GitLab

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

Simple (and quite weak) implementation of a digital signature of the content
to be submited by email in the error report view generated by ErrorView.

The signature is a simple hmac hash computed using a secret key (generated at
repository startup) and the "secret" form content to be included in the
notification email. The controller can then check this content has not been
modified or forged by a malicious user.

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

This is similar to the Unauthorized exception, but generates a 403 error
instead of a 401 (Unauthorized)

--HG--
branch : stable

This option controls connection anonymizing before executing any query
for CSRF / safety reason.

--HG--
branch : stable

Before this changeset we use the `filename` header with utf8 encoded filename
all the time.

However RFC6266 says:

  The parameters "filename" and "filename*" differ only in that "filename*"
  uses the encoding defined in [RFC5987], allowing the use of characters not
  present in the ISO-8859-1 character set ([ISO-8859-1]).

Therefore, we alter the code to:

1. Use `filename` and `ascii` encoding whenever possible,
2. use `filename*` with `utf8` encoding otherwise (with a filename fallback for
   old browser)

We also switch the `content-disposition` value to attachement if filename is
specified, this will result as a mandatory download according to RFC6266. This
mandatory download is the expected behavior.

We changes the filename encoding to RFC5987 which is simpler, supported by all
and modern browser (including IE from version 6) and does not suffer from the
continuation issue. (see ticket #2522324 for details)

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

[hook] fix hook base class so access to __registries__ doesn't call check_event, only call it in registered callback. Closes #2517748

--HG--
branch : stable

[startup hook/looping tasks] separated hook for each looping task to ease modification from cubes. Closes #2517096

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

[ldapparser] utf-8 uri + unicode emailaddr will crash if the later is not properly encoded (closes #2508515)

--HG--
branch : stable

--HG--
branch : stable

[dbapi] load_appobjects must attempt to load available cubicweb configurations to avoid error when some object use a persistent propery (CWProperty) defined there. Closes #2497697

--HG--
branch : stable

[misc/scripts] a slightly experimental script to help repair LDAPUser cwusers suffering from split-brainite (closes #2497108)

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

passlib can raise ValueError when it can't recognized a hash.  Treat
that as a wrong password.

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

Closes #2465904

--HG--
branch : stable

[repo pyro] fix previous commit: should not import Pyro in remoterql module/base class, it may be missing

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable

--HG--
branch : stable