This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a change to branch db/8607
in repository https://gitbox.apache.org/repos/asf/allura.git
at d54ba3c6b [#8607] solr: syntax problems deserve an escaped retry;
don't expose underlying error messages
This branch includes the following new commits:
new 324d4de11 [#8607] escape html in a few places
new b35009fc6 [#8607] check for email code mode when verifying email link
new 879aa18a6 [#8607] test for oembed output security
new 10b5ec9bd [#8607] move webhook send from requests to urlopen so our
NoInternal handlers run automatically including on redirects
new f2ca4b4c1 [#8607] test for zipdir symlink handling
new 8ab239574 [#8607] add comments, add test
new b77f66002 [#8607] check app_config_id in update_forums
new 523be8e9c [#8607] move |safe to be directly on the string source
new 2363e20f9 [#8607] check project when loading role_id inputs
new f9d88e1d1 [#8607] check mailbox owner
new 36609a862 [#8607] check before mailbox sub too
new a1ab533db [#8607] check subscribe here too
new f02a89b9d [#8607] replace random with secrets in some places
new 9cc8c33b2 [#8607] safer pwd comparison
new c8d8c67db [#8607] perm checks in markdown_to_html and fix wiki tool
check
new 9a32ca331 [#8607] check client_id when making bearer token
new 1d4f5fce0 [#8607] test for save_attachments (export) path handling
new 273ef2ff5 [#8607] harden attachment upload
new 3c245d4ca [#8607] add X-Content-Type-Options header
new b4264a414 [#8607] remove old pickle-based session support
new 46dd88095 [#8607] replace last pickle usage with our own bit of
compatible code
new 8c5d5a16f [#8607] check subproject parent
new 475c9dc1f [#8607] check activity nbhd
new a47c0bce6 [#8607] various has_access improvements
new d96c2120d [#8607] be extra safe with display names
new 9157ab6f2 [#8607] svn tarball path safety
new 01f39777e [#8607] remove potential info disclosure
new d692742a1 [#8607] remove useless try/except/raise
new c209d7707 [#8607] ./run_tests QoL: show final message, allow trailing
slash for tab-complete of suites
new 0059dc966 [#8607] solr: change ticket searches from **kw passthru to
explicit
new ec1c4303b [#8607] solr: move **kw to specific params for all other
tools using common search_app helper
new 058d5b94c [#8607] solr: strip local-params syntax
new d54ba3c6b [#8607] solr: syntax problems deserve an escaped retry;
don't expose underlying error messages
The 33 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
