This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/allura.git
from 4bb6a4922 [#8605] Use C.UTF-8 locale instead of en_US.UTF-8 for SVN
export
new ff1161503 [#8607] escape html in a few places
new 3d53e1e17 [#8607] check for email code mode when verifying email link
new 01d6fe7f6 [#8607] test for oembed output security
new 3d9cc03ef [#8607] move webhook send from requests to urlopen so our
NoInternal handlers run automatically including on redirects
new b8d1b4399 [#8607] test for zipdir symlink handling
new 120de2c81 [#8607] add comments, add test
new a3d408679 [#8607] check app_config_id in update_forums
new da788988d [#8607] move |safe to be directly on the string source
new 13d1f75ef [#8607] check project when loading role_id inputs
new b763ed7c6 [#8607] check mailbox owner
new 5a99493a5 [#8607] check before mailbox sub too
new b9831581e [#8607] check subscribe here too
new c57d7100e [#8607] replace random with secrets in some places
new 2a6733f1f [#8607] safer pwd comparison
new bb89bba9f [#8607] perm checks in markdown_to_html and fix wiki tool
check
new 36c613388 [#8607] check client_id when making bearer token
new e53e9e322 [#8607] test for save_attachments (export) path handling
new 4f58190ac [#8607] harden attachment upload
new 281e56b79 [#8607] add X-Content-Type-Options header
new 717a0f1f1 [#8607] remove old pickle-based session support
new a23ae3560 [#8607] replace last pickle usage with our own bit of
compatible code
new ca1ac596b [#8607] check subproject parent
new c17f5cb0c [#8607] check activity nbhd
new 4a1ac655c [#8607] various has_access improvements
new 5f8dca2b7 [#8607] be extra safe with display names
new ea0aa7f0b [#8607] svn tarball path safety
new d4b503186 [#8607] remove potential info disclosure
new 08db8530b [#8607] remove useless try/except/raise
new 13675be72 [#8607] ./run_tests QoL: show final message, allow trailing
slash for tab-complete of suites
new 27f7a6906 [#8607] solr: change ticket searches from **kw passthru to
explicit
new 38b68f9af [#8607] solr: move **kw to specific params for all other
tools using common search_app helper
new e0de4b3eb [#8607] solr: strip local-params syntax
new 0640949ac [#8607] solr: syntax problems deserve an escaped retry;
don't expose underlying error messages
The 33 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
Allura/allura/app.py | 6 +-
Allura/allura/config/middleware.py | 9 --
Allura/allura/controllers/auth.py | 30 ++++-
Allura/allura/controllers/discuss.py | 2 +
Allura/allura/controllers/newforge.py | 14 +-
Allura/allura/controllers/repository.py | 7 +-
Allura/allura/controllers/rest.py | 2 +-
Allura/allura/controllers/search.py | 17 +--
Allura/allura/ext/admin/admin_main.py | 44 ++++--
.../allura/ext/admin/templates/project_admin.html | 10 +-
Allura/allura/ext/search/search_main.py | 19 +--
Allura/allura/lib/custom_middleware.py | 3 +
Allura/allura/lib/helpers.py | 14 +-
Allura/allura/lib/multifactor.py | 2 +-
Allura/allura/lib/plugin.py | 7 +-
Allura/allura/lib/search.py | 87 +++++++++---
Allura/allura/lib/security.py | 13 +-
Allura/allura/lib/utils.py | 2 +-
Allura/allura/lib/validators.py | 9 ++
Allura/allura/lib/widgets/forms.py | 2 +-
Allura/allura/lib/widgets/resources/js/combobox.js | 2 +-
Allura/allura/model/attachments.py | 2 +-
Allura/allura/model/discuss.py | 2 +-
Allura/allura/model/index.py | 33 ++++-
Allura/allura/model/repo_refresh.py | 5 +-
Allura/allura/templates/app_admin_permissions.html | 2 +-
.../allura/templates/site_admin_new_projects.html | 2 +-
Allura/allura/templates/site_admin_task_new.html | 4 +-
Allura/allura/tests/functional/test_admin.py | 16 +++
Allura/allura/tests/functional/test_auth.py | 148 ++++++++++++++++++++-
Allura/allura/tests/functional/test_discuss.py | 16 +++
Allura/allura/tests/functional/test_home.py | 9 ++
Allura/allura/tests/functional/test_newforge.py | 34 ++++-
Allura/allura/tests/functional/test_root.py | 3 +-
Allura/allura/tests/model/test_filesystem.py | 23 ++++
Allura/allura/tests/test_app.py | 32 +++++
Allura/allura/tests/test_globals.py | 6 +-
Allura/allura/tests/test_helpers.py | 31 +++++
Allura/allura/tests/test_tasks.py | 30 +++++
Allura/allura/tests/test_webhooks.py | 70 +++++-----
Allura/allura/tests/unit/test_index.py | 56 ++++++++
Allura/allura/tests/unit/test_repo.py | 30 +++++
Allura/allura/tests/unit/test_solr.py | 52 +++++++-
Allura/allura/webhooks.py | 44 +++---
ForgeActivity/forgeactivity/main.py | 5 +
ForgeBlog/forgeblog/main.py | 27 ++--
ForgeChat/forgechat/main.py | 19 ++-
.../forgediscussion/controllers/root.py | 49 +++----
ForgeDiscussion/forgediscussion/forum_main.py | 5 +-
.../forgediscussion/tests/functional/test_forum.py | 29 ++++
.../tests/functional/test_forum_admin.py | 36 +++++
ForgeFiles/forgefiles/model/files.py | 2 +-
ForgeSVN/forgesvn/model/svn.py | 3 +-
ForgeSVN/forgesvn/tests/model/test_repository.py | 8 ++
ForgeShortUrl/forgeshorturl/main.py | 23 ++--
ForgeTracker/forgetracker/model/ticket.py | 36 ++---
.../forgetracker/tests/functional/test_rest.py | 7 +
.../forgetracker/tests/functional/test_root.py | 1 +
ForgeTracker/forgetracker/tests/test_app.py | 20 +++
.../forgetracker/tests/unit/test_ticket_model.py | 16 ++-
ForgeTracker/forgetracker/tracker_main.py | 54 ++++----
ForgeWiki/forgewiki/model/wiki.py | 2 +-
ForgeWiki/forgewiki/wiki_main.py | 25 ++--
run_tests | 9 +-
64 files changed, 1034 insertions(+), 293 deletions(-)
create mode 100644 Allura/allura/tests/unit/test_index.py
