merge from HEAD

Author: Richard Jones

CHANGES.txt

@@ -59,8 +59,12 @@ Fixed:
 - removed safeget() from the API (sf bug 994750)
 - demo tracker is always set up on localhost (sf bug 1049101)
 
+2004-10-06 0.7.11
+Fixed:
+- index args URL generation broken in .10 (sf bug 1096027)
+
 
-2004-10-?? 0.7.10
+2004-10-04 0.7.10
 Fixed:
 - reset ID counters if the database is cleared (thanks William)
 - apply IE caching "fix" to automatically serve up all pages expired

doc/announcement.txt

@@ -1,4 +1,6 @@
-I'm proud to release this 8th major feature release of Roundup.
+I'm proud to release this 8th major feature release of Roundup. This is
+currently a DEVELOPMENT release, meaning it probably has bugs. If you want
+a STABLE release, use 0.7.x
 
 First up, big thanks go to alexander smishlajev who has done some really
 good work getting the i18n and new configuration components of this release
@@ -11,6 +13,15 @@ together a What's New page:
 
 This is a bugfix release, fixing:
 
+- note about how to run roundup demo in Windows (sf bug 1082090)
+- fix API for templating utils extensions - remove "utils" arg (sf bug 1081981)
+- back_sqlite.py is missing "import time" (sf bug 1081959)
+- fix (list) popup (sf bug 1083570)
+- fix some security assertions (sf bug 1085481)
+- 'roundup-server -S' always writes [trackers] section heading (sf bug 1088878)
+- fix port number as int in mysql connection info (sf bug 1082530)
+- fix setup.py to work with <Python2.3 (sf bug 1082801)
+- fix permissions checks in cgi templating (sf bug 1082755)
 
 If you're upgrading from an older version of Roundup you *must* follow
 the "Software Upgrade" guidelines given in the maintenance documentation.

roundup/cgi/templating.py

@@ -2073,15 +2073,16 @@ def indexargs_url(self, url, args):
 
         # finally, the remainder of the filter args in the request
         props = self.client.db.getclass(self.classname).getprops()
+        q = urllib.quote
         for k,v in self.filterspec.items():
             if not args.has_key(k):
                 if type(v) == type([]):
                     if isinstance(props[k], hyperdb.String):
-                        l.append(s%(k, ' '.join(v)))
+                        l.append('%s=%s'%(k, '%20'.join([q(i) for i in v])))
                     else:
-                        l.append(s%(k, ','.join(v)))
+                        l.append('%s=%s'%(k, ','.join([q(i) for i in v])))
                 else:
-                    l.append('%s=%s'%(k, v))
+                    l.append('%s=%s'%(k, q(v)))
         return '%s?%s'%(url, '&'.join(l))
     indexargs_href = indexargs_url