mailman2 - mirror of https://code.launchpad.net/~mailman-coders/mailman/2.1

	Commit message (Collapse)	Author	Age	Files	Lines
*	Fixes for CVE-2016-6893 and more.	Mark Sapiro	2016-08-26	1	-1/+27
\|
*	Catch TypeError from certain defective crafted POST requests.	Mark Sapiro	2016-07-14	1	-2/+12
\|
*	Submitting the user options form for a user who was asynchronously	Mark Sapiro	2015-12-06	1	-0/+8
\| \| \|	unsubscribed would throw an uncaught NotAMemberError.
*	Defended against a user submitting URLs with query fragments or POST	Mark Sapiro	2015-09-16	1	-0/+8
\| \| \|	data containing multiple occurrences of the same variable.
*	Don't show digest options on user's options page for non-digestable lists.	Mark Sapiro	2015-07-20	1	-2/+8
\|
*	Support for HTTP_X_FORWARDED_FOR and HTTP_FORWARDED_FOR (RFC 7239)	Jim Popovitch	2015-06-23	1	-3/+10
\|
*	A number of changes from the unofficial 2.2 branch have been backported to	Mark Sapiro	2015-01-22	1	-15/+17
\| \| \| \| \|	the 2.1 branch for release with 2.1.19. The 2.2 branch is now no different from the 2.1 branch and will no longer be maintained.
*	Catch the NotAMemberError exception thrown if an authenticated	Mark Sapiro	2014-11-07	1	-0/+7
\| \| \| \|	unsubscribe is submitted from the user options page for a nonmember.
*	The options CGI now rejects all but HTTP GET and POST requests.	Mark Sapiro	2014-09-21	1	-0/+12
\|
*	- Added the list name to the vette log "held message approved" entry.	Mark Sapiro	2014-03-21	1	-2/+2
\| \| \| \| \| \| \| \| \| \|	(LP: 1295875) - Added the CGI module name to various "No such list" error log entries. (LP: 1295875) - Modified contrib/mmdsr to report module name if present in "No such list error log entries.
*	The user options 'list my other subscriptions' page now indicates for	Mark Sapiro	2011-06-07	1	-0/+6
\| \| \| \|	each list if the subscription is 'nomail' or 'digest'. Bug #793669.
*	Prevented setting user passwords with leading/trailing whitespace. Bug #778088.	Mark Sapiro	2011-05-09	1	-3/+3
\|
*	Changed the member options login page unsubscribe request to include the	Mark Sapiro	2010-07-27	1	-1/+2
\| \| \| \|	requesters IP address in the confirmation request. Bug #610527.
*	Added roster to the CGIs that return HTTP 401 status for an authentication	Mark Sapiro	2010-03-29	1	-0/+2
\| \| \| \|	failure, and return HTTP 404 status from all CGIs for an invalid list name.
*	We now give an HTTP 401 status for authentication failures from admin,	Mark Sapiro	2010-02-04	1	-1/+3
\| \| \| \|	admindb, private and options logins.
*	options.py - Made the ability for a list admin to change a members password	Mark Sapiro	2008-04-14	1	-0/+8
\| \| \| \| \| \| \|	conditional on mm_cfg.OWNERS_CAN_CHANGE_MEMBER_PASSWORDS. Defaults.py.in - Added OWNERS_CAN_CHANGE_MEMBER_PASSWORDS = No.
*	CookHeaders.py - Changed the first URL in the RFC 2369 List-Unsubscribe:	Mark Sapiro	2008-03-06	1	-4/+7
\| \| \| \| \| \| \| \| \| \| \| \| \|	header to go to the options login page instead of the listinfo page. options.py - Changed to only issue the "No address given" error if coming from the page itself so we don't get the error when linking from another page or the List-Unsubscribe: header. - Changed to remember the user's language selection when redisplaying the page after an error.
*	- Cgi/options.py - fixed to not present the "empty" topic to user.	Mark Sapiro	2007-11-04	1	-1/+3
\| \| \| \| \|	- Handlers/CalcRecips.py - Changed to not process topics if topics are disabled for the list.
*	CVE-2006-3636. Fixes for various cross-site scripting issues. Discovery by	bwarsaw	2006-08-30	1	-2/+2
\| \| \| \| \|	Moritz Naumann and most of the repair work done by Mark Sapiro (with some additional work by Barry).
*	Improving banned subscription logic to cover all invites, subscribes, ↵	msapiro	2005-12-03	1	-0/+5
\| \| \| \|	address changes and confirmations of same.
*	As of 2.1.6, List admins can change user's option/subscription globally.	tkikuchi	2005-11-30	1	-11/+56
\| \| \| \| \| \| \|	This is not good if list admin cannot be fully trusted. This patch disables the list admin's ability of changing the user option/subscription globally; changes are effective only within the list. Site admin can change globally if mm_cfg.ALLOW_SITE_ADMIN_COOKIES is set Yes.
*	FSF office has moved to 51 Franklin Street.	tkikuchi	2005-08-27	1	-1/+1
\|
*	main(): The list lock must be held in order to pend unsubscription requests.	bwarsaw	2004-02-29	1	-12/+13
\|
*	main(): It's possible that if you're logged in as the list admin, you can get	bwarsaw	2004-02-17	1	-3/+5
\| \| \| \| \| \| \|	to the end of the function trying to present the options page for a non-existant user, causing a traceback. At the last second, do one more isMember() check and return the loginpage if the address isn't a member of the list.
*	main(): Fix for bug #832748, where unsubscribe_policy was being	bwarsaw	2003-11-03	1	-4/+24
\| \| \| \| \| \| \|	ignored for the unsub button on the member login page. Report and original patch by Pasi Sjoholm, modify by Barry. Forward port candidate.
*	Backporting from the trunk.	bwarsaw	2003-02-08	1	-15/+26
\|
*	main(): In the change-of-address section, we only want to show the	bwarsaw	2003-01-02	1	-3/+5
\| \| \| \| \| \| \| \| \| \| \| \|	"you are already using that email address" message if the newaddress matches the case-preserved (subscribed) address. Also, in the set_address section, if cpuser is None, set it to the the user address, since that's what we'll use now as the old address in the ChangeMemberAddress() call. This and related changes should fix problems when the address we're changing to differs for the current address by case only.
*	This commit was manufactured by cvs2svn to create branch		2003-01-02	1	-0/+950
	'Release_2_1-maint'.