summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2014-05-29PR pkg/48840: Don't assume cocoa toolkit just because OS_ARCH is Darwinpho3-1/+76
2014-05-29Add dependency to php-zlib since it is needed by core's funcitonality.taca3-5/+9
Bump PKGREVISION.
2014-05-29PR pkg/48840: Don't assume cocoa toolkit just because OS_ARCH is Darwinpho30-16/+2228
2014-05-29PR pkg/48845ryoon2-4/+4
Fix (remove) wrong version number in comments
2014-05-28PR pkg/48840: Don't assume cocoa toolkit just because OS_ARCH is Darwinpho12-1/+377
2014-05-28PR pkg/48840: Don't assume cocoa toolkit just because OS_ARCH is Darwinpho7-1/+518
2014-05-28PR pkg/48840: OS_TEST can never be 'powerpc'pho2-4/+15
2014-05-28PR pkg/48840: Set the MacOS X version requirement appropriatelypho1-1/+14
Otherwise ${WRKSRC}/media/libcubeb/src/cubeb_audiounit.c can not be built on MacOS X < 10.6
2014-05-28PR pkg/48840: Fix configuration issues on Darwinpho2-17/+47
* On Darwin the profiler only supports x86 and x86_64. * Cocoa gamepad backend can only be used if the toolkit is cocoa too.
2014-05-28PR pkg/48840: Do not reject GCC on Darwinpho2-1/+24
It's true Clang is required if we use the cocoa toolkit, but we don't do that anyway. GCC is perfectly working as long as we use cairo-gtk2.
2014-05-28PR/48840: Fix PLIST on Cygwin and Darwinpho1-2/+8
libmozglue is built and installed as a shared library on these platforms.
2014-05-28PR pkg/48840: Fix PLIST on Cygwin and Darwinpho2-3/+5
libmozglue is built and installed as a shared library on these platforms.
2014-05-27Add and enable contao33 and contao33-example.taca1-1/+3
2014-05-27Add contao33-example pakcage version 3.3.0.taca5-0/+69
This is an example web site for www/contao33, Contao Open Source CMS.
2014-05-27Add www/contao33 package version 3.3.0.taca6-0/+3808
Contao 3.3 is new stable release of Contao Open Source CMS. Some new features from Contao 3.2: * Added a markdown content element. * Added the insert tag flags "urlencode" and "rawurlencode". * Add a flexible back end theme. * Add DropZone-based file uploader. * Add permissions to import and export themes. * Allow to override the default templates of module, content element and form firld. * Add version control for editable files. * Add template inheritance and template insertion. * Make the title tag configurable in the page layout. * Mark the beginning and end of each template in debug mode. * Add support of SCSS/LESS files as external style sheets to page layout. * Make the file system synchronization available on the command line.
2014-05-27Explicitly set DISTNAME for now.taca1-1/+2
2014-05-27* Twweak minimum php's version althogh it has no effect with pkgsrctaca2-13/+10
in these days. * Depends on shells/bash package and drop note about bash from MESSAGE. Bump PKGREVISION.
2014-05-27Explicitly set DISTNAME for now.taca1-1/+2
2014-05-27* Twweak minimum php's version althogh it has no effect with pkgsrctaca2-8/+10
in these days. * DEINSTALL: check existence of plugins/tcpdf/cache directory. Bump PKGREVISION.
2014-05-27Changes for supporing Contao 3.3.taca2-11/+23
* Add CT33_VERSION. * Conditional CT_MASTER_SITE, CT_MASTER_SITE and so on.
2014-05-27Update typo3_61 to 6.1.9 (TYPO3 6.1.9), contains several security fixes.taca3-12/+19
2014-05-22 2bb8360 [RELEASE] Release of TYPO3 6.1.9 (TYPO3 Release Team) 2014-05-22 6fafbf7 #30377 [SECURITY] Add trusted HTTP_HOST configuration (Helmut Hummel) 2014-05-22 2994a1c #54111,#54113 [SECURITY] XSS in (old) extension manager information function (Nicole Cordes) 2014-05-22 12741ad #48695 [SECURITY] XSS in new content element wizard (Marcus Krause) 2014-05-22 7595ad4 #54109 [SECURITY] XSS in template tools on root page (Marc Bastian Heinrichs) 2014-05-22 6965806 #57576 [SECURITY] XSS in Backend Layout Wizard (Helmut Hummel) 2014-05-22 54e4691 #48693 [SECURITY] Encode URL for use in JavaScript (Jigal van Hemert) 2014-05-22 b6826ff #56458 [SECURITY] Fix insecure unserialize in colorpicker (Helmut Hummel) 2014-05-22 32efb1b #54526 [SECURITY] Remove charts.swf to get rid of XSS vulnerability (Helmut Hummel) 2014-05-21 6a91a90 #54917 [BUGFIX] Indexer tries to insert NULL into DB (Markus Klein) 2014-05-15 3ee99e9 #58842 [BUGFIX] Wrong system requirements link (Markus Klein) 2014-05-14 f86e016 #58529 [BUGFIX] DependencyUtility does count() on an integer (Markus Klein) 2014-05-08 fb8370d #58187 [BUGFIX] Solve stackoverflow in prototype in IE8 (Jigal van Hemert) 2014-05-08 3abc703 #58373 [BUGFIX] Default image title in RTE contains the file name (Stanislas Rolland) 2014-05-05 db90a26 #45183 [BUGFIX] Wrong result on empty string globalString condition (Marc Bastian Heinrichs) 2014-05-04 d422bf6 #58504 [BUGFIX] saltedpasswords: Check rsaauth loading (Nicole Cordes) 2014-05-04 05ef8fe #58484 [BUGFIX] SoftReferenceIndex support for more values in class attribute (Marc Bastian Heinrichs) 2014-05-02 a49ddfd #58418 [BUGFIX] Retrieving extension fails with some PHP versions (Sascha Wilking) 2014-04-29 0150f9c #58166 [BUGFIX] Wrong comment in ActionMenuViewHelper (Markus Klein) 2014-04-25 8cf4f78 #58180 [BUGFIX] Database query error for non-workspaces tables (Oliver Hader) 2014-04-16 a4f013a [TASK] Set TYPO3 