log MoinMoin/action/AttachFile.py @ 6133:a6283e189869 tip

age author description
Thu, 01 Jun 2017 17:40:41 +0200 Thomas Waldmann fix AttributeError in multifile action
Fri, 28 Oct 2016 21:30:38 +0200 Thomas Waldmann security: fix XSS in AttachFile view (multifile related) CVE-2016-7148
Fri, 28 Oct 2016 17:03:20 +0200 Thomas Waldmann catch IOError for zipfile errors
Wed, 07 Sep 2016 04:31:59 +0200 Thomas Waldmann merge branches
Tue, 06 Sep 2016 01:10:13 +0200 Thomas Waldmann remove usage of MoinMoin.support.tarfile
Thu, 19 Mar 2015 18:34:51 +0100 Thomas Waldmann multifile copy/move: continue even if some attachments fail
Thu, 13 Nov 2014 11:21:51 +0100 Thomas Waldmann AttachFile multifile operation: support copying multiple files to another page
Fri, 31 Jan 2014 18:33:18 +0100 Thomas Waldmann AttachFile: move or delete multiple attachments
Sat, 06 Apr 2013 22:47:36 +0200 Thomas Waldmann AttachFile do=get and do=view: send 404 status if file does not exist
Fri, 08 Mar 2013 08:39:57 +0100 Reimar Bauer AttachList: introduced search_term parameter (optional) for listing attachments by a regular expression
Sat, 29 Dec 2012 18:19:25 +0100 Thomas Waldmann security: fix path traversal vulnerability in AttachFile action
Sat, 29 Dec 2012 15:05:29 +0100 Thomas Waldmann security: fix remote code execution vulnerability in twikidraw/anywikidraw actions
Sat, 08 Dec 2012 22:54:04 +0100 Thomas Waldmann Attachment handler: catch all Zip-related errors
Wed, 10 Mar 2010 16:14:56 +0100 Reimar Bauer MoinMoin.widget.browser: introduced feature for sorting tables (http://moinmo.in/FeatureRequests/SortableTables).
Sat, 27 Feb 2010 02:04:17 +0100 Thomas Waldmann http headers: for most cases, do not use .add, but .__setitem__
Thu, 25 Feb 2010 17:26:36 +0100 Thomas Waldmann merged moin/1.8
Thu, 25 Feb 2010 16:52:28 +0100 Thomas Waldmann merged moin/1.7
Thu, 25 Feb 2010 16:51:33 +0100 Thomas Waldmann attachUrl: fix wrongly generated tickets (e.g. for AttachList macro)
Thu, 25 Feb 2010 14:02:44 +0100 Reimar Bauer AttachFile._build_filelist: verifies readonly flag for unzip file link
Mon, 08 Feb 2010 21:49:19 +0100 Thomas Waldmann merged moin/1.8 + changes needed for ticket support of 1.9 drawings code
Mon, 08 Feb 2010 19:01:03 +0100 Thomas Waldmann merged moin/1.7
Mon, 08 Feb 2010 18:56:07 +0100 Thomas Waldmann AttachFile: add ticketing for all operations that do modifications
Sun, 20 Dec 2009 22:49:57 +0100 Thomas Waldmann AttachFile.move_file: send events (so e.g. xapian index update happens)
Sun, 29 Nov 2009 16:58:27 +0100 Thomas Waldmann custom patch for werkzeug 0.5.1 http.parse_date to catch exceptions raised by stdlib, remove exception handler at moin level
Sun, 22 Nov 2009 10:09:04 +0100 Thomas Waldmann AttachFile do=get crashing - log complete environ, so in case it is the user agent, we'll see which one
Sun, 22 Nov 2009 09:57:04 +0100 Thomas Waldmann AttachFile do=get crashing, bug somewhere in stdlib / werkzeug / user agent, collect data, avoid crash
Sun, 15 Nov 2009 10:08:13 +0100 Thomas Waldmann AttachFile: added remove_attachment(), made nuke_page use it (details below)
Sat, 14 Nov 2009 13:30:20 +0100 Thomas Waldmann Fixed and cleaned up Xapian based search (details below)
Mon, 12 Oct 2009 16:36:45 +0200 Thomas Waldmann attachments/drawings: use 1y old Expires: header so user agent asks in every case (and we respond with 304 NOT MODIFIED or 200 OK)
Sat, 10 Oct 2009 15:54:36 +0200 Thomas Waldmann add Expires header with now + 10 seconds for AttachFile do=get and do=box
Sat, 10 Oct 2009 13:35:03 +0200 Thomas Waldmann fix '304 not modified' response for AttachFile do=get and do=box
Tue, 22 Sep 2009 11:21:51 +0200 Reimar Bauer Introduced a new config var "extensions_mapping". You can set up a mapping of attachment extensions to actions. By the drawing syntax these actions are called for the given target.
