engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1971 commits 1 branch 0 tags 110 MiB
Commit graph

446 commits

Author SHA1 Message Date
Marcin Kuzminski
fa5dd62880 channelstream: push events with comments on single commits. 
- use wrapper for posting to simplify the code.
 2017-07-26 18:04:56 +02:00
Marcin Kuzminski
f1f84b5b64 channelstream: add simple method of posting message to notification channel. 2017-07-26 16:26:35 +02:00
Marcin Kuzminski
708f22ac87 db: use unicode for some of the defaults to reduce sqlalchemy warnings. 2017-07-26 12:14:56 +02:00
Marcin Kuzminski
1f94f0b6ca db: fix migration after sqlalchemy upgrade 2017-07-26 10:29:43 +02:00
Marcin Kuzminski
108d9c0ac0 audit-logs: use stricter limit on how much data the commits key can hold. 
- we're limited by a smaller column size
- helps avoid mysql problems
- found after sqlalchemy update
 2017-07-26 09:55:51 +02:00
Marcin Kuzminski
f83bfd0951 sqlalchemy: enabled connection ping. 
- should fix potential issues with Mysql server has gone away issues
 2017-07-25 16:54:10 +02:00
Marcin Kuzminski
c17e166f5f events: make sure we propagate our dummy request with proper application_url. 
- handles proper proxy prefix
- handles https and reverse proxies
 2017-07-26 16:19:06 +02:00
Marcin Kuzminski
2656338a0d events: ported pylons part to pyramid. 
- fix lack of request context in VCS type events
  we now use a dummy request but it's sufficient for routes generation
- cleanup and re-organized some code
- removed all pylons stuff from the events code
 2017-07-26 12:41:14 +02:00
Marcin Kuzminski
ab16b87482 http: ported old depracated retry format for http client. 2017-07-26 12:39:31 +02:00
Marcin Kuzminski
0c1f7e3306 auth: improve logging 2017-07-25 15:07:43 +02:00
Marcin Kuzminski
3f26df9f37 user: deprecated usage of api_keys. 
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
 2017-07-25 16:27:08 +02:00
Marcin Kuzminski
8efc4d92c5 repo-commits: ported changeset code into pyramid views. 
- refactored part of naming to use commit_id instead of revision
- renamed some parts to repo_commits instead of changeset without breaking backward compat
- small improvements and fixes for tests
 2017-07-24 17:04:14 +02:00
Marcin Kuzminski
67f8000683 core: use a custom filter for rendering all mako templates. 
- brings old pylons function that converted None into a empty markup
 2017-07-24 14:28:19 +02:00
Marcin Kuzminski
3b524b7875 renderer: remove usage of old non request PartialRenderer 2017-07-24 09:59:48 +02:00
Marcin Kuzminski
a9064c5007 translation: unified usage of pluralize function ungettext. 
- now it's consistent _ungettext for pylons and pyramid
- will allow easier migration to full pyramid codebase
 2017-07-24 10:00:06 +02:00
Marcin Kuzminski
4f16a9a411 repository-groups: introduce last change for repository groups. 2017-07-20 12:59:53 +02:00
Marcin Kuzminski
b2714a3c1d changelog: ported to pyramid views. 2017-07-18 00:07:43 +02:00
Marcin Kuzminski
53611d6f94 files: ported repository files controllers to pyramid views. 2017-07-17 14:20:22 +02:00
Marcin Kuzminski
5184f34ead svn: don't raise duplicate exception. The function already does that. 2017-07-17 14:19:22 +02:00
Marcin Kuzminski
8ff5e04569 notifications: removed usage of pylons translation from models. 2017-07-13 17:58:15 +02:00
Marcin Kuzminski
7caba28f0e pyramid: fix problem with default language for users without any explicit one set. 2017-07-13 12:54:02 +02:00
Marcin Kuzminski
c650cdddcc pyramid: if possible fetch csrf tokens from pyramid session. 
- we need to explicitly pass in requests into secure forms
- allows to not use pylons global session for fetching csrf tokens
 2017-07-13 12:35:42 +02:00
Marcin Kuzminski
82b3aebb67 pyramid: make alerts always use request.session instead of pylons one. 2017-07-13 11:56:28 +02:00
Marcin Kuzminski
f7ae0f3419 pyramid: stop relying on pylons translation object in helpers. 
We'll now use the registered translation function from request.
