engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2232 commits 1 branch 0 tags 110 MiB
Commit graph

2232 commits

This branch
This branch
All branches
Author SHA1 Message Date
Marcin Kuzminski
1115a23bf8 Added tag v4.10.2 for changeset 434ad90ec8d6 2017-11-08 20:01:22 +01:00
Marcin Kuzminski
f47a67c92d release: Finish preparation for 4.10.2 2017-11-08 20:01:21 +01:00
Marcin Kuzminski
8426055d3f release: updated pip2nix output for 4.10.2 2017-11-08 20:01:19 +01:00
Marcin Kuzminski
a05458f623 release: Start preparation for 4.10.2 2017-11-08 19:52:00 +01:00
Marcin Kuzminski
f6bfc79279 docs: added 4.10.2 release notes 2017-11-08 16:41:25 +01:00
Marcin Kuzminski
38e4304852 helpers: fix metatags extraction in case description is empty 2017-11-08 16:44:21 +01:00
Marcin Kuzminski
b32fce1a79 Added tag v4.10.1 for changeset 0a6821cbd6b0 2017-11-07 12:02:09 +01:00
Marcin Kuzminski
1889e9ace1 release: Finish preparation for 4.10.1 2017-11-07 12:02:08 +01:00
Marcin Kuzminski
b69d141434 release: updated pip2nix output for 4.10.1 2017-11-07 12:02:06 +01:00
Marcin Kuzminski
f585921e67 release: Start preparation for 4.10.1 2017-11-07 11:57:08 +01:00
Marcin Kuzminski
75ba8ca5ac docs: added 4.10.1 release notes 2017-11-07 11:33:23 +01:00
Marcin Kuzminski
339cab81cd db: reduce size of fingerprint column for mysql compat. 
- we can get into troubles by having long fingerprint under mysql
because we do an index on this column.
 2017-11-07 11:07:51 +01:00
Marcin Kuzminski
169de44773 Added tag v4.10.0 for changeset 4ba4d74981ce 2017-11-06 12:54:11 +01:00
Marcin Kuzminski
5adccfdb08 release: Finish preparation for 4.10.0 2017-11-06 12:54:10 +01:00
Marcin Kuzminski
dceeaa04cc release: updated pip2nix output for 4.10.0 2017-11-06 12:54:05 +01:00
Marcin Kuzminski
436b4da762 i18n: Update compiled message objects and js i18n files 2017-11-06 12:46:51 +01:00
Marcin Kuzminski
3e2fd18e85 i18n: Pulled translation from Transifex 2017-11-06 12:46:11 +01:00
Marcin Kuzminski
437c3ab9e3 i18n: Updated message catalog template 2017-11-06 12:45:12 +01:00
Marcin Kuzminski
621f102a50 release: Merge default into stable for release preparation 2017-11-06 12:37:06 +01:00
Marcin Kuzminski
15972afecb ssh: use proper way of extracting the HOOK_PROTOCOL out of vcssettings. 
- it might be not stored inside the .ini file so we should use the config
that has proper defaults, and it's used in many other places.
 2017-11-06 11:43:38 +01:00
Marcin Kuzminski
043d5232de ssh: always expand the path for the generated authorized_keys file. 
Without it we can lead to path problems on reading the ~.
 2017-11-06 11:13:05 +01:00
Marcin Kuzminski
fc7aa0a765 i18n: updated message catalog 2017-11-03 16:45:15 +01:00
Marcin Kuzminski
0de9d54cdd i18n: updated JS translations 2017-11-03 16:41:40 +01:00
Marcin Kuzminski
e9c6d046fc docs: updated API documentation 2017-11-03 15:49:14 +01:00
Marcin Kuzminski
8724af117c docs: added release notes for 4.10.0 2017-11-03 14:39:13 +01:00
Marcin Kuzminski
82baccf66d ssh: prevent exceptions when user associated to stored old key is not found. 2017-11-03 13:07:02 +01:00
Marcin Kuzminski
8686845a97 docs: updated section on performance, scaling, ssl support 2017-10-30 12:52:42 +01:00
Marcin Kuzminski
03068b3426 core: added support for golang go import functionality 2017-10-29 10:14:24 +01:00
Marcin Kuzminski
10cad89493 auth: don't break hashing in case of user with empty password. 
In some cases such as LDAP user created via external scripts users might
set the passwords to empty. The hashing uses the md5(password_hash) to
store reference to detect password changes and forbid using the same password.