Mon, 14 Sep 2009 00:24:01 +0200 Thomas Waldmann support view action for .adraw/.tdraw
Sun, 13 Sep 2009 16:01:09 +0200 Thomas Waldmann drawings/attachments: made editing support more generic (details see below)
Sun, 13 Sep 2009 02:44:37 +0200 Thomas Waldmann getAttachUrl: removed escaped=... param (see below)
Sun, 13 Sep 2009 00:06:04 +0200 Thomas Waldmann simplify getAttachUrl: remove upload parameter
Sat, 12 Sep 2009 21:40:56 +0200 Thomas Waldmann refactored getAttachURL
Sat, 12 Sep 2009 18:44:26 +0200 Thomas Waldmann AttachFile: offer editing for .adraw (anywikidraw container)
Sun, 30 Aug 2009 14:13:27 +0200 Reimar Bauer merged main
Sun, 30 Aug 2009 12:43:34 +0200 Reimar Bauer refactored drawing TwikiDraw to a configurable action
Sun, 30 Aug 2009 13:32:55 +0200 Thomas Waldmann fix XapianIndex import at some forgotten places
Mon, 20 Apr 2009 20:32:49 +0200 Thomas Waldmann merged moin/1.8
Mon, 20 Apr 2009 20:11:47 +0200 Thomas Waldmann merged moin/1.7
Sat, 18 Apr 2009 19:09:16 +0200 Thomas Waldmann AttachFile move: add more escaping (maybe not XSS exploitable though)
Sat, 18 Apr 2009 18:58:25 +0200 Thomas Waldmann AttachFile XSS fixes: move escaping to error_msg / upload_form
Sat, 14 Mar 2009 17:39:39 +0100 Thomas Waldmann AttachFile: fix another exception when someone just clicks on upload, without giving a file
Sat, 14 Mar 2009 17:27:56 +0100 Thomas Waldmann remove unneeded code: the filename we get from werkzeug is already preprocessed to fix IE bugs
Sat, 14 Mar 2009 17:02:31 +0100 Thomas Waldmann merged moin/1.8
Sat, 14 Mar 2009 16:43:46 +0100 Thomas Waldmann merged moin/1.7
Sat, 14 Mar 2009 16:11:39 +0100 Thomas Waldmann AttachFile: fix exception when someone just clicks on upload, without giving a file
Sat, 07 Mar 2009 22:38:00 +0100 Thomas Waldmann merged moin/1.8
Sat, 21 Feb 2009 19:23:44 +0100 Thomas Waldmann AttachFile do=view: quote filename and pagename params for EmbedObject macro call
Mon, 02 Mar 2009 02:09:10 +0100 Thomas Waldmann AttachFile: reordered imports
Sat, 21 Feb 2009 18:37:09 +0100 Thomas Waldmann AttachFile: get the rename field content from qs args, too
Wed, 11 Feb 2009 02:34:33 +0100 Thomas Waldmann wikiutil: replace moin's cgi/urllib wrappers by calls to werkzeug.utils code
Thu, 05 Feb 2009 00:43:06 +0100 Thomas Waldmann merged moin/1.8
Thu, 29 Jan 2009 21:37:44 +0100 Thomas Waldmann merge moin/1.7
Thu, 29 Jan 2009 21:36:30 +0100 Thomas Waldmann AttachFile: fix escaping problems (invalid html, but likely no XSS)
Sat, 24 Jan 2009 03:13:41 +0100 Thomas Waldmann merged moin/1.8
Sun, 11 Jan 2009 22:19:30 +0100 Thomas Waldmann merged moin/1.7
Sun, 11 Jan 2009 22:18:04 +0100 Thomas Waldmann fix AttachFile XSS issues
Mon, 29 Dec 2008 02:09:32 +0100 Thomas Waldmann store a drawing as a single file foo.tdraw (is a tar file with foo.draw, foo.map and foo.png inside)
Mon, 24 Nov 2008 00:34:31 +0100 Thomas Waldmann fix saving of drawings to use WSGI/werkzeug API correctly, try 2
