| Commit message (Expand) | Author | Age |
... | |
* | | comments: don't interpolate IP into anonymous user's "name"•••If an admin wants the IP in the comment display template they can still
get it (the default template shows it).
| Simon McVittie | 2008-12-11 |
* | | comments: fix invocation of possibly_foolish_untaint | Simon McVittie | 2008-12-11 |
* | | comments: avoid warning if there's no subject | Simon McVittie | 2008-12-11 |
* | | comments: Optionally allow anonymous commenters to set their name/URL.•••Also provide a way for the comment template to pick up the verified
username/IP.
| Simon McVittie | 2008-12-11 |
* | | comments: Remove some dead code | Simon McVittie | 2008-12-11 |
* | | comments: rename main field to "editcontent" consistent with editpage•••This has the side-effect that Ikiwiki's default style.css gives the text
box 100% width.
| Simon McVittie | 2008-12-11 |
* | | comments: instead of hard-coding mdwn, allow any supported page format | Simon McVittie | 2008-12-11 |
* | | comments: Save comments as a file with one big [[!comment]] directive.•••This delays all comment formatting until the last possible time, allows
us to set metadata without worrying that commenters may be able to evade
it, and means that changes to how a comment is saved can be handled
gracefully. It also gives us somewhere to put the commenter's username
or IP address for later reference.
| Simon McVittie | 2008-12-11 |
* | | Remove dead code for preprocessing [[!comments]] | Simon McVittie | 2008-12-11 |
* | | comments: Duplicate logic and CGI hook from recentchanges to link user pages ... | Simon McVittie | 2008-12-11 |
* | | Qualify name of formattime() correctly | Simon McVittie | 2008-12-11 |
* | | Delay checking for session expiry til we actually post a comment | Simon McVittie | 2008-12-11 |
* | | comments: record the time at which each comment was posted | Simon McVittie | 2008-12-11 |
* | | comments: Use a checkconfig hook to get the default value of comments_pagename | Simon McVittie | 2008-12-11 |
* | | comments: render comments/commenturl in page.tmpl | Simon McVittie | 2008-12-11 |
* | | comments: use global config to decide whether commenting is allowed, and for ...•••Also:
* decide comment page name sooner
* set permalink on it
| Simon McVittie | 2008-12-11 |
* | | comments: use global configuration for allow_directives, commit, and pagename | Simon McVittie | 2008-12-11 |
* | | comments: Add some global configuration | Simon McVittie | 2008-12-11 |
* | | comments: make preprocess a no-op | Simon McVittie | 2008-12-11 |
* | | comments: document what linkuser does | Simon McVittie | 2008-12-11 |
* | | comments: add a stub pagetemplate hook to show the comments | Simon McVittie | 2008-12-11 |
* | | comments: Use HTML entities to escape directives | Simon McVittie | 2008-12-11 |
* | | Embed comments into comments_embed.tmpl rather than concatenating in perl | Simon McVittie | 2008-12-11 |
* | | comments: use CGI module's checksessionexpiry | Simon McVittie | 2008-12-11 |
* | | editpage: factor out checksessionexpiry into IkiWiki::CGI | Simon McVittie | 2008-12-11 |
* | | htmlbalance: don't compact whitespace, and set misc other options•••Not compacting whitespace is the most important one: now that we run
sanitize hooks on individual posted comments in the comments plugin,
whitespace that is significant to Markdown (but not HTML) is lost.
| Simon McVittie | 2008-12-11 |
* | | comments: remove allowhtml option, just switch it on all the time•••Now that posts are individually sanitized, that should be safe.
| Simon McVittie | 2008-12-11 |
* | | comments: load inline and mdwn lazily | Simon McVittie | 2008-12-11 |
* | | comments: don't rely on mdwn getting loaded first | Simon McVittie | 2008-12-11 |
* | | comments: sanitize the body of each comment before posting it•••This should ensure that users can't "break out" from the enclosing
<div>, making it impossible to forge comments (assuming htmlscrubber
is enabled, and so is either htmlbalance or htmltidy).
| Simon McVittie | 2008-12-11 |
* | | Fix typo that led to comments being blanked | Simon McVittie | 2008-12-11 |
* | | postcomment: Rename plugin to comments, use *._comment files•••The PageSpec is still called "postcomment" since that's what it means.
| Simon McVittie | 2008-12-11 |
* | | Rename smcvpostcomment plugin to postcomment to propose for inclusion | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: allow commenting to be closed | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: import other plugins lazily and remove unnecessary use of CGI | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: allow inlining to be disabled, and pass through atom etc. be... | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: make allowhtml etc. configurable, and don't allow commenting... | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: indicate in form whether HTML and directives are allowed | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: remove HTML if not allowed | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: always allow wikilinks, and do access control•••wikilinks are harmless, so we might as well allow them.
Access control for this plugin is a bit odd, since we specifically
don't want to allow comments to be edited - so the check is whether the
user is allowed to edit a deliberately invalid page name,
page/commented/on[smcvpostcomment]. You can put smcvpostcomment(*)
or smcvpostcomment(some/subdir/*) in $config{anonok_pagespec}
or the opposite in $config{locked_pages} to allow "editing" (really
just posting) comments.
| Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: reduce length of subject field | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: explain what $fake is for | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: avoid warnings if form field 'body' is undef | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: load inline plugin more forcibly | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: use better names for special comment files | Simon McVittie | 2008-12-11 |
* | | smcvpostcomment: use gettext where appropriate | Simon McVittie | 2008-12-11 |
* | | Add initial version of a postcomment plugin (temporarily namespaced as smcvpo... | Simon McVittie | 2008-12-11 |
|/ |
|
* | inline: Support feedfile option to change the filename of the feed generated. | Joey Hess | 2008-12-11 |
* | inline: Support emptyfeeds=no option to skip generating empty feeds. | Joey Hess | 2008-12-11 |
* | move feedpages application up•••I wanted this nearer to the top, but decided to put it after the
add_depends. Reasoning: It's possible with a combinaton of feedpages and
show options to make @list and @feedlist contain completly differing sets
of pages. We want to add_depends all pages in both sets. We could combine
the two lists and add_depends that, but it's slightly more efficient to
defer reducing @feedlist, and add_depends whichever list is longer.
| Joey Hess | 2008-12-11 |