summaryrefslogtreecommitdiff
path: root/IkiWiki
AgeCommit message (Collapse)Author
2008-02-29Allow colons in URLs after the first slashAdeodato Simó
A new regexp fixes this bug: http://ikiwiki.info/bugs/No_link_for_blog_items_when_filename_contains_a_colon/ I traced this down to htmlscrubber. If disabled, it works. If enabled, then $safe_url_regexp determines the URL unsafe because of the colon and hence removes the src attribute. Digging into this, I find that RFC 3986 pretty much discourages colons in filenames: """ A path segment that contains a colon character (e.g., "this:that") cannot be used as the first segment of a relative-path reference, as it would be mistaken for a scheme name. Such a segment must be preceded by a dot-segment (e.g., "./this:that") to make a relative- path reference. """ on the other hand, with usedirs, any link to another page will be prepended by ../ anyway, so that makes them okay again. The solution still seems not to use colons. In any case, htmlscrubber should get a new regexp, courtesy of dato. I have tested and verified this. Signed-off-by: martin f. krafft <madduck@madduck.net>
2008-02-24avoid calling getctime on internal pagesJoey Hess
internal pages won't be in revision control so this avoids some ugly noise
2008-02-24* inline: When forcing urls absolute for rss feeds, skip mailto and otherJoey Hess
such urls.
2008-02-24Fix links generated by preprocessor directives when previewing.Joey Hess
As was already done for linkfication, links generated in a prevew page are relative to the top of the wiki, so it has to be told that the destpage is there. I was using "" to indicate this, but that may confuse some preprocessor plugins, which treat parameters with an empry value specially (sparkline is one such). Instead, use "/", which is more accurate anyway and works just as well.
2008-02-24* Fix another preview will_render bug. This one involved inline,Joey Hess
which forced a scan of the page to make available metadata that appeared after the inline directive. Problem is that scan made it forget about any other files rendered due to the page. The scan also turns out to be unnecessary now, since meta persistently stores state and it's always available. So it was just removed.
2008-02-20* tla: Remove call to escapeHTML when constructing recentchanges message;Joey Hess
the html is escaped at a different level. Closes: #466495 * bzr, mercurial: Remove unused import of escapeHTML.
2008-02-14* monotone: Add code to default mergerc file to runJoey Hess
_MTN/ikiwiki-netsync-hook when a commit is merged in from the net.
2008-02-14* Preview limits the page dropdown to what's selected previouslyJoey Hess
(as preserving the full list across preview would be tricky). Userdirs were still being offered as an option there, remove them. * Fix a bug where user A created a page concurrently with user B, and when B previewed it would redirect B to A's new page, losing B's work. Instead, don't redirect and let conflict handling resolve it.
2008-02-14* The search plugin needs to override <base> to point to the directoryJoey Hess
containing ikiwiki.cgi, but this should not change the urls to the style sheets etc. Add a new forcebareurl parameter to misctemplate to allow it to do that.
2008-02-11* camelcase: Convert to use new linkify and scan hooks rather than the oldJoey Hess
hack.
2008-02-11* Add the linkify and scan hooks. These hooks can be used to implementJoey Hess
custom, first-class types of wikilinks. * Move standard wikilink implementation to a new wikilink plugin, which will of course be enabled by default.
2008-02-11* Generate XML RPC messages with the encoding set to utf-8 insteadJoey Hess
of XML::RPC's default of us-ascii. Allows interoperation with python's xmlrpc library, which threw invalid encoding exceptions and caused the rst plugin to hang.
2008-02-10use quotemeta when building the regexpJoey Hess
2008-02-10Allow the smb: URI scheme.Josh Triplett
2008-02-10Allow the snews: URI scheme.Josh Triplett
2008-02-10Do not allow the steam: URI scheme.Josh Triplett
2008-02-10Match literal '.' in URI schemas containing '.', rather than matching any ↵Josh Triplett
character
2008-02-10* meta: Check that the urls provided for authorurl, permalink, and openidJoey Hess
are safe and can't contain javascript.
