| Commit message (Expand) | Author | Age |
|---|
| * | Process .md like .mdwn, but disallow web creation. | Amitai Schlair | 2016-03-08 |
| * | Make sure we do not pass multiple CGI parameters in function calls•••When CGI->param is called in list context, such as in function
parameters, it expands to all the potentially multiple values
of the parameter: for instance, if we parse query string a=b&a=c&d=e
and call func($cgi->param('a')), that's equivalent to func('b', 'c').
Most of the functions we're calling do not expect that.
I do not believe this is an exploitable security vulnerability in
ikiwiki, but it was exploitable in Bugzilla.
| Simon McVittie | 2014-10-16 |
| * | Do not pass ignored sid parameter to checksessionexpiry•••checksessionexpiry's signature changed from
(CGI::Session, CGI->param('sid')) to (CGI, CGI::Session) in commit
985b229b, but editpage still passed the sid as a useless third
parameter, and this was later cargo-culted into remove, rename and
recentchanges.
| Simon McVittie | 2014-10-12 |
| * | actually tested rename not started from the edit page | Joey Hess | 2012-04-08 |
| * | improve prototype•••src param always needed now
| Joey Hess | 2012-04-05 |
| * | rename: Allow rename to be started not from the edit page; return to the rena... | Joey Hess | 2012-04-05 |
| * | fix two recently introduced bugs in rename•••* rename: Fix logic error that broke renaming pages when the attachment
plugin was disabled.
* rename: Fix logic error that bypassed the usual pagespec checks.
| Joey Hess | 2011-07-15 |
| * | implement renaming of held attachments•••This is somewhat suboptimal, it does not update links to the renamed file,
or show a result message.
| Joey Hess | 2011-06-14 |
| * | rename: Fix crash when renaming a page that is linked to by a page in an unde...•••Skip fixing links in such pages. The user will get a list of pages that
still link to the old page.
| Joey Hess | 2011-01-22 |
| * | Merge remote branch 'smcv/ready/localurl' | Joey Hess | 2010-11-29 |
| |\ |
|
| | * | Use local paths for the CGI URL | Simon McVittie | 2010-11-23 |
| * | | rename: Fix to pass named parameters to rcs_commit | Joey Hess | 2010-11-29 |
| |/ |
|
| * | saner return codes for check_can{remove,rename}•••These return codes are not currently used, but might be later.
| Joey Hess | 2010-08-30 |
| * | rcs_commit and rcs_commit_staged api changes•••Using named parameters for these is overdue. Passing the session in a
parameter instead of passing username and IP separately will later allow
storing other session info, like username or part of the email.
Note that these functions are not part of the exported API,
and the prototype change will catch (most) skew, so I am not changing
API versions. Any third-party plugins that call them will need updated
though.
| Joey Hess | 2010-06-23 |
| * | stop using REMOTE_ADDR•••Everywhere that REMOTE_ADDR was used, a session object is available, so
instead use its remote_addr method.
In IkiWiki::Receive, stop setting a dummy REMOTE_ADDR.
Note that it's possible for a session cookie to be obtained using one IP
address, and then used from another IP. In this case, the first IP will now
be used. I think that should be ok.
| Joey Hess | 2010-06-23 |
| * | remove, rename: Add guards against XSRF attacks. | Joey Hess | 2010-05-14 |
| * | simplify formbuilder stylesheet specification•••Since all forms are wrapped in a template that defines the actual
stylesheets, formbuilder just has to be told to turn on stylesheet mode,
not what file is the style sheet.
| Joey Hess | 2010-05-06 |
| * | unfinished file_prune revamp•••Many calls to file_prune were incorrectly calling it with 2 parameters.
In cases where the filename being checked is relative to the srcdir,
that is not needed.
