Commit message (Collapse) | Author | Age | ||
---|---|---|---|---|
... | ||||
* | git: don't issue a warning if rcsinfo is undefined | Simon McVittie | 2016-12-28 | |
| | | | | | | The intention here seems to be that $prev may be undefined, and the only way that can legitimately happen is for $params{token} to be undefined too. | |||
* | git_revert test: reinstate ikiwiki.setup, and make it work uninstalled | Simon McVittie | 2016-12-28 | |
| | | | | | | | | | | | | | | Previously it was relying on running with an installed ikiwiki and being able to copy in recentchanges.mdwn and wikiicons/ from the underlay in /usr. The underlay in ./underlays/basewiki can't be used (yet) because ikiwiki doesn't allow following symlinks, even from underlays. I'd like to make ikiwiki follow symlinks whose destinations can be verified to be safe (for example making it willing to expose /usr/share/javascript to the web, but not /etc/passwd), at least from underlays, but this is security-sensitive so I'm not going to rush into it. | |||
* | Add CVE references for CVE-2016-10026 | Simon McVittie | 2016-12-21 | |
| | ||||
* | Release 3.20161219 | Simon McVittie | 2016-12-19 | |
| | ||||
* | changelog | Simon McVittie | 2016-12-19 | |
| | ||||
* | Update changelog | Simon McVittie | 2016-12-19 | |
| | ||||
* | inline: Prevent creating a file named ".mdwn" when the postform is submitted ↵ | Joey Hess | 2016-09-21 | |
| | | | | with an empty title. | |||
* | Update my surname to its new legal spelling. | Amitai Schlair | 2016-09-14 | |
| | ||||
* | 3.20160905 | Simon McVittie | 2016-09-05 | |
| | ||||
* | changelog for previous commit | Joey Hess | 2016-08-03 | |
| | | | | Closes https://github.com/joeyh/ikiwiki/pull/19 | |||
* | 3.20160728 | Simon McVittie | 2016-07-28 | |
| | ||||
* | Standards-Version: 3.9.8 (no changes required) | Simon McVittie | 2016-07-28 | |
| | ||||
* | Wrapper: allocate new environment dynamically | Simon McVittie | 2016-05-11 | |
| | | | | | | | | | | | | | | Otherwise, if third-party plugins extend newenviron by more than 3 entries, we could overflow the array. It seems unlikely that any third-party plugin manipulates newenviron in practice, so this is mostly theoretical. Just in case, I have deliberately avoided using "i" as the variable name, so that any third-party plugin that was manipulating newenviron directly will now result in the wrapper failing to compile. I have not assumed that realloc(NULL, ...) works as an equivalent of malloc(...), in case there are still operating systems where that doesn't work. | |||
* | 3.20160509 | Simon McVittie | 2016-05-09 | |
| | ||||
* | Reference CVE-2016-4561 in 3.20160506 changelog | Simon McVittie | 2016-05-09 | |
| | ||||
* | Remove spurious changelog entry | Simon McVittie | 2016-05-09 | |
| | | | | | This change was new in 3.20141016.3, but was applied to the master branch several releases ago, so it is not new in 3.20160506. | |||
* | 3.20160506 | Simon McVittie | 2016-05-06 | |
| | ||||
* | Document the security fixes in this release | Simon McVittie | 2016-05-06 | |
| | ||||
* | update test suite for svg passthrough by img directive | Joey Hess | 2016-05-06 | |
| | | | | | Remove build dependency libmagickcore-6.q16-2-extra which was only there for this test. | |||
* | img: Add back support for SVG images, bypassing ImageMagick and simply ↵ | Simon McVittie | 2016-05-06 | |
| | | | | | | | | | | | | | | passing the SVG through to the browser SVG scaling by img directives has subtly changed; where before size=wxh would preserve aspect ratio, this cannot be done when passing them through and so specifying both a width and height can change the SVG's aspect ratio. (This patch looks significantly more complex than it was, because a large block of code had to be indented.) [smcv: drop trailing whitespace, fix some spelling] | |||
