aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Cgi (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-02-07Changed the message from the confirm CGI to not indicate approval isMark Sapiro1-2/+3
required for an acceptance of an invitation.
2013-07-19Enable setting a default grouping/sorting for the admindb held messageMark Sapiro1-4/+7
summary via a DISPLAY_HELD_SUMMARY_SORT_BUTTONS setting.
2013-07-18Backported the held message sorting to 2.1 and made it optional.Mark Sapiro1-18/+51
2013-06-07- It is no longer possible to add 'invalid' addresses to the ban_listMark Sapiro1-15/+39
and the *_these_nonmembers filters from the check boxes on the admindb interface. (LP: #1187201)
2013-04-03The pending (un)subscriptions waiting approval are now sorted by emailMark Sapiro1-5/+5
address in the admindb interface as intended. (LP: 1164160)
2012-12-14Added a minimum delay between retrieval and submission of the subscribe form.Mark Sapiro1-0/+4
2012-11-24Implement SUBSCRIBE_FORM_SECRET to mitigate bot subscribes. (LP: 1082746)Mark Sapiro2-2/+34
2012-10-30Added 'legend' to the list of CSRF safe parameters for the admin CGI.Mark Sapiro1-1/+2
2012-08-22The query fragments send_unsub_notifications_to_list_owner andMark Sapiro1-9/+7
send_unsub_ack_to_this_batch will now assume default values if not set in mass unsubscribe URLs. (LP: #1032378)
2012-06-20Fixed a typo in the UPGRADING doc - bin/upgrade -> bin/update.Mark Sapiro1-0/+0
2012-03-25Backported the password reminder from private archive login feature from theMark Sapiro1-1/+22
2.2 branch.
2012-02-23Added a few more safe_params to the CSRF check.Mark Sapiro1-1/+2
2012-02-05Added Tokio Kikuchi's Cross-site Request Forgery hardening to the admin UI.Mark Sapiro1-6/+26
2011-12-31Fix for bug #629738 could cause a crash in the admindb details displayMark Sapiro1-1/+3
if the decoded message body contained characters not in the character set of the list's preferred language. Fixed. Bug #910440.
2011-11-12Added masthead.txt to the list of templates that can be edited via theMark Sapiro1-1/+2
web admin interface. Bug #266805.
2011-06-07The user options 'list my other subscriptions' page now indicates forMark Sapiro1-0/+6
each list if the subscription is 'nomail' or 'digest'. Bug #793669.
2011-05-10Fixed a problem in admindb.py where the character set for the display ofMark Sapiro1-1/+8
the message body excerpt was not correctly determined. Bug #779751.
2011-05-09Prevented setting user passwords with leading/trailing whitespace. Bug #778088.Mark Sapiro3-10/+10
2011-04-25A new list poster password has been implemented. This password may onlyMark Sapiro1-0/+27
be used in Approved: or X-Approved: headers for pre-approving posts. Using this password for that purpose precludes compromise of a more valuable password sent in plain text email. Bug #770581.
2011-04-23Added a logout link to the admindb interface and made both admin andMark Sapiro2-3/+27
admindb logout effective for a site admin cookie if allowed. Bug #769318.
2011-04-15Refactor last change for i18n.Mark Sapiro1-5/+7
2011-04-14Added a report of the affected members to the warnings issued whenMark Sapiro1-3/+5
setting a list with digest members digestable=No and when setting a list with non-digest members nondigestable=no. Bug #761232.
2011-03-29Changed the subscribe CGI to strip leading and trailing whitespace fromMark Sapiro1-2/+2
the supplied email address. Bug #745432.
2011-02-18An XSS vulnerability, CVE-2011-0707, has been fixed.Mark Sapiro1-3/+3
2011-02-07- Fixed an uncaught KeyError when poster tries to cancel a post which wasMark Sapiro1-2/+3
already handled. Bug #266224.
2011-02-05Updated copyright year for previous change.Mark Sapiro1-1/+1
2011-02-05Issue an HTTP 404 status for private archive file not found.Mark Sapiro1-0/+1
2010-09-10Made minor wording improvements and typo corrections in some messages.Mark Sapiro2-5/+5
Bug #426979.
