/instiki/svn : changes

» Changes from revision 1018

To download this project, use:

bzr branch
http://golem.ph.utexas.edu/~distler/code/instiki/svn/

From Revision 346 to 327

expand all

Rev	Summary	Authors	Date
346	Update Tests Update Tests Functional Test for the new behaviour of Revisions 344-345.	Jacques Distler	2009-01-26
345	Webs that Don't Allow File Uploads Webs that Don't Allow File Uploads ... should still allow you to manually upload files and have them render. Fixed.	Jacques Distler	2009-01-26
344	Security: Instiki 0.16.2 Security: Instiki 0.16.2 On Webs with file uploads enabled, uploaded files were stored (in version 0.16.1 and earlier) in the public/ directory. This was a security threat. A miscreant could upload a .html file. When a user clicked on the link to the file, it was opened (unsanitized) in the browser. As of version 0.16.2, uploaded files are stored in the webs/ directory. Now, when the user clicks on the link, the file is sent with the Content-Disposition: attachment header set, which causes the file to be downloaded, rather than opened in the browser. As always, files downloaded from the internets should be treated with caution. At least, this way, they are not aoutomatically opened in the browser. To move your existing uploaded files to the new location, do a rake upgrade_instiki	Jacques Distler	2009-01-26
343	Equation Numbering in Maruku+itex2MML Equation Numbering in Maruku+itex2MML This was spooged by Revision #263 (to accommodate) BlahTeX/PNG support. Hopefully this way will work in both modes.	Jacques Distler	2009-01-24
342	Export XHTML Pages Export XHTML Pages When a Web uses one of the Markdown Text Filters, and you export all the pages as a zip file, you'd like the MathML and SVG to render when the pages are viewed locally. This means saving them with a .xhtml extension. Users of non-XHTML-capable browsers or Textile users should still get .html files.	Jacques Distler	2009-01-23
341	A Real Fix For the "Backslashes in Included Equations" Bug A Real Fix For the "Backslashes in Included Equations" Bug Ruby's String.sub!(pattern, replacement) routine is fundamentally broken. But the block version works fine. Using the broken routine in the Chunk handler was a subtle mistake.	Jacques Distler	2009-01-17
340	Don't hide equations, except in MarkdownMML and MarkdownPNG Don't hide equations, except in MarkdownMML and MarkdownPNG In other engines, e.g. textile, the equation delimiters have no special meaning. So they should not be used to hide content from wiki processing.	Jacques Distler	2009-01-16
339	Revert Revision 338 Revert Revision 338 That didn't work with nested includes: A: [[!include B]] B: [[!include C]] C: fubar! Added a test for that issue.	Jacques Distler	2009-01-16
338	Fix the "Backslashes in Included Equations" Bug Fix the "Backslashes in Included Equations" Bug See http://golem.ph.utexas.edu/instiki/revision/Known+Bugs?rev=3#IncludedEqs Who knew that @pre_rendered = String.new(self) was not the same as @pre_rendered = String.new @pre_rendered = self ?	Jacques Distler	2009-01-15
337	Hide Equations From WikiChunk Processing Hide Equations From WikiChunk Processing WikiWord (and the like) could wreak havoc in equations. Protect them (the way <a>, <pre> and <code> blocks are protected). For some reason, this doesn't seem to work in inline equations. Maruku is doing something funny there ... => one failing Unit Test.	Jacques Distler	2009-01-14
336	Boneheaded Boneheaded Remove some nonexistent callbacks, added in Revisions 265, 288.	Jacques Distler	2009-01-11
335	Cache file_list Action Cache file_list Action Also, slightly smarter cache expiry, upon uploading/deleting a file.	Jacques Distler	2009-01-11
334	Remove last vestige of CGI.unescapeHTML Remove last vestige of CGI.unescapeHTML	Jacques Distler	2009-01-10
333	Ack! Try that again. Ack! Try that again.	Jacques Distler	2009-01-10
332	Referring Pages for File List Referring Pages for File List For the file_list action, include the pages which link to the given file(s). This required rejiggering so that that information is actually retained in the database. Unfortunately, you'll actually need to revise the page(s) in question, because that's the only time this information is updated in the database.	Jacques Distler	2009-01-10
331	Correct Type on file_list View Correct Type on file_list View	Jacques Distler	2009-01-09
330	More Tests More Tests Enable unit tests for the HTML5lib Sanitizer (used in the <nowiki> environment).	Jacques Distler	2009-01-06
329	Add a couple of XSS tests. Add a couple of XSS tests. Some more tests from Clint Ruoho. The main branch of Instiki (and, I guess, the old sanitizer) are vulnerable. Also: under Ruby 1.8.x, CGI.unescapeHTML screws up horribly decoding NCRs which represent high-bit ASCII characters. UTF-8 agrees with 7-bit ASCII, but CGI.unescapeHTML doesn't seem to know that they disagree for i>127.	Jacques Distler	2009-01-05
328	Version 0.16.1 Version 0.16.1 Make this version (minimally) usable with Textile Markup: For Webs with "Textile", "RDoc" or "Mixed" markup option selected, send text/html instead of application/xhtml+xml. This makes this software minimally usable with those markup dialects. "Markdown+itex2MML", "Markdown+BlahTeX/PNG" and "Markdown" should work as before, sending application/xhtml+xml to capable browsers. Bump the version number.	Jacques Distler	2009-01-04
327	Two Bugs Two Bugs 1) Orphaned pages in a Category were not being listed correctly 2) "list" view was not being expired correctly on deletion of orphaned pages.	Jacques Distler	2009-01-01