| Wed, 25 May 2011 11:41:16 +0200 |
Arthur Lutz |
[ui messages, xss] Start migration towards use of _msgid instead of __message (prone to XSS injection) closes #1698245
|
file |
diff |
annotate
|
| Fri, 20 May 2011 17:29:50 +0200 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| Fri, 20 May 2011 17:27:55 +0200 |
Sylvain Thénault |
cleanup and update some copyright
stable
|
file |
diff |
annotate
|
| Fri, 13 May 2011 10:10:19 +0200 |
Sylvain Thénault |
backport stable
|
file |
diff |
annotate
|
| Thu, 12 May 2011 10:22:17 +0200 |
Sylvain Thénault |
[web request] don't define pageid js variable when one is found in form parameters (eg, page ajax call)
stable
|
file |
diff |
annotate
|
| Fri, 29 Apr 2011 09:08:30 +0200 |
Adrien Di Mascio |
merge
|
file |
diff |
annotate
|
| Thu, 28 Apr 2011 20:41:44 +0200 |
Quentin Roquefort |
[etwist] Generates apache's mod_concat-like urls for js and css
|
file |
diff |
annotate
|
| Thu, 28 Apr 2011 17:33:56 +0200 |
Adrien Di Mascio |
[etwist] refactor child resources management
|
file |
diff |
annotate
|
| Thu, 28 Apr 2011 15:25:46 +0200 |
Sylvain Thénault |
backport oldstable
stable
|
file |
diff |
annotate
|
| Thu, 28 Apr 2011 15:24:37 +0200 |
Sylvain Thénault |
[request] don't init tabindex unnecessarily, since it's added to page data which will makes an ajax call to unload_page_data necessary
oldstable
|
file |
diff |
annotate
|
| Wed, 06 Apr 2011 16:01:19 +0200 |
Adrien Di Mascio |
[views] extend HTMLStream API to be able to change doctype / xmldecl
|
file |
diff |
annotate
|
| Fri, 01 Apr 2011 14:34:11 +0200 |
Adrien Di Mascio |
[http] implement 1587305: provide better implementation of Accept header parsing + tests
|
file |
diff |
annotate
|
| Thu, 10 Mar 2011 12:04:46 +0100 |
Adrien Di Mascio |
[web] provide a data_url() method on req and get_rid of explicit datadir_url usage (#1438736)
|
file |
diff |
annotate
|
| Thu, 21 Oct 2010 18:38:36 +0200 |
Sylvain Thénault |
[dbapi] enhanced web compatible request when using dbapi
|
file |
diff |
annotate
|
| Wed, 20 Oct 2010 15:57:35 +0200 |
Sylvain Thénault |
[request] fix ajax_replace_url which breaks if the url contains some quotes (that will be properly quoted but unquoted by the browser, breaking the js expression) by using a separated js function
|
file |
diff |
annotate
|