You are viewing a plain text version of this content. The canonical link for it is here.
- (allura) branch master updated (bc5f3c304 -> fd129f6c1) - posted by br...@apache.org on 2026/05/01 16:58:36 UTC, 0 replies.
- (allura) 01/02: [#8602] do not treat periods in text as external urls to be displayed as warnings - posted by br...@apache.org on 2026/05/01 16:58:37 UTC, 0 replies.
- (allura) 02/02: [#8602] increment bugfix_rev to invalidate template cache - posted by br...@apache.org on 2026/05/01 16:58:38 UTC, 0 replies.
- (allura) branch master updated (fd129f6c1 -> 32b897eea) - posted by di...@apache.org on 2026/05/01 18:20:55 UTC, 0 replies.
- (allura) 01/07: [#8601] use link instead of code for email auth, and longer code - posted by di...@apache.org on 2026/05/01 18:20:56 UTC, 0 replies.
- (allura) 02/07: [#8601] remove very old and not helpful showbrowser() on test assertion failures - posted by di...@apache.org on 2026/05/01 18:20:57 UTC, 0 replies.
- (allura) 03/07: [#8601] consistent file extension for mail templates - posted by di...@apache.org on 2026/05/01 18:20:58 UTC, 0 replies.
- (allura) 04/07: [#8601] update precommit hook for .md.jinja2 and update hook to published version now - posted by di...@apache.org on 2026/05/01 18:20:59 UTC, 0 replies.
- (allura) 05/07: [#8601] use full domain in link for plaintext mail version to be better - posted by di...@apache.org on 2026/05/01 18:21:00 UTC, 0 replies.
- (allura) 06/07: [#8601] Do email verification for untrusted logins even if they did multifactor (protects against MITM attacks) - posted by di...@apache.org on 2026/05/01 18:21:01 UTC, 0 replies.
- (allura) 07/07: [#8601] avoid flash samesite cookie issues by showing error on the page directly - posted by di...@apache.org on 2026/05/01 18:21:02 UTC, 0 replies.
- (allura) branch db/8603 created (now d899a761c) - posted by br...@apache.org on 2026/05/11 18:27:56 UTC, 0 replies.
- (allura) 01/13: [#8603] don't follow redirects on trac import - posted by br...@apache.org on 2026/05/11 18:27:57 UTC, 0 replies.
- (allura) 02/13: [#8603] disable trac importers by default - posted by br...@apache.org on 2026/05/11 18:27:58 UTC, 0 replies.
- (allura) 03/13: [#8603] use NonPrivateUrl on webhooks (does allow for IP addrs now also) - posted by br...@apache.org on 2026/05/11 18:27:59 UTC, 0 replies.
- (allura) 04/13: [#8603] urlopen_allow_internal_hostnames setting should work for webhook and importer forms - posted by br...@apache.org on 2026/05/11 18:28:00 UTC, 0 replies.
- (allura) 05/13: [#8603] test to know forgeblog/main.py setattr loop is ok - posted by br...@apache.org on 2026/05/11 18:28:01 UTC, 0 replies.
- (allura) 06/13: [#8603] add @require_post to a few endpoints - posted by br...@apache.org on 2026/05/11 18:28:02 UTC, 0 replies.
- (allura) 07/13: [#8603] change AlluraUserProperty User reference so that ShortUrl doesn't error strangely on shorturl.create_user = c.user._id (tests were always passing too, weird) - posted by br...@apache.org on 2026/05/11 18:28:03 UTC, 0 replies.
- (allura) 08/13: [#8603] use _verify_return_to in pwd_expired_change - posted by br...@apache.org on 2026/05/11 18:28:04 UTC, 0 replies.
- (allura) 09/13: [#8603] only permit local access to /auth/repo_permissions - posted by br...@apache.org on 2026/05/11 18:28:05 UTC, 0 replies.
- (allura) 10/13: [#8603] escape regexes in tag search - posted by br...@apache.org on 2026/05/11 18:28:06 UTC, 0 replies.
- (allura) 11/13: [#8603] NonPrivateUrl checks all host=>IP resolutions not just one - posted by br...@apache.org on 2026/05/11 18:28:07 UTC, 0 replies.
- (allura) 12/13: [#8603] use Markup in SxsOutputGenerator - posted by br...@apache.org on 2026/05/11 18:28:08 UTC, 0 replies.
