Commit graph

9421 commits

Author SHA1 Message Date
Colin Kuskie
1131a5b4bc Ignore trailing slashes in requested URLS. Fixes bug #11865. 2010-09-14 10:01:57 -07:00
Colin Kuskie
927b986795 Forbid pasting content below a shortcut, to prevent loops on purge and other operations. Fixes bug #11855. 2010-09-13 18:47:17 -07:00
Colin Kuskie
1d99ee451e Allow users to enter 24:00:00 by hand, and have the Event handle it correctly. Fixes bug #11788 2010-09-13 11:04:03 -07:00
Colin Kuskie
f17623624e Fix line ending processing by the Thingy. It will now accept CSV files with any line endings. Fixes bug #11746. 2010-09-13 07:52:14 -07:00
Colin Kuskie
ad461d5ba3 Fix a typo in the StoryTopic help. 2010-09-12 23:11:51 -07:00
Colin Kuskie
587ff397b5 More cleanup from dispatch. Do not set the session asset if the requested URL does not exist. In RssFeed, pass the fragment to the next method. Fixes bug #11854. 2010-09-10 11:14:03 -07:00
Colin Kuskie
5608a43916 topStory template variables should be available in standAlone and not standAlone modes. Added template variables for delete and edit icons for the top story. Updated the tests, template and template variable help. Fixes bug #11851. 2010-09-09 11:56:50 -07:00
Colin Kuskie
f333dbbb59 All HTMLAreas in the post are controlled by the parent CS settings. Fixes bug #11827. 2010-09-07 14:04:41 -07:00
Colin Kuskie
b1adfd2621 Fix missing Attachment label in the Template. 2010-09-02 14:07:21 -07:00
Colin Kuskie
1f2fbeb823 Remove debug code. 2010-09-02 13:25:48 -07:00
Colin Kuskie
055b72de7f Fix HTML table generation for Active Sessions. Fixes bug #11832 2010-09-02 13:16:34 -07:00
Colin Kuskie
f65ae74e54 Format the subtotal variable in the Payment driver to 2 decimal places. Fixes bug #11813 2010-09-02 12:51:54 -07:00
Paul Driver
c89da43b58 variable downgrading 2010-09-01 14:42:44 -05:00
Colin Kuskie
5765739a95 Labels in the Cart for addresses are optional. They take the first line of the address if left blank. Tested w and w/o JS. 2010-09-01 12:22:55 -07:00
Colin Kuskie
c79bc75840 Fix encoding problems with the SC asset. Update the encodings test to no longer require an ENV variable to run. Fixes bug #11795 2010-08-24 16:53:35 -07:00
Colin Kuskie
a5a5e0a7d4 More cleanup from merge. 2010-08-24 15:27:02 -07:00
Colin Kuskie
f39a13912e Refactor SC tests, separating encodings out into their own test file. TEST_ENCODINGS=1 to run this new test. 8/13 tests fail. 2010-08-24 15:24:22 -07:00
Colin Kuskie
e0eaa2e13f Fix group permissions when editing/adding an Event. Fixes bug #11800. 2010-08-23 11:48:57 -07:00
Colin Kuskie
20a0b29df5 Document what changes need to be made to the PayDriver for cart changes in 7.9.4. Change how the upgrade sub dies if a custom plugin is found. Fixes bug #11799. 2010-08-20 08:46:52 -07:00
Colin Kuskie
4bf7eb4cfb Fix UTF-8 URL handling in dispatch. Added tests for creating assets and accessing assets with UTF-8 urls. Fixes bug #11785 2010-08-17 16:55:00 -07:00
Colin Kuskie
80c906b8eb Really fix sorting numerically for resolutions. Added tests to check it. 2010-08-17 13:30:39 -07:00
Colin Kuskie
