summaryrefslogtreecommitdiff
path: root/IkiWiki
AgeCommit message (Collapse)Author
2008-02-10Allow the smb: URI scheme.Josh Triplett
2008-02-10Allow the snews: URI scheme.Josh Triplett
2008-02-10Do not allow the steam: URI scheme.Josh Triplett
2008-02-10Match literal '.' in URI schemas containing '.', rather than matching any ↵Josh Triplett
character
2008-02-10* meta: Check that the urls provided for authorurl, permalink, and openidJoey Hess
are safe and can't contain javascript.
2008-02-10export $safe_url_regexpJoey Hess
2008-02-10Also filter the attributes cite, longdesc, and usemap, which can contain URIsJosh Triplett
2008-02-10add parens around scheme regexpJoey Hess
2008-02-10Do not allow the about: URI schemeJosh Triplett
Some browsers interpret about: URIs like a limited version of data: URIs. In particular, some versions of Internet Explorer interpret arbitrary HTML content in about: URIs.
2008-02-10fix data:image handlingJoey Hess
2008-02-10* htmlscrubber security fix: Block javascript in uris.Joey Hess
* Add htmlscrubber test suite.
2008-02-09Merge branch 'master' into prefix-directivesJosh Triplett
Conflicts: debian/changelog templates/change.tmpl
2008-02-09* Page templates can now use CTIME to show when the page was created.Joey Hess
2008-02-07* Don't die if running with --getctime and rcs_getctime throws an error.Joey Hess
There are several cases (recentchanges files, aggregated files) where some source files are not in revision control.
2008-02-05add support for prefix_directivesJoey Hess
2008-02-04proper fix for the preview/will_render issueJoey Hess
2008-02-04preview shouldn't show the feed buttons or post formJoey Hess
2008-02-04* inline: Add new `allowrss` and `allowatom` config options. These can beJoey Hess
used if you want a wiki that doesn't default to generating rss or atom feeds, but that does allow them to be turned on for specific blogs.
2008-02-04the old code worked, suprisingly, but I prefer this formJoey Hess
2008-02-04* inline: When previewing, still call will_render on rss/atom files,Joey Hess
just avoid actually writing the files. This is necessary because ikiwiki saves state after a preview (in case it actually *did* write files), and if will_render isn't called its security checks will get upset when the page is saved. Thanks to Edward Betts for his help tracking this tricky bug down.
2008-02-03move saveindex call into preview blockJoey Hess
This call is only present to handle the case where previewing a page actually causes files to be rendered.
2008-02-03remove another commit mail mentionJoey Hess
2008-02-03remove spurious EOFJoey Hess
2008-02-03* monotone changes by Brian May:Joey Hess
- On commits, replace "mtn sync" bidirectional with "mtn push" single direction. No need to pull changes when doing a commit. mtn sync is still called in rcs_update. - Support for viewing differences via patches using viewmtn.
2008-02-03implement aggregate_locking designJoey Hess
Now aggregation will not lock the wiki. Any changes made during aggregaton are merged in with the changed state accumulated while aggregating. A separate lock file prevents multiple concurrent aggregators. Garbage collection of orphaned guids is much improved. loadstate() is only called once per process, so tricky support for reloading wiki state is not needed. (Tested fairly thuroughly.)
2008-02-03add aggregate locking functionsJoey Hess
2008-02-03* recentchanges: Exipre all *._change pages, even if the directoryJoey Hess
they're in has changed.
2008-02-03* recentchanges: Improve handling of links on the very static changes pagesJoey Hess
by thunking to the CGI, which can redirect to the page, or allow it to be created if it doesn't exist.
2008-02-03prototype fixJoey Hess
2008-02-03* aggregate: Revert use of forking to not save state, that was not the rightJoey Hess
approach.
2008-02-03* poll: This plugin turns out to have edited pages w/o doing any locking.Joey Hess
Oops. Convert it from a cgi to a sessioncgi hook, which will work much better.
2008-02-03* cgi hooks are now run before ikiwiki state is loaded.Joey Hess
* This allows locking the wiki before loading state, which avoids some tricky locking code when saving a web edit.
2008-02-02* aggregate: Forking a child broke the one state that mattered: ForcingJoey Hess
the aggregating page to be rebuilt. Fix this.
2008-02-02* Revert preservation of input file modification times in output files,Joey Hess
since this leads to too many problems with web caching, especially with inlined pages. Properly solving this would involve tracking every page that contributes to a page's content and using the youngest of them all, as well as special cases for things like the version plugin, and it's just too complex to do.
2008-01-30move openiduser function to the openid pluginJoey Hess
2008-01-30move recentchanges link enabling into a pagetemplate hookJoey Hess
2008-01-30Expand file-id in diffurl in the bzr backend.Jelmer Vernooij
2008-01-29rename bazaar -> bzr after discussion with jelmerJoey Hess
2008-01-29commit only the changed fileJoey Hess
2008-01-29stylistic changesJoey Hess
Remarkably few. Also, I removed the stub for the obsolete rcs_notify function.
2008-01-29Merge git://git.samba.org/jelmer/ikiwikiJoey Hess
2008-01-29really fix the baseurl problemJoey Hess
the issue is that HTML::Template doesn't expand top-level variables when inside a loop
2008-01-29avoid temp varJoey Hess
2008-01-29don't scan internal pagesJoey Hess
scan() does too much. All that is needed is to preprocess the internal page in scan-only mode.
2008-01-29merged the recentchanges branchJoey Hess
misc fixes
2008-01-29add missing test to avoid uninitialised value when a page with metadata is ↵Joey Hess
removed
2008-01-29* meta: Add pagespec functions to match against title, author, authorurl,Joey Hess
license, and copyright. This can be used to create custom RecentChanges. * meta: To support the pagespec functions, metadata about pages has to be retained as pagestate. * Fix encoding bug when pagestate values contained spaces.
2008-01-29make the author metadata for changes pages be the un-munged openidJoey Hess
2008-01-29avoid redundant recentpages action on the recentchanges page itselfJoey Hess
2008-01-29added configuration for recentchangesJoey Hess
I kept it to a simple global configuration, rather than using the preprocessor directive for recentchanges, because that had chicken and egg problems and seemed overcomplicated. This should work reasonably well, though it would be good to add some more metadata so that more customised recentchanges pages can be made.