- (allura) 13/13: [#8603] validate URLs on clone tasks too (e.g. if task delayed from form usage, and DNS changes) - posted by br...@apache.org on 2026/05/11 18:28:09 UTC, 0 replies.
- (allura) branch cc/11102-part1a created (now bb2c5e5fe) - posted by cc...@apache.org on 2026/05/11 20:10:48 UTC, 0 replies.
- (allura) 01/02: [#8604] Add the display_name_encrypted field to the User class - posted by cc...@apache.org on 2026/05/11 20:10:49 UTC, 0 replies.
- (allura) 02/02: [#8604] Add the display_name_encrypted field to the User class - posted by cc...@apache.org on 2026/05/11 20:10:50 UTC, 0 replies.
- (allura) branch cc/11102-part2a created (now 5d3ddcb56) - posted by cc...@apache.org on 2026/05/11 20:11:34 UTC, 0 replies.
- (allura) 01/04: [#8604] Add the display_name_encrypted field to the User class - posted by cc...@apache.org on 2026/05/11 20:11:35 UTC, 0 replies.
- (allura) 02/04: [#8604] Implement field level encryption for User's display_name_field - posted by cc...@apache.org on 2026/05/11 20:11:36 UTC, 0 replies.
- (allura) 03/04: Remove dead ProjectUserSelect code - posted by cc...@apache.org on 2026/05/11 20:11:37 UTC, 0 replies.
- (allura) 04/04: [#8604] Update transient anonymous user property to not use encrypted field - posted by cc...@apache.org on 2026/05/11 20:11:38 UTC, 0 replies.
- (allura) branch master updated: bumping urllib3 2.6.3 -> 2.7.0 and gitpython 3.1.47 -> 3.1.50 - posted by gc...@apache.org on 2026/05/12 14:54:03 UTC, 0 replies.
- (allura) branch dc/SF-11526 created (now 6a886d5dc) - posted by da...@apache.org on 2026/05/12 17:04:06 UTC, 0 replies.
- (allura) 01/01: [#11526] form-action from self to base_url - posted by da...@apache.org on 2026/05/12 17:04:07 UTC, 0 replies.
- (allura) branch db/8603 updated: [#8603] check multifactor login mode - posted by br...@apache.org on 2026/05/12 20:16:42 UTC, 0 replies.
- (allura) branch dw/8605 created (now 46e90c16a) - posted by di...@apache.org on 2026/05/13 14:56:35 UTC, 0 replies.
- (allura) 01/01: [#8605] Use C.UTF-8 locale instead of en_US.UTF-8 for SVN export - posted by di...@apache.org on 2026/05/13 14:56:36 UTC, 1 replies.
- (allura) branch dw/8605 updated: fixup! [#8605] Use C.UTF-8 locale instead of en_US.UTF-8 for SVN export - posted by di...@apache.org on 2026/05/13 16:59:26 UTC, 0 replies.
- (allura) branch master updated (640a285a9 -> 6754e9c9f) - posted by ke...@apache.org on 2026/05/13 17:55:41 UTC, 0 replies.
- (allura) 01/14: [#8603] don't follow redirects on trac import - posted by ke...@apache.org on 2026/05/13 17:55:42 UTC, 0 replies.
- (allura) 02/14: [#8603] disable trac importers by default - posted by ke...@apache.org on 2026/05/13 17:55:43 UTC, 0 replies.
- (allura) 03/14: [#8603] use NonPrivateUrl on webhooks (does allow for IP addrs now also) - posted by ke...@apache.org on 2026/05/13 17:55:44 UTC, 0 replies.
- (allura) 04/14: [#8603] urlopen_allow_internal_hostnames setting should work for webhook and importer forms - posted by ke...@apache.org on 2026/05/13 17:55:45 UTC, 0 replies.
- (allura) 05/14: [#8603] test to know forgeblog/main.py setattr loop is ok - posted by ke...@apache.org on 2026/05/13 17:55:46 UTC, 0 replies.
- (allura) 06/14: [#8603] add @require_post to a few endpoints - posted by ke...@apache.org on 2026/05/13 17:55:47 UTC, 0 replies.
- (allura) 07/14: [#8603] change AlluraUserProperty User reference so that ShortUrl doesn't error strangely on shorturl.create_user = c.user._id (tests were always passing too, weird) - posted by ke...@apache.org on 2026/05/13 17:55:48 UTC, 0 replies.