Mon, 24 Nov 2008 00:24:45 +0100 Thomas Waldmann fix saving of drawings to use WSGI/werkzeug API correctly
Tue, 18 Nov 2008 21:28:49 +0100 Thomas Waldmann pre-1.9: request.form has qs args and post data, 1.9: .form only post data, .args only qs args, .values both
Tue, 23 Sep 2008 00:53:18 +0200 Thomas Waldmann merged moin/1.8 repo (tests need more fixing)
Fri, 22 Aug 2008 22:58:18 +0200 Thomas Waldmann merge moin/1.8 repo
Sun, 20 Jul 2008 18:08:13 +0200 Florian Krupicka Make more use of werkzeugs Href object for URL-generation in MoinMoin
Sun, 20 Jul 2008 01:48:20 +0200 Florian Krupicka Try using werkzeugs Href object for URL generation (first in AttachFile)
Wed, 16 Jul 2008 17:23:21 +0200 Florian Krupicka Fixed handling of if_modified headers (threw exception on attachment-get)
Tue, 15 Jul 2008 19:57:14 +0200 Florian Krupicka Fixed: AttachFile upload handling & some form-issues
Wed, 09 Jul 2008 20:43:29 +0200 Florian Krupicka Merged: 1.8
Thu, 03 Jul 2008 23:36:48 +0200 Florian Krupicka Changed form access to MultiDict forms
Sat, 21 Jun 2008 16:57:20 +0200 Florian Krupicka Accomodate for consolidation of Request/Response
Wed, 18 Jun 2008 00:28:07 +0200 Florian Krupicka Replaced/removed calls to request.emit_http_headers
Mon, 16 Jun 2008 12:11:24 +0200 Florian Krupicka Replaced request.getScriptname() with a werkzeug property
Sat, 13 Sep 2008 15:12:14 +0200 Reimar Bauer browser._format: refactored input parameter "method". The default value is changed from "GET" to None. Now it does not add a form tag to the table on default. You have to give a value of "GET" or "POST" to add a form tag using the given method.
Mon, 28 Jul 2008 21:37:22 +0200 Thomas Waldmann DataBrowserWidget: make callers use correct API (render method)
Mon, 28 Jul 2008 20:53:35 +0200 Thomas Waldmann DataBrowserWidget: remove toHTML/render methods, change all callers to use .format()
Sat, 14 Jun 2008 01:49:34 +0200 Thomas Waldmann AttachFile action: catch RuntimeError when someone tries to unzip a defective archive
Thu, 12 Jun 2008 22:57:40 +0200 Thomas Waldmann AttachFile action: when unzipping member files, decode their filenames from utf-8 and replace invalid chars
Thu, 12 Jun 2008 21:57:20 +0200 Thomas Waldmann AttachFile action: catch runtime error raised by zipfile when trying to view a defective zip
Thu, 12 Jun 2008 21:38:28 +0200 Thomas Waldmann AttachFile action: catch runtime error raised by zipfile to not make attachments list unusable if someone attached a defective zip
Wed, 11 Jun 2008 12:52:22 +0200 Thomas Waldmann AttachFile: refactored unzip subaction code:
Sat, 17 May 2008 00:44:32 +0200 Thomas Waldmann AttachFile: fix uploading of < 1K files (FieldStorage seems to behave different for that case)
Mon, 12 May 2008 23:39:36 +0200 Thomas Waldmann AttachFile: make error msg less confusing when trying to overwrite a file attachment without having acl delete rights
Mon, 12 May 2008 22:06:27 +0200 Thomas Waldmann Load action: remove duplicated code, add comment field, refactor. AttachFile action: refactor. Fix bugs.
