[doc/book/faq] question on security

[qunit] check that the browser has not died by himself before we asked him to stop.

[qunit] improve output of suprocess error The exception message now include the stdout and stderr of the called process

[test] workaround connection leak making tests fail under windows environment (though we've still probably some open connection leak to resolve...)

[web request] in python 2.5 hashlib has no .hash attribute

[web actions] fix recent refactoring, leading to missing redirect parameters in action's url

[packaging] more cleanups, handle javascript test files

backport stable

[facet] use vreg.parse so the rql syntax tree is properly annotated as well

[text search] fix fulltext_container indexation

[md5script] cleanup

[py2.6] use hashlib to silence python 2.6 deprecation warnings

[autoform] do not show remove link for inline form if card == 1

[fti] support for fti ranking: has_text query results sorted by relevance, and provides a way to control weight per entity / entity's attribute

[packaging] MANIFEST.in cleanups, update js/css copyright, remove no more used files

[js tests] fix javascripts tests definition, test_datetime.js now included in test_utils.js, which test other stuff as well

[entity] can't do anymore dict(entity) since entity doesn't inherit from dict

backport stable

[vreg] register_objects lost its force_reload argument, fix dbapi.Connection.load_appobjects consequently

backport stable

[test] unittest_multisources: external source shouldn't use the same database as the main repo...

[test] miss main

imported patch asynchronous multipart parsing.diff

imported patch cookie handling: do not use semicolon as it has some tech meaning (web2 -> web)

[entity] when .related() is called on a not-yet-saved entity, return an empty rset/list instead of raising an assertion error

[filefield] normalized file names to deal with windows files

[c-c exlog] fix code and documentation

[test] support for test on postgres database using the same mecanism as sqlite: one template database generated when necessary + actual test database created from the template * * * [test] reset postgres database between test of the same fixture

fix bad merge

backport stable

[test] properly close connections during test

[repo] on repository initialization, properly shutdown intermediary repository

[repo] on repository shutdown, we've to close the new eid creation connection

[auto-reload] we should never call load_module with use_sys=False, that may lead to inconsistency with module interdependancy (eg module get imported by another one, then is reimported by the vreg to load its appobjects. Cleanup of sys.modules done before reloading should be enough.

[rset] do not filter rsets with __getstate__, ensure whatever flies with pyro has no .req attribute, also set the ._rqlst to None since it will be reconstructed later on demand

[security] SchemaRelation.has_perm grows to new arguments allowing to specify subject/object entity type when actual eid are not known, but their types are

[linkto action] refactor to ease overriding to control redirection

[hooks] entity_oldnewvalue should never return _MARKER: if the attribute isn't in the entity dict (hence unmodified), return the old value

Use the qunit automatic launcher for existing testcase.

Add a QUnitTestCase class to run qunit test case.

[twctl] add missing poststop method #1058268

[rset] make rsets picklable (again ?) #1056422

[jstests] nicer test page title

[jstest] get back more tests writen during the sprint by vgodard

cleanup

backport stable

Added tag cubicweb-debian-version-3.8.4-1 for changeset b7883287f40c

Added tag cubicweb-version-3.8.4 for changeset d00d1fab42af

cleanup

[selectors] relation_possible selector accept None as action, in which case no perms checking is done

3.8.4

[xhtml] fix soup2xhtml to deal with malformed div,body and html tags which may leads to malformed return value

[source] remove debug

[entity] add .clear() for bw compat

[3.9] api update (mostly js) + add support for FCKEditor in formContents js function

[json] fix json serialization for recent simplejson implementation, and test encoding of entities as with earlier simplejson implementation, iterencode internal stuff is a generated function, we can't anymore rely on the _iterencode overriding trick, so move on by stoping isinstance(Entity, dict). This is a much heavier change than expected but it was expected to be done at some point, so let's go that way.

[adapters] enhanced warning

[test] fix test broken by 5721:61d6a4caa963, and update it to proper adapters to avoid deprecation warning

[3.9] update warning message

[iprogress] move adapter to entities.adapters

fix wrong calculation of clean_session_interval

[ITree] more fixes, fix fixes

[idownloadable] depends on a new mtconverter release

[ITree] fix adapter/_done_init to handle tree_[attribute|relation], add maxlevel argument to base tree view since one side effect of the new code is that it find tree view for entity types it didn't find before, hence one may want to limit tree view depth when it wasn't necessary before

[3.9] fix tests

[web] move itree adapter to entities, it may be used outside the web interface

[view] add a new entity_call method to entity view protocol, allowing some to work with not yet created entities. Also, start considering 'eid' form parameters where we only consider 'rql', so we can move on bloquing arbitrary rql inputs (more to do on this...)

[idownloadable] refactor IDownloadable primary view to make overriding easier

[web] ajax_replace_url superseed build_ajax_replace_url, more generic and relying on the json controller (closes #750090)

[form] refactor meta-attributes handling: hide them by default using uicfg.afs instead of returning None (or not, according to skip_meta_attr flag argument) in guess_field

[repo] fix typo

[req] fix format_time w/ 0:0 which is evaluated to False

[view] ensure fallback_oid is specified before trying to select fallback view, else simply raise the exception

fix merge, forgot to save a buffer :(

backport stable

[rql2sql] fix special 'X relation NULL' case (used by security insertion), broken by recent removal of IS operator in RQL

[javascript] add a name property to namespaces, mainly for convenience in helpers such as movedToNamespace

[rql] IS operator killed in rql 0.26.2, use equal instead

[security] consider any rql expression refering to X while X is being created as satisfied

[rql] more update to 0.26.2 api

[querier] fix rset description bug with some union queries

[devtools] fix get_available_port implementation: it should only return the port number if unable to connect

[javascript] move CubicWeb object declaration to cubicweb.js, remove CubicWeb.provide/require, use cw instead of CubicWeb

[javascript] move Deferred implementation to cubicweb.ajax.js

[form] fix untested (unread?) has_been_modified implementation...

backport stable

[autoform] fix vreg module name

[pylint] fix detected name errors

[pylint] fix detected name errors

[repo server] fix startup bug, lgc.daemon.daemonize return 1 for the parent process, not -1

backport stable branch

[source] don't create the eid_creation connection at source initiliaztion time This fixes the "already opened connection bug" in db-restore for instance.

[schema view] only catch key errors

[schema view] improve it slightly by attributing the same color to rdef of the same relation type

[rset] Add a line break the first result in repr of multiple rows rset Improve readability of rset while debugging by aligning the first value with the others if the rset have multiple row. This first line was usually not read as it' was on the same line that the first part of the repr ("<rset <RQL>, (%i rows) ...")

[schema diagram] ticket #191599, make schema image look better

backport stable

[workflow image] remove debug code

[request] fix typo

[security] view was giving web access to every fs file accessible by the web server process. Fix this security hole by storing file in session data, not direct form parameters

[hooks] fix typo in workflow hooks category

[security hooks] fix bad merge

backport stable

Added tag cubicweb-debian-version-3.8.3-1 for changeset 1ccaa9247860

Added tag cubicweb-version-3.8.3 for changeset 7e6c6a2a272d

[edit ctrl] fix bad interaction with fields: the loop on actual fields should be done in has_been_modified

[web test] add basic windmill tests and documentation - connection / deconnection - user creation

[web test] Add windmill functional testing capability.

3.8.3

i18nupdate

[editform] consistent [do]reledit between attributes and relations: check if rdef is hidden in main section of uicfg.afs for both attributes and relations, and in the reledit view, not in doreledit

on entity creation, accept attributes without any update access