Made absolute filenames be pruned. (This won't work for the 2 parameter call
style.)
| Joey Hess | 2010-04-17 |
| * | fix the other half of the filecheck filename bug | Joey Hess | 2010-03-26 |
| * | add section information | Joey Hess | 2010-02-12 |
| * | rename: Fix some utf-8 problems.•••The crux of the problem is that the cgi object has raw values not converted
to utf-8, and rename was using its fields. Also fixed a missed place where
the form object did not get its fields utf-8 encoded.
| Joey Hess | 2009-12-14 |
| * | remove prototype from renamehook•••Recursive calls make perl whine about protypes, and it wasn't
adding any value.
| Joey Hess | 2009-07-20 |
| * | Merge commit 'upstream/master' into pub/po•••Conflicts:
debian/changelog
debian/control
Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-06-06 |
| |\ |
|
| | * | support longname for page types in commands and rename•••Also, sort the list of page types.
| Joey Hess | 2009-05-21 |
| * | | no need to use CORE::rename since I renamed the rename function | Joey Hess | 2009-03-27 |
| * | | rename function for clarity, formatting improvements | Joey Hess | 2009-03-27 |
| * | | simplifiy | Joey Hess | 2009-03-27 |
| * | | move dedup code into function, simplify | Joey Hess | 2009-03-27 |
| * | | rename: remove duplicates that hook functions may have added to @torename•••Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-03-08 |
| * | | rename: moved subpages addition to a rename hook•••Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-03-08 |
| * | | rename hook: run once per file to be renamed•••... as Joey suggested on todo/need_global_renamepage_hook
This hook is applied recursively to returned additional rename
hashes, so that it handles the case where two plugins use the hook:
plugin A would see when plugin B adds a new file to be renamed.
The full set of rename hashes can no longer be changed by hook functions, that
are only allowed to return any additional rename hashes it wants to add.
Rationale: the correct behavior of the recursion would be hard, if not
impossible, to define, if already considered pages were changing on the run.
Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-03-08 |
| * | | rename hook: instead of modifying the passed-by-name array, return a copy•••This is intended to solve Joey's concerns expressed on
http://ikiwiki.info/todo/need_global_renamepage_hook/, i.e. the need to make it
possible to use this hook from external plugins.
A plugin using this hook still can add/modify/remove elements of the
@torename array.
Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-01-27 |
| * | | revert renamepage's hook original name•••Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-01-27 |
| * | | only pass named parameters to the canrename hook•••Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-01-26 |
| * | | add mising hooks and fix syntax error | Joey Hess | 2009-01-26 |
| * | | Merge commit 'upstream/master' into prv/po | intrigeri | 2009-01-13 |
| |\| |
|
| | * | rename: Show full names of affected pages. | Joey Hess | 2009-01-06 |
| | * | refactor | Joey Hess | 2009-01-06 |
| * | | Pass src, srcfile, dest and destfile to the canrename hook.•••This is not needed by the use I'm doing of it, but seems more consistent to me.
Future users of this hook may need this data to make their mind.
Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-01-01 |
| * | | rename: pass the CGI and session to the rename hook•••The po plugin remame + canrename hook combination will need this.
Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-01-01 |
| * | | rename: implemented new canrename hook•••Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2009-01-01 |
| * | | Merge commit 'upstream/master' into prv/po | intrigeri | 2009-01-01 |
| |\| |
|
| | * | finalise version 3.00 of the plugin api | Joey Hess | 2008-12-23 |
| * | | the rename hook can now change the list of pages to rename•••Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2008-12-30 |
| * | | renamed the renamepage hook to renamelink, added rename hook•••Signed-off-by: intrigeri <intrigeri@boum.org>
| intrigeri | 2008-12-30 |
| |/ |
|
| * | Coding style change: Remove explcit vim folding markers. | Joey Hess | 2008-12-17 |
| * | rename: Fix double-escaping of page name in edit box.•••titlepage normally escapes, but so does formbuilder.
| Joey Hess | 2008-12-17 |
| * | remove, rename: Allow acting on attachments as a page is being created. | Joey Hess | 2008-10-02 |
| * | fix subpage rename bug with indexpages•••If indexpages is enabled, then foo/index.mdwn will look like a subpage
of foo, so an additional check is needed to avoid trying to rename it
twice.
| Joey Hess | 2008-10-01 |
| * | use newpagefile | Joey Hess | 2008-09-29 |