 2017-07-13 10:58:58 +02:00
Marcin Kuzminski
ebc5609e99 pyramid: allows easier turning off the pylons components. 2017-07-13 10:57:57 +02:00
Marcin Kuzminski
4a9be66cd1 dependencies: bumped pyramid-debugtoolbar to 4.3.1 2017-07-12 22:55:39 +02:00
Marcin Kuzminski
71071c0b26 dependencies: bumped pyramid to 1.9 webob to 1.7.3 and webtest to 2.0.27 
- fixed some core tests for new webob/webtest
- changed core methods to make them more pyramid compat.
 2017-07-12 22:54:14 +02:00
Marcin Kuzminski
69e1f8e453 pyramid: make flash messages not rely strictly on pylons session. 
- now if we pass in request it relies to bound session store of given request.
 2017-07-12 18:53:19 +02:00
Marcin Kuzminski
81027a10de pyramid: move language extraction into a seperate method. 2017-07-12 18:51:01 +02:00
Marcin Kuzminski
7304e9b076 pyramid: moved extraction of user into a seperate subscriber. 2017-07-12 18:54:42 +02:00
Marcin Kuzminski
41cafab139 core: always attach pyramid context into request 
- this will be the default way of replacing tempalte_context globals from pylons
- helps remove of old style PartialRenderer
 2017-07-08 15:25:54 +02:00
Marcin Kuzminski
28ef616e7d core: expose pyraid specific partialRenderer request attribute. 
- allows pure pyramid PartialRenderer
- exposes nicer and more consistent api
 2017-07-08 15:21:58 +02:00
Marcin Kuzminski
ff28358243 tests: remove usage of pylons context var in home app test. 2017-07-08 00:03:39 +02:00
Daniel Dourvaris
93b6dfba9a gists: migrated gists controller to pyramid view. 2017-07-07 12:05:30 +02:00
Marcin Kuzminski
f53db19687 diffs: simplified the datastructure of fillediff. Hopefully this 
will allow better Garbage Collection.
 2017-06-28 14:03:57 +02:00
Marcin Kuzminski
002332dbc2 markup-renderer: use safe fetching of attributes to prevent from errors on malformed html. 2017-06-27 15:44:49 +02:00
Marcin Lulek
cb6d81f435 security: escape flash messaged VCS errors to prevent XSS atacks. 2017-06-26 14:48:15 +02:00
Marcin Kuzminski
ccf69ffec7 audit-logs: don't use old style parser for new audit logs. 2017-06-23 12:22:39 +02:00
Marcin Kuzminski
c315ee8d30 security: use custom writer for RST rendering to prevent injection of javascript: tags. 2017-06-23 11:45:51 +02:00
Marcin Kuzminski
25436a7365 audit-logs: implemented full audit logs across application. 
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
 2017-06-21 12:03:14 +02:00
Marcin Kuzminski
5c99ddb207 audit-logs: added *basic* support for NOT query term in audit logs. 2017-06-20 16:35:40 +02:00
Marcin Kuzminski
d00d73858a audit-logs: updated action data attrbiutes. 2017-06-20 16:35:14 +02:00
Marcin Lulek
cc53162981 security: use 404 instead of 403 code on permission decorator to prevent resource discovery attacks. 2017-06-19 18:15:57 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application. 
- will fix all possible XSS attack vectors.
 2017-06-19 15:14:02 +02:00
Marcin Kuzminski
aa3bffd198 pull-requests: prepare the migration of pull request to pyramid. 
- this is half the code because of problems found during porting
- partially moved the urls, and flipped the logic into pyramid code
- needs more work in core for full switch.
 2017-06-19 13:25:15 +02:00
Marcin Kuzminski
926a79e98e audit-logs: implemented pull request and comment events. 2017-06-17 15:22:50 +02:00
Marcin Kuzminski
8a3441e96e audit-logs: use specific web/api calls. 
- also normalized action_data to specs.
 2017-06-14 16:33:23 +02:00
Marcin Kuzminski
8ae7a08fd3 audit-logs: added audit logs on user groups admin page. 2017-06-14 15:25:31 +02:00
Marcin Kuzminski
1be028f546 audit-logs: moved async tasks from old deprecated action_logger. 2017-06-14 15:45:17 +02:00
Marcin Kuzminski
8ec82f1089 audit-logs: fill in some default values for the expected action data. 2017-06-14 15:46:06 +02:00