version to 6.1.9-dev (TYPO3 Release Team) 2014-04-16 d94f80d [RELEASE] Release of TYPO3 6.1.8 (TYPO3 Release Team) 2014-04-16 68763fa #57957 [BUGFIX] DBAL sql_fetch_* must return boolean or array (Jigal van Hemert) 2014-04-16 65896ee #24925,#24871 [BUGFIX] Followup: Mandatory for Selectbox with TCA not possible (Stefan Neufeind) 2014-04-15 8e8b020 #24925,#24871 [BUGFIX] Mandatory for Selectbox with TCA not possible (Benjamin Mack) 2014-04-15 d124103 #56580 [BUGFIX] SoftReferenceIndex typolink lacks support for title attributes (Marc Bastian Heinrichs) 2014-04-15 6139c97 #56991 [BUGFIX] Fix refindex for FlexForm fields type group file_reference (Marc Bastian Heinrichs) 2014-04-15 1dbfe75 #56353,#56352 [BUGFIX] Fields of type group file are not properly indexed (Marc Bastian Heinrichs) 2014-04-15 b22b39d #57010 [BUGFIX] Add SoftIndex parser typolink to link in sys_file_reference (Marc Bastian Heinrichs) 2014-04-15 5dd53b1 #51768 [TASK] Updates prototype and scriptaculous, fixing IE9+ issues (Ernesto Baschny) 2014-04-12 a60b6dc #47694 [BUGFIX] Follow up foreign_match_fields not fully supported (Marc Bastian Heinrichs) 2014-04-12 b93d9b4 #50378 [BUGFIX] sql_free_result does not work with all allowed types (Wouter Wolters) 2014-04-07 a896350 #57690 [BUGFIX] User settings do not obey setup.override (Markus Klein) 2014-04-05 21f0d12 #55683 [BUGFIX] ClickMenu: Visibility-options only if fields allowed (Stefan Neufeind) 2014-04-04 2b3dd27 #57656 [TASK] Integrate default README.txt (Oliver Hader) 2014-04-04 1329a96 #57603 [SECURITY] Prevent XSS in scheduler form (Nicole Cordes) 2014-04-01 6ae6b40 #57518 [BUGFIX] Make Extbase EnvironmentService a Singleton (Marc Bastian Heinrichs) 2014-03-31 03ec17a #57296 [BUGFIX] Test typeof TBE_EDITOR for object not function (Alexander Opitz) 2014-03-26 2b5c50e #54394 [BUGFIX] Exception if thumbnail does not exist (Markus Klein) 2014-03-24 cbdd065 #57238 [BUGFIX] Typo in Extbase localization file (Xavier Perseguers) 2014-03-23 fc5b7b2 #57179 [BUGFIX] Module Menu throws PHP warning for top level menu items (Benjamin Mack) 2014-03-23 9b36936 #57202 [BUGFIX] Parsetime: config.debug should override LocalConfiguration (Stefan Neufeind) 2014-03-19 819218a #55340 [BUGFIX] Several typos in Page Browsing ViewHelper (Benjamin Rau) 2014-03-19 f8233c1 #56205 [BUGFIX] Cannot use contain with multivalued static enumeration column (Xavier Perseguers) 2014-03-14 d5160a9 #56150 [BUGFIX] RootlineUtility does not consider disablefield (Christian Reiter) 2014-03-13 2a80fcd #56855 [BUGFIX] Extbase tries to overlay pages_language_overlay records (Stanislas Rolland) 2014-03-13 2ee3509 #56720 [BUGFIX] Alignment of button "add a new element at this place" (Patrick Broens) 2014-03-13 bed1054 #56830 [BUGFIX] Show thumbnails in list module (Markus Klein) 2014-03-13 3800d8b #56084 [BUGFIX] Followup: Ajax handler TYPO3_tcefile::process is broken (Frans Saris) 2014-03-12 d405041 #23864 [BUGFIX] Correctly validate New Content Element entries (Ludwig Rafelsberger) 2014-03-10 06e5ad9 #52386 [BUGFIX] Allow record insert on rootlevel (Benjamin Serfhos) 2014-03-08 2df9cb9 #43885 [BUGFIX] Temporary DB tree mount notice missing in ElementBrowser (Lorenz Ulrich) 2014-03-07 472a2f2 #55457 [BUGFIX] RTE on first new IRRE record keeps loading in IE (Stanislas Rolland) 2014-03-07 e61b2cf #23552 [BUGFIX] Default size for group-type fields (Christian Plattner) 2014-03-05 f8c9a77 #46185 [BUGFIX] IdentityProperties were not set (Stefan Froemken) 2014-03-05 e7cf550 #11771 [BUGFIX] Catch all errors while starting installer (Alexander Opitz) 2014-03-03 28d25c9 #56262 [BUGFIX] Double escape of title in indexed search (Markus Klein) 2014-02-28 ded338b #56378 [BUGFIX] Do not log with severity 1320177676 (Christian Weiske) 2014-02-28 8f0ce1c #56421 [BUGFIX] @return for TYPO3\CMS\Sv\AuthenticationService::authUser (Christian Weiske) 2014-02-28 342686b #41413 [BUGFIX] URL-encoded title in link wizard (Helmut Hummel) 2014-02-27 5ce3128 #55966 [BUGFIX] Revert "[TASK] Use a 401 header if login is not successful" (Markus Klein) 2014-02-25 a5d8893 #56184 [BUGFIX] Paginator in TER list not using ajax (Jigal van Hemert) 2014-02-25 b4a8235 #23984 [BUGFIX] felogin reset password links not clickable (Jigal van Hemert) 2014-02-24 5da89e2 #56242 [BUGFIX] Fix JS concat if first file is forced on top (Benjamin Kott) 2014-02-21 c47d8c5 #54724 [BUGFIX] Use count on storage after initialization of LazyObjectStorage (Marc Bastian Heinrichs) 2014-02-21 6512f65 #49499 [BUGFIX] Fix possible language handling issue (Markus Klein) 2014-02-20 b09e7f9 #39048 [BUGFIX] Rendering inline TCEforms without AJAX is broken (Alexander Jahn) 2014-02-20 c9ae284 #53116,#56019 [BUGFIX] concatenateJs/Css does not consider forceOnTop (Markus Klein) 2014-02-20 b8eeb55 #56135 [BUGFIX] DatabaseConnection::listQuery wrong usage of strpos() (Markus Klein) 2014-02-19 bd607e2 #55286 [BUGFIX] Suppress EXIF warnings indexing images (Felix Althaus) 2014-02-19 45f944c #56067 [BUGFIX] Various static calls to non-static functions (Markus Klein) 2014-02-19 d2ef187 #56057 [BUGFIX] Add missing htmlspecialchars for thumbnail URL (Wouter Wolters) 2014-02-18 b7169bb #52955 [BUGFIX] Show labels of additional doktypes in new page drag area (Caspar Stuebs) 2014-02-18 7af5ad6 #54304 [BUGFIX] Missing encoding in flexforms IRRE javascript (Alexey Gafiulov) 2014-02-17 48eab76 #52527 [BUGFIX] addToAllTCAtypes() doesn't add new field (Tomita Militaru) 2014-02-17 6344793 #56037 [BUGFIX] Fix clipboard thumbnail rendering (Frans Saris) 2014-02-17 dc0ec8a #55998 [BUGFIX] Usage of undefined variables in ShortcutToolbarItem (Tim Lochmueller) 2014-02-17 52c294b #55362 [BUGFIX] CommandController is not executed at same time (Tom Ruether) 2014-02-11 c9ffade #49440 [BUGFIX] Missing label felogin_forgotHash (Karol Lamparski) 2014-02-11 edbef68 #53028 [BUGFIX] cache_clearAtMidnight conflicts with content start/endtime (Dmitry Dulepov) 2014-02-10 474380f [TASK] Execute lint in parallel (Helmut Hummel) 2014-02-09 e36633a #53768,#28745 [BUGFIX] Allow to render the same TS object twice (Markus Klein) 2014-02-09 9971136 #55821 [BUGFIX] Tests: Remove unstable GeneralUtilityTest::getUrl* (Christian Kuhn) 2014-02-09 101be25 #18797 [BUGFIX] "New page" wizard discloses existence of pages outside DB mount (Nicole Cordes) 2014-02-09 5f6d783 #53564 [TASK] Add possibility creating accessible mock for abstract classes (Marc Bastian Heinrichs) 2014-02-08 cead255 #16491 [BUGFIX] CSV-Download not working in IE and HTTPS backend (Wouter Wolters) 2014-02-08 98c8e0a #55698 [BUGFIX] Fix "action" labels in BE log (Thorsten Kahler) 2014-02-07 9e79487 #55611 [TASK] Move cursor::pointer to complete header area in IRRE (Georg Ringer) 2014-02-06 79d2bac #54131 [BUGFIX] Followup to #54131 (Frans Saris) 2014-02-06 ad267f8 #55713 [BUGFIX] Missing namespace in ContentObjectRenderer (Markus Klein) 2014-02-05 27c1f61 #54112 [BUGFIX] Set missing markers to empty string (Bernhard Kraft) 2014-02-04 4d7947a #55434 [BUGFIX] Various PHP Warnings with invalid credentials (Xavier Perseguers) 2014-02-03 1263413 #54467 [BUGFIX] TSFE->altPageTitle can not be set in extensions (Markus Klein) 2014-02-03 a070a5c #54371 [BUGFIX] Add stdWrap on value property of TEXT (Markus Klein) 2014-02-03 85b3fed #52048 [BUGFIX] Locker throws exception if semaphore can not be acquired (Markus Klein) 2014-02-02 af8f6eb #54289 [BUGFIX] PropertyMapper does not work with class aliasses (Frans Saris) 2014-01-31 9596d4d #54131 [BUGFIX] getLabelsFromItemsList() retuns no value when no item found (Frans Saris) 2014-01-30 3dcc61d #55475 [BUGFIX] Regression in DataHandler (Wouter Wolters) 2014-01-30 a5e884f #55458 [BUGFIX] DocumentTemplate class inserts inDocStyles twice (Stefan Neufeind) 2014-01-30 084b5a9 #41450 [BUGFIX] Handle empty tags in language pack index files (Alexander Stehlik) 2014-01-29 b81c5d5 #55407 [BUGFIX] ClickMenu does not show destination-foldername (Stefan Neufeind) 2014-01-28 d6803b7 #55350 [BUGFIX] Invalid constant in the domain redirect function (Tim Lochmueller) 2014-01-27 91b1db0 #55377 [TASK] Change repository url for introduction package (Philipp Gampe) 2014-01-27 1af64b0 #55366 [TASK] Change phpunit repository url for travis (Philipp Gampe) 2014-01-24 3cefa40 #53964 [BUGFIX] Better description of [BE][unzip_path]/[BE][diff_path] (Markus Klein) 2014-01-24 041780f #55093 [BUGFIX] Simulate time in TYPO3 admin panel broken (Peter Niederlag) 2014-01-23 8f55af7 #53201 [BUGFIX] sys_category table not listed in allowed excludefields (Tomita Militaru) 2014-01-23 eec8579 #53665 [BUGFIX] Removing single category item not possible (Francois Suter) 2014-01-23 57b70f7 #54849 [BUGFIX] CLI context cannot write to backend log (Oliver Hader) 2014-01-22 b865ad9 #55246 [BUGFIX] Class 'TYPO3\CMS\Recordlist\Browser\GeneralUtility' not found (Oliver Hader) 2014-01-21 c96321d #37539 [BUGFIX] Static method cannot be abstract (Xavier Perseguers) 2014-01-21 ae54769 #54884 [BUGFIX] RootlineUtility does not consider foreign_sorting (Markus Klein) 2014-01-16 0965b22 #53712 [BUGFIX] Create valid file reference index data (Alexander Stehlik) 2014-01-16 b7ce3ef #50266 [BUGFIX] File browser fails on inexistent expandFolder (Mario Rimann) 2014-01-15 429e13d #34631 [BUGFIX] Show correct record title for be_groups and be_users (Markus Klein) 2014-01-15 5b23142 #54995 [BUGFIX] PHP warnings in ElementBrowser (Markus Klein) 2014-01-14 0ac8948 #54959 [TASK] Speedup typolink root-line handling (Steffen Ritter) 2014-01-14 714fca7 #53826 [BUGFIX] Folder tree in popup throws JS error (Aske Ertmann) 2014-01-14 f68832a #53352 [BUGFIX] Add defaultTypoScript to hierachyInfo (Peter Niederlag) 2014-01-13 22d3be1 #51805 [BUGFIX] Template dropdown doesn't refresh template title after save (Torben Hansen) 2014-01-11 72f5d5a #54909 [BUGFIX] Add missing logger names (Steffen Müller) 2014-01-09 2620cb5 #53975 [BUGFIX] Allow empty values in start/stop filter of belog (Steffen Müller) 2014-01-09 c99a07a #53862 [BUGFIX] isValidUrl() idna converts whole URI (Michiel Roos) 2014-01-09 4e3e3dc #52554 [TASK] Change list view delete icon if record is deleted in WS (Sascha Egerer) 2014-01-09 f378b40 #31797 [BUGFIX] Properly escape the ImageMagick frame selector (Georg Ringer) 2014-01-09 7d3eb35 #24877,#6708 [BUGFIX] Only create one keypair in rsaauth (Tom Ruether) 2014-01-09 a31b325 #38767 [BUGFIX] use search word(s) for ordering search results (again) (Ralf Hettinger) 2014-01-08 03d6320 #47694 [BUGFIX] foreign_match_fields not fully supported (Stefan Froemken) 2014-01-08 e959451 #53727 [BUGFIX] Form Wizard saving destroys Radio Buttons (Markus Klein) 2014-01-08 42a3eb3 #52133 [BUGFIX] Display relations' titles when TCA label field is type inline (Claus Due) 2014-01-07 272f80c #54807 [BUGFIX] PageBrowsing ViewHelper defines unused method argument (Benjamin Rau) 2014-01-07 e09b381 #54808 [BUGFIX] Repository uses wrong property to calc current result page (Benjamin Rau) 2014-01-04 81a30e8 #53662 [BUGFIX] Allow NULL values in INSERT queries (Alexander Stehlik) 2014-01-04 67ac84c #53682 [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel) 2013-12-23 9283d4b #54115 [BUGFIX] ClassAliasMap, Tx_ VH namespace and closing tag throws Exception (Claus Due) 2013-12-21 8379b1a #54531 [BUGFIX] Fix message for install tool warning (Cynthia Mattingly) 2013-12-18 a95ab93 #54369 [TASK] Fix travis builds (Markus Klein) 2013-12-18 2a4d603 #51752 [BUGFIX] ArrayIterator::seek() warning in ElementBrowser (Markus Klein) 2013-12-18 e4590fe #52059 [BUGFIX] felogin: Unknown modifier in regular expression (Wouter Wolters) 2013-12-18 e8978f9 #47648 [BUGFIX] Remove ElementBrowser::isReadOnlyFolder (Markus Klein) 2013-12-13 be7505a #54027 [BUGFIX] No double htmlspecialchars for filemount select (Alexander Stehlik) 2013-12-12 41fe22d #53818 [BUGFIX] Cleanly unset cookies on login in cookie-check (Stefan Neufeind)
2014-05-27Update typo3_60 to 6.0.14 (TYPO3 6.0.14), contains several security fixes.taca3-12/+17
2014-05-22 d1d252f [RELEASE] Release of TYPO3 6.0.14 (TYPO3 Release Team) 2014-05-22 37273fb #30377 [SECURITY] Add trusted HTTP_HOST configuration (Helmut Hummel) 2014-05-22 edd27ad #54111,#54113 [SECURITY] XSS in (old) extension manager information function (Nicole Cordes) 2014-05-22 00f00b1 #48695 [SECURITY] XSS in new content element wizard (Marcus Krause) 2014-05-22 6b7f3a8 #54109 [SECURITY] XSS in template tools on root page (Marc Bastian Heinrichs) 2014-05-22 5935348 #57576 [SECURITY] XSS in Backend Layout Wizard (Helmut Hummel) 2014-05-22 dda1739 #48693 [SECURITY] Encode URL for use in JavaScript (Jigal van Hemert) 2014-05-22 5e00a13 #56458 [SECURITY] Fix insecure unserialize in colorpicker (Helmut Hummel) 2014-05-22 0f29e1f #54526 [SECURITY] Remove charts.swf to get rid of XSS vulnerability (Helmut Hummel) 2014-05-21 e50f6a6 #54917 [BUGFIX] Indexer tries to insert NULL into DB (Markus Klein) 2014-05-15 53c830f #53079 [BUGFIX] FlashMessageService not available in TYPO3 6.0 (Oliver Hader) 2014-05-14 459c34d #58529 [BUGFIX] DependencyUtility does count() on an integer (Markus Klein) 2014-04-25 bd704d5 #58180 [BUGFIX] Database query error for non-workspaces tables (Oliver Hader) 2014-04-16 d1fc88d [TASK] Set TYPO3 version to 6.0.14-dev (TYPO3 Release Team) 2014-04-16 be80735 [RELEASE] Release of TYPO3 6.0.13 (TYPO3 Release Team) 2014-04-15 d9e6546 #51768 [TASK] Updates prototype and scriptaculous, fixing IE9+ issues (Ernesto Baschny) 2014-04-15 48f974e #56580 [BUGFIX] SoftReferenceIndex typolink lacks support for title attributes (Marc Bastian Heinrichs) 2014-04-15 9d1c880 #56991 [BUGFIX] Fix refindex for FlexForm fields type group file_reference (Marc Bastian Heinrichs) 2014-04-15 75f6b1b #56353,#56352 [BUGFIX] Fields of type group file are not properly indexed (Marc Bastian Heinrichs) 2014-04-15 4e64a39 #57010 [BUGFIX] Add SoftIndex parser typolink to link in sys_file_reference (Marc Bastian Heinrichs) 2014-04-04 72be9f3 #57656 [TASK] Integrate default README.txt (Oliver Hader) 2014-04-04 de4e047 #57603 [SECURITY] Prevent XSS in scheduler form (Nicole Cordes) 2014-03-31 03646f1 #57296 [BUGFIX] Test typeof TBE_EDITOR for object not function (Alexander Opitz) 2014-03-24 87d3d40 #57238 [BUGFIX] Typo in Extbase localization file (Xavier Perseguers) 2014-03-13 be10ede #56855 [BUGFIX] Extbase tries to overlay pages_language_overlay records (Stanislas Rolland) 2014-03-08 15b15c0 #43885 [BUGFIX] Temporary DB tree mount notice missing in ElementBrowser (Lorenz Ulrich) 2014-03-05 99025c1 #46185 [BUGFIX] IdentityProperties were not set (Stefan Froemken) 2014-03-03 69c103b #56262 [BUGFIX] Double escape of title in indexed search (Markus Klein) 2014-02-28 cf83948 #56378 [BUGFIX] Do not log with severity 1320177676 (Christian Weiske) 2014-02-28 432a7bd #56421 [BUGFIX] @return for TYPO3\CMS\Sv\AuthenticationService::authUser (Christian Weiske) 2014-02-28 1474e2c #41413 [BUGFIX] URL-encoded title in link wizard (Helmut Hummel) 2014-02-27 ab4ef14 #55966 [BUGFIX] Revert "[TASK] Use a 401 header if login is not successful" (Markus Klein) 2014-02-25 95cb16e #56184 [BUGFIX] Paginator in TER list not using ajax (Jigal van Hemert) 2014-02-25 8c2179f #23984 [BUGFIX] felogin reset password links not clickable (Jigal van Hemert) 2014-02-21 9ebf4bb #54724 [BUGFIX] Use count on storage after initialization of LazyObjectStorage (Marc Bastian Heinrichs) 2014-02-21 4b44141 #49499 [BUGFIX] Fix possible language handling issue (Markus Klein) 2014-02-20 568b9bf #56135 [BUGFIX] DatabaseConnection::listQuery wrong usage of strpos() (Markus