| Commit message (Expand) | Author | Age | Files | Lines |
* | Catch TypeError on simultaneous confirmations of the same token. | Mark Sapiro | 2018-08-07 | 1 | -5/+19 |
* | fix python doc urls | Yasuhito FUTATSUKI at POEM | 2018-07-15 | 1 | -1/+1 |
* | Enable editing templates in an alternate language. | Mark Sapiro | 2018-07-08 | 1 | -7/+35 |
|\ |
|
| * | Add language selecter to "HTML Page Editing" page for multi-lang lists | Yasuhito FUTATSUKI at POEM | 2018-07-09 | 1 | -7/+34 |
|/ |
|
* | * apply Utils.websafe() to description string in admin.py | Yasuhito FUTATSUKI at POEM | 2018-06-22 | 1 | -1/+1 |
* | enhance i18n of listinfo overview | Yasuhito FUTATSUKI at POEM | 2018-06-22 | 2 | -2/+2 |
* | Added global _ where needed. | Mark Sapiro | 2018-06-18 | 2 | -0/+2 |
* | Bump copyright dates. | Mark Sapiro | 2018-06-17 | 12 | -11/+11 |
* | I18n for new whence reasons in admin (un)subscribe notices. | Mark Sapiro | 2018-06-17 | 2 | -4/+19 |
|\ |
|
| * | enhance i18n in admin(un)?subscribeack messages | Yasuhito FUTATSUKI at POEM | 2018-06-16 | 2 | -4/+7 |
|/ |
|
* | Implement security log. | Mark Sapiro | 2018-06-11 | 6 | -4/+42 |
|\ |
|
| * | Changes based on feedback from Mark. | Jim Popovitch | 2018-06-10 | 2 | -5/+8 |
| * | Improved logging of security related events | Jim Popovitch | 2018-06-06 | 5 | -0/+25 |
|/ |
|
* | Separate data in CSRF token by colon to avoid collisions. | Ralf Jung | 2018-06-03 | 2 | -6/+6 |
* | Internationalize the noscript note added to reCAPTCHA. | Mark Sapiro | 2018-05-26 | 1 | -2/+3 |
* | Add <noscript> note to listinfo reCAPTCHA that JavaScript is required. | Mark Sapiro | 2018-05-05 | 1 | -0/+1 |
* | Removed a Python 2.7 dependency introduced in 2.1.26. | Mark Sapiro | 2018-03-01 | 1 | -1/+1 |
* | Fix XSS and info leak in options CGI - CVE-2018-5950 | Mark Sapiro | 2018-02-04 | 1 | -15/+17 |
* | It's not necessary to replace _ with - in language codes for reCAPTCHA. | Mark Sapiro | 2018-02-03 | 1 | -3/+1 |
* | Corrected i18n from rev. 1738 and updated message catalogs. | Mark Sapiro | 2018-01-30 | 1 | -3/+5 |
* | Added the ability to add reCAPTCHA to the listinfo subscribe form. | Mark Sapiro | 2018-01-29 | 2 | -2/+37 |
|\ |
|
| * | Allow the list subscription form to be protected from spam bots using | David Siebörger | 2018-01-29 | 2 | -0/+32 |
|/ |
|
* | Added screen reader labels to some admindb radio buttons. | Mark Sapiro | 2017-06-24 | 1 | -15/+10 |
* | Added text for screen readers only to checkboxes on admin Membership List. | Mark Sapiro | 2017-06-21 | 1 | -7/+16 |
* | Display date of held subscriptions and keep newest. | Mark Sapiro | 2017-06-09 | 1 | -6/+11 |
* | Reverted another getfirst in the multi-value CGI defence. | Mark Sapiro | 2017-06-07 | 1 | -1/+1 |
* | Bumped Copyrights and fixed a bug in prior commit. | Mark Sapiro | 2017-06-05 | 10 | -12/+12 |
* | Defend against CGI requests with multiple values for the same parameter. | Mark Sapiro | 2017-06-05 | 11 | -105/+105 |
* | Fixed a regression in Cgi/options.py. | Mark Sapiro | 2017-06-04 | 1 | -12/+12 |
* | Change 'subscribees' to 'subscribers' on admin mass subscribe page. | Mark Sapiro | 2017-04-25 | 1 | -1/+1 |
* | Fixed an uncaught TypeError in the subscribe CGI. | Mark Sapiro | 2017-02-22 | 1 | -1/+1 |
* | Fixed a TypeError thrown in the roster CGI when called with a listname | Mark Sapiro | 2017-02-03 | 1 | -3/+3 |
* | Fixed incorrect "view more members" links at the bottom of the admin | Mark Sapiro | 2016-10-27 | 1 | -4/+5 |
* | Fix unicode links in multi-page admin Membership list search results. | Mark Sapiro | 2016-09-29 | 1 | -2/+5 |
* | Fixes for CVE-2016-6893 and more. | Mark Sapiro | 2016-08-26 | 3 | -5/+71 |
* | Membership List letter links could be incorrectly rendered as Unicode. | Mark Sapiro | 2016-07-19 | 1 | -0/+3 |
* | Catch TypeError from certain defective crafted POST requests. | Mark Sapiro | 2016-07-14 | 11 | -14/+132 |
* | Prior fix for lp:1573623 at rev 1647 was incomplete. | Mark Sapiro | 2016-05-22 | 1 | -2/+3 |
* | Added a bunch more templates to those that can be edited via the GUI. | Mark Sapiro | 2016-05-18 | 1 | -1/+13 |
* | Catch MMUnknownListError in case list is removed after listing names. | Mark Sapiro | 2016-05-17 | 2 | -3/+11 |
* | White space left of Logout link is no longer part of the link. | Mark Sapiro | 2016-04-22 | 1 | -3/+4 |
* | Submitting the user options form for a user who was asynchronously | Mark Sapiro | 2015-12-06 | 1 | -0/+8 |
* | Defended against a user submitting URLs with query fragments or POST | Mark Sapiro | 2015-09-16 | 1 | -0/+8 |
* | Don't show digest options on user's options page for non-digestable lists. | Mark Sapiro | 2015-07-20 | 1 | -2/+8 |
* | Improved identification of remote clients coming via a proxy server. | Mark Sapiro | 2015-06-23 | 3 | -9/+18 |
|\ |
|
| * | Support for HTTP_X_FORWARDED_FOR and HTTP_FORWARDED_FOR (RFC 7239) | Jim Popovitch | 2015-06-23 | 3 | -9/+18 |
|/ |
|
* | If SUBSCRIBE_FORM_SECRET is enabled and a user's network has a load | Mark Sapiro | 2015-04-23 | 2 | -12/+35 |
* | Improved search in admin UI Membership List. | Mark Sapiro | 2015-04-13 | 1 | -1/+10 |
* | Implemented member address change via the admin GUI. | Mark Sapiro | 2015-03-09 | 1 | -1/+109 |
* | Bumped copyright year for prior change. | Mark Sapiro | 2015-02-03 | 1 | -1/+1 |