log MoinMoin/action/AttachFile.py @ 5910:7e7e1cbb9d3f

age author description
Sat, 29 Dec 2012 15:05:29 +0100 Thomas Waldmann security: fix remote code execution vulnerability in twikidraw/anywikidraw actions
Sat, 08 Dec 2012 22:54:04 +0100 Thomas Waldmann Attachment handler: catch all Zip-related errors
Wed, 10 Mar 2010 16:14:56 +0100 Reimar Bauer MoinMoin.widget.browser: introduced feature for sorting tables (http://moinmo.in/FeatureRequests/SortableTables).
Sat, 27 Feb 2010 02:04:17 +0100 Thomas Waldmann http headers: for most cases, do not use .add, but .__setitem__
Thu, 25 Feb 2010 17:26:36 +0100 Thomas Waldmann merged moin/1.8
Thu, 25 Feb 2010 16:52:28 +0100 Thomas Waldmann merged moin/1.7
Thu, 25 Feb 2010 16:51:33 +0100 Thomas Waldmann attachUrl: fix wrongly generated tickets (e.g. for AttachList macro)
Thu, 25 Feb 2010 14:02:44 +0100 Reimar Bauer AttachFile._build_filelist: verifies readonly flag for unzip file link
Mon, 08 Feb 2010 21:49:19 +0100 Thomas Waldmann merged moin/1.8 + changes needed for ticket support of 1.9 drawings code
Mon, 08 Feb 2010 19:01:03 +0100 Thomas Waldmann merged moin/1.7
Mon, 08 Feb 2010 18:56:07 +0100 Thomas Waldmann AttachFile: add ticketing for all operations that do modifications
Sun, 20 Dec 2009 22:49:57 +0100 Thomas Waldmann AttachFile.move_file: send events (so e.g. xapian index update happens)
Sun, 29 Nov 2009 16:58:27 +0100 Thomas Waldmann custom patch for werkzeug 0.5.1 http.parse_date to catch exceptions raised by stdlib, remove exception handler at moin level
Sun, 22 Nov 2009 10:09:04 +0100 Thomas Waldmann AttachFile do=get crashing - log complete environ, so in case it is the user agent, we'll see which one
Sun, 22 Nov 2009 09:57:04 +0100 Thomas Waldmann AttachFile do=get crashing, bug somewhere in stdlib / werkzeug / user agent, collect data, avoid crash
Sun, 15 Nov 2009 10:08:13 +0100 Thomas Waldmann AttachFile: added remove_attachment(), made nuke_page use it (details below)
Sat, 14 Nov 2009 13:30:20 +0100 Thomas Waldmann Fixed and cleaned up Xapian based search (details below)
Mon, 12 Oct 2009 16:36:45 +0200 Thomas Waldmann attachments/drawings: use 1y old Expires: header so user agent asks in every case (and we respond with 304 NOT MODIFIED or 200 OK)
Sat, 10 Oct 2009 15:54:36 +0200 Thomas Waldmann add Expires header with now + 10 seconds for AttachFile do=get and do=box
Sat, 10 Oct 2009 13:35:03 +0200 Thomas Waldmann fix '304 not modified' response for AttachFile do=get and do=box
Tue, 22 Sep 2009 11:21:51 +0200 Reimar Bauer Introduced a new config var "extensions_mapping". You can set up a mapping of attachment extensions to actions. By the drawing syntax these actions are called for the given target.
