GitLab

--HG--
branch : stable

--HG--
branch : stable

This is similar to the Unauthorized exception, but generates a 403 error
instead of a 401 (Unauthorized)

--HG--
branch : stable

This option controls connection anonymizing before executing any query
for CSRF / safety reason.

--HG--
branch : stable

Before this changeset we use the `filename` header with utf8 encoded filename
all the time.

However RFC6266 says:

  The parameters "filename" and "filename*" differ only in that "filename*"
  uses the encoding defined in [RFC5987], allowing the use of characters not
  present in the ISO-8859-1 character set ([ISO-8859-1]).

Therefore, we alter the code to:

1. Use `filename` and `ascii` encoding whenever possible,
2. use `filename*` with `utf8` encoding otherwise (with a filename fallback for
   old browser)

We also switch the `content-disposition` value to attachement if filename is
specified, this will result as a mandatory download according to RFC6266. This
mandatory download is the expected behavior.

We changes the filename encoding to RFC5987 which is simpler, supported by all
and modern browser (including IE from version 6) and does not suffer from the
continuation issue. (see ticket #2522324 for details)

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

[hook] fix hook base class so access to __registries__ doesn't call check_event, only call it in registered callback. Closes #2517748

--HG--
branch : stable

[startup hook/looping tasks] separated hook for each looping task to ease modification from cubes. Closes #2517096

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

[ldapparser] utf-8 uri + unicode emailaddr will crash if the later is not properly encoded (closes #2508515)

--HG--
branch : stable

--HG--
branch : stable

[dbapi] load_appobjects must attempt to load available cubicweb configurations to avoid error when some object use a persistent propery (CWProperty) defined there. Closes #2497697

--HG--
branch : stable

[misc/scripts] a slightly experimental script to help repair LDAPUser cwusers suffering from split-brainite (closes #2497108)

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

passlib can raise ValueError when it can't recognized a hash.  Treat
that as a wrong password.

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

Closes #2465904

--HG--
branch : stable

[repo pyro] fix previous commit: should not import Pyro in remoterql module/base class, it may be missing

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

[tabs] fix pb with non-lazy tabs: style isn't properly set due to missing jquery.ui activation. Closes #2465657

also do a small cleanup on the way, and properly implements render_entity rather than cell_call,
as one would expect regarding default PrimaryView code.

--HG--
branch : stable

--HG--
branch : stable

currently we may run in some cases where the session has no more cnxset
depending on errors and parser's handling of the cnxset.

Also, free the cnxset and reacquire it later, letting a chance to other
threads to run.

--HG--
branch : stable