* | changelog for smcv's security fixes | Joey Hess | 2016-05-06 | |
| | | | | [smcv: omit a change that was already in 3.20160514] | |||
* | Changelog: process .md files iff created directly. | Amitai Schlair | 2016-03-08 | |
| | ||||
* | loginselector: When only openid and emailauth are enabled, but passwordauth ↵ | Joey Hess | 2016-03-02 | |
| | | | | is not, avoid showing a "Other" box which opens an empty form. | |||
* | d/control: add Vcs-Browser | Simon McVittie | 2016-01-22 | |
| | ||||
* | d/control: use https for Homepage | Simon McVittie | 2016-01-22 | |
| | ||||
* | 3.20160121 | Simon McVittie | 2016-01-21 | |
| | ||||
* | document recent inline and syslog fixes | Simon McVittie | 2016-01-21 | |
| | ||||
* | changelog: sort user-visible changes before packaging and test fixes | Simon McVittie | 2016-01-21 | |
| | ||||
* | img test: use the right filenames when testing that deletion occurs | Simon McVittie | 2016-01-19 | |
| | | | | | Also use a less misleading name for the sample SVG: it is no longer empty. Since commit 105f285a it has contained a blue square. | |||
* | img test: skip testing PDFs if unsupported | Simon McVittie | 2016-01-19 | |
| | ||||
* | Silence "used only once: possible typo" warnings for variables that are part ↵ | Simon McVittie | 2016-01-19 | |
| | | | | of modules' APIs | |||
* | d/control: Standards-Version: 3.9.6, no changes required | Simon McVittie | 2016-01-19 | |
| | ||||
* | d/control: remove leading article from Description (lintian: ↵ | Simon McVittie | 2016-01-19 | |
| | | | | description-synopsis-starts-with-article) | |||
* | Change dependencies from transitional package perlmagick to ↵ | Simon McVittie | 2016-01-19 | |
| | | | | libimage-magick-perl (Closes: #789221) | |||
* | changelog: mention pagestats enhancement | Simon McVittie | 2016-01-19 | |
| | ||||
* | Add license info to javascript underlay | Simon McVittie | 2016-01-19 | |
| | ||||
* | underlays/javascript/* use ikiwiki's permissive license | Joey Hess | 2015-12-01 | |
| | | | | I'm the sole author and copyright holder of these files. | |||
* | Merge remote-tracking branch 'smcv/ready/limit' | Simon McVittie | 2015-11-30 | |
|\ | ||||
* | | git: if no committer identity is known, set it to "IkiWiki <ikiwiki.info>" ↵ | Simon McVittie | 2015-11-30 | |
| | | | | | | | | | | | | | | in .git/config This resolves commit errors in versions of git that require a non-trivial committer identity. | |||
* | | debian/copyright: update for the rename of openid-selector to login-selector | Simon McVittie | 2015-11-30 | |
| | | ||||
* | | Add enough build-dependencies to run all tests, except for non-git VCSs | Simon McVittie | 2015-11-30 | |
| | | ||||
* | | Wrap and sort control files (wrap-and-sort -abst) | Simon McVittie | 2015-11-30 | |
| | | ||||
* | | tests: consistently use done_testing instead of no_plan | Simon McVittie | 2015-11-30 | |
| | | ||||
* | | t/img.t: do not spuriously skip | Simon McVittie | 2015-11-30 | |
| | | ||||
* | | Run autopkgtest tests using autodep8 and the pkg-perl team's infrastructure | Simon McVittie | 2015-11-30 | |
| | | ||||
* | | Add more changelog entries | Simon McVittie | 2015-11-29 | |
| | | ||||
* | | Modified page.tmpl to to set html lang= and dir= when values have been ↵ | Joey Hess | 2015-10-26 | |
| | | | | | | | | | | | | | | specified for them, which the po plugin does. Note that I modified the patch slightly, to avoid blank lines before the <html>, on the off chance bad html parsers care. | |||
* | | emailauth: Added emailauth_sender config. | Joey Hess | 2015-10-02 | |
| | | ||||
* | | Changelog my recent commits, prompted by joeyh. | Amitai Schlair | 2015-08-27 | |
| | | ||||
* | | 3.20150614 | Simon McVittie | 2015-06-14 | |
| | |