Mon, 12 May 2008 14:46:02 +0200 Thomas Waldmann AttachFile/Load: remove misleading/outdated text, Load: fix UI cosmetics, reuse i18n texts
Sat, 10 May 2008 17:28:44 +0200 Thomas Waldmann AttachFile: fix saving of drawing files
Thu, 08 May 2008 10:10:12 +0200 Thomas Waldmann use the open temporary file for file uploads (fixes big memory consumption for big file uploads) - Twisted and mod_python is completely untested
Sun, 04 May 2008 18:47:03 +0200 Thomas Waldmann new request.send_file() call, making it possible to use server-specific optimizations
Sat, 26 Apr 2008 19:42:26 +0200 Reimar Bauer action Attachfile, Despam, backup, thread_monitor: removed duplicated checks done by request.__init__
Wed, 19 Mar 2008 18:14:38 +0100 Reimar Bauer moved browser_supported_images to config and exchanged it
Tue, 18 Mar 2008 19:43:45 +0100 Reimar Bauer EmbedObject: fixed bug for image mimetype and configured when to call EmbedObject
Tue, 18 Mar 2008 01:25:15 +0100 Radomir Dopieralski AttachFile: Make the download link more prominent
Sun, 16 Mar 2008 21:07:30 +0100 Thomas Waldmann merged main
Sun, 16 Mar 2008 21:04:16 +0100 Thomas Waldmann fix some wrong wikiutil.escape usage causing double-escaping
Sun, 16 Mar 2008 17:50:51 +0100 Reimar Bauer Attachfile.getAttachUrl: fixed upload tainting of rename
Sun, 16 Mar 2008 17:35:30 +0100 Reimar Bauer macro.EmbedObject: adjusted to changes of argument parser, escaped output.
Fri, 14 Mar 2008 15:46:27 +0100 Reimar Bauer EmbedObject: fixed some variable names, and escaping of target in AttachFile
Fri, 14 Mar 2008 11:27:04 +0100 Reimar Bauer EmbedObject refactored for new arg parser
Mon, 03 Mar 2008 02:34:56 +0100 Thomas Waldmann AttachFile action: fix AttributeError
Mon, 03 Mar 2008 02:02:55 +0100 Thomas Waldmann pylint findings: fix some harmless stuff
Sun, 02 Mar 2008 18:00:59 +0100 Thomas Waldmann AttachFile: fix messages, remove unused code
Sun, 02 Mar 2008 15:57:43 +0100 Thomas Waldmann AttachFile: fix _access_file return parameter count
Sun, 02 Mar 2008 02:10:28 +0100 Thomas Waldmann i18n.getText: removing wrong (old) kw arguments from _() calls
Thu, 28 Feb 2008 22:26:08 +0100 Thomas Waldmann AttachFile: move ACL processing to handlers, simplify
Thu, 28 Feb 2008 21:48:10 +0100 Thomas Waldmann AttachFile: more refactorings
Thu, 28 Feb 2008 21:34:22 +0100 Thomas Waldmann AttachFile: some cosmetical source changes
Thu, 28 Feb 2008 21:31:18 +0100 Thomas Waldmann remove attachments direct serving (cfg.attachments), refactor AttachFile to use formatter for link generation
Wed, 27 Feb 2008 00:23:46 +0100 Thomas Waldmann refactored _() getText calls to match new api
Sat, 12 Jan 2008 18:17:13 +0100 Thomas Waldmann fix relative attachment targets
Fri, 22 Feb 2008 22:11:51 +0100 Thomas Waldmann attachment links now require double brackets
Tue, 05 Feb 2008 21:22:56 +0100 Reimar Bauer bug fix of MoinMoinBugs/MoveAttachmentNotWorkingWithModPython (thanks to Boleslaw Kulbabinski) (ported from 1.6)
Mon, 28 Jan 2008 14:29:07 +0100 Reimar Bauer action.AttachFile: bugfix showing unzip for packages, install for superuser
Sun, 06 Jan 2008 02:49:32 +0100 Thomas Waldmann new antispam stuff: textchas (text CAPTCHAs), cleanup AttachFile handler (port from 1.6)
Sun, 23 Dec 2007 23:52:43 +0100 Alexander Schremmer Refactor all modules to use the new add_msg interface in 1.7 (done by Frederico Lorenzi). Should not be backported to 1.6 but
Wed, 03 Oct 2007 10:46:10 +0200 Reimar Bauer AttachFile.getFilename: creates attachment dir on requesting filename
Thu, 20 Sep 2007 18:39:32 +0200 Thomas Waldmann catch error when saving a drawing
Thu, 23 Aug 2007 10:34:28 +0200 Thomas Waldmann merged main