Klein) 2014-02-19 40d97d5 #56067 [BUGFIX] Various static calls to non-static functions (Markus Klein) 2014-02-18 e428692 #54304 [BUGFIX] Missing encoding in flexforms IRRE javascript (Alexey Gafiulov) 2014-02-17 a335bcf #52527 [BUGFIX] addToAllTCAtypes() doesn't add new field (Tomita Militaru) 2014-02-17 88fd2df #55998 [BUGFIX] Usage of undefined variables in ShortcutToolbarItem (Tim Lochmueller) 2014-02-11 e2ebdfd #53028 [BUGFIX] cache_clearAtMidnight conflicts with content start/endtime (Dmitry Dulepov) 2014-02-10 e73b549 [TASK] Execute lint in parallel (Helmut Hummel) 2014-02-09 d2881f5 #53768,#28745 [BUGFIX] Allow to render the same TS object twice (Markus Klein) 2014-02-09 228fbc5 #55821 [BUGFIX] Tests: Remove unstable GeneralUtilityTest::getUrl* (Christian Kuhn) 2014-02-09 d9bf811 #18797 [BUGFIX] "New page" wizard discloses existence of pages outside DB mount (Nicole Cordes) 2014-02-09 2a233ef #53564 [TASK] Add possibility creating accessible mock for abstract classes (Marc Bastian Heinrichs) 2014-02-08 33a058b #16491 [BUGFIX] CSV-Download not working in IE and HTTPS backend (Wouter Wolters) 2014-02-06 0fe2509 #55713 [BUGFIX] Missing namespace in ContentObjectRenderer (Markus Klein) 2014-02-05 0004322 #54112 [BUGFIX] Set missing markers to empty string (Bernhard Kraft) 2014-02-03 8623b17 #54371 [BUGFIX] Add stdWrap on value property of TEXT (Markus Klein) 2014-02-03 e5a844d #52048 [BUGFIX] Locker throws exception if semaphore can not be acquired (Markus Klein) 2014-01-30 dc271e4 #55475 [BUGFIX] Regression in DataHandler (Wouter Wolters) 2014-01-30 460da13 #41450 [BUGFIX] Handle empty tags in language pack index files (Alexander Stehlik) 2014-01-29 3a84755 #55407 [BUGFIX] ClickMenu does not show destination-foldername (Stefan Neufeind) 2014-01-28 e5df843 #55350 [BUGFIX] Invalid constant in the domain redirect function (Tim Lochmueller) 2014-01-27 3b2cb07 #55366,#55377 [TASK] Change phpunit repository url for travis (Philipp Gampe) 2014-01-24 72db639 #55093 [BUGFIX] Simulate time in TYPO3 admin panel broken (Peter Niederlag) 2014-01-23 68057cf #54849 [BUGFIX] CLI context cannot write to backend log (Oliver Hader) 2014-01-16 c4703db #53712 [BUGFIX] Create valid file reference index data (Alexander Stehlik) 2014-01-16 42cd027 #50266 [BUGFIX] File browser fails on inexistent expandFolder (Mario Rimann) 2014-01-15 f76c7ea #34631 [BUGFIX] Show correct record title for be_groups and be_users (Markus Klein) 2014-01-14 f3d324d #53826 [BUGFIX] Folder tree in popup throws JS error (Aske Ertmann) 2014-01-14 df52d4a #53352 [BUGFIX] Add defaultTypoScript to hierachyInfo (Peter Niederlag) 2014-01-09 d0c4276 #53862 [BUGFIX] isValidUrl() idna converts whole URI (Michiel Roos) 2014-01-09 9f330b7 #52554 [TASK] Change list view delete icon if record is deleted in WS (Sascha Egerer) 2014-01-09 ffc3f2b #24877,#6708 [BUGFIX] Only create one keypair in rsaauth (Tom Ruether) 2014-01-09 583a51b #38767 [BUGFIX] use search word(s) for ordering search results (again) (Ralf Hettinger) 2014-01-08 74be2df #38766 [BUGFIX] l10n_mode for "pages" table and group fields. (Johannes Feustel) 2014-01-08 d1e2110 #53727 [BUGFIX] Form Wizard saving destroys Radio Buttons (Markus Klein) 2014-01-08 96ff927 #52133 [BUGFIX] Display relations' titles when TCA label field is type inline (Claus Due) 2014-01-04 2c40d1b #53662 [BUGFIX] Allow NULL values in INSERT queries (Alexander Stehlik) 2014-01-04 dd187dd #53682 [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel) 2013-12-23 c2211f5 #54115 [BUGFIX] ClassAliasMap, Tx_ VH namespace and closing tag throws Exception (Claus Due) 2013-12-18 6be4de6 #54369 [TASK] Fix travis builds (Markus Klein) 2013-12-18 e6bfc6e #51752 [BUGFIX] ArrayIterator::seek() warning in ElementBrowser (Markus Klein) 2013-12-18 1294fe7 #52059 [BUGFIX] felogin: Unknown modifier in regular expression (Wouter Wolters) 2013-12-18 4f8c872 #47648 [BUGFIX] Remove ElementBrowser::isReadOnlyFolder (Markus Klein) 2013-12-13 78b00f3 #54027 [BUGFIX] No double htmlspecialchars for filemount select (Alexander Stehlik) 2013-12-12 28ca149 #53818 [BUGFIX] Cleanly unset cookies on login in cookie-check (Stefan Neufeind)
2014-05-27Update to typo3_47 to 4.7.19 (TYPO3 4.7.19), contains several securify fixes.taca3-12/+13
2014-05-22 4ebc6ca [RELEASE] Release of TYPO3 4.7.19 (TYPO3 Release Team) 2014-05-22 07eba3e #30377 [SECURITY] Add trusted HTTP_HOST configuration (Helmut Hummel) 2014-05-22 ec33beb #54111,#54113 [SECURITY] XSS in (old) extension manager information function (Marc Bastian Heinrichs) 2014-05-22 fb096e3 #48695 [SECURITY] XSS in new content element wizard (Markus Klein) 2014-05-22 1389da5 #54109 [SECURITY] XSS in template tools on root page (Marc Bastian Heinrichs) 2014-05-22 65fc32f #57576 [SECURITY] XSS in Backend Layout Wizard (Nicole Cordes) 2014-05-22 7bec5c8 #48693 [SECURITY] Encode URL for use in JavaScript (Markus Klein) 2014-05-22 b907b64 #56458 [SECURITY] Fix insecure unserialize in colorpicker (Helmut Hummel) 2014-05-22 c39bca9 #54526 [SECURITY] Remove charts.swf to get rid of XSS vulnerability (Helmut Hummel) 2014-04-16 53b74d7 [TASK] Set TYPO3 version to 4.7.19-dev (TYPO3 Release Team) 2014-04-16 