| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | meta test: Assert that malformed dates are rejected | Simon McVittie | 2018-03-21 |
| | | | | | Signed-off-by: Simon McVittie <smcv@debian.org> | ||
| * | meta test: Use syntactically valid dates | Simon McVittie | 2018-03-21 |
| | | | | | | | I'm about to make invalid dates like 12345 be an error. Signed-off-by: Simon McVittie <smcv@debian.org> | ||
| * | Remove openid provider icons from login selector | Joey Hess | 2018-01-05 |
| | | | | | | | | | | Remove openid provider icons from login selector, since openid providers are increasingly not working. Verisign retired theirs, and aol and yahoo/flickr are not commonly used for openid. Any users who still clicked those icons to login will need to instead enter their openid url. This commit was sponsored by andrea rota. | ||
| * | Exclude working directory from library path (CVE-2016-1238) | Simon McVittie | 2016-07-28 |
| | | | | | | | | | | | | | | | | | | | | | | Current Perl versions put '.' at the end of the library search path @INC, although this will be fixed in a future Perl release. This means that when software loads an optionally-present module, it will be looked for in the current working directory before giving up. An attacker could use this to execute arbitrary Perl code from ikiwiki's current working directory. Removing '.' from the library search path in Perl is the correct fix for this vulnerability, but is not trivial to do due to backwards-compatibility concerns. Mitigate this (even if ikiwiki is run with a vulnerable Perl version) by explicitly removing '.' from the search path, and instead looking for ikiwiki's own modules relative to the absolute path of the executable when run from the source directory. In tests that specifically want to use the current working directory, use "-I".getcwd instead of "-I." so we use its absolute path, which is immune to the removal of ".". | ||
| * | Run autopkgtest tests using autodep8 and the pkg-perl team's infrastructure | Simon McVittie | 2015-11-30 |
| | | |||
| * | Fix [[!meta name=foo]] by closing the open quote. | Amitai Schlair | 2015-08-22 |
| | | |||
| * | Mark a few straggling test scripts +x. | Amitai Schlair | 2015-08-18 |
| | | |||
| * | Test many behaviors of the meta directive. | Amitai Schlair | 2015-08-15 |