| Commit message (Expand) | Author | Age |
|---|
| * | Add robots tag to meta plugin•••Add special handling for <meta name="robots" ...> which needs not be
scrubbed as it's harmless.
Signed-off-by: martin f. krafft <madduck@madduck.net>
(cherry picked from commit b15d0299a7f7b147e89d8a202d6cca1c21491af2)
| martin f. krafft | 2008-03-02 |
| * | Make directives generated by shortcuts accept a `desc` parameter.•••(cherry picked from commit 252da396bfa728b99af7c9bb304a7b5f3f6d94e6)
| Adeodato Simó | 2008-03-02 |
| * | Allow colons in URLs after the first slash•••A new regexp fixes this bug:
http://ikiwiki.info/bugs/No_link_for_blog_items_when_filename_contains_a_colon/
I traced this down to htmlscrubber. If disabled,
it works. If enabled, then $safe_url_regexp
determines the URL unsafe because of the colon and
hence removes the src attribute.
Digging into this, I find that RFC 3986 pretty
much discourages colons in filenames:
"""
A path segment that contains a colon character
(e.g., "this:that") cannot be used as the first
segment of a relative-path reference, as it would
be mistaken for a scheme name. Such a segment must
be preceded by a dot-segment (e.g., "./this:that")
to make a relative- path reference.
"""
on the other hand, with usedirs, any link to
another page will be prepended by ../ anyway, so
that makes them okay again.
The solution still seems not to use colons.
In any case, htmlscrubber should get a new regexp,
courtesy of dato.
I have tested and verified this.
Signed-off-by: martin f. krafft <madduck@madduck.net>
| Adeodato Simó | 2008-02-29 |
| * | * inline: When forcing urls absolute for rss feeds, skip mailto and other••• such urls.
| Joey Hess | 2008-02-24 |
| * | * Fix another preview will_render bug. This one involved inline,••• which forced a scan of the page to make available metadata that
appeared after the inline directive. Problem is that scan made it forget
about any other files rendered due to the page. The scan also turns out
to be unnecessary now, since meta persistently stores state and it's
always available. So it was just removed.
| Joey Hess | 2008-02-24 |
| * | * The search plugin needs to override <base> to point to the directory••• containing ikiwiki.cgi, but this should not change the urls to the style
sheets etc. Add a new forcebareurl parameter to misctemplate to allow
it to do that.
| Joey Hess | 2008-02-14 |
| * | * camelcase: Convert to use new linkify and scan hooks rather than the old••• hack.
| Joey Hess | 2008-02-11 |
| * | * Add the linkify and scan hooks. These hooks can be used to implement••• custom, first-class types of wikilinks.
* Move standard wikilink implementation to a new wikilink plugin, which
will of course be enabled by default.
| Joey Hess | 2008-02-11 |
| * | * Generate XML RPC messages with the encoding set to utf-8 instead••• of XML::RPC's default of us-ascii. Allows interoperation with
python's xmlrpc library, which threw invalid encoding exceptions and
caused the rst plugin to hang.
| Joey Hess | 2008-02-11 |
| * | use quotemeta when building the regexp | Joey Hess | 2008-02-10 |
| * | Allow the smb: URI scheme. | Josh Triplett | 2008-02-10 |
| * | Allow the snews: URI scheme. | Josh Triplett | 2008-02-10 |
| * | Do not allow the steam: URI scheme. | Josh Triplett | 2008-02-10 |
| * | Match literal '.' in URI schemas containing '.', rather than matching any cha... | Josh Triplett | 2008-02-10 |
| * | * meta: Check that the urls provided for authorurl, permalink, and openid••• are safe and can't contain javascript.
| Joey Hess | 2008-02-10 |
| * | export $safe_url_regexp | Joey Hess | 2008-02-10 |
| * | Also filter the attributes cite, longdesc, and usemap, which can contain URIs | Josh Triplett | 2008-02-10 |
| * | add parens around scheme regexp | Joey Hess | 2008-02-10 |
| * | Do not allow the about: URI scheme•••Some browsers interpret about: URIs like a limited version of data:
URIs. In particular, some versions of Internet Explorer interpret
arbitrary HTML content in about: URIs.
| Josh Triplett | 2008-02-10 |
| * | fix data:image handling | Joey Hess | 2008-02-10 |
| * | * htmlscrubber security fix: Block javascript in uris.•••* Add htmlscrubber test suite.
