| Age | Commit message (Collapse) | Author |
|---|
|
inline, already escaped there
|
|
is an actual security hole as it allows insertion of html into the title
element of a page, which is not processed by the htmlscrubber.
|
|
|
|
|
|
|
|
was enabled and tried to lock the already locked wiki.
|
|
|
|
were titlepage escaped in the urls, and then doubly escaped by the CGI
when editing. To fix this, I removed the titlepage escaping in the edit
urls.
* That means that *every edit link* on the wiki is potentially changed.
Rebuilding wikis on upgrade to this version therefore necessary; enabled
that in postinst.
|
|
|
|
|
|
with underscores in their filenames, since the link code also used
titlepage. Create a new linkpage function and have the link code use that
instead.
|
|
|
|
|
|
|
|
|
|
previous ugly hack used to avoid writing rss feeds in previews.
* Fix the img plugin to avoid overwriting images in previews. Instead it
does all the work to make sure the resizing works, and dummys up a resized
image using width and height attributes.
* Also fixes img preview display, the links were wrong in preview before.
|
|
|
|
templates.
|
|
|
|
|
|
commit hook, it was possible for one CGI to race another one and "win"
the commit of both their files. This race has been fixed by adding a new
commitlock, which when locked by the CGI, disables the commit hook
(except for commit mails). The CGI then takes care of the updates the
commit hook would have done.
|
|
dropdown when creating a new page.
|
|
|
|
|
|
This lets ikiwiki not build depend on perlmagic.
|
|
parameters remain the same, but additional options are now passed in using
named parameters.
* Change plugin interface version to 1.02 to reflect this change.
* Add a new anchor option to htmllink. Thanks Ben for the idea.
* Support anchors in wikilinks.
* Add a "more" plugin based on one contributed by Ben to allow implementing
those dreaded "Read more" links in blogs.
|
|
|
|
|
|
(I had to get a pretty date somehow today..)
|
|
|
|
|
|
including out of disk space situations. ikiwiki should never leave
truncated files, and if the error occurs during a web-based file edit,
the user will be given an opportunity to retry.
Inspired by the many ways Moin Moin destroys itself when out of disk. :-)
* Fix syslogging of errors.
|
|
|
|
preprocessing it.
* Fix smiley plugin to support smileys at the very beginning or end of
the content.
|
|
|
|
|
|
* Add a "conditional" plugin, which allows displaying text if a condition
is true. It is enabled by default so conditional can be used in the
basewiki.
* Use conditionals in the template for plugins, so that plugin pages
say if they're currently enabled or not, and in various other places
in the wiki.
|
|
non-page format files in the wiki. To exploit this, the file already had
to exist in the wiki, and the web user would need to somehow use the web
based editor to replace it with malicious content.
(Sorry Josh, this means you can't edit style.css directly anymore,
although I do appreciate your fixes, actually..)
|
|
|
|
|
|
|
|
PageSpecs, by using "./". pagespec_match() has grown a new third parameter
to support this.
|
|
edited.
* Move code forcing signing before edit to a new "signinedit" plugin, and
code checking for locked pages into a new "lockedit" plugin. Both are
enabled by default.
* Remove the anonok config setting. This is now implemented by a new
"anonok" plugin. Anyone with a wiki allowing anonymous edits should
change their configs to enable this new plugin.
* Add an opendiscussion plugin that allows anonymous users to edit
discussion pages, on a wiki that is otherwise wouldn't allow it.
* Lots of CGI code reorg and cleanup.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