26f503d [RELEASE] Release of TYPO3 4.7.18 (TYPO3 Release Team) 2014-04-15 f329f76 #51768 [TASK] Updates prototype and scriptaculous, fixing IE9+ issues (Ernesto Baschny) 2014-04-15 9a2f402 #56580 [BUGFIX] SoftReferenceIndex typolink lacks support for title attributes (Marc Bastian Heinrichs) 2014-04-04 d470aa5 #57656 [TASK] Integrate default README.txt (Oliver Hader) 2014-04-04 be342b4 #57603 [SECURITY] Prevent XSS in scheduler form (Nicole Cordes) 2014-02-25 4dfb4d3 #23984 [BUGFIX] felogin reset password links not clickable (Jigal van Hemert) 2014-02-10 0345de6 [TASK] Execute lint in parallel (Helmut Hummel) 2014-02-09 df8e21b #55811 [BUGFIX] Namespace usage in test (Christian Kuhn) 2014-02-08 84d2050 #16491 [BUGFIX] CSV-Download not working in IE and HTTPS backend (Christian Kuhn) 2014-01-27 a42059c #55366,#55377 [TASK] Change phpunit repository url for travis (Philipp Gampe) 2014-01-17 3d40e0a #53682 [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel) 2014-01-16 394e421 #54748 [BUGFIX] Fix PHP fatal error in be.tableList view helper (Marc Bastian Heinrichs) 2014-01-09 66bb350 #38767 [BUGFIX] use search word(s) for ordering search results (again) (Ralf Hettinger) 2014-01-08 f3b8711 #52133 [BUGFIX] Display relations' titles when TCA label field is type inline (Stefan Froemken) 2013-12-18 53a6a36 #54369 [TASK] Fix travis builds (Markus Klein) 2013-12-12 019d6b7 #53818 [BUGFIX] Cleanly unset cookies on login in cookie-check (Stefan Neufeind)
2014-05-27Update typo3_45 to 4.5.34 (TYPO4 4.5.34), contains several security fixes.taca3-12/+13
2014-05-22 2ee368c [RELEASE] Release of TYPO3 4.5.34 (TYPO3 Release Team) 2014-05-22 55d5f38 #30377 [SECURITY] Add trusted HTTP_HOST configuration (Helmut Hummel) 2014-05-22 efb098b #54111,#54113 [SECURITY] XSS in (old) extension manager information function (Marc Bastian Heinrichs) 2014-05-22 94011a3 #48695 [SECURITY] XSS in new content element wizard (Markus Klein) 2014-05-22 b62651b #54109 [SECURITY] XSS in template tools on root page (Marc Bastian Heinrichs) 2014-05-22 a98ae3c #57576 [SECURITY] XSS in Backend Layout Wizard (Nicole Cordes) 2014-05-22 4f7258c #48693 [SECURITY] Encode URL for use in JavaScript (Markus Klein) 2014-05-22 742ad49 #56458 [SECURITY] Fix insecure unserialize in colorpicker (Helmut Hummel) 2014-05-22 9bd7776 #54526 [SECURITY] Remove charts.swf to get rid of XSS vulnerability (Helmut Hummel) 2014-05-08 6ffdcee #58187 [BUGFIX] Solve stackoverflow in prototype in IE8 (Jigal van Hemert) 2014-04-16 5d6a16e [TASK] Set TYPO3 version to 4.5.34-dev (TYPO3 Release Team) 2014-04-16 5bd6b52 [RELEASE] Release of TYPO3 4.5.33 (TYPO3 Release Team) 2014-04-15 aebc244 #51768 [TASK] Updates prototype and scriptaculous, fixing IE9+ issues (Ernesto Baschny) 2014-04-15 51a3897 #57934 [BUGFIX] Use validEmail() instead of deprecated checkEmail() (Stefan Neufeind) 2014-04-15 fcdaec0 #56580 [BUGFIX] SoftReferenceIndex typolink lacks support for title attributes (Marc Bastian Heinrichs) 2014-04-04 4316e98 #57656 [TASK] Integrate default README.txt (Oliver Hader) 2014-04-04 9d36515 #57603 [SECURITY] Prevent XSS in scheduler form (Nicole Cordes) 2014-02-27 e34a90b #55966 [BUGFIX] Revert "[TASK] Use a 401 header if login is not successful" (Markus Klein) 2014-02-25 5c4554b #23984 [BUGFIX] felogin reset password links not clickable (Jigal van Hemert) 2014-02-09 7d6a8cc #55811 [BUGFIX] Namespace usage in test (Christian Kuhn) 2014-02-08 44d7cfc #16491 [BUGFIX] CSV-Download not working in IE and HTTPS backend (Christian Kuhn) 2014-01-30 138b13a #55458 [BUGFIX] DocumentTemplate class inserts inDocStyles twice (Stefan Neufeind) 2014-01-28 b867b04 #55350 [BUGFIX] Invalid constant in the domain redirect function (Tim Lochmueller) 2014-01-17 ab6256f Revert "[TASK] Optimize speed for instantiating class with arguments" (Ernesto Baschny) 2014-01-17 2526bdd #53682 [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel) 2014-01-16 102307f #54748 [BUGFIX] Fix PHP fatal error in be.tableList view helper (Marc Bastian Heinrichs) 2014-01-09 e6643e1 #52554 [TASK] Change list view delete icon if record is deleted in WS (Sascha Egerer) 2014-01-08 765882e #52133 [BUGFIX] Display relations' titles when TCA label field is type inline (Stefan Froemken) 2013-12-12 d3e9494 #53818 [BUGFIX] Cleanly unset cookies on login in cookie-check (Stefan Neufeind)
2014-05-27Fix static member defines. Fix build with newer Freetype.joerg6-1/+80
2014-05-22Changes 7.37.0:adam2-6/+6
URL parser: IPv6 zone identifiers are now supported CURLOPT_PROXYHEADER: set headers for proxy-only CURLOPT_HEADEROPT: added curl: add --proxy-header sasl: Added support for DIGEST-MD5 via Windows SSPI sasl: Added DIGEST-MD5 qop-option validation in native challange handling imap: Expanded mailbox SEARCH support to use URL query strings imap: Extended FETCH support to include PARTIAL URL specifier nss: implement non-blocking SSL handshake build: Reworked Visual Studio project files poll: enable poll on darwin13 mk-ca-bundle: added -p libtests: add a wait_ms() function
2014-05-22Do not enable webkit-jit option by default on amd64.wiz2-4/+4
It causes segfaults in gnucash reports as of gnucash-2.6. Bump PKGREVISION.
