aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Cgi/admin.py (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-12-20Implement a new DEFAULT_SUBSCRIBE_OR_INVITE setting to control the defaultMark Sapiro1-1/+2
for the admin Mass Subscriptions page.
2014-04-15Fixed the admin Membership List so a search string if any is not lostMark Sapiro1-1/+2
when visiting subsequent fragments of a chunked list.
2014-03-21 - Added the list name to the vette log "held message approved" entry.Mark Sapiro1-3/+3
(LP: 1295875) - Added the CGI module name to various "No such list" error log entries. (LP: 1295875) - Modified contrib/mmdsr to report module name if present in "No such list error log entries.
2012-10-30Added 'legend' to the list of CSRF safe parameters for the admin CGI.Mark Sapiro1-1/+2
2012-08-22The query fragments send_unsub_notifications_to_list_owner andMark Sapiro1-9/+7
send_unsub_ack_to_this_batch will now assume default values if not set in mass unsubscribe URLs. (LP: #1032378)
2012-02-23Added a few more safe_params to the CSRF check.Mark Sapiro1-1/+2
2012-02-05Added Tokio Kikuchi's Cross-site Request Forgery hardening to the admin UI.Mark Sapiro1-6/+26
2011-04-25A new list poster password has been implemented. This password may onlyMark Sapiro1-0/+27
be used in Approved: or X-Approved: headers for pre-approving posts. Using this password for that purpose precludes compromise of a more valuable password sent in plain text email. Bug #770581.
2011-04-23Added a logout link to the admindb interface and made both admin andMark Sapiro1-0/+3
admindb logout effective for a site admin cookie if allowed. Bug #769318.
2011-04-15Refactor last change for i18n.Mark Sapiro1-5/+7
2011-04-14Added a report of the affected members to the warnings issued whenMark Sapiro1-3/+5
setting a list with digest members digestable=No and when setting a list with non-digest members nondigestable=no. Bug #761232.
2010-09-10Made minor wording improvements and typo corrections in some messages.Mark Sapiro1-3/+3
Bug #426979.
2010-07-02Increased the font size of 'Welcome!'on admin overview for consistency with ↵Mark Sapiro1-1/+1
listinfo.
2010-06-23Fixed a bug which would fail to show a list on the admin and listinfoMark Sapiro1-2/+3
overview pages if its web_page_url contained a :port. Bug # 597741.
2010-03-29Added roster to the CGIs that return HTTP 401 status for an authenticationMark Sapiro1-0/+2
failure, and return HTTP 404 status from all CGIs for an invalid list name.
2009-07-31Backported several bug fixes from the 2.2 branch.Mark Sapiro1-1/+1
2009-01-11Updated links to Python documentation.Mark Sapiro1-1/+2
2009-01-10- Fixed the admin Membership List Find member function so the 'letter'Mark Sapiro1-2/+5
links to a chunked result would still be limited to the Find member search. SF patch #1532081. - Changed scripts/driver to return a 405 status for non GET, POST, HEAD methods. SF patch #1578756.
2008-11-12Apply Heiko Rommel's patch for hashlib deprecation warnings for bug 293178.Barry Warsaw1-3/+3
I've modified the patch to improve some of the stylistic issues.
2008-07-30Fixed a bug in admin.py which would result in chunked pages of the membershipMark Sapiro1-10/+5
list for members whose address begins with a non-alphanumeric character to not be visible or retrievable.
2007-05-08- CGI/admin.pymsapiro1-17/+19
The email address which forms a part of the various CGI data keys in the admin membership list is now urllib.quote()ed. This allows changing options for and unsubbing an address which contains a double-quote character. - CGI/admindb.py Added additional test to not display "Database Updated ..." when coming from the login page. - CGI/roster.py, HTMLFormatter.py Changed to show hidden members when authorization is site or list's admin or moterator password. Patch 1587651. - Defaults.py.in, Handlers/Cleanse_DKIM.py Added a new REMOVE_DKIM_HEADERS Defaults.py/mm_cfg.py setting (default = No) to control removing dkim/domainkey signatures from posts and mail to -owner. - Handlers/Decorate.py, Handlers/Scrubber.py Changed to preserve format=flowed and delsp=yes in the Content-Type: of the body when adding header/footer and when scrubbing attachments and to remove trailing spaces from the header/footer lines so they won't be flowed. Bug 1495122. Fixed a scrubber issue where the i18n translated 'next part' separator can be garbled if the list charset is different from the message. - Queue/Runner.py. Queue/Switchboard.py Now that we have .bak queue entries for recovery, it is no longer the case that an unparseable message is lost. In this case, and in case of other exceptions when dequeueing, I added a preservation feature to move the .bak file to qfiles/shunt as a .psv file and write an appropriate log entry. It is also possible for an attempt to shunt a message to fail. One example that occurred in practice (bug 1656289) was caused by a huge message that threw a MemoryError in processing and then threw another MemoryError in the attempt to pickle the message for the shunt queue. In this case as well, I log and attempt to preserve the original queue entry by renaming.
2006-10-11Fixed admin.py so null VARHELP category is handled (1573393).msapiro1-4/+5
2006-08-30CVE-2006-3636. Fixes for various cross-site scripting issues. Discovery bybwarsaw1-7/+8
Moritz Naumann and most of the repair work done by Mark Sapiro (with some additional work by Barry).
2005-12-30A cleansing pass, almost entirely cosmetic. Such things as whitespacebwarsaw1-1/+2
normalization, removal of tabs, copyright year updates to changed files, docstring and comment fixes, and usage of True/False. I also made a pass through the NEWS file. One import was reordered, and after this commit I will move the mmdsr.readme file to README.mmdsr. From my perspective, after that we're ready to go. I will port these changes forward to the trunk.
2005-12-03Improving banned subscription logic to cover all invites, subscribes, ↵msapiro1-1/+4
address changes and confirmations of same.
2005-08-27FSF office has moved to 51 Franklin Street.tkikuchi1-1/+1
2004-12-28admin.py:bwarsaw1-5/+3
show_results(): Slightly reworded the "Edit the public..." link to include a reference to the public text files, e.g. the welcome message. edithtml.py Grant Bowman's patch # 1085501 to allow editing the welcome message via the admin page. inthenews.ht More names ACKNOWLEDGMENTS, NEWS Updates for #1085501
2003-12-24adminy_overview(): Richard Barrett's patch # 828811 to reduce listinfobwarsaw1-5/+6
and admin cgi process size by not keeping the entire mlist object alive through a reference in the advertised list. Only the information used in the overview is kept.
2003-12-01get_item_gui_value(): Added a new widget HeaderFilter and associated code tobwarsaw1-2/+72
build the interface from header_filter_rules. Here you can specify a set of regular expressions to test against a message's (outer) headers. You can also specify the action to take when a rule matches. These are available on Privacy->Spam Filters page.
2003-11-21change_options(): When calling ApprovedAddMember(), pass a meaningfulbwarsaw1-2/+3
value to the whence argument.
2003-09-22Backporting from the HEAD -- updated cgi'sbwarsaw1-1/+3
2003-03-31Backporting from trunkbwarsaw1-1/+1
2003-02-08Backporting from the trunk.bwarsaw1-2/+2
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-25 18:31:46 +0000