Commits · ab8a8cd7162db781b4c433395fe3d92f81af8b87 · mahara / mahara

17 May, 2010 3 commits
- adodb: add a README file listing our customisations · ab8a8cd7
  Francois Marier authored May 17, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  ab8a8cd7
- Pieforms: remove over-zealous escaping · 43a14292
  Francois Marier authored May 17, 2010
```
This problem was partly introduced in d7e90db7

Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  43a14292
- Pieforms: harden custom renderer against potential XSS attacks · aad86b66
  Francois Marier authored May 17, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  aad86b66
14 May, 2010 8 commits
- Merge branch 'pieforms_hardening' · 649764b6
  Francois Marier authored May 14, 2010
  
  649764b6
- Pieforms: harden all elements to help prevent XSS attacks · a053c5e9
  Francois Marier authored May 14, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  a053c5e9
- Pieforms: harden all renderers to help prevent XSS attacks · d7e90db7
  Francois Marier authored May 14, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  d7e90db7
- Pieforms: add some more input validation, just in case · 656b63cb
  Francois Marier authored May 13, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  656b63cb
- Add a makefile to easily run tests and optimise images · ad477e13
  Francois Marier authored May 14, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  ad477e13
- Losslessly optimise all images · efe861a4
  Francois Marier authored May 14, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  efe861a4
- Split admin options into seperate fieldsets · 8c2c43fd
  Josh Schmidt authored May 13, 2010
```
(cherry picked from commit 664d41d66afcf8be768f7e17634c187195e73768)
```
  8c2c43fd
- Fixed chrome rendering bug on main nav · 7586665e
  Josh Schmidt authored May 13, 2010
```
(cherry picked from commit 4af4506fa10bfdd60abf48b2c28fe8e7e23fc04e)
```
  7586665e
13 May, 2010 4 commits
- Add a copyright notice which includes an extra permission for linking with OpenSSL · a9321457
  Francois Marier authored May 14, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  a9321457
- Changed "Publicly Viewable Group" description to make it more obvious. · 3af121fa
  Ruslan Kabalin authored May 13, 2010
```
Signed-off-by: Ruslan Kabalin <ruslan.kabalin@luns.net.uk>
```
  3af121fa
- Revert "Made non-public groups invisible in search results." · 3e2b6679
  Ruslan Kabalin authored May 13, 2010
```
As discussed on IRC, it appeared that non-public groups are designed solely to
control group visibility for people who are not the members of site (not
logged in users). Thus, the patch is reverted.

This reverts commit 284d8620

.
Signed-off-by: Ruslan Kabalin <ruslan.kabalin@luns.net.uk>
```
  3e2b6679
- Bug #579762 site disabled for upgrade message fails to appear · 51e90d63
  Piers Harding authored May 13, 2010
```
Signed-off-by: Piers Harding <piers@catalyst.net.nz>
```
  51e90d63
12 May, 2010 5 commits
- Merge branch 'master' of gitorious.org:mahara/mahara · d5905e1f
  Piers Harding authored May 13, 2010
  
  d5905e1f
- auth/saml: add flag to choose matching against remote user or · 6389e53d
  Piers Harding authored May 13, 2010
```
real username
```
  6389e53d
- Remove bundled copy of Services_JSON · 4229f701
  Francois Marier authored May 10, 2010
```
This is no longer needed since we require at least php >= 5.2.0
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  4229f701
- Bump php dependency to 5.2.0 or later · 9dff7763
  Francois Marier authored May 10, 2010
```
We should have done this for 1.2 since that's what Dwoo requires.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  9dff7763
- added missing required style to calendar text fields in raw theme · 8b6515ea
  Stacey Walker authored May 12, 2010
```
Signed-off-by: Stacey Walker <stacey@catalyst.net.nz>
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  8b6515ea
11 May, 2010 3 commits

Made non-public groups invisible in search results. · 284d8620

Ruslan Kabalin authored May 10, 2010


Signed-off-by: Ruslan Kabalin <ruslan.kabalin@luns.net.uk>
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

284d8620

Removed SQL subqueries from search_group function. · 500ea723

Ruslan Kabalin authored May 10, 2010


Signed-off-by: Ruslan Kabalin <ruslan.kabalin@luns.net.uk>
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

500ea723

Removed unnecessary second 'display name' option from view owners name option list · 97525515
Stacey Walker authored May 11, 2010
```
Signed-off-by: Stacey Walker <stacey@catalyst.net.nz>
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
97525515

10 May, 2010 12 commits
- Turn off auto_escape in template for institution column of admin user search · 6c6b718c
  Richard Mansfield authored May 11, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  6c6b718c
- Print date at the bottom of graphs on stats pages · 134d63d4
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  134d63d4
- Don't count dashboard views in viewtype graph; add string for dashboard view type · 3b3592bd
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  3b3592bd
- Require confirmation before deleting a comment · 49d47e43
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  49d47e43
- Use format_date to display submission times rather than parsing the db timestamp · 2176ecfc
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  2176ecfc
- Don't show view submission form when looking at other peoples' views · 7e4efe58
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  7e4efe58
- Make group message notifications delayed. In future they may go out to all group members. · 3ab35a4b
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  3ab35a4b
- Don't double escape latest view headings; move clean_html call into template · 2dd689fe
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  2dd689fe
- Remove extra whitespace in internal notification display · 0dc1f7d1
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  0dc1f7d1
- Don't double escape in inbox templates · 91313817
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  91313817
- Allow html in feedback emails, shorten internal feedback notifications · d5cc8db4
  Richard Mansfield authored May 10, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  d5cc8db4
- Refactor all search_group functions into one by using db_ilike() · b908eb90
  Francois Marier authored May 10, 2010
```
(This was suggested by Ruslan Kabalin)
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
  b908eb90
07 May, 2010 4 commits

lib/htmloutput.php: move all HTML output to a single file · 484a4f87

Francois Marier authored May 07, 2010



All HTML output (i.e. all echo/print statements going to the browser) should
now be in this file.

This is so that we can easily review all areas of Mahara where XSS bugs could
hide (other than templates and PHP pieforms).

Note that lib/errors.php echo statements can't be moved here since we want
that file to always work and can't include other code/files.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

484a4f87

Shorten forum posts in internal notifications and don't double-escape subject · a7f35154
Richard Mansfield authored May 07, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
a7f35154
Postgres query fix! · 88850291
Richard Mansfield authored May 07, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
88850291
Display messages in empty dashboard blocks · 8e6cbcc4
Richard Mansfield authored May 07, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
8e6cbcc4

06 May, 2010 1 commit
- Don't stretch profile images in online users block · 4077c54e
  Richard Mansfield authored May 07, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  4077c54e