2014-05-22Update to 2.5.6wen2-6/+6
Upstream changes: Moodle 2.5.6 release notes Release date: 12 May, 2014 Here is the full list of fixed issues in 2.5.6. Functional changes MDL-43985 - Checkbox added to control sending of feedback when grading Assignment (backport of MDL-33600) Security issues MSA-14-0014 Cross-site request forgery possible in Assignment MSA-14-0015 Web service token expiry issue for MoodleMobile MSA-14-0016 Anonymous student identity revealed in Assignment MSA-14-0017 File access issue in HTML block MSA-14-0019 Reflected XSS in URL downloader repository Fixes and improvements MDL-45119 - When student opens assignment feedback PDF no error messages are shown MDL-41551 - Block drag-drop fixed for Clean theme on My Home page MDL-44936 - CSS chunking is now more reliable on IE MDL-45154 - Warnings and errors in user profile page fixed MDL-43721 - Poor performance on Assignment grading page fixed
2014-05-21Update contao32 to 3.2.10.taca3-73/+75
Version 3.2.10 (2014-05-21) --------------------------- ### Fixed Correctly urlencode folder names in the file manager (see #6925). ### Update Update MooTools to version 1.5.0 (see #6924). ### Fixed Allow for up to 13 characters in `Validator::isEmail()` (see #6950). ### Fixed Only fall back to the default option if there is no POST data (see #6899). ### Fixed Do not override the event start time in `Events::addEvent()` (see #6701). ### Fixed Correctly detect binary fields during theme import (see #6852). ### Fixed Do not urldecode twice in `DC_Folder` (see #6840). ### Fixed Standardize the fallback behavior of the downloads/gallery element (see #6662). ### Fixed Correctly hide duplicated elements in the module wizard (see #6826). ### Fixed Fix the mediabox "imgBackground" option (see #6866). ### Fixed Strip double quotes in the options wizard (see #6919). ### Fixed Strip the insert tag flags before passing the tag name to the hooks (see #6860). ### Fixed Catch Swift exceptions when sending form data via e-mail (see #6941). ### Update Update the back end date picker to version 2.2.0. ### Update Update ACE to version 1.1.3. ### Fixed Check for reserved article aliases before validating the alias name (see #6978). ### Fixed Store the UUID of uploaded files in the session (see #6986). ### Fixed Only assume a moved file or folder for new resources (see #6907). ### Fixed Correctly strip the file extension in the `File` class (see #6968). ### Fixed Remove the menu when `Swipe.kill()` is executed (see #6861). ### Fixed Consider the protocol when embedding YouTube videos (see #6900).
2014-05-21Update py-flask-script to 2.0.5.kleink2-6/+6
* runserver: Improve handling of '-d' and '-r' switches * Default use_debugger and use_reloader to app.debug
2014-05-21Update py-flask-login to 0.2.11.kleink2-6/+6
Version 0.2.11 -------------- - Fixes missing request loader invocation when authorization header exists.
2014-05-20Changes 1.6.5:adam2-6/+6
These releases address a caching issue which might lead to cache poisoning and an incorrect validation of safe redirect targets. Since these issues will affect the majority of users we strongly encourage everyone to upgrade.
2014-05-18Be consistent about static class member initialisation.joerg6-1/+79
2014-05-18Changes 1.8.9:adam1-2/+1
User-visible changes: - Client-side bugfixes: * log: use proper peg revision over DAV (r1568872) * upgrade: allow upgrading from 1.7 with exclusive locks (r1572102 et al) * proplist: resolve inconsitent inherited property results (r1575270 et al) * increase minimal timestamp sleep from 1ms to 10ms (r1581305 et al) * merge: automatic merge confused by subtree merge (issue 4481) * propget: report proper error on invalid revision for url (r1586255) * commit: fix an assertion when committing a deleted descendant (r1571747, r1571787, r1571795) * merge: resolve segfault when '--force' merges a directory delete (r1577812, r1577813, r1579429) * resolve: prevent interactive conflict resolution when nothing has been done to resolve the conflict (r1577294) * update: fix locks lost from wc with pre-1.6.17 servers (issue 4412) * merge: honor the 'preserved-conflict-file-exts' setting (r1577151) * list: fix '--verbose' against older servers (r1591111) * unlock: fix ability to remove locks with timeouts (r1579588) * copy: fix 'svn copy URL WC' on relocated working copies (r1580626, r1580650) * export: allow file externals to be exported (issue 4427) * move: fix working copy db inconsistency in cert scenarios (issue 4437) * commit: fix an issue where mixed revision copy with non copy descendants that shadow a not present node couldn't be committed (r1518942 et al) * delete: properly remove move_to info when the node in its original location is removed (r1538812 et al) * status; fix an issue where output would vary based on if the target was the node itself or its parent (r1544597 et al) - Server-side bugfixes: * ensure proper access synchronization in fsfs on Windows (r1568953 et al) * svnadmin dump: don't let invalid mergeinfo stop dump (r1574868 et al) * svnserve: resolve performance regression caused by iprops (r1578853 et al) * reduce size of memory buffer when reading config files (r1581296) * remove dead transaction if commit was blocked by hook (r1583977) * svnrdump load: fix crash when svn:* normalization (issue 4490) * fix memcached support (issue 4470) * svndumpfilter: fix order of node record headers (r1578670 et al) * mod_dav_svn: blacklist building with broken versions of httpd; 2.2.25, 2.4.5 and 2.4.6 (r1545835) * mod_dav_svn: allow generic DAV clients to refresh locks (issue 3515) * mod_dav_svn: detect out of dateness correctly during commit (issue 4480) Developer-visible changes: - General: * improve consistency checks of DAV inherited property requests (r1498000) * fix ocassional failure in autoprop_tests.py (r1567752) * avoid duplicate sqlite analyze information rows (r1571214) * add Mavericks to our sysinfo output (r1573088) * bump copyright years to 2014 (r1555403) * unbreak test suite when running as root (r1583580) * resolve buffer overflow in testcode (r1481782) * fix libmagic detection with custom LDFLAGS (r1577200) * fix an out of scope variable use in merge (r1587946) * javahl: fix crash from resolve callback throwing an exception (r1586439) * ruby: fix two memory lifetime bugs (r1586052, r1586467) * fix a missing null byte when handling old pre-1.4 deltas (r1587968) * fix building with APR 0.9.x (r1585499) * make svn_ra_get_locks() and svn_ra_get_lock() report not locked nodes with a NULL svn_lock_t *, as documented (r1578273, r1578311, r1578326) * fix tests for compiler flags
2014-05-17Bump applications PKGREVISIONs for python users that might be usingwiz9-14/+18
python3, since the default changed from python33 to python34. I probably bumped too many. I hope I got them all.
