Activity for Apache Allura™
-
Dave Brondsema modified ticket #8609
Authentication code tweaks
-
[#8607] solr: syntax problems deserve an escaped retry; don't expose underlying error messages
-
[#8607] solr: strip local-params syntax
-
[#8607] solr: move **kw to specific params for all other tools using common search_app helper
-
[#8607] solr: change ticket searches from **kw passthru to explicit
-
[#8607] ./run_tests QoL: show final message, allow trailing slash for tab-complete of suites
-
[#8607] remove useless try/except/raise
-
[#8607] remove potential info disclosure
-
[#8607] svn tarball path safety
-
[#8607] be extra safe with display names
-
[#8607] various has_access improvements
-
[#8607] check activity nbhd
-
[#8607] check subproject parent
-
[#8607] replace last pickle usage with our own bit of compatible code
-
[#8607] remove old pickle-based session support
-
[#8607] add X-Content-Type-Options header
-
[#8607] harden attachment upload
-
[#8607] test for save_attachments (export) path handling
-
[#8607] check client_id when making bearer token
-
[#8607] perm checks in markdown_to_html and fix wiki tool check
-
[#8607] safer pwd comparison
-
[#8607] replace random with secrets in some places
-
[#8607] check subscribe here too
-
[#8607] check before mailbox sub too
-
[#8607] check mailbox owner
-
[#8607] check project when loading role_id inputs
-
[#8607] move |safe to be directly on the string source
-
[#8607] check app_config_id in update_forums
-
[#8607] add comments, add test
-
[#8607] test for zipdir symlink handling
-
[#8607] move webhook send from requests to urlopen so our NoInternal handlers run automatically including on redirects
-
[#8607] test for oembed output security
-
[#8607] check for email code mode when verifying email link
-
[#8607] escape html in a few places
-
Carlos Cruz modified ticket #8608
Pin pre-commit dependencies
-
Change looks good. Test suite passes without errors.
-
fixup! [#8608] precommit pin dependencies and updates
-
[#8608] precommit pin dependencies and updates
-
Guillermo Cruz committed [926633] on Git
fixup! [#8608] precommit pin dependencies and updates
-
[#8609] include geo information that could be available for the html template
-
Authentication code tweaks
-
Dillon Walls committed [110b3d] on Git
[#8605] Use C.UTF-8 locale instead of en_US.UTF-8 for SVN export
-
[#8608] precommit pin dependencies and updates
-
Pin pre-commit dependencies
-
bump idna 3.11 -> 3.15
-
Daniel Castillo committed [32aa4d] on Git
form-action change from self to base_url to avoid proxied sites
-
[#11526] form-action from self to base_url
-
Kenton Taylor committed [61b040] on Git
make with_trailing_slash and without_trailing_slash apply to HEAD requests too
-
another fix for clone task validation: move validation down into init_as_clone and do file path and URL validation separately based on which is used
-
fix scheme/protocol checking in clone task
-
make with_trailing_slash and without_trailing_slash apply to HEAD requests too
-
change httpbin domain we use, so redirect-to tests keep working
-
Set up default protection ruleset for default and release branches
-
The Apache Software Foundation committed [9a70e5] on Git
Set up default protection ruleset for default and release branches
-
Set up default protection ruleset for default and release branches
-
The Apache Software Foundation committed [e479a0] on Website Repo
Set up default protection ruleset for default and release branches
-
[#8606] Implement field level encryption for EmailAddress email field
-
[#8606] Add encrypted field for email from the EmailAddress model
-
Implement field level encryption for the email field from the EmailAddress model
-
[#8603] check multifactor login mode
-
[#8603] validate URLs on clone tasks too (e.g. if task delayed from form usage, and DNS changes)
-
[#8603] use Markup in SxsOutputGenerator
-
[#8603] NonPrivateUrl checks all host=>IP resolutions not just one
-
[#8603] escape regexes in tag search
-
[#8603] only permit local access to /auth/repo_permissions
-
[#8603] use _verify_return_to in pwd_expired_change
-
[#8603] change AlluraUserProperty User reference so that ShortUrl doesn't error strangely on shorturl.create_user = c.user._id (tests were always passing too, weird)
-
[#8603] add @require_post to a few endpoints
-
[#8603] test to know forgeblog/main.py setattr loop is ok
-
[#8603] urlopen_allow_internal_hostnames setting should work for webhook and importer forms
-
[#8603] use NonPrivateUrl on webhooks (does allow for IP addrs now also)
-
[#8603] disable trac importers by default
-
[#8603] don't follow redirects on trac import
-
fixup! [#8605] Use C.UTF-8 locale instead of en_US.UTF-8 for SVN export
-
[#8605] Use C.UTF-8 locale instead of en_US.UTF-8 for SVN export
-
dw/8605
-
Remove locale en_US.UTF-8 dependency
-
[#8603] check multifactor login mode
-
[#11526] form-action from self to base_url
-
bumping urllib3 2.6.3 -> 2.7.0 and gitpython 3.1.47 -> 3.1.50
-
[#8604] Update transient anonymous user property to not use encrypted field
-
Remove dead ProjectUserSelect code
-
[#8604] Implement field level encryption for User's display_name_field
-
[#8604] Add the display_name_encrypted field to the User class
-
[#8604] Add the display_name_encrypted field to the User class
-
[#8604] Add the display_name_encrypted field to the User class
-
Implement field level encryption for the User's display name
-
[#8603] validate URLs on clone tasks too (e.g. if task delayed from form usage, and DNS changes)
-
[#8603] use Markup in SxsOutputGenerator
-
[#8603] NonPrivateUrl checks all host=>IP resolutions not just one
-
[#8603] escape regexes in tag search
-
[#8603] only permit local access to /auth/repo_permissions
-
[#8603] use _verify_return_to in pwd_expired_change
-
[#8603] change AlluraUserProperty User reference so that ShortUrl doesn't error strangely on shorturl.create_user = c.user._id (tests were always passing too, weird)
-
[#8603] add @require_post to a few endpoints
-
[#8603] test to know forgeblog/main.py setattr loop is ok