Mon, 14 Sep 2009 00:24:01 +0200 Thomas Waldmann support view action for .adraw/.tdraw
Sun, 13 Sep 2009 16:01:09 +0200 Thomas Waldmann drawings/attachments: made editing support more generic (details see below)
Sun, 13 Sep 2009 02:44:37 +0200 Thomas Waldmann getAttachUrl: removed escaped=... param (see below)
Sun, 13 Sep 2009 00:06:04 +0200 Thomas Waldmann simplify getAttachUrl: remove upload parameter
Sat, 12 Sep 2009 21:40:56 +0200 Thomas Waldmann refactored getAttachURL
Sat, 12 Sep 2009 18:44:26 +0200 Thomas Waldmann AttachFile: offer editing for .adraw (anywikidraw container)
Sun, 30 Aug 2009 14:13:27 +0200 Reimar Bauer merged main
Sun, 30 Aug 2009 12:43:34 +0200 Reimar Bauer refactored drawing TwikiDraw to a configurable action
Sun, 30 Aug 2009 13:32:55 +0200 Thomas Waldmann fix XapianIndex import at some forgotten places
Mon, 20 Apr 2009 20:32:49 +0200 Thomas Waldmann merged moin/1.8
Mon, 20 Apr 2009 20:11:47 +0200 Thomas Waldmann merged moin/1.7
Sat, 18 Apr 2009 19:09:16 +0200 Thomas Waldmann AttachFile move: add more escaping (maybe not XSS exploitable though)
Sat, 18 Apr 2009 18:58:25 +0200 Thomas Waldmann AttachFile XSS fixes: move escaping to error_msg / upload_form
Sat, 14 Mar 2009 17:39:39 +0100 Thomas Waldmann AttachFile: fix another exception when someone just clicks on upload, without giving a file
Sat, 14 Mar 2009 17:27:56 +0100 Thomas Waldmann remove unneeded code: the filename we get from werkzeug is already preprocessed to fix IE bugs
Sat, 14 Mar 2009 17:02:31 +0100 Thomas Waldmann merged moin/1.8
Sat, 14 Mar 2009 16:43:46 +0100 Thomas Waldmann merged moin/1.7
Sat, 14 Mar 2009 16:11:39 +0100 Thomas Waldmann AttachFile: fix exception when someone just clicks on upload, without giving a file
Sat, 07 Mar 2009 22:38:00 +0100 Thomas Waldmann merged moin/1.8
Sat, 21 Feb 2009 19:23:44 +0100 Thomas Waldmann AttachFile do=view: quote filename and pagename params for EmbedObject macro call
Mon, 02 Mar 2009 02:09:10 +0100 Thomas Waldmann AttachFile: reordered imports
Sat, 21 Feb 2009 18:37:09 +0100 Thomas Waldmann AttachFile: get the rename field content from qs args, too
Wed, 11 Feb 2009 02:34:33 +0100 Thomas Waldmann wikiutil: replace moin's cgi/urllib wrappers by calls to werkzeug.utils code
Thu, 05 Feb 2009 00:43:06 +0100 Thomas Waldmann merged moin/1.8
Thu, 29 Jan 2009 21:37:44 +0100 Thomas Waldmann merge moin/1.7
Thu, 29 Jan 2009 21:36:30 +0100 Thomas Waldmann AttachFile: fix escaping problems (invalid html, but likely no XSS)
Sat, 24 Jan 2009 03:13:41 +0100 Thomas Waldmann merged moin/1.8
Sun, 11 Jan 2009 22:19:30 +0100 Thomas Waldmann merged moin/1.7
Sun, 11 Jan 2009 22:18:04 +0100 Thomas Waldmann fix AttachFile XSS issues
Mon, 29 Dec 2008 02:09:32 +0100 Thomas Waldmann store a drawing as a single file foo.tdraw (is a tar file with foo.draw, foo.map and foo.png inside)
Mon, 24 Nov 2008 00:34:31 +0100 Thomas Waldmann fix saving of drawings to use WSGI/werkzeug API correctly, try 2
Mon, 24 Nov 2008 00:24:45 +0100 Thomas Waldmann fix saving of drawings to use WSGI/werkzeug API correctly
Tue, 18 Nov 2008 21:28:49 +0100 Thomas Waldmann pre-1.9: request.form has qs args and post data, 1.9: .form only post data, .args only qs args, .values both
Tue, 23 Sep 2008 00:53:18 +0200 Thomas Waldmann merged moin/1.8 repo (tests need more fixing)
Fri, 22 Aug 2008 22:58:18 +0200 Thomas Waldmann merge moin/1.8 repo
Sun, 20 Jul 2008 18:08:13 +0200 Florian Krupicka Make more use of werkzeugs Href object for URL-generation in MoinMoin
Sun, 20 Jul 2008 01:48:20 +0200 Florian Krupicka Try using werkzeugs Href object for URL generation (first in AttachFile)
Wed, 16 Jul 2008 17:23:21 +0200 Florian Krupicka Fixed handling of if_modified headers (threw exception on attachment-get)
Tue, 15 Jul 2008 19:57:14 +0200 Florian Krupicka Fixed: AttachFile upload handling & some form-issues