- (allura) 08/14: [#8603] use _verify_return_to in pwd_expired_change - posted by ke...@apache.org on 2026/05/13 17:55:49 UTC, 0 replies.
- (allura) 09/14: [#8603] only permit local access to /auth/repo_permissions - posted by ke...@apache.org on 2026/05/13 17:55:50 UTC, 0 replies.
- (allura) 10/14: [#8603] escape regexes in tag search - posted by ke...@apache.org on 2026/05/13 17:55:51 UTC, 0 replies.
- (allura) 11/14: [#8603] NonPrivateUrl checks all host=>IP resolutions not just one - posted by ke...@apache.org on 2026/05/13 17:55:52 UTC, 0 replies.
- (allura) 12/14: [#8603] use Markup in SxsOutputGenerator - posted by ke...@apache.org on 2026/05/13 17:55:53 UTC, 0 replies.
- (allura) 13/14: [#8603] validate URLs on clone tasks too (e.g. if task delayed from form usage, and DNS changes) - posted by ke...@apache.org on 2026/05/13 17:55:54 UTC, 0 replies.
- (allura) 14/14: [#8603] check multifactor login mode - posted by ke...@apache.org on 2026/05/13 17:55:55 UTC, 0 replies.
- (allura) branch cc/11633-part1 created (now dccde7d86) - posted by cc...@apache.org on 2026/05/13 22:22:17 UTC, 0 replies.
- (allura) 01/01: [#8606] Add encrypted field for email from the EmailAddress model - posted by cc...@apache.org on 2026/05/13 22:22:18 UTC, 0 replies.
- (allura) branch cc/11633-part2 created (now 0c3a6d834) - posted by cc...@apache.org on 2026/05/13 22:23:55 UTC, 0 replies.
- (allura) 01/01: [#8606] Implement field level encryption for EmailAddress email field - posted by cc...@apache.org on 2026/05/13 22:23:56 UTC, 0 replies.
- (allura-site) branch master updated: Set up default protection ruleset for default and release branches - posted by br...@apache.org on 2026/05/15 20:27:43 UTC, 0 replies.
- (allura) branch master updated: Set up default protection ruleset for default and release branches - posted by br...@apache.org on 2026/05/15 20:28:36 UTC, 0 replies.
- (allura) branch master updated: change httpbin domain we use, so redirect-to tests keep working - posted by br...@apache.org on 2026/05/18 15:18:59 UTC, 0 replies.
- (allura) branch db/redir_slash_head created (now 86293bf8c) - posted by br...@apache.org on 2026/05/18 15:35:01 UTC, 0 replies.
- (allura) 01/01: make with_trailing_slash and without_trailing_slash apply to HEAD requests too - posted by br...@apache.org on 2026/05/18 15:35:02 UTC, 0 replies.
- (allura) branch master updated: fix scheme/protocol checking in clone task - posted by br...@apache.org on 2026/05/18 20:13:34 UTC, 0 replies.
- (allura) branch master updated: another fix for clone task validation: move validation down into init_as_clone and do file path and URL validation separately based on which is used - posted by br...@apache.org on 2026/05/19 15:23:24 UTC, 0 replies.
- (allura) branch master updated: make with_trailing_slash and without_trailing_slash apply to HEAD requests too - posted by ke...@apache.org on 2026/05/19 15:37:14 UTC, 0 replies.
- (allura) branch master updated: [#11526] form-action from self to base_url - posted by cc...@apache.org on 2026/05/19 16:41:13 UTC, 0 replies.
- (allura) branch master updated: form-action change from self to base_url to avoid proxied sites - posted by da...@apache.org on 2026/05/19 19:30:10 UTC, 0 replies.
- (allura) branch master updated: bump idna 3.11 -> 3.15 - posted by gc...@apache.org on 2026/05/20 15:14:14 UTC, 0 replies.
- (allura) branch gc/8608 created (now b8bdc0f09) - posted by gc...@apache.org on 2026/05/20 22:42:43 UTC, 0 replies.
- (allura) 01/01: [#8608] precommit pin dependencies and updates - posted by gc...@apache.org on 2026/05/20 22:42:44 UTC, 0 replies.
- (allura) branch dw/8605 updated (11d6ad694 -> 110b3db59) - posted by di...@apache.org on 2026/05/21 18:08:49 UTC, 0 replies.
