[js/edition] fix pb with IE not handling long GETs #1203789

[migration] commit only sql script migration

[index page] refactor add_entity_link: no need to give request, nicer to check perm before calling the method, and use the new create url factory

[facet] refactor bookmark this search link creation: check perm before calling the method, and use the new create url factory

[view] deprecate create_url in favor of a cw_create_url class method on entity classes also kill view's output_url_builder method, unused anywhere...

small cleanups

[vreg debug] use classid to get cleaner output

[windmill] add xul-ext firefox plugin

[migration] unify process_script command - simplify wrapper by putting the logic in the migration module - enable sql script in shell invocation - adjust cmd_process_script docstring in interactive shell

tests: use larger timeouts in windmill tests

backport stable

[session] session auto reconnect feature has gone with the session-time refactoring in 6012:d56fd78006cd

[debug view] action moved

[test] check_session returns an int since 6012:d56fd78006cd

[editcontroller] turn eid into an int if possible, avoiding pbs. further down (case: preview cube)

[session] this log should be at the debug level, not info

[ms] log after preprocessing, else we don't see the query which is actually planned (may have been modified by security insertion)

backport stable

Added tag cubicweb-debian-version-3.9.3-1 for changeset ab1f9686ff3e

Added tag cubicweb-version-3.9.3 for changeset 900772fd9caa

[forms] default combobox view should accept arbitrary keyword arguments

3.9.3

i18n update

backport stable

backport oldstable

[security] don't put uncrypted password in query parameters, else it may be logged on error

[relations in ui] provide context information when computing label for a relation

[security] do not show sessions information to non managers users. Close security ticket #38246

[dbapi] update renamed argument

[debug] improve debug messages

[dbapi] cleanup shared data api: let access to transaction from dbapi, we can write it after all... Also, querydata is better named txdata

[session] cleanup session-time / cleanup-session-time... which are hard to grasp while there is no actual benefit to handle both. Now repo will close session without any activity since cleanup-session-time (24h by default), and the web authentication chain won't reconnect automatically anymore. I don't think there is a big deal in keeping repo session for such time. Also, ask the repo for latest session usage time, we can't know it for real on the web side (think of long running transactions). Closes #1083245.

[debug] when a loop is detected in a tree, log the entity involved in it to ease repair

[image js] fix image fit screen function

[idownloadable primary view] when file is an image, display attributes below the image

[selector] adjuts score returned by the adaptable selector to get correct priority over is_instance

[navigation] refactor previous / next navigation component to ease overriding

[massmailing] need edition.js for the freeezeFormButtons function

[views] link to public url when trying https without an account

[image] more handy image resizing using javascript

[rql2sql] fix bug with NOT of inlined relation: NULL values are not properly handled and hence some rows won't be returned while the should

[schema sync] if something went wrong while getting rdef in precommit event, rdef adttribute won't be set in revertprecommit. We don't want to fail in such case

[migration] add script to repair instances which have lost some relation due to 3.9 + file 1.9 migration (bad Image -> File entity type renaming)

[uiprops] check that STYLESHEETS* and JAVASCRIPTS are lists

[migration] fix rename_entity_type to avoid to loose some relations on the way

[js] fix bug encountered with IE (result evaluated to true while no response text -> json parse error)

[table view] fix bad arguments given to form_filter method

[deprecation] remove 3.8 deprecation warning