aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Cgi (unfollow)
Commit message (Expand)AuthorFilesLines
2016-08-26Fixes for CVE-2016-6893 and more.Mark Sapiro3-5/+71
2016-07-19Membership List letter links could be incorrectly rendered as Unicode.Mark Sapiro1-0/+3
2016-07-14Catch TypeError from certain defective crafted POST requests.Mark Sapiro11-14/+132
2016-05-22Prior fix for lp:1573623 at rev 1647 was incomplete.Mark Sapiro1-2/+3
2016-05-18Added a bunch more templates to those that can be edited via the GUI.Mark Sapiro1-1/+13
2016-05-17Catch MMUnknownListError in case list is removed after listing names.Mark Sapiro2-3/+11
2016-04-22White space left of Logout link is no longer part of the link.Mark Sapiro1-3/+4
2015-12-06Submitting the user options form for a user who was asynchronouslyMark Sapiro1-0/+8
2015-09-16Defended against a user submitting URLs with query fragments or POSTMark Sapiro1-0/+8
2015-07-20Don't show digest options on user's options page for non-digestable lists.Mark Sapiro1-2/+8
2015-06-23Support for HTTP_X_FORWARDED_FOR and HTTP_FORWARDED_FOR (RFC 7239) Jim Popovitch3-9/+18
2015-04-23If SUBSCRIBE_FORM_SECRET is enabled and a user's network has a loadMark Sapiro2-12/+35
2015-04-13Improved search in admin UI Membership List.Mark Sapiro1-1/+10
2015-03-09Implemented member address change via the admin GUI.Mark Sapiro1-1/+109
2015-02-03Bumped copyright year for prior change.Mark Sapiro1-1/+1
2015-01-30The admindb interface has been fixed so the the detail message bodyMark Sapiro1-8/+6
2015-01-22A number of changes from the unofficial 2.2 branch have been backported toMark Sapiro2-18/+21
2014-12-20Implement a new DEFAULT_SUBSCRIBE_OR_INVITE setting to control the defaultMark Sapiro1-1/+2
2014-11-07Catch the NotAMemberError exception thrown if an authenticatedMark Sapiro1-0/+7
2014-09-21The options CGI now rejects all but HTTP GET and POST requests.Mark Sapiro1-0/+12
2014-06-09<label> tags have been added around most check boxes and radio buttonsMark Sapiro1-10/+29
2014-05-02Removed HTML tags from the title of a couple of rmlist.py pages becauseMark Sapiro1-2/+2
2014-04-15Fixed the admin Membership List so a search string if any is not lostMark Sapiro1-1/+2
2014-03-21 - Added the list name to the vette log "held message approved" entry.Mark Sapiro10-20/+20
2014-02-07Changed the message from the confirm CGI to not indicate approval isMark Sapiro1-2/+3
2013-07-19Enable setting a default grouping/sorting for the admindb held messageMark Sapiro1-4/+7
2013-07-18Backported the held message sorting to 2.1 and made it optional.Mark Sapiro1-18/+51
2013-06-07- It is no longer possible to add 'invalid' addresses to the ban_listMark Sapiro1-15/+39
2013-04-03The pending (un)subscriptions waiting approval are now sorted by emailMark Sapiro1-5/+5
2012-12-14Added a minimum delay between retrieval and submission of the subscribe form.Mark Sapiro1-0/+4
2012-11-24Implement SUBSCRIBE_FORM_SECRET to mitigate bot subscribes. (LP: 1082746)Mark Sapiro2-2/+34
2012-10-30Added 'legend' to the list of CSRF safe parameters for the admin CGI.Mark Sapiro1-1/+2
2012-08-22The query fragments send_unsub_notifications_to_list_owner andMark Sapiro1-9/+7
2012-06-20Fixed a typo in the UPGRADING doc - bin/upgrade -> bin/update.Mark Sapiro1-0/+0
2012-03-25Backported the password reminder from private archive login feature from theMark Sapiro1-1/+22
2012-02-23Added a few more safe_params to the CSRF check.Mark Sapiro1-1/+2
2012-02-05Added Tokio Kikuchi's Cross-site Request Forgery hardening to the admin UI.Mark Sapiro1-6/+26
2011-12-31Fix for bug #629738 could cause a crash in the admindb details displayMark Sapiro1-1/+3
2011-11-12Added masthead.txt to the list of templates that can be edited via theMark Sapiro1-1/+2
2011-06-07The user options 'list my other subscriptions' page now indicates forMark Sapiro1-0/+6
2011-05-10Fixed a problem in admindb.py where the character set for the display ofMark Sapiro1-1/+8
2011-05-09Prevented setting user passwords with leading/trailing whitespace. Bug #778088.Mark Sapiro3-10/+10
2011-04-25A new list poster password has been implemented. This password may onlyMark Sapiro1-0/+27
2011-04-23Added a logout link to the admindb interface and made both admin andMark Sapiro2-3/+27
2011-04-15Refactor last change for i18n.Mark Sapiro1-5/+7
2011-04-14Added a report of the affected members to the warnings issued whenMark Sapiro1-3/+5
2011-03-29Changed the subscribe CGI to strip leading and trailing whitespace fromMark Sapiro1-2/+2
2011-02-18An XSS vulnerability, CVE-2011-0707, has been fixed.Mark Sapiro1-3/+3
2011-02-07- Fixed an uncaught KeyError when poster tries to cancel a post which wasMark Sapiro1-2/+3
2011-02-05Updated copyright year for previous change.Mark Sapiro1-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-25 05:37:19 +0000