- (allura) branch gc/8609 created (now 8dd8d20a7) - posted by gc...@apache.org on 2026/05/25 14:56:00 UTC, 0 replies.
- (allura) 01/01: [#8609] include geo information that could be available for the html template - posted by gc...@apache.org on 2026/05/25 14:56:01 UTC, 0 replies.
- (allura) branch gc/8608 updated: fixup! [#8608] precommit pin dependencies and updates - posted by gc...@apache.org on 2026/05/25 16:02:19 UTC, 0 replies.
- (allura) branch master updated (9efd8e888 -> 8dd8d20a7) - posted by ke...@apache.org on 2026/05/26 15:54:54 UTC, 0 replies.
- (allura) branch master updated (8dd8d20a7 -> 25fb5386d) - posted by cc...@apache.org on 2026/05/26 16:10:37 UTC, 0 replies.
- (allura) 01/02: [#8608] precommit pin dependencies and updates - posted by cc...@apache.org on 2026/05/26 16:10:38 UTC, 0 replies.
- (allura) 02/02: fixup! [#8608] precommit pin dependencies and updates - posted by cc...@apache.org on 2026/05/26 16:10:39 UTC, 0 replies.
- (allura) branch db/8607 created (now d54ba3c6b) - posted by br...@apache.org on 2026/05/26 20:56:16 UTC, 0 replies.
- (allura) 01/33: [#8607] escape html in a few places - posted by br...@apache.org on 2026/05/26 20:56:17 UTC, 1 replies.
- (allura) 02/33: [#8607] check for email code mode when verifying email link - posted by br...@apache.org on 2026/05/26 20:56:18 UTC, 1 replies.
- (allura) 03/33: [#8607] test for oembed output security - posted by br...@apache.org on 2026/05/26 20:56:19 UTC, 1 replies.
- (allura) 04/33: [#8607] move webhook send from requests to urlopen so our NoInternal handlers run automatically including on redirects - posted by br...@apache.org on 2026/05/26 20:56:20 UTC, 1 replies.
- (allura) 05/33: [#8607] test for zipdir symlink handling - posted by br...@apache.org on 2026/05/26 20:56:21 UTC, 1 replies.
- (allura) 06/33: [#8607] add comments, add test - posted by br...@apache.org on 2026/05/26 20:56:22 UTC, 1 replies.
- (allura) 07/33: [#8607] check app_config_id in update_forums - posted by br...@apache.org on 2026/05/26 20:56:23 UTC, 1 replies.
- (allura) 08/33: [#8607] move |safe to be directly on the string source - posted by br...@apache.org on 2026/05/26 20:56:24 UTC, 1 replies.
- (allura) 09/33: [#8607] check project when loading role_id inputs - posted by br...@apache.org on 2026/05/26 20:56:25 UTC, 1 replies.
- (allura) 10/33: [#8607] check mailbox owner - posted by br...@apache.org on 2026/05/26 20:56:26 UTC, 1 replies.
- (allura) 11/33: [#8607] check before mailbox sub too - posted by br...@apache.org on 2026/05/26 20:56:27 UTC, 1 replies.
- (allura) 12/33: [#8607] check subscribe here too - posted by br...@apache.org on 2026/05/26 20:56:28 UTC, 1 replies.
- (allura) 13/33: [#8607] replace random with secrets in some places - posted by br...@apache.org on 2026/05/26 20:56:29 UTC, 1 replies.
- (allura) 14/33: [#8607] safer pwd comparison - posted by br...@apache.org on 2026/05/26 20:56:30 UTC, 1 replies.
- (allura) 15/33: [#8607] perm checks in markdown_to_html and fix wiki tool check - posted by br...@apache.org on 2026/05/26 20:56:31 UTC, 1 replies.
- (allura) 16/33: [#8607] check client_id when making bearer token - posted by br...@apache.org on 2026/05/26 20:56:32 UTC, 1 replies.
- (allura) 17/33: [#8607] test for save_attachments (export) path handling - posted by br...@apache.org on 2026/05/26 20:56:33 UTC, 1 replies.
- (allura) 18/33: [#8607] harden attachment upload - posted by br...@apache.org on 2026/05/26 20:56:34 UTC, 1 replies.
- (allura) 19/33: [#8607] add X-Content-Type-Options header - posted by br...@apache.org on 2026/05/26 20:56:35 UTC, 1 replies.
