svnpassword

Jacques Distler's code repository /instiki /svn » Changes from revision 1032

To download this project, use:

bzr branch
https://golem.ph.utexas.edu/~distler/code/instiki/svn/

From Revision 344 to 325

expand all expand all

collapse all collapse all

Rev	Authors	Date	Diff	Files
344	Security: Instiki 0.16.2 Security: Instiki 0.16.2 On Webs with file uploads enabled, uploaded files were stored (in version 0.16.1 and earlier) in the public/ directory. This was a security threat. A miscreant could upload a .html file. When a user clicked on the link to the file, it was opened (unsanitized) in the browser. As of version 0.16.2, uploaded files are stored in the webs/ directory. Now, when the user clicks on the link, the file is sent with the Content-Disposition: attachment header set, which causes the file to be downloaded, rather than opened in the browser. As always, files downloaded from the internets should be treated with caution. At least, this way, they are not aoutomatically opened in the browser. To move your existing uploaded files to the new location, do a rake upgrade_instiki	Jacques Distler	16 years ago	Diff	Files
343	Equation Numbering in Maruku+itex2MML Equation Numbering in Maruku+itex2MML This was spooged by Revision #263 (to accommodate) BlahTeX/PNG support. Hopefully this way will work in both modes.	Jacques Distler	16 years ago	Diff	Files
342	Export XHTML Pages Export XHTML Pages When a Web uses one of the Markdown Text Filters, and you export all the pages as a zip file, you'd like the MathML and SVG to render when the pages are viewed locally. This means saving them with a .xhtml extension. Users of non-XHTML-capable browsers or Textile users should still get .html files.	Jacques Distler	16 years ago	Diff	Files
341	A Real Fix For the "Backslashes in Included Equations" Bug A Real Fix For the "Backslashes in Included Equations" Bug Ruby's String.sub!(pattern, replacement) routine is fundamentally broken. But the block version works fine. Using the broken routine in the Chunk handler was a subtle mistake.	Jacques Distler	16 years ago	Diff	Files
340	Don't hide equations, except in MarkdownMML and MarkdownPNG Don't hide equations, except in MarkdownMML and MarkdownPNG In other engines, e.g. textile, the equation delimiters have no special meaning. So they should not be used to hide content from wiki processing.	Jacques Distler	16 years ago	Diff	Files
339	Revert Revision 338 Revert Revision 338 That didn't work with nested includes: A: [[!include B]] B: [[!include C]] C: fubar! Added a test for that issue.	Jacques Distler	16 years ago	Diff	Files
338	Fix the "Backslashes in Included Equations" Bug Fix the "Backslashes in Included Equations" Bug See http://golem.ph.utexas.edu/instiki/revision/Known+Bugs?rev=3#IncludedEqs Who knew that @pre_rendered = String.new(self) was not the same as @pre_rendered = String.new @pre_rendered = self ?	Jacques Distler	16 years ago	Diff	Files
337	Hide Equations From WikiChunk Processing Hide Equations From WikiChunk Processing WikiWord (and the like) could wreak havoc in equations. Protect them (the way <a>, <pre> and <code> blocks are protected). For some reason, this doesn't seem to work in inline equations. Maruku is doing something funny there ... => one failing Unit Test.	Jacques Distler	16 years ago	Diff	Files
336	Boneheaded Boneheaded Remove some nonexistent callbacks, added in Revisions 265, 288.	Jacques Distler	16 years ago	Diff	Files
335	Cache file_list Action Cache file_list Action Also, slightly smarter cache expiry, upon uploading/deleting a file.	Jacques Distler	16 years ago	Diff	Files
334	Remove last vestige of CGI.unescapeHTML Remove last vestige of CGI.unescapeHTML	Jacques Distler	16 years ago	Diff	Files
333	Ack! Try that again. Ack! Try that again.	Jacques Distler	16 years ago	Diff	Files
332	Referring Pages for File List Referring Pages for File List For the file_list action, include the pages which link to the given file(s). This required rejiggering so that that information is actually retained in the database. Unfortunately, you'll actually need to revise the page(s) in question, because that's the only time this information is updated in the database.	Jacques Distler	16 years ago	Diff	Files
331	Correct Type on file_list View Correct Type on file_list View	Jacques Distler	16 years ago	Diff	Files
330	More Tests More Tests Enable unit tests for the HTML5lib Sanitizer (used in the <nowiki> environment).	Jacques Distler	16 years ago	Diff	Files
329	Add a couple of XSS tests. Add a couple of XSS tests. Some more tests from Clint Ruoho. The main branch of Instiki (and, I guess, the old sanitizer) are vulnerable. Also: under Ruby 1.8.x, CGI.unescapeHTML screws up horribly decoding NCRs which represent high-bit ASCII characters. UTF-8 agrees with 7-bit ASCII, but CGI.unescapeHTML doesn't seem to know that they disagree for i>127.	Jacques Distler	16 years ago	Diff	Files
328	Version 0.16.1 Version 0.16.1 Make this version (minimally) usable with Textile Markup: For Webs with "Textile", "RDoc" or "Mixed" markup option selected, send text/html instead of application/xhtml+xml. This makes this software minimally usable with those markup dialects. "Markdown+itex2MML", "Markdown+BlahTeX/PNG" and "Markdown" should work as before, sending application/xhtml+xml to capable browsers. Bump the version number.	Jacques Distler	16 years ago	Diff	Files
327	Two Bugs Two Bugs 1) Orphaned pages in a Category were not being listed correctly 2) "list" view was not being expired correctly on deletion of orphaned pages.	Jacques Distler	16 years ago	Diff	Files
326	Tweak Spam Patterns Tweak Spam Patterns	Jacques Distler	16 years ago	Diff	Files
325	Manage Uploaded Files Manage Uploaded Files Allow alternate sort-orders (by filename, by date). Restrict to files in the given Web.	Jacques Distler	16 years ago	Diff	Files