| Commit message (Expand) | Author | Age |
|---|
| * | changelog | Joey Hess | 2010-04-04 |
| * | releasing version 3.20100403 | Joey Hess | 2010-04-03 |
| * | template: Search for templates in the templatedir, if they are not found as p... | Joey Hess | 2010-04-02 |
| * | htmlscrubber: Allow colons in url fragments after '?'•••Colons are not allowed at the start of urls, because it can be interpreted
as a protocol, and allowing arbitrary protocols can be unsafe
(CVE-2008-0809). However, this check was too restrictive, not allowing
use of eg, "video.ogv?t=0:03:00/0:04:00" to seek to a given place in a
video, or "somecgi?foo=bar:baz" to pass parameters with colons.
It's still not allowed to have a filename with a colon in it (ie
"foo:bar.png") -- to link to such a file, a fully qualified url must be
used.
| Joey Hess | 2010-04-02 |
| * | page.tmpl: Add Cache-Control must-revalidate to ensure that users (especially...•••Since Firefox version 3, it's done aggressive caching of visited pages, and
does not, by default, check if the cached content is still valid when
reloading or revisiting a page. By default, Firefox seems to not re-contact
the web server at all. Compare with eg, Epiphany and Chromium, which appear
to always check, and get back a 304 when the page is unchanged.
This header makes Firefox do the right thing, at least for html files. It
still over-caches if css, javascript, images, etc, are changed.
| Joey Hess | 2010-03-31 |
| * | update | Joey Hess | 2010-03-29 |
| * | auto-blog.setup: Set tagbase by default, since most bloggers will want it.•••Also modified first_post page to use a tag format that will work whether
or not tagbase is set.
| Joey Hess | 2010-03-28 |
| * | Add preprocessed 'use lib' line to ikiwiki-transition and ikiwiki-calendar if... | Joey Hess | 2010-03-26 |
| * | Fix incorrect influence info returned by a failing link() pagespec, that coul... | Joey Hess | 2010-03-26 |
| * | fix the other half of the filecheck filename bug | Joey Hess | 2010-03-26 |
| * | filecheck: Fix bug that prevented the pagespecs from matching when not called... | Joey Hess | 2010-03-25 |
| * | use perl YAML for dumping•••Only it understands $YAML::UseHeader
| Joey Hess | 2010-03-24 |
| * | Add --set-yaml switch for setting more complex config file options. | Joey Hess | 2010-03-24 |
| * | reset setuptype first, actually•••so setup file can override default
| Joey Hess | 2010-03-21 |
| * | Add support for setup files written in YAML.•••Not the default. (Yet?)
| Joey Hess | 2010-03-19 |
| * | Allow wrappers to be built using tcc. | Joey Hess | 2010-03-18 |
| * | Add a include setting, which can be used to make ikiwiki process wiki source ... | Joey Hess | 2010-03-14 |
| * | Add complete German basewiki and directives translation done by Sebastian Kuh... | Joey Hess | 2010-03-14 |
| * | Improve openid url munging; do not display anchors and cgi parameters, as use... | Joey Hess | 2010-03-13 |
| * | openid: Use Openid Simple Registration or OpenID Attribute Exchange to get th...•••The info is stored in the session database, not the user database.
There should be no reason to need it when a user is not logged in.
Also, hide the email field in the preferences page for openid users.
Note that the email and username are not yet actually used for anything.
The email will be useful for gravatar, while the username might be used
for a more pretty display of the openid.
| Joey Hess | 2010-03-13 |
| * | websetup: Add websetup_unsafe to allow marking other settings as unsafe. | Joey Hess | 2010-03-13 |
| * | htmlscrubber: Security fix: In data:image/* uris, only allow a few whiteliste... | Joey Hess | 2010-03-12 |
| * | formatting | Joey Hess | 2010-03-11 |
| * | redundancy | Joey Hess | 2010-03-11 |
| * | search: Avoid '$' in the wikiname appearing unescaped on omega's query templa...•••Really, a more general fix, this deals with any $ that might appear on the
misctemplate.
| Joey Hess | 2010-03-11 |
| * | Fix missing span on recentchanges page template. | Joey Hess | 2010-03-11 |
| * | moderatedcomments: Added moderate_pagespec•••* moderatedcomments: Added moderate_pagespec that can be used
to control which users or comment locations are moderated.
This can be used, just for example, to moderate http://myopenid.com/*
if you're getting a lot of spammers from one particular openid
provider (who should perhaps answer your emails about them),
while not moderating other users.
