick it into treating multiple values of the name field as being the username, password and field to check for. OVE-20161226-0001
* po: If msgmerge falls over on a problem po file, print a warning message, ↵Joey Hess2014-12-30
| | | | but don't let this problem crash ikiwiki entirely.
* Add two template variables, expose html language code and language direction.Mesar Hameed2013-10-14
|
* prune: do not prune beyond an optional base directory, and add a testSimon McVittie2012-04-07
| | | | | | | | Previously, prune("wiki/srcdir/sandbox/test.mdwn") could delete srcdir or even wiki, if they happened to be empty. This is rarely what you want: there's usually some base directory (destdir, srcdir, transientdir or another subdirectory of wikistatedir) beyond which you do not want to delete.
* Added a "changes" hook. Renamed the "change" hook to "rendered", butJoey Hess2012-03-28
| | | | the old hook name is called for now for back-compat.
* avoid unnecessary uses of UNIVERSALJoey Hess2012-03-18
| | | | | | | Foo->Bar->can("method") works just as well, even if Foo::Bar is not loaded. Using UNIVERSAL::can is deprecated. But, I was unable to easily eliminate conditional.pm's use of UNIVERSAL::can
* po: add lang_code and lang_name template variables.intrigeri2011-07-18
|
* Merge remote-tracking branch 'intrigeri/po'Joey Hess2011-06-03
|\
| * po: set Locale::Po4a::Xml's ontagerror option to warn only.intrigeri2011-05-26
| |
* | po: support language codes in the form of 'es_AR', and 'arn'.intrigeri2011-05-26
|/ | | | ... additionally to the previously supported two-letters codes.
* fix targetpage replacement to support 3 argument formJoey Hess2011-03-24
| | | | | | Oddly, this hadn't caused any visible breakage. Possibly inline, which is the only thing to use targetpage, resolves the function to the "real" one before po gets loaded?
* avoid stomping on inline's rootpage sub if it's not already presentJoey Hess2011-03-24
| | | | | | | If the inline plugin is not being loaded, or is perhaps loaded after po (when IkiWiki::Setup::getsetup loads all the plugins, for example), po should not inject its custom rootpage sub, as that will lead to a redefinition error message when inline loads.
* run po checkconfig last so it can see underlays added in other checkconfig hooksJoey Hess2011-01-25
|
* po: do not override homepage title when it was overridden.intrigeri2010-12-22
|
* po plugin: update injected urlto signature.intrigeri2010-12-20
| | | | | | The lack of $from will probably hurt setups using po_link_to = current, but at least we can fix the blocker bug that prevents any wiki using the po plugin to build.
* make use of precompiled regex objectsSimon McVittie2010-11-20
|
* use warnJoey Hess2010-09-10
|
* avoid dups getting into @slavelanguagesJoey Hess2010-09-10
| | | | This could happen if checkconfig was run twice, I think.
* po: Auto-upgrade old format settings to new formats when writing setup file.Joey Hess2010-09-10
|
* po: Make the po_master_language use a langpair like "en|English", so it can ↵Joey Hess2010-09-10
| | | | be configured via the web.
* po: Allow enabling via web setup.Joey Hess2010-09-10
| | | | | The only unsafe thing should be that enabling it with some languages will generate po files.
* needsbuild hook interface changed; the hooks should now return the modified ↵Joey Hess2010-09-07
| | | | array of things that need built. (Backwards compatability code keeps plugins using the old interface working.)
* po: re-scan in scan hook rather than using the rescan hook that won't be added.intrigeri2010-08-02
|
* po: ignore non-existent translations in otherlanguages*intrigeri2010-08-02
|
* po: avoid bringing duplicates into %linksintrigeri2010-08-02
|
* po(mybestlink): avoid linking to non-existent translation pages.intrigeri2010-08-02
|
* po: rescan converted content on refresh too.intrigeri2010-07-30
|
* po: use rescan hook instead of rebuilding twice.intrigeri2010-07-30
| | | | | | | The po rescan hook re-runs the scan hooks, and runs the preprocess ones in scan mode, both on the po-to-markup converted content. This way, plugins such as meta are given a chance to gather correct information, rather than ugly/buggy escaped data it did gather from unconverted PO files.
* Merge remote branch 'upstream/master' into prv/pointrigeri2010-07-24
|\
| * whitespace fixes and a typoJoey Hess2010-07-23
| |
* | po: optimizationintrigeri2010-07-20
|/ | | | | No need to use "keys %{$config{po_slave_languages}}" repeatedly: the slave languages codes list is already cached in @slavelanguages.
* Support ordered po_slave_languages as discussed previously.intrigeri2010-07-20
| | | | Backward compatibility is still supported.
* Revert "po_slave_languages can now be a hash, if order matters."Joey Hess2010-07-18
| | | | | | | | | | | | | | | This reverts commit 4cf185e781a5f94373b30ec9a0e10dfb626b6d86. That commit broke t/po.t (probably the test case only is testing too close the the old implementation and needs correcting). Also, we have not decided how to want to represent it yet, so I'm not ready for this change. Conflicts: IkiWiki/Plugin/po.pm doc/plugins/po.mdwn
* typoJoey Hess2010-07-18
|
* po: check validity of po_slave_languages array.intrigeri2010-07-11
|
* po: added an optional target percentage to needstranslationintrigeri2010-07-11
|
* Revert po vs. template kludges.intrigeri2010-07-11
| | | | | | This reverts commits dcd57dd5c9f3265bb7a78a5696b90976698c43aa, d4136aea8aa8968d2cd87b40e8d85301a3549323 and d877b9644bcfbbfc5eaf3f7fc13cb96ecda946c9.
* Merge remote branch 'upstream/master' into prv/pointrigeri2010-07-11
|\ | | | | | | | | | | Conflicts: IkiWiki/Plugin/po.pm doc/plugins/po.mdwn
| * po: added support for html pagetypeintrigeri2010-07-04
| | | | | | | | | | | | | | ... after having audited the po4a Xml and Xhtml modules for security issues. Signed-off-by: intrigeri <intrigeri@boum.org> (cherry picked from commit a128c256a51392fcf752bf612d83a90e8c68027e)
| * po: s/utf-8/UTF-8, to solve part of the double commit bug.intrigeri2010-07-04
| | | | | | | | (cherry picked from commit 4f44534d72c9a9a947bc38a3cb4987705c25bea5)
| * review of needstranslation() pagespecJoey Hess2010-07-04
| | | | | | | | Minor wording fix; changelog; etc.
| * po: added a needstranslation() pagespecintrigeri2010-07-04
| | | | | | | | (cherry picked from commit b225fdc44d4b3d2853db622d59aed7b59788aeec)
* | bugfixintrigeri2010-07-02
| |
* | po: added a needstranslation() pagespecintrigeri2010-06-29
| |
* | Add a fullpage arg to filter.intrigeri2010-06-29
| | | | | | | | | | | | | | Set it to true every time IkiWiki::filter is called on a full page's content. This is a much nicer solution, for the po plugin, than previous whitelisting using caller().
* | po: s/utf-8/UTF-8, to solve part of the double commit bug.intrigeri2010-06-26
| |
* | po_slave_languages can now be a hash, if order matters.intrigeri2010-06-26
| |
* | po: added support for html pagetypeintrigeri2010-06-25
| | | | | | | | | | | | ... after having audited the po4a Xml and Xhtml modules for security issues. Signed-off-by: intrigeri <intrigeri@boum.org>
* | TODO++intrigeri2010-06-25
| |
* | po: also filter sidebar translation pagesintrigeri2010-06-25
| |
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-25 19:24:52 +0000