antville/antville
antville/antville
1
1
Fork 0
Code Issues 48 Pull requests 8 Projects Releases 9 Wiki Activity Actions

* Fixed security issue caused by sensitive property in req.data

Browse source 
* Fixed issue caused by setting a Metadata property to a Java value, e.g. java.net.URL instance becomes string without quotes. (Could this be a Rhino bug?)
 * Finalized conversion of AV_USER table to simple naming scheme ("user")
 * Added global getTitle() method which returns either site.title or root.sys_title
 * Implemented universal HopObject.value() method
 * Rededicated User.update() method since its previous functionality is now taken over by User.value()
 * Restructured login and register functionalities in User and MemberMgr
 * Replaced first occurrences of Exception with Error
 * Introduced i18n via gettext in User and MemberMgr
 * Removed getMessage() and Message in User and MemberMgr
 * Added first possible implementation of global getPermission() method
 * Modified code of global evalEmail() and evalURL() methods to work with Helma modules
 * Simplified global sendMail() method by not