2008-02-10export $safe_url_regexpJoey Hess
2008-02-10Also filter the attributes cite, longdesc, and usemap, which can contain URIsJosh Triplett
2008-02-10add parens around scheme regexpJoey Hess
2008-02-10Do not allow the about: URI schemeJosh Triplett
Some browsers interpret about: URIs like a limited version of data: URIs. In particular, some versions of Internet Explorer interpret arbitrary HTML content in about: URIs.
2008-02-10fix data:image handlingJoey Hess
2008-02-10* htmlscrubber security fix: Block javascript in uris.Joey Hess
* Add htmlscrubber test suite.
2008-02-09Merge branch 'master' into prefix-directivesJosh Triplett
Conflicts: debian/changelog templates/change.tmpl
2008-02-09* Page templates can now use CTIME to show when the page was created.Joey Hess
2008-02-07* Don't die if running with --getctime and rcs_getctime throws an error.Joey Hess
There are several cases (recentchanges files, aggregated files) where some source files are not in revision control.
2008-02-05add support for prefix_directivesJoey Hess
2008-02-04proper fix for the preview/will_render issueJoey Hess
2008-02-04preview shouldn't show the feed buttons or post formJoey Hess
2008-02-04* inline: Add new `allowrss` and `allowatom` config options. These can beJoey Hess
used if you want a wiki that doesn't default to generating rss or atom feeds, but that does allow them to be turned on for specific blogs.
2008-02-04the old code worked, suprisingly, but I prefer this formJoey Hess
2008-02-04* inline: When previewing, still call will_render on rss/atom files,Joey Hess
just avoid actually writing the files. This is necessary because ikiwiki saves state after a preview (in case it actually *did* write files), and if will_render isn't called its security checks will get upset when the page is saved. Thanks to Edward Betts for his help tracking this tricky bug down.
2008-02-03move saveindex call into preview blockJoey Hess
This call is only present to handle the case where previewing a page actually causes files to be rendered.
2008-02-03remove another commit mail mentionJoey Hess
2008-02-03remove spurious EOFJoey Hess
2008-02-03* monotone changes by Brian May:Joey Hess
- On commits, replace "mtn sync" bidirectional with "mtn push" single direction. No need to pull changes when doing a commit. mtn sync is still called in rcs_update. - Support for viewing differences via patches using viewmtn.
2008-02-03implement aggregate_locking designJoey Hess
Now aggregation will not lock the wiki. Any changes made during aggregaton are merged in with the changed state accumulated while aggregating. A separate lock file prevents multiple concurrent aggregators. Garbage collection of orphaned guids is much improved. loadstate() is only called once per process, so tricky support for reloading wiki state is not needed. (Tested fairly thuroughly.)
2008-02-03add aggregate locking functionsJoey Hess
2008-02-03* recentchanges: Exipre all *._change pages, even if the directoryJoey Hess
they're in has changed.
2008-02-03* recentchanges: Improve handling of links on the very static changes pagesJoey Hess
by thunking to the CGI, which can redirect to the page, or allow it to be created if it doesn't exist.
2008-02-03prototype fixJoey Hess
2008-02-03* aggregate: Revert use of forking to not save state, that was not the rightJoey Hess
approach.
2008-02-03* poll: This plugin turns out to have edited pages w/o doing any locking.Joey Hess
Oops. Convert it from a cgi to a sessioncgi hook, which will work much better.
2008-02-03* cgi hooks are now run before ikiwiki state is loaded.Joey Hess
* This allows locking the wiki before loading state, which avoids some tricky locking code when saving a web edit.
2008-02-02* aggregate: Forking a child broke the one state that mattered: ForcingJoey Hess
the aggregating page to be rebuilt. Fix this.
2008-02-02* Revert preservation of input file modification times in output files,Joey Hess
since this leads to too many problems with web caching, especially with inlined pages. Properly solving this would involve tracking every page that contributes to a page's content and using the youngest of them all, as well as special cases for things like the version plugin, and it's just too complex to do.
2008-01-30move openiduser function to the openid pluginJoey Hess
2008-01-30move recentchanges link enabling into a pagetemplate hookJoey Hess
2008-01-30Expand file-id in diffurl in the bzr backend.Jelmer Vernooij