14 Aug, 2010

3 commits

  • Added setting trusted_sites_for_iframes to environment
    WhiteListFilter lib to filter iframes from fields
    Removed "on hand" iframe filter from plugins
    
    (ActionItem1631)
    Daniela Feitosa
     
  • (ActionItem1608)
    Antonio Terceiro
     
  • Implemented cache policy:
    
      * the homepage is cached for 5 minutes by default. This time can be
        configured with the =home_cache_in_minutes= attribute in the environment.
      * non-profile pages are cached for 15 minutes by default. This time can be
        configured with the =general_cache_in_minutes= attribute in the
        environment.
      * profile pages are cached for 15 minutes by default. This time can be
        configured in the =profile_cache_in_minutes= attribute in the environment.
      * The account controller (/account/*) is not cached at all.
      * The environment administration area (/admin/*) is not cached at all.
      * The profile administration area (/myprofile/*) is not cached at all.
      * Since Varnish will not cache any request that involves cookies:
        * Authenticated users will not benefit from the cache.
        * Cookies are not allowed for unauthenticated users. So, when a response is
          being prepared for an unauthenticated user, all cookies are wiped out.
    
    The contents of the login block and the login/logout part of the header is now
    loaded via an AJAX call to /account/user_data. This way we can cache almost all
    pages without caching user-specific data.
    
    We are also changing substantially how the flash[:notice] messages work. From
    now on, instead of setting flash[:notice], we must set session[:flash]. It will
    work more or less like before, except that session[:notice] will be consumed by
    the AJAX call to /account/user_data that is done during all page loads instead
    of being consumed automatically by Rails. The only exception to this is the
    media_panel, because it uses a different layout.
    
    (ActionItem1608)
    Antonio Terceiro
     

30 Jul, 2010

1 commit


25 May, 2010

1 commit


18 May, 2010

1 commit


12 May, 2010

1 commit

  • * The field verification now occurs before de validation.
    	* Fields that uses the full filter escape residual '<' and '>' after
    	  filtering wellformed tags.
    	* Fields that uses white_list filter only escape the '<' and '>'
    	  symbols if the tag is not wellformed.
    	* This patch only fixes the fields that were before being
    	  filtered. A full field verification is need to check the way each
    	  field must be filtered.
    
    (ActionItem1491)
    Rodrigo Souto
     

21 Dec, 2009

1 commit


04 Dec, 2009

1 commit


20 Nov, 2009

1 commit


31 Oct, 2009

1 commit


27 Oct, 2009

1 commit

  •   * transformed script/feed-updater into a controller script. It starts
        and stops together with the production system (script/production)
      * moved the update (daemon) logic into FeedUpdater class. It knows which
        feeds must be updated and when, and when it should stop running.
      * concentrated the fetch (download) logic into FeedHandler class. It
        knows how to update a specific feed.
      * implemented the concept of "enabled" and "expired" in both
        ExternalFeed and FeedReaderBlock. The feed updater looks for feeds
        that are both enabled *and* expired to update.
      * Disabled feed reader blocks get re-enabled when their address is
        changed.
      * fixed a bug that made some feeds crash when using PostgreSQL
        (CGI::unescapeHTML transforms Numeric Character References into
        iso-8859-1 data and PostgreSQL won't accept that into a UTF-8
        database)
      * Removed sleep(1) calls from script/production, they don't seem to be
        useful
      * Added an index for the type column in `blocks` table.
    
    (ActionItem1243)
    Antonio Terceiro
     

18 Sep, 2009

1 commit


26 Aug, 2009

1 commit


21 Aug, 2009

3 commits


03 Aug, 2009

2 commits


24 Jul, 2009

1 commit


21 Jul, 2009

6 commits


17 Jul, 2009

1 commit


20 Jun, 2009

1 commit


18 Jun, 2009

1 commit


06 Jun, 2009

1 commit


25 May, 2009

1 commit


27 Apr, 2009

1 commit


03 Apr, 2009

1 commit


23 Mar, 2009

2 commits


26 Feb, 2009

1 commit


21 Feb, 2009

1 commit


23 Jan, 2009

1 commit


11 Dec, 2008

1 commit


17 Jul, 2008

1 commit

  • changed the acts_as_accessible and acts_as_accessor to destroy theirs
    role assginments when deleted so theres no nil members or nil
    memberships
    
    
    git-svn-id: https://svn.colivre.coop.br/svn/noosfero/trunk@2276 3f533792-8f58-4932-b0fe-aaf55b0a4547
    MoisesMachado