@@ -12,7 +12,7 @@ Features:
1212 chameleon in the config). A new config-option "template_engine" under
1313 [main] can take these config-options, the default is zopetal.
1414 Thanks to Cheer Xiao for the idea of making this configurable *and*
15- for the actual implementation!
15+ for the actual implementation! (Ralf)
1616- issue2550678: Allow pagesize=-1 which returns all results.
1717 Suggested and implemented by John Kristensen.
1818 Tested by Satchidanand Haridas. (Bernhard)
@@ -51,36 +51,36 @@ Fixed:
5151 outgoing traffic should be encrypted is actually OpenPGP encrypted. (Ralf)
5252- Ignore confirm set() fields by themselves in the absence of non-"confirm"
5353 values; otherwise a bare confirm field can be used to change the a
54- password. Reported by Cam Blackwood.
54+ password. Reported by Cam Blackwood. (Ralf)
5555- Updated version of simplified Chinese message file by Cheer Xiao:
5656 Corrected some mistakes, added a few more items and did some
57- formating.
57+ formating. (Ralf)
5858- Fix xmlrpc URL parsing so that passwords may contain a ':' character
5959 (Ralf)
6060- Be more tolerant when parsing RFC2047 encoded mail headers. Use
6161 backported version of my proposed changes to
6262 email.header.decode_header in http://bugs.python.org/issue1079
6363 (Ralf)
6464- issue2550684 Fix XSS vulnerability when username contains HTML code,
65- thanks to Thomas Arendsen Hein for reporting and patch.
65+ thanks to Thomas Arendsen Hein for reporting and patch. (Ralf)
6666- issue2550711 Fix XSS vulnerability in @action parameter,
67- thanks to "om" for reporting.
67+ thanks to "om" for reporting. (Ralf)
6868- issue2550535 In some cases even when keep_quoted_text=yes is
6969 configured we would strip quoted sections. This hit the python
7070 bug-tracker especially for python interpreter examples with leading
7171 '>>>' strings. The fix is slightly different compared to the proposal
7272 as this broke keep_quoted_text=no in certain cases. We also fix a bug
7373 where keep_quoted_text=no would drop the last line of a non-quoted
74- section if there wasn't an empty line between the next quotes.
74+ section if there wasn't an empty line between the next quotes. (Ralf)
7575- issue2431638 wrong registration link in bounce mail for non-registered
76- users reported *years* ago by anonymous
76+ users reported *years* ago by anonymous (Ralf)
7777- Fix doc/upgrading.txt which produces errors with latest docutils about
7878 wrong block structure. Fix .gitignore in doc directory. Thanks to
79- Cheer Xiao for the patches.
79+ Cheer Xiao for the patches. (Ralf)
8080- Fix wrong execute permissions on some files, thanks to Cheer Xiao for
81- the patch.
81+ the patch. (Ralf)
8282- Fix override of TemplatingUtils in instance.py, thanks to Cheer Xiao
83- for the patch.
83+ for the patch. (Ralf)
8484- Fix another XSS with the "otk" parameter, thanks to Jesse Ruderman for
8585 reporting. (Ralf)
8686- Mark cookies HttpOnly and -- if https is used -- secure. Fixes
0 commit comments