aboutsummaryrefslogtreecommitdiffstats
path: root/Mailman/Cgi (follow)
Commit message (Expand)AuthorAgeFilesLines
* Implement security log.Mark Sapiro2018-06-116-4/+42
|\
| * Changes based on feedback from Mark.Jim Popovitch2018-06-102-5/+8
| * Improved logging of security related eventsJim Popovitch2018-06-065-0/+25
|/
* Separate data in CSRF token by colon to avoid collisions.Ralf Jung2018-06-032-6/+6
* Internationalize the noscript note added to reCAPTCHA.Mark Sapiro2018-05-261-2/+3
* Add <noscript> note to listinfo reCAPTCHA that JavaScript is required.Mark Sapiro2018-05-051-0/+1
* Removed a Python 2.7 dependency introduced in 2.1.26.Mark Sapiro2018-03-011-1/+1
* Fix XSS and info leak in options CGI - CVE-2018-5950Mark Sapiro2018-02-041-15/+17
* It's not necessary to replace _ with - in language codes for reCAPTCHA.Mark Sapiro2018-02-031-3/+1
* Corrected i18n from rev. 1738 and updated message catalogs.Mark Sapiro2018-01-301-3/+5
* Added the ability to add reCAPTCHA to the listinfo subscribe form.Mark Sapiro2018-01-292-2/+37
|\
| * Allow the list subscription form to be protected from spam bots usingDavid Siebörger2018-01-292-0/+32
|/
* Added screen reader labels to some admindb radio buttons.Mark Sapiro2017-06-241-15/+10
* Added text for screen readers only to checkboxes on admin Membership List.Mark Sapiro2017-06-211-7/+16
* Display date of held subscriptions and keep newest.Mark Sapiro2017-06-091-6/+11
* Reverted another getfirst in the multi-value CGI defence.Mark Sapiro2017-06-071-1/+1
* Bumped Copyrights and fixed a bug in prior commit.Mark Sapiro2017-06-0510-12/+12
* Defend against CGI requests with multiple values for the same parameter.Mark Sapiro2017-06-0511-105/+105
* Fixed a regression in Cgi/options.py.Mark Sapiro2017-06-041-12/+12
* Change 'subscribees' to 'subscribers' on admin mass subscribe page.Mark Sapiro2017-04-251-1/+1
* Fixed an uncaught TypeError in the subscribe CGI.Mark Sapiro2017-02-221-1/+1
* Fixed a TypeError thrown in the roster CGI when called with a listnameMark Sapiro2017-02-031-3/+3
* Fixed incorrect "view more members" links at the bottom of the adminMark Sapiro2016-10-271-4/+5
* Fix unicode links in multi-page admin Membership list search results.Mark Sapiro2016-09-291-2/+5
* Fixes for CVE-2016-6893 and more.Mark Sapiro2016-08-263-5/+71
* Membership List letter links could be incorrectly rendered as Unicode.Mark Sapiro2016-07-191-0/+3
* Catch TypeError from certain defective crafted POST requests.Mark Sapiro2016-07-1411-14/+132
* Prior fix for lp:1573623 at rev 1647 was incomplete.Mark Sapiro2016-05-221-2/+3
* Added a bunch more templates to those that can be edited via the GUI.Mark Sapiro2016-05-181-1/+13
* Catch MMUnknownListError in case list is removed after listing names.Mark Sapiro2016-05-172-3/+11
* White space left of Logout link is no longer part of the link.Mark Sapiro2016-04-221-3/+4
* Submitting the user options form for a user who was asynchronouslyMark Sapiro2015-12-061-0/+8
* Defended against a user submitting URLs with query fragments or POSTMark Sapiro2015-09-161-0/+8
* Don't show digest options on user's options page for non-digestable lists.Mark Sapiro2015-07-201-2/+8
* Improved identification of remote clients coming via a proxy server.Mark Sapiro2015-06-233-9/+18
|\
| * Support for HTTP_X_FORWARDED_FOR and HTTP_FORWARDED_FOR (RFC 7239) Jim Popovitch2015-06-233-9/+18
|/
* If SUBSCRIBE_FORM_SECRET is enabled and a user's network has a loadMark Sapiro2015-04-232-12/+35
* Improved search in admin UI Membership List.Mark Sapiro2015-04-131-1/+10
* Implemented member address change via the admin GUI.Mark Sapiro2015-03-091-1/+109
* Bumped copyright year for prior change.Mark Sapiro2015-02-031-1/+1
* The admindb interface has been fixed so the the detail message bodyMark Sapiro2015-01-301-8/+6
* A number of changes from the unofficial 2.2 branch have been backported toMark Sapiro2015-01-222-18/+21
* Implement a new DEFAULT_SUBSCRIBE_OR_INVITE setting to control the defaultMark Sapiro2014-12-201-1/+2
* Catch the NotAMemberError exception thrown if an authenticatedMark Sapiro2014-11-071-0/+7
* The options CGI now rejects all but HTTP GET and POST requests.Mark Sapiro2014-09-211-0/+12
* <label> tags have been added around most check boxes and radio buttonsMark Sapiro2014-06-091-10/+29
* Removed HTML tags from the title of a couple of rmlist.py pages becauseMark Sapiro2014-05-021-2/+2
* Fixed the admin Membership List so a search string if any is not lostMark Sapiro2014-04-151-1/+2
* - Added the list name to the vette log "held message approved" entry.Mark Sapiro2014-03-2110-20/+20
* Changed the message from the confirm CGI to not indicate approval isMark Sapiro2014-02-071-2/+3
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 06:57:41 +0000