In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such
case. This change makes it work for empty passwords now.
 2017-10-27 16:29:46 +02:00
Marcin Kuzminski
28150949f9 release: merge back stable branch into default 2017-10-27 12:44:25 +02:00
Marcin Kuzminski
23bbcdcc35 Added tag v4.9.1 for changeset d9aa3b27ac9f 2017-10-26 15:20:40 +02:00
Marcin Kuzminski
b07edecfd5 release: Finish preparation for 4.9.1 2017-10-26 15:20:39 +02:00
Marcin Kuzminski
a488a6834d release: updated pip2nix output for 4.9.1 2017-10-26 15:20:38 +02:00
Marcin Kuzminski
89d02cbb4a release: Start preparation for 4.9.1 2017-10-26 15:16:45 +02:00
Marcin Kuzminski
434f720559 docs: added release notes for 4.9.1 2017-10-26 13:20:57 +02:00
Marcin Kuzminski
c40f56b538 docs: update celery docs 2017-10-25 15:07:55 +02:00
Marcin Kuzminski
8b7a4217d9 docs: update SSH documentation 2017-10-25 14:59:05 +02:00
Marcin Kuzminski
9262805438 core: use common bootstrap for pyramid app 2017-10-25 11:58:54 +02:00
Marcin Kuzminski
38c78cd493 ssh: allow customizing the base_url for running application. 
Allows proper URLs inside events when executing on SSH calls.
 2017-10-25 11:48:03 +02:00
Marcin Kuzminski
d394c2653a ssh-support: enabled full handling of all backends via SSH. 
- run callback deamons
- run proper authentication checks
- add relative loging.
- fixes #5312
 2017-10-24 23:48:14 +02:00
Marcin Kuzminski
ba710e874d ssh-support: don't use API calls to fetch the data. 
We now rely on pure bootstrap executable that has access to the database and can
check things directly without any API calls.
 2017-10-23 16:09:50 +02:00
Marcin Kuzminski
54357ac219 config: remove obsolete debugtoolbar from pylons. 2017-10-24 23:47:56 +02:00
Marcin Kuzminski
3135dd089e audit-logger: use raw JSON with empty data to control unicode decode warnings. 
Passing in empty dict triggers warnings on sqlalchemy level that we're trying to pass in NON unicode into Unicode column.
 2017-10-24 10:50:57 +02:00
Marcin Kuzminski
7e65f0e21d exceptions: improve handling of exception that are unhandled. 
- inject traceback information into unhandled exceptions.
 2017-10-23 20:43:19 +02:00
Marcin Lulek
18d98e9d17 comments: escape file-paths on commenting to prevent html breakage 2017-10-20 14:11:15 +02:00
Marcin Lulek
b95942a08c pull-requests: security, prevent from injecting comments to other pull requests users 
don't have access to.
 2017-10-19 08:56:32 +02:00
Marcin Lulek
e312dff198 repo-settings: ensure deletion on repo settings model validate 
the settings id against the initialized model repo.

- prevents from malicious deletions of settings by forgin IDs
 2017-10-18 12:16:40 +02:00
Marcin Lulek
897e95f252 select2: always escape .text attributes to prevent XSS via 
vcs references.
 2017-10-18 11:21:18 +02:00
Marcin Kuzminski
ce2de33a5a repo-forks: stable, security, fix issue when forging fork_repo_id could allow reading other people forks. 2017-10-26 10:14:38 +02:00
Marcin Lulek
5cfea94d5c select2: always escape .text attributes to prevent XSS via 
vcs references.
 2017-10-18 11:21:18 +02:00