eac7fe8a64 Gallery resolutions are integers. Fixed sorting the resolutions, and fixed the tests to not use bad resolutions. Fixes bug #11787 2010-08-17 11:16:58 -07:00
Colin Kuskie
09ff64334e Explicit scalar for getting the URL form param in Asset.pm. 2010-08-17 11:13:29 -07:00
Colin Kuskie
decfa808bb Change the YesNo form plugin to be a subclass of RadioList. Fix rendering problems with RadioList. Fixes bug #11777 2010-08-16 11:11:30 -07:00
Colin Kuskie
797606639d Lookup file icon for all attachments, and thumbnail for all images. Fixes bug #11782. 2010-08-16 09:12:29 -07:00
Colin Kuskie
8f7bbdaa5d Fixes bug #11780: anchor filename regex to the end of the string. 2010-08-15 23:23:49 -07:00
Colin Kuskie
05c287cfc7 Thingy add/edit via AJAX returned nothing useful, and lied about error status. Fixes bug #11781. 2010-08-15 23:16:53 -07:00
Graham Knop
04c49fb48e use setPrivileges on files instead of doing it manually 2010-08-14 09:26:52 -05:00
Paul Driver
890a94d3d5 Stop realtime run on deleted wf instances 2010-08-13 13:51:08 -07:00
Colin Kuskie
7251cc2c23 Secure and fix the Zip Archive. 2010-08-11 17:38:15 -07:00
Colin Kuskie
13a222f6ce Block files with dangerous names from coming in via Storage untar. 2010-08-11 15:46:02 -07:00
Colin Kuskie
9f724a7193 block the same set of extensions in http, scalar and file uploads in Storage. 2010-08-11 14:56:16 -07:00
Doug Bell
6b1e02f764 fixed possible vulnerability loading help files 2010-08-11 15:54:48 -05:00
Doug Bell
4e9a2c07c2 fix possible vulnerability loading template parser 2010-08-11 15:37:34 -05:00
Doug Bell
0957759fa9 fix 11779 SQLReport can run arbitrary queries 2010-08-11 14:48:38 -05:00
Colin Kuskie
02121fb7a9 Fix problems with getting the default page. Fixes bug #11778. 2010-08-11 08:37:21 -07:00
Colin Kuskie
19199cac9a Fix bugs in AssetReport code, and test. 2010-08-10 20:57:31 -07:00
Colin Kuskie
0e7bc7ae0e Fix use of raw param calls in UserList. Fixes bug #11774 2010-08-10 20:36:56 -07:00
Doug Bell
1a22d13aa1 document why we only allow admins to add 2010-08-10 22:22:09 -05:00
khenn
6e9a15cd50 Fixed issues with sort order 2010-08-10 22:14:26 -05:00
khenn
da2b55d484 Merge branch 'master' of git@github.com:plainblack/webgui 2010-08-10 21:35:43 -05:00
khenn
3141a6ed5e Fixed injection issues with SQL. Fixed a JS issue introduced in previous bug fix. 2010-08-10 21:35:07 -05:00
Doug Bell
da4f2f08b3 graham's regex makes more sense than mine 2010-08-10 21:20:19 -05:00
Doug Bell
e71ce09588 add "pm" to list of verboten uploads 2010-08-10 21:18:22 -05:00
Doug Bell
bb2e32141d fix 11773 Pluggable allows arbitrary module load 2010-08-10 21:17:20 -05:00
khenn
c3989308fa Fixed international problem in JavaScript file 2010-08-10 20:42:58 -05:00
khenn
91d4aa3059 Fixed i18n inside templates. Fixed URL of folder to match asset 2010-08-10 20:14:27 -05:00
khenn
21f23bf448 Added Template Help for Asset Report 2010-08-10 19:59:43 -05:00
khenn
8c83d153ea Fixed documentation and i18n issues 2010-08-10 19:10:55 -05:00
khenn
1ef6f197e7 Removed inheritance of Installable Aspect which was there for testing purposes only 2010-08-10 18:58:27 -05:00