- (allura) 20/33: [#8607] remove old pickle-based session support - posted by br...@apache.org on 2026/05/26 20:56:36 UTC, 1 replies.
- (allura) 21/33: [#8607] replace last pickle usage with our own bit of compatible code - posted by br...@apache.org on 2026/05/26 20:56:37 UTC, 1 replies.
- (allura) 22/33: [#8607] check subproject parent - posted by br...@apache.org on 2026/05/26 20:56:38 UTC, 1 replies.
- (allura) 23/33: [#8607] check activity nbhd - posted by br...@apache.org on 2026/05/26 20:56:39 UTC, 1 replies.
- (allura) 24/33: [#8607] various has_access improvements - posted by br...@apache.org on 2026/05/26 20:56:40 UTC, 1 replies.
- (allura) 25/33: [#8607] be extra safe with display names - posted by br...@apache.org on 2026/05/26 20:56:41 UTC, 1 replies.
- (allura) 26/33: [#8607] svn tarball path safety - posted by br...@apache.org on 2026/05/26 20:56:42 UTC, 1 replies.
- (allura) 27/33: [#8607] remove potential info disclosure - posted by br...@apache.org on 2026/05/26 20:56:43 UTC, 1 replies.
- (allura) 28/33: [#8607] remove useless try/except/raise - posted by br...@apache.org on 2026/05/26 20:56:44 UTC, 1 replies.
- (allura) 29/33: [#8607] ./run_tests QoL: show final message, allow trailing slash for tab-complete of suites - posted by br...@apache.org on 2026/05/26 20:56:45 UTC, 1 replies.
- (allura) 30/33: [#8607] solr: change ticket searches from **kw passthru to explicit - posted by br...@apache.org on 2026/05/26 20:56:46 UTC, 1 replies.
- (allura) 31/33: [#8607] solr: move **kw to specific params for all other tools using common search_app helper - posted by br...@apache.org on 2026/05/26 20:56:47 UTC, 1 replies.
- (allura) 32/33: [#8607] solr: strip local-params syntax - posted by br...@apache.org on 2026/05/26 20:56:48 UTC, 1 replies.
- (allura) 33/33: [#8607] solr: syntax problems deserve an escaped retry; don't expose underlying error messages - posted by br...@apache.org on 2026/05/26 20:56:49 UTC, 1 replies.
- (allura) branch master updated: add & update some mongo indexes - posted by br...@apache.org on 2026/05/27 13:53:11 UTC, 0 replies.
- (allura) branch db/8607 updated: fixup! [#8607] test for save_attachments (export) path handling - posted by br...@apache.org on 2026/05/27 16:12:03 UTC, 0 replies.
- (allura) branch cc/11645 created (now ea2a050d8) - posted by cc...@apache.org on 2026/05/27 18:44:34 UTC, 0 replies.
- (allura) 01/01: [#11645] Force /auth/logout to go through a POST request - posted by cc...@apache.org on 2026/05/27 18:44:35 UTC, 0 replies.
- (allura) branch cc/11633-part2a created (now 80d625916) - posted by cc...@apache.org on 2026/05/29 03:44:08 UTC, 0 replies.
- (allura) 01/02: [#8606] Add encrypted field for email from the EmailAddress model - posted by cc...@apache.org on 2026/05/29 03:44:09 UTC, 0 replies.
- (allura) 02/02: [#8606] Implement field level encryption for EmailAddress email field - posted by cc...@apache.org on 2026/05/29 03:44:10 UTC, 0 replies.
- (allura) branch db/8607 updated (356de29c4 -> 68a41a195) - posted by br...@apache.org on 2026/05/29 16:17:17 UTC, 0 replies.
- (allura) 01/02: fixup! [#8607] escape html in a few places - posted by br...@apache.org on 2026/05/29 16:17:18 UTC, 0 replies.
- (allura) 02/02: fixup! [#8607] move |safe to be directly on the string source - posted by br...@apache.org on 2026/05/29 16:17:19 UTC, 0 replies.
- (allura) branch master updated: [#8605] Use C.UTF-8 locale instead of en_US.UTF-8 for SVN export - posted by cc...@apache.org on 2026/05/29 17:11:27 UTC, 0 replies.
- (allura) branch master updated (4bb6a4922 -> 0640949ac) - posted by cc...@apache.org on 2026/05/29 20:09:42 UTC, 0 replies.