Commit graph

121 commits

Author SHA1 Message Date
Marcin Kuzminski
9665179aa5 caches: use new decorator that uses conditional caches skipping dogpile if cache is disabled. 2018-07-14 18:17:42 +02:00
Marcin Kuzminski
ec504c9907 caches: use delete_multi for clearing out cache keys.
- This is a safer and more efficient way of purging many keys.
- For file based cache it only opens the DB once
2018-07-13 18:39:52 +02:00
Marcin Kuzminski
84d673d387 caches: use dogpile for sql_cache_short region. 2018-07-12 17:20:03 +02:00
Marcin Kuzminski
ddc445856e caches: rewrite of auth/permission caches to dogpile. 2018-07-05 20:14:33 +02:00
Marcin Kuzminski
f62a1b94f7 tests: don't use md5 for testing crypto for compliance reasons. 2018-07-03 14:30:57 +02:00
Marcin Kuzminski
225757aaf3 hooks: made the callback host configurable.
- This allows easier docker container seperation
2018-07-03 11:57:03 +02:00
Marcin Kuzminski
42c80fe075 shadow-repos: use numeric repo id for creation of shadow repos.
- Fixes a problem after rename or move into repository group.
2018-06-21 14:04:06 +02:00
Marcin Kuzminski
7d870ea83a mercurial: protocol security updates.
- fixes Mercurial CVE for lack of permissions checking on mercurial batch commands
- more strict checks for permissions, now default to push instead of pull
to be always on safe side.
- decypher batch commands and pick top-most permission to be used
2018-04-25 13:10:52 +02:00
Marcin Kuzminski
bdf5f0afb6 svn: enable hooks and integration framework execution.
- This change will allow SVN to execute rhodecode integration framework
via executing the builting hooks.
- uses txn_id for svn to provide metadata required via Apache
- Interception of SVN transaction is required to use temporary stores for metadata
- hooks are now part of vcsserver where the install/control logic is stored
2018-04-06 12:44:01 +02:00
Marcin Kuzminski
db73f0fdd2 diffs: in case of text lexers don't do any HL because of pygments newline
conversion

- split fix for non-standard file endings, e.g only \r
- fixes #5422
2018-02-07 15:03:42 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
4f426c33f5 tests: rewrote code for running vcs_operations. Now it starts it's own
configurable instances for exactly those tests.
2017-12-18 21:19:29 +01:00
Marcin Kuzminski
b92f1b8c37 markdown: use bleach to cleanup html from markdown. This also enabled strict
non XSS subset of html to be enable on markdown.
2017-12-06 22:56:27 +01:00
Marcin Kuzminski
1fccd17a6d auth, performance: use cache_ttl for anonymous access taken from the rhodecode plugin.
- for operations like svn this boosts performance significantly for anonymous access enabled.
2017-12-04 14:20:53 +01:00
Marcin Kuzminski
19744d8230 vcs-ops: store user_id inside the extras for vcs context operations.
- we'll use this one for bootstrap of async tasks.
2017-11-30 17:41:05 +01:00
Marcin Kuzminski
245d213bf2 vcs: also register a global config for vcs_handler.
- this solves a case when SVN repository needs to find out a repo without
per-repo settings available
- we need to get the global config first to be able to extract repo name
2017-11-28 13:23:25 +01:00
Marcin Kuzminski
6084d12664 mettags: limit the scope of url => metatag to http, https and / links.
- prevent of malicious injection of JS links and other unsafe types
2017-11-20 12:44:07 +01:00
Marcin Kuzminski
a794d219f5 diffs: fixed problem with rendering no newline at the end of file markers.
- fixes #5402
2017-11-19 15:23:38 +01:00
Marcin Kuzminski
6bbab12fcc celery: celery 4.X support. Fixes #4169
- update tasks
- enabled celerybeat to function
- check and cleanup code for 4.X
2017-11-16 19:26:53 +01:00
Marcin Kuzminski
1d332c03ad pylons: fixed code and test suite after removal of pylons. 2017-11-16 18:27:09 +01:00
Marcin Kuzminski
5f9ae2ae11 pylons: remove pylons as dependency
- dependencies: bumped:
 -setuptools-scm==1.15.6
 -celery==4.1.0
 -kombu==4.1.0
 -pytz==2017.3
 -Routes==2.4.1