2010-09-09Two potential XSS vulnerabilities have been identified and fixed.Mark Sapiro1-2/+2
2010-09-03Fixed admindb interface to decode base64 and quoted-printable encodedMark Sapiro1-1/+1
message body excerpts for display. Bug #629738.
2010-07-27Changed the member options login page unsubscribe request to include theMark Sapiro1-1/+2
requesters IP address in the confirmation request. Bug #610527.
2010-07-02Increased the font size of 'Welcome!'on admin overview for consistency with ↵Mark Sapiro1-1/+1
listinfo.
2010-06-25Fixed an issue in admindb that could result in a KeyError and "we hit aMark Sapiro1-6/+10
bug" response when a moderator acts on a post that had been handled by someone else after the first moderator had retrieved it. Bug #598671.
2010-06-23Fixed a bug which would fail to show a list on the admin and listinfoMark Sapiro2-4/+6
overview pages if its web_page_url contained a :port. Bug # 597741.
2010-03-29Added roster to the CGIs that return HTTP 401 status for an authenticationMark Sapiro10-0/+22
failure, and return HTTP 404 status from all CGIs for an invalid list name.
2010-03-06Reordered the 'cancel' and 'subscribe' buttons on the subscriptionMark Sapiro1-3/+3
confirmation web page so the default action upon 'enter' will be the subscribe button in browsers that pick the first button. Bug #530654.
2010-03-06Fixed a bug in the admindb interface that could apply a moderatorMark Sapiro1-2/+10
action to a message not displayed. Bug #533468.
2010-02-27Added a urlhost argument to the MailList.MailList.Create() method toMark Sapiro1-2/+3
allow bin/newlist and the the create CGI to pass urlhost so the host will be correct in the listinfo link on the emptyarchive page. Bug #529100.
2010-02-04We now give an HTTP 401 status for authentication failures from admin,Mark Sapiro3-2/+8
admindb, private and options logins.
2010-01-21- Fixed a bug where going to an archives/private/list.mbox/list.mbox URLMark Sapiro1-1/+3
would result in a munged URL if authentication was required. Bug #266164.
2009-12-04- Added vette logging for rejected and discarded (un)subscribe requests.Mark Sapiro1-1/+1
- Fixed a bug in admindb.py that could erroneously discard an unsubscribe request as a duplicate.
2009-12-03Decoded RFC 2047 encoded message subjects for a few reports. Bug #266428.Mark Sapiro1-3/+4
2009-07-31Backported several bug fixes from the 2.2 branch.Mark Sapiro2-4/+5
2009-02-03Fixed a bug in admindb.py in the implementation of replacing "No ReasonMark Sapiro1-2/+7
Given" with the default rejection reason. Bug #325016.
2009-01-20Two of the 'new' class exceptions are raised with an argument.Mark Sapiro1-4/+5
2009-01-11Updated links to Python documentation.Mark Sapiro1-1/+2
2009-01-10- Fixed the admin Membership List Find member function so the 'letter'Mark Sapiro1-2/+5
links to a chunked result would still be limited to the Find member search. SF patch #1532081. - Changed scripts/driver to return a 405 status for non GET, POST, HEAD methods. SF patch #1578756.
2009-01-02Mailman/Utils.pyMark Sapiro1-9/+8
- Fixed a long standing error that stopped relative hrefs from being generated for links on Mailman's web pages. Mailman/Cgi/admindb.py - Changed the admindb interface so that when messages are rejected from the summary page, the reject reason is the rejection message from the Errors.HoldMessage subclass instead of the generic "No reason given".
2008-12-07Fixed a problem in Decorate which could throw a TypeError on conversion toMark Sapiro1-6/+8
unicode of a header/footer that was already unicode because of interpolating a unicode value. Made a minor change to the authentication logic for displaying hidden members on the roster.
2008-12-05Updated some FAQ URLs for wiki.list.org.Mark Sapiro1-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 23:44:03 +0000