| Joey Hess | 2008-02-10 |
| * | add support for prefix_directives | Joey Hess | 2008-02-05 |
| * | proper fix for the preview/will_render issue | Joey Hess | 2008-02-04 |
| * | preview shouldn't show the feed buttons or post form | Joey Hess | 2008-02-04 |
| * | * inline: Add new `allowrss` and `allowatom` config options. These can be••• used if you want a wiki that doesn't default to generating rss or atom
feeds, but that does allow them to be turned on for specific blogs.
| Joey Hess | 2008-02-04 |
| * | the old code worked, suprisingly, but I prefer this form | Joey Hess | 2008-02-04 |
| * | * inline: When previewing, still call will_render on rss/atom files,••• just avoid actually writing the files. This is necessary because ikiwiki
saves state after a preview (in case it actually *did* write files),
and if will_render isn't called its security checks will get upset
when the page is saved. Thanks to Edward Betts for his help tracking this
tricky bug down.
| Joey Hess | 2008-02-04 |
| * | implement aggregate_locking design•••Now aggregation will not lock the wiki. Any changes made during aggregaton are
merged in with the changed state accumulated while aggregating. A separate
lock file prevents multiple concurrent aggregators. Garbage collection
of orphaned guids is much improved. loadstate() is only called once
per process, so tricky support for reloading wiki state is not needed.
(Tested fairly thuroughly.)
| Joey Hess | 2008-02-03 |
| * | add aggregate locking functions | Joey Hess | 2008-02-03 |
| * | * recentchanges: Exipre all *._change pages, even if the directory••• they're in has changed.
| Joey Hess | 2008-02-03 |
| * | * recentchanges: Improve handling of links on the very static changes pages••• by thunking to the CGI, which can redirect to the page, or allow it to be
created if it doesn't exist.
| Joey Hess | 2008-02-03 |
| * | prototype fix | Joey Hess | 2008-02-03 |
| * | * aggregate: Revert use of forking to not save state, that was not the right••• approach.
| Joey Hess | 2008-02-03 |
| * | * poll: This plugin turns out to have edited pages w/o doing any locking.••• Oops. Convert it from a cgi to a sessioncgi hook, which will work
much better.
| Joey Hess | 2008-02-03 |
| * | * aggregate: Forking a child broke the one state that mattered: Forcing••• the aggregating page to be rebuilt. Fix this.
| Joey Hess | 2008-02-02 |
| * | move openiduser function to the openid plugin | Joey Hess | 2008-01-30 |
| * | move recentchanges link enabling into a pagetemplate hook | Joey Hess | 2008-01-30 |
| * | really fix the baseurl problem•••the issue is that HTML::Template doesn't expand top-level variables when inside
a loop
| Joey Hess | 2008-01-29 |
| * | merged the recentchanges branch•••misc fixes
| Joey Hess | 2008-01-29 |
| * | add missing test to avoid uninitialised value when a page with metadata is re... | Joey Hess | 2008-01-29 |
| * | * meta: Add pagespec functions to match against title, author, authorurl,••• license, and copyright. This can be used to create custom RecentChanges.
* meta: To support the pagespec functions, metadata about pages has to be
retained as pagestate.
* Fix encoding bug when pagestate values contained spaces.
| Joey Hess | 2008-01-29 |
| * | make the author metadata for changes pages be the un-munged openid | Joey Hess | 2008-01-29 |
| * | added configuration for recentchanges•••I kept it to a simple global configuration, rather than using the
preprocessor directive for recentchanges, because that had chicken and egg
problems and seemed overcomplicated. This should work reasonably well,
though it would be good to add some more metadata so that more customised
recentchanges pages can be made.
| Joey Hess | 2008-01-29 |
| * | add code to delete old change pages | Joey Hess | 2008-01-29 |
| * | use new refresh hook | Joey Hess | 2008-01-29 |
| * | updates | Joey Hess | 2008-01-29 |
| * | escape wikilinks and preprocessor directives | Joey Hess | 2008-01-29 |
| * | typo | Joey Hess | 2008-01-29 |
| * | more style improvements | Joey Hess | 2008-01-29 |
| * | non-tabular recentchanges display•••Doesn't look as good as the old table, but works as a rss feed.
| Joey Hess | 2008-01-29 |