2014-05-16Update to wordpress 3.9.1.morr3-180/+155
Changes: - A smoother media editing experience - Improved visual editing - speed, accessibility, and mobile support - Edit images easily - quicker access to crop and rotation tools, scale images directly in the editor - Drag and drop your images right onto the editor - Image gallery previews right in the editor - Showcase music and clips with simple audio and video playlists - Live widget and header image previews in the Customizer - Stunning new theme browser Version 3.9.1 fixes 34 bugs from 3.9. More details on http://codex.wordpress.org/Version_3.9 and http://codex.wordpress.org/Version_3.9.1
2014-05-15Define initialisers in the headers like most cases already did,joerg4-1/+52
otherwise they might not get emitted correctly. Deal with the freetype header move.
2014-05-15Update py-flask-script to 2.0.3.kleink2-6/+6
No changelog provided. * bug fixes, documentation improvements * better sub-manager option handling Incompatible changes: * command.handle() is now simply command() * short help is '-?'. '-h' is used for --host too often. * Server options '-d' and '-r' are no longer toggles for debugging/reloading. Instead, '-d' forces debugging on and '-D' forces it off, no matter what the default said. * The command.prompt_* compatibility methods have beeen removed. (They were already heavily deprecated.)
2014-05-15Revbump after updating graphics/giflibadam3-6/+6
2014-05-15Update py-flask-security to 1.7.2.kleink3-85/+6
Version 1.7.2 ------------- - Fixed a bug regarding the `password_changed` signal.
2014-05-15Remove circular dependency.wiz1-2/+3
Perhaps this shouldn't be a dependency in p5-libwww instead.
2014-05-15Fix for CVE-2014-3230, from upstream pull request atwiz4-2/+44
https://github.com/libwww-perl/lwp-protocol-https/pull/14 Bump PKGREVISION.
2014-05-15Update to 6.06, add missing dependency on p5-libwww:wiz2-7/+8
2014-04-18 LWP-Protocol-https 6.06 Mike Schilli (3): Merge pull request #12 from drieux/subjectAltName Merge pull request #9 from chorny/master Updated libwww requirement to 6.06 to fix failing t/proxy.t test cases. Gisle Aas (2): Getopt::Long isn't actually used Merge pull request #7 from noxxi/master Alexandr Ciornii (1): better diagnostics in case of failures in apache.t Karen Etheridge (1): Merge pull request #8 from cpansprout/patch-1 Steffen Ullrich (1): correct behavior for https_proxy, this goes together with change to libwww-perl cb80c2ddb7, new method _upgrade_sock in LWP::Protocol::https cpansprout (1): Typo fix: envirionment =~ s/io/o/ drieux (1): support for subjectAltName
2014-05-15Update to 6.06:wiz2-8/+7
2014-04-16 Release 6.06 Ville Skyttä (3): Merge pull request #44 from dsteinbrunner/master Spelling fixes. Merge pull request #55 from oalders/master Karen Etheridge (2): Merge pull request #38 from mbeijen/typo-sting Merge pull request #43 from dsteinbrunner/master David Steinbrunner (2): Spelling corrections Olaf Alders (1): Typo fixes. Steffen Ullrich (1): correct behavior for https_proxy, e.g. don't send plain https:// requests to proxy, but instead establish CONNECT tunnel and then send requests inside tunnel. This change does together with a change in LWP::Protocol::https. The change supports LWP::Protocol::https with the default IO::Socket::SSL backend, but also with Net::SSL. Also: - proxy authorization is supported (http://user:pass@host:port as proxy URL, Net::SSL still needs special HTTPS_PROXY_* environemt variables, as before) - CONNECT request does not need to be the first request inside the tunnel (not with Net::SSL) - conn_cache is read and written inside request(), instead of writing in request() and reading in _new_socket(). If a https tunnel is established the cache_key no longer depends only on proxy host,port but also on the tunnel endpoint - CONNECT is a proxy request and must always use Proxy-Authorization, not Authorization header turugina (1): fix: auth-header of Digest auth did not conform to RFC 2617 when WWW-Authenticate has 'qop' parameter. Gisle Aas (1): SSL libs might trigger ENOTTY on read Michiel Beijen (1): Small typo.
2014-05-13Correctly build as Python Egg.joerg4-16/+18
2014-05-13Updated to version 3.2.1imil2-6/+6
Security fixes The signed-value format used by RequestHandler.set_secure_cookie and RequestHandler.get_secure_cookie has changed to be more secure. This is a disruptive change. The secure_cookie functions take new version parameters to support transitions between cookie formats. The new cookie format fixes a vulnerability that may be present in applications that use multiple cookies where the name of one cookie is a prefix of the name of another. To minimize disruption, cookies in the older format will be accepted by default until they expire. Applications that may be vulnerable can reject all cookies in the older format by passing min_version=2 to RequestHandler.get_secure_cookie. Thanks to Joost Pol of Certified Secure for reporting this issue. Backwards-compatibility notes Signed cookies issued by RequestHandler.set_secure_cookie in Tornado 3.2.1 cannot be read by older releases. If you need to run 3.2.1 in parallel with older releases, you can pass version=1 to RequestHandler.set_secure_cookie to issue cookies that are backwards-compatible (but have a known weakness, so this option should only be used for a transitional period). Other changes The C extension used to speed up the websocket module now compiles correctly on Windows with MSVC and 64-bit mode. The fallback to the pure-Python alternative now works correctly on Mac OS X machines with no C compiler installed.
2014-05-13Update to 29.0.1ryoon2-246/+246
* Sync with firefox-29.0.1
2014-05-13Update to 29.0.1ryoon2-7/+6
Changelog: Fixed 29.0.1 -pdf.js printing white page (1003707) Fixed 29.0.1 - Tabs not visible with dark themes under Windows 8.1 (907373) Fixed 29.0.1 - Session Restore failed with a corrupted sessionstore.js file (1001167) Fixed 29.0.1 - Seer disabled by default (1005958)
2014-05-12Catch up with newer OpenSSL API. From Alexander Pyhalov / OpenIndiana.jperkin2-1/+26
2014-05-11Update www/ruby-rails32 to 3.2.18.taca1-4/+4
No change except version number.
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-25 23:02:58 +0000