Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 11:07:05 +0200] rev 3784
[javascript] handle cases where vid parameter is hijacked by parameter-injection
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 11:02:50 +0200] rev 3783
[views] consider fallbackvid request parameter in ViewController
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 11:01:50 +0200] rev 3782
[cleanup] reorder cubicweb namespace attributes declaration
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 09:30:10 +0200] rev 3781
[javascript] asURL now escapes request arguments
I can't see no good reason for not escaping parameters. The two main
locations where asURL is used are :
- edition view: here, the change should have no effect
- facets: escaping is clearly needed in that case
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 21 Oct 2009 19:32:53 +0200] rev 3780
merge
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 21 Oct 2009 19:31:28 +0200] rev 3779
remove obsolete caveat
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 17:37:58 +0200] rev 3778
so bad tests hasn't find that one...
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 17:32:20 +0200] rev 3777
backport stable branch
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 17:12:58 +0200] rev 3776
Added tag cubicweb-debian-version-3.5.5-1 for changeset aad818d9d9b6
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 17:12:58 +0200] rev 3775
Added tag cubicweb-version-3.5.5 for changeset 1eca47d59fd9
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 15:13:07 +0200] rev 3774
on precommit / rollback of schema update op, clear order_relations cache of entity schemas
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 15:12:29 +0200] rev 3773
don't allow that even with cow powers
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 21 Oct 2009 14:39:26 +0200] rev 3772
fix reledit related test breakage
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 14:31:15 +0200] rev 3771
test fixes
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 13:52:16 +0200] rev 3770
merge
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 13:52:05 +0200] rev 3769
test fix
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 10:35:19 +0200] rev 3768
nicer relation|entity schema view
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 21 Oct 2009 11:34:11 +0200] rev 3767
reledit: stuff the value into its own div and properly hide it when necessary (but dont lump it with the landingzone div for it switches the form on when one clicks on a value to traverse it)
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 21 Oct 2009 11:21:58 +0200] rev 3766
work around a pb. with subquery_selection_index
Aurelien Campeas <aurelien.campeas@logilab.fr> [Wed, 21 Oct 2009 11:19:54 +0200] rev 3765
latst_trinfo : do not crash on absent wf history
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 09:47:55 +0200] rev 3764
drop _prepare_copy method from rset in favor of a more generic copy method
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 08:59:14 +0200] rev 3763
i18nupdate
Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 21 Oct 2009 08:55:54 +0200] rev 3762
prefix sql aliases for entity table by '_' to avoid pb with variable such as 'AS' (eg a keyword in SQL)
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 20 Oct 2009 19:19:19 +0200] rev 3761
small cleanup & revert to less intrusive icon
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 20 Oct 2009 18:13:36 +0200] rev 3760
actually hide the value when editing, cleanup spurious arg
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 20 Oct 2009 17:13:05 +0200] rev 3759
merge
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 20 Oct 2009 17:11:52 +0200] rev 3758
yet another brain fart
Sylvain Thénault <sylvain.thenault@logilab.fr> [Tue, 20 Oct 2009 16:53:25 +0200] rev 3757
2.4 compat