Removed all pylons components. Refactored the code to use only pyramid
parts
2017-11-15 13:42:54 +01:00
Marcin Kuzminski
adc798ca3c release: merge back stable branch into default 2017-11-08 20:59:46 +01:00
Marcin Kuzminski
38e4304852 helpers: fix metatags extraction in case description is empty 2017-11-08 16:44:21 +01:00
Marcin Kuzminski
358781c87a tests: change lib tests to use proper pyramid mocks. 2017-11-07 23:22:00 +01:00
Marcin Kuzminski
211a846906 core: dropped deprecated PartialRenderer that depends on pylons. 2017-11-07 14:27:23 +01:00
Marcin Kuzminski
69a865a7a3 repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
Marcin Kuzminski
d702ba605f tests: change name of test module of auth-modules to prevent
pytest complaining about it.
2017-10-17 15:01:00 +02:00
Marcin Kuzminski
7781eabe94 auth: use cache_ttl from a plugin to also cache permissions.
- this gives a 30% speed increase in operations like svn commit
- generally uses the same mechanismy like auth cache to cache permissions for faster
access to vcs commands
2017-10-07 10:02:39 +02:00
Marcin Kuzminski
f445addfdd vcs: reduce sql queries used during pull/push operations. 2017-09-28 21:45:19 +02:00
Marcin Kuzminski
5fc9f7567b hooks: added debug logs. 2017-09-28 22:14:43 +02:00
Marcin Kuzminski
a8d0784226 tests: fixed tests for random dict order could sometimes break the tests 2017-09-20 23:33:29 +02:00
Marcin Kuzminski
f59da891ad metatags: improve display syntax and add deprecated tag. 2017-09-14 20:14:11 +02:00
Marcin Kuzminski
6dada9f346 meta-tags: cleanup support for metatags.
- fixes problem of html-escape + supported link
- no longer extract url from description, you have to use new url => tag
- tags are extracted to the beginning of the description during rendering
- show helpers in proper places in groups/repos/forks
2017-09-14 17:31:52 +02:00
Marcin Kuzminski
3f0ff6b65b vcs: report 404 for shadow repos that are not existing anymore. Before we got 500 exception in this case. 2017-09-01 13:10:52 +02:00
Marcin Kuzminski
c0899ff09d auth: expose a option to calculate how we end up having super-admin permission.
This is now used only for visual display. The old way is still faster for permissions
calculation.

- the extended way will be used in permission summary showing a much more detailed
permission summary for super-admins.
2017-08-27 19:30:42 +02:00
Daniel Dourvaris
83e3196e55 initial-gravatars: fix case of dot beeing present before @domain. 2017-08-25 10:27:00 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid.
- fixed few small found problems
- code cleanups
2017-08-11 13:00:47 +02:00
Marcin Kuzminski
68e8c23896 markup: make relative links pint to raw files for images and to standard files as links.
- allows building relative MD/RST links that go to rendered content
- still allows to embed images/video with relative paths
2017-08-04 10:54:33 +02:00
Marcin Kuzminski
108d9c0ac0 audit-logs: use stricter limit on how much data the commits key can hold.
- we're limited by a smaller column size
- helps avoid mysql problems
- found after sqlalchemy update
2017-07-26 09:55:51 +02:00
Marcin Kuzminski
53611d6f94 files: ported repository files controllers to pyramid views. 2017-07-17 14:20:22 +02:00
Marcin Kuzminski
68cdaa3763 pyramid: remove csrf tests because this was only used in pylons. 2017-07-13 09:56:15 +02:00
Marcin Kuzminski
71071c0b26 dependencies: bumped pyramid to 1.9 webob to 1.7.3 and webtest to 2.0.27
- fixed some core tests for new webob/webtest
- changed core methods to make them more pyramid compat.
2017-07-12 22:54:14 +02:00
Marcin Kuzminski
c36f3f7abd tests: removed soon-to-be deleted test for deprecated action_logger. 2017-06-14 14:39:19 +02:00
Marcin Kuzminski
53b4ac98f8 repo-summary: re-implemented summary view as pyramid.
- changed exception handler, to now work in pure pyramid mode
- changed missing requirements logic on repo based views that require vcs-connection
2017-06-07 13:23:21 +02:00
Marcin Kuzminski
71fee00277 home: moved home and repo group views into pyramid.
- fixed lots of tests related to those changes
- now main and subrepo group views are handled by pyramid.
2017-06-05 15:16:04 +02:00
Marcin Kuzminski
b942ed82f2 hooks: expose refs on push.
- allows easier pull request creation
2017-05-17 22:17:09 +02:00
Marcin Kuzminski
726bc5aba8 hooks: deprecate old action_logger 2017-05-17 16:42:00 +02:00
Marcin Kuzminski
1f812d6a5e caches: ensure we don't use non-ascii characters in cache keys.
- this could before lead to problems in beaker cache implementation.
2017-05-15 22:10:36 +02:00
Marcin Kuzminski
37094cb9b3 emails: fixed newlines in email templates that can break email sending code. 2017-05-03 18:44:10 +02:00
Marcin Kuzminski
46dcc2730a hooks: expose user agent in the variables submitted to pull/push hooks. 2017-04-28 21:21:05 +02:00