* moderatedcomments: The moderate_users setting is deprecated. Instead,
set moderate_pagespec to "!admin()" or "user(*)" instead.
| Joey Hess | 2010-03-11 |
| * | Fix utf8 issues in calls to md5_hex.•••This prevented comments containing some utf-8, including euro sign, from
being submitted. Since md5_hex is a C implementation, the string has to be
converted from perl's internal encoding to utf-8 when it is called. Some
utf-8 happened to work before, apparently by accident.
Note that this will change the checksums returned.
unique_comment_location is only used when posting comments, so the checksum
does not need to be stable there.
I only changed page_to_id for completeness; it is passed a comment page
name, and they can currently never contain utf-8.
In teximg, the bug could perhaps be triggered if the tex source contained
utf-8. If that happens, the checksum will change, and some extra work might
be performed on upgrade to rebuild the image.
| Joey Hess | 2010-03-09 |
| * | releasing version 3.20100302 | Joey Hess | 2010-03-02 |
| * | Add new --clean option; this makes ikiwiki remove all built files in the dest... | Joey Hess | 2010-02-28 |
| * | Fix admin openid detection in setup automator, and avoid prompting for a pass... | Joey Hess | 2010-02-27 |
| * | Add force_overwrite setting to make setup automator overwrite existing files/...•••This can be useful if you're driving the setup automator from another
program.
| Joey Hess | 2010-02-27 |
| * | Loosen regexp, to allow empty quoted parameters in directives. | Joey Hess | 2010-02-26 |
| * | comments: Display number of comments in comment action link.•••This was not doable before, but when I added transitive dependency handling
in the big dependency rewrite, it became possible to include a comment
count when inlining.
This also improves the action link when a page has no comments. It will
link direct to the cgi to allow posting the first comment. And if the page
is locked to prevent posting new comments, the link is no longer shown.
| Joey Hess | 2010-02-14 |
| * | releasing version 3.20100212 | Joey Hess | 2010-02-12 |
| * | Group related plugins into sections in the setup file, and drop unused rcs pl... | Joey Hess | 2010-02-11 |
| * | Allow globs to be used in user() pagespecs. | Joey Hess | 2010-02-11 |
| * | httpauth: Add httpauth_pagespec setting that can be used to limit pages to on... | Joey Hess | 2010-02-11 |
| * | httpauth: When cgiauthurl is configured, httpauth can now be used alongside o... | Joey Hess | 2010-02-11 |
| * | amazon_s3: Fix to support the EU S3 datacenter, which is more picky about att... | Joey Hess | 2010-02-09 |
| * | Fix color and format plugins to appear in the websetup interface. | Joey Hess | 2010-02-06 |
| * | add opendiscussion to auto-blog.setup | Joey Hess | 2010-02-06 |
| * | opendiscussion: This plugin will also now allow posting comments•••to otherwise locked-down sites.
| Joey Hess | 2010-02-06 |
| * | auto-blog.setup: Lock all pages, so only admin can post to the blog by default. | Joey Hess | 2010-02-06 |
| * | Add link to userpage (or creation link) to top of preferences page. | Joey Hess | 2010-02-04 |
| * | Improve display of openid in preferences page.•••Now that openiduser is in IkiWiki core, it's ok to have passwordauth check
for it, and avoid displaying useless password fields when showing
preferences for an openid.
Also improved the styling of the display of the openid in the preferneces
page.
| Joey Hess | 2010-02-04 |
| * | Allow jumping directly into account registration process by going to ikiwiki... | Joey Hess | 2010-02-04 |
| * | setup automator: Configure Term::Readline to use bold for prompt, rather than... | Joey Hess | 2010-02-01 |
| * | img: Fix a bug that could taint @links with undef values. | Joey Hess | 2010-01-28 |
| * | template: Preprocess parameters before htmlizing.•••Consider a template like:
[[!template type=note text="""
[[!inline pages="*foo*"]]
"""]]
The text parameter is htmlized before being passed into the template (in
case the template wraps it in a <span> that prevents markdown from
htmlizing it later).
But, when markdown sees "*foo*", it turns that into <em>foo</em>.
Later, when preprocessing the inline directive, that leads to suprising
results.
To fix this, I made template parameters be preprocessed (and filtered)
before being htmlized.
Note that I left in the preprocessing (and filtering) of the template
output at the end. That's still relevant when the template itself contains
preprocessor directives.
| Joey Hess | 2010-01-26 |