Sylvain Thénault <sylvain.thenault@logilab.fr> [Mon, 07 Jun 2010 18:13:39 +0200] rev 5682
[security] view was giving web access to every fs file accessible by the web server process. Fix this security hole by storing file in session data, not direct form parameters
Sylvain Thénault <sylvain.thenault@logilab.fr> [Mon, 07 Jun 2010 17:45:41 +0200] rev 5681
[hooks] fix typo in workflow hooks category
Sylvain Thénault <sylvain.thenault@logilab.fr> [Mon, 07 Jun 2010 13:31:46 +0200] rev 5680
[security hooks] fix bad merge
Sylvain Thénault <sylvain.thenault@logilab.fr> [Mon, 07 Jun 2010 13:22:24 +0200] rev 5679
backport stable
Sylvain Thénault <sylvain.thenault@logilab.fr> [Mon, 07 Jun 2010 13:08:54 +0200] rev 5678
Added tag cubicweb-debian-version-3.8.3-1 for changeset 1ccaa9247860
Sylvain Thénault <sylvain.thenault@logilab.fr> [Mon, 07 Jun 2010 13:08:53 +0200] rev 5677
Added tag cubicweb-version-3.8.3 for changeset 7e6c6a2a272d
Sylvain Thénault <sylvain.thenault@logilab.fr> [Mon, 07 Jun 2010 12:39:15 +0200] rev 5676
[edit ctrl] fix bad interaction with fields: the loop on actual fields should be done in has_been_modified