Julien Cristau <julien.cristau@logilab.fr> [Thu, 22 Jan 2015 16:41:27 +0100] rev 10154
[pkg] 3.18.8
Julien Cristau <julien.cristau@logilab.fr> [Wed, 21 Jan 2015 15:58:33 +0100] rev 10153
[security] Test case and fix for an INSERT security hole
7099bbd685aa introduced a untested corner case in which an Entity with no
attribute specified could be created whatever the permissions.
Report and test case by Christophe de Vienne, fix by Aurelien Campeas. Thanks!
Closes #4854359
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:20:36 +0100] rev 10152
[pkg] 3.20.2
Julien Cristau <julien.cristau@logilab.fr> [Thu, 22 Jan 2015 15:46:24 +0100] rev 10151
[debian] cubicweb 3.20 breaks cubicweb-bootstrap << 0.6.6
Closes #4842316
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 15:37:20 +0100] rev 10150
[pkg] don't include extra files in tarballs
Blind wildcards for dirs that may contain generated or temporary files
can lead to trouble and unreproducible results.
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:36:48 +0100] rev 10149
[pkg] exclude generated js_api documentation from tarballs
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:36:20 +0100] rev 10148
[doc] remove old and unused argouml files
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:36:01 +0100] rev 10147
[web/data] remove unused xcf files
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:22:43 +0100] rev 10146
[doc] remove nonexistent css from theme
Denis Laxalde <denis.laxalde@logilab.fr> [Tue, 20 Jan 2015 10:32:34 +0100] rev 10145
[doc] Drop autoclass directive for IDownloadableLineView
This class has been dropped in 3.20.
Julien Cristau <julien.cristau@logilab.fr> [Thu, 08 Jan 2015 12:19:34 +0100] rev 10144
[pkg] include missing files from doc/book/ in release tarballs
Closes #4832700
Denis Laxalde <denis.laxalde@logilab.fr> [Wed, 07 Jan 2015 16:22:27 +0100] rev 10143
[datafeed] Set headers parameter to an empty dict in DataFeedParser.retrieve_url
This parameter is then passed to urllib2.Request, which expects a dict and
won't check for None.
Closes #4842333.
Denis Laxalde <denis.laxalde@logilab.fr> [Thu, 22 Jan 2015 10:43:24 +0100] rev 10142
[views/forms] Fix EntityFieldsForm.link_to when parent entity is being created
When the parent entity is being created and the inlined form is displayed, the
parent entity has no eid yet and `peid` is usually 'A'. So int() raises a
ValueError.
Closes #4627739.
Christophe de Vienne <christophe@unlish.com> [Sat, 03 Jan 2015 04:06:06 +0100] rev 10141
[entities] Optimize CWUser.properties.
This property gets called each time a user connects to a repository,
which means a lot.
This optimisation cuts its execution time by 5 according to my tests
Julien Cristau <julien.cristau@logilab.fr> [Tue, 04 Mar 2014 12:41:21 +0100] rev 10140
[schema] Typo and indentation fix in RQLVocabularyConstraint doc string