| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Implement Ralf Jung's captcha feature for the subscribe form. | Mark Sapiro | 2019-06-19 | 1 | -2/+20 |
| |\ | |||||
| | * | Don't enable CAPTCHA if 'en' key is not set | Ralf Jung | 2019-06-10 | 1 | -1/+1 |
| | | | |||||
| | * | fix computing the form hash when there is no CAPTCHA | Ralf Jung | 2019-06-10 | 1 | -1/+1 |
| | | | |||||
| | * | implement a simple CAPTCHA scheme based on questions and answers configured ↵ | Ralf Jung | 2019-06-10 | 1 | -2/+17 |
| |/ | | | | by the site admin | ||||
| * | enhance i18n of listinfo overview | Yasuhito FUTATSUKI at POEM | 2018-06-22 | 1 | -1/+1 |
| | | | | | | * make sure list's description charset as its preferred_language's * get description as a string of charset caller wanted | ||||
| * | Separate data in CSRF token by colon to avoid collisions. | Ralf Jung | 2018-06-03 | 1 | -3/+3 |
| | | | | | | | This makes the data-to-token function injective. Previously, for example, the list called "list1" and the IP "10.0.0.0" would have the same hash as the list called "list" and the IP "110.0.0.0", as the strings were just concatenated. | ||||
| * | Internationalize the noscript note added to reCAPTCHA. | Mark Sapiro | 2018-05-26 | 1 | -2/+3 |
| | | |||||
| * | Add <noscript> note to listinfo reCAPTCHA that JavaScript is required. | Mark Sapiro | 2018-05-05 | 1 | -0/+1 |
| | | |||||
| * | It's not necessary to replace _ with - in language codes for reCAPTCHA. | Mark Sapiro | 2018-02-03 | 1 | -3/+1 |
| | | |||||
| * | Added the ability to add reCAPTCHA to the listinfo subscribe form. | Mark Sapiro | 2018-01-29 | 1 | -1/+14 |
| |\ | |||||
| | * | Allow the list subscription form to be protected from spam bots using | David Siebörger | 2018-01-29 | 1 | -0/+10 |
| |/ | | | | reCAPTCHA. | ||||
| * | Bumped Copyrights and fixed a bug in prior commit. | Mark Sapiro | 2017-06-05 | 1 | -1/+1 |
| | | |||||
| * | Defend against CGI requests with multiple values for the same parameter. | Mark Sapiro | 2017-06-05 | 1 | -1/+1 |
| | | |||||
| * | Catch TypeError from certain defective crafted POST requests. | Mark Sapiro | 2016-07-14 | 1 | -1/+13 |
| | | |||||
| * | Catch MMUnknownListError in case list is removed after listing names. | Mark Sapiro | 2016-05-17 | 1 | -2/+6 |
| | | |||||
| * | Improved identification of remote clients coming via a proxy server. | Mark Sapiro | 2015-06-23 | 1 | -3/+4 |
| |\ | |||||
| | * | Support for HTTP_X_FORWARDED_FOR and HTTP_FORWARDED_FOR (RFC 7239) | Jim Popovitch | 2015-06-23 | 1 | -3/+4 |
| |/ | |||||
| * | If SUBSCRIBE_FORM_SECRET is enabled and a user's network has a load | Mark Sapiro | 2015-04-23 | 1 | -4/+14 |
| | | | | | | | balancer or similar in use the POSTing IP might not exactly match the GETting IP. This is now accounted for by not requiring the last octet (16 bits for ipV6) to match. | ||||
| * | - Added the list name to the vette log "held message approved" entry. | Mark Sapiro | 2014-03-21 | 1 | -2/+2 |
| | | | | | | | | | | | (LP: 1295875) - Added the CGI module name to various "No such list" error log entries. (LP: 1295875) - Modified contrib/mmdsr to report module name if present in "No such list error log entries. | ||||
| * | Implement SUBSCRIBE_FORM_SECRET to mitigate bot subscribes. (LP: 1082746) | Mark Sapiro | 2012-11-24 | 1 | -1/+15 |
| | | |||||
| * | Two potential XSS vulnerabilities have been identified and fixed. | Mark Sapiro | 2010-09-09 | 1 | -2/+2 |
| | | |||||
| * | Fixed a bug which would fail to show a list on the admin and listinfo | Mark Sapiro | 2010-06-23 | 1 | -2/+3 |
| | | | | | overview pages if its web_page_url contained a :port. Bug # 597741. | ||||
| * | Added roster to the CGIs that return HTTP 401 status for an authentication | Mark Sapiro | 2010-03-29 | 1 | -0/+2 |
| | | | | | failure, and return HTTP 404 status from all CGIs for an invalid list name. | ||||
| * | Backported several bug fixes from the 2.2 branch. | Mark Sapiro | 2009-07-31 | 1 | -3/+4 |
| | | |||||
| * | FSF office has moved to 51 Franklin Street. | tkikuchi | 2005-08-27 | 1 | -1/+1 |
| | | |||||
| * | listinfo_overview(): Richard Barrett's patch # 828811 to reduce | bwarsaw | 2003-12-24 | 1 | -5/+6 |
| | | | | | | | listinfo and admin cgi process size by not keeping the entire mlist object alive through a reference in the advertised list. Only the information used in the overview is kept. | ||||
| * | Backporting from the HEAD -- updated cgi's | bwarsaw | 2003-09-22 | 1 | -1/+1 |
| | | |||||
| * | Backporting from the trunk. | bwarsaw | 2003-02-08 | 1 | -6/+8 |
| | | |||||
| * | This commit was manufactured by cvs2svn to create branch | 2003-01-02 | 1 | -0/+206 | |
| 'Release_2_1-maint'. | |||||
 |
index : mailman2 | |
| mirror of https://code.launchpad.net/~mailman-coders/mailman/2.1 | git |
| aboutsummaryrefslogtreecommitdiffstats |