Tue, 11 Dec 2012 17:17:40 +0100 [downloadable] fix filename HTTP header for simple name with space (closes #2535715) stable
Pierre-Yves David <pierre-yves.david@logilab.fr> [Tue, 11 Dec 2012 17:17:40 +0100] rev 8610
[downloadable] fix filename HTTP header for simple name with space (closes #2535715) Since d74addac92bb, we export simple ascii filename without any encoding in the `filename` parameter of the `Content-Disposition` header. If this name contains space this will fails, the parameter value will be truncated at the space position. (eg. `filename=jungle babar.txt` read as `jungle`) We need to quote the filename to prevent this (eg. `filename="jungle babar.txt"`). Then literal quote and backslash needs to be escaped too. The new escaping is correct according this extensive test case data base: http://greenbytes.de/tech/tc2231/
Mon, 03 Dec 2012 00:03:03 +0100 merge fixes from stable
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Mon, 03 Dec 2012 00:03:03 +0100] rev 8609
merge fixes from stable
Fri, 30 Nov 2012 21:19:36 +0100 Added tag cubicweb-debian-version-3.15.6-1 for changeset b05e156b8fe7 stable
David Douard <david.douard@logilab.fr> [Fri, 30 Nov 2012 21:19:36 +0100] rev 8608
Added tag cubicweb-debian-version-3.15.6-1 for changeset b05e156b8fe7
Fri, 30 Nov 2012 21:19:35 +0100 Added tag cubicweb-version-3.15.6 for changeset 0163bd9f4880 stable cubicweb-debian-version-3.15.6-1
David Douard <david.douard@logilab.fr> [Fri, 30 Nov 2012 21:19:35 +0100] rev 8607
Added tag cubicweb-version-3.15.6 for changeset 0163bd9f4880
Fri, 30 Nov 2012 21:18:05 +0100 prepare 3.15.6 stable cubicweb-version-3.15.6
David Douard <david.douard@logilab.fr> [Fri, 30 Nov 2012 21:18:05 +0100] rev 8606
prepare 3.15.6
Tue, 27 Nov 2012 14:48:03 +0100 [web] add a digital signature to error form (closes #2522526) stable
David Douard <david.douard@logilab.fr> [Tue, 27 Nov 2012 14:48:03 +0100] rev 8605
[web] add a digital signature to error form (closes #2522526) Simple (and quite weak) implementation of a digital signature of the content to be submited by email in the error report view generated by ErrorView. The signature is a simple hmac hash computed using a secret key (generated at repository startup) and the "secret" form content to be included in the notification email. The controller can then check this content has not been modified or forged by a malicious user.
Wed, 28 Nov 2012 11:44:15 +0100 [web/views] bugfix: the mime type is text/plain, not text/txt (closes #2526345) stable
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Wed, 28 Nov 2012 11:44:15 +0100] rev 8604
[web/views] bugfix: the mime type is text/plain, not text/txt (closes #2526345)
Tue, 27 Nov 2012 17:16:23 +0100 [doc] fix of personnal etc directory in book stable
Arthur Lutz <arthur.lutz@logilab.fr> [Tue, 27 Nov 2012 17:16:23 +0100] rev 8603
[doc] fix of personnal etc directory in book
Tue, 27 Nov 2012 12:24:56 +0100 [web] add a Forbidden exception stable
David Douard <david.douard@logilab.fr> [Tue, 27 Nov 2012 12:24:56 +0100] rev 8602
[web] add a Forbidden exception This is similar to the Unauthorized exception, but generates a 403 error instead of a 401 (Unauthorized)
Tue, 27 Nov 2012 11:38:03 +0100 [web] add a ``anonymize-jsonp-queries`` option in file configuration (closes #2465388) stable
Katia Saurfelt <katia.saurfelt@logilab.fr> [Tue, 27 Nov 2012 11:38:03 +0100] rev 8601
[web] add a ``anonymize-jsonp-queries`` option in file configuration (closes #2465388) This option controls connection anonymizing before executing any query for CSRF / safety reason.
(0) -3000 -1000 -300 -100 -10 +10 +100 +300 +1000 +3000 tip