10 Apr, 2011

1 commit


04 Apr, 2011

1 commit


22 Mar, 2011

2 commits


22 Feb, 2011

1 commit


01 Feb, 2011

1 commit


31 Jan, 2011

1 commit


09 Dec, 2010

2 commits


26 Oct, 2010

2 commits


21 Sep, 2010

1 commit

  •   * The users member of a community shoudl be notified with the information of where that noficication is.
      * The friendship relationship should be notified to the both users
      * If the article is created automaticaly according its template this article should not be notified
      * The article approval should not notify the article with the user who aproved it as the user that made the article
    
    (ActionItem1303)
    Leandro Santos
     

12 Sep, 2010

1 commit


11 Sep, 2010

2 commits


10 Sep, 2010

1 commit

  •   * Rewrite ProfileListBlock logic to become simpler and faster
      * Rewrite membership logic to use named scopes instead of loading the
        entire list and doing filters with Ruby code.
      * Moved Noosfero-specific membership logic from access control plugin to
        Noosfero models.
      * Removed useless tests
      * Fixed tests that assumed the slow implementation
    Antonio Terceiro
     

02 Sep, 2010

1 commit


22 Aug, 2010

1 commit


14 Aug, 2010

3 commits

  • Added setting trusted_sites_for_iframes to environment
    WhiteListFilter lib to filter iframes from fields
    Removed "on hand" iframe filter from plugins
    
    (ActionItem1631)
    Daniela Feitosa
     
  • (ActionItem1608)
    Antonio Terceiro
     
  • Implemented cache policy:
    
      * the homepage is cached for 5 minutes by default. This time can be
        configured with the =home_cache_in_minutes= attribute in the environment.
      * non-profile pages are cached for 15 minutes by default. This time can be
        configured with the =general_cache_in_minutes= attribute in the
        environment.
      * profile pages are cached for 15 minutes by default. This time can be
        configured in the =profile_cache_in_minutes= attribute in the environment.
      * The account controller (/account/*) is not cached at all.
      * The environment administration area (/admin/*) is not cached at all.
      * The profile administration area (/myprofile/*) is not cached at all.
      * Since Varnish will not cache any request that involves cookies:
        * Authenticated users will not benefit from the cache.
        * Cookies are not allowed for unauthenticated users. So, when a response is
          being prepared for an unauthenticated user, all cookies are wiped out.
    
    The contents of the login block and the login/logout part of the header is now
    loaded via an AJAX call to /account/user_data. This way we can cache almost all
    pages without caching user-specific data.
    
    We are also changing substantially how the flash[:notice] messages work. From
    now on, instead of setting flash[:notice], we must set session[:flash]. It will
    work more or less like before, except that session[:notice] will be consumed by
    the AJAX call to /account/user_data that is done during all page loads instead
    of being consumed automatically by Rails. The only exception to this is the
    media_panel, because it uses a different layout.
    
    (ActionItem1608)
    Antonio Terceiro
     

30 Jul, 2010

1 commit


25 May, 2010

1 commit


18 May, 2010

1 commit


12 May, 2010

1 commit

  • * The field verification now occurs before de validation.
    	* Fields that uses the full filter escape residual '<' and '>' after
    	  filtering wellformed tags.
    	* Fields that uses white_list filter only escape the '<' and '>'
    	  symbols if the tag is not wellformed.
    	* This patch only fixes the fields that were before being
    	  filtered. A full field verification is need to check the way each
    	  field must be filtered.
    
    (ActionItem1491)
    Rodrigo Souto
     

05 Apr, 2010

1 commit


21 Dec, 2009

2 commits


04 Dec, 2009

1 commit


20 Nov, 2009

1 commit


31 Oct, 2009

1 commit


27 Oct, 2009

1 commit

  •   * transformed script/feed-updater into a controller script. It starts
        and stops together with the production system (script/production)
      * moved the update (daemon) logic into FeedUpdater class. It knows which
        feeds must be updated and when, and when it should stop running.
      * concentrated the fetch (download) logic into FeedHandler class. It
        knows how to update a specific feed.
      * implemented the concept of "enabled" and "expired" in both
        ExternalFeed and FeedReaderBlock. The feed updater looks for feeds
        that are both enabled *and* expired to update.
      * Disabled feed reader blocks get re-enabled when their address is
        changed.
      * fixed a bug that made some feeds crash when using PostgreSQL
        (CGI::unescapeHTML transforms Numeric Character References into
        iso-8859-1 data and PostgreSQL won't accept that into a UTF-8
        database)
      * Removed sleep(1) calls from script/production, they don't seem to be
        useful
      * Added an index for the type column in `blocks` table.
    
    (ActionItem1243)
    Antonio Terceiro
     

18 Sep, 2009

1 commit


26 Aug, 2009

1 commit


21 Aug, 2009

3 commits


03 Aug, 2009

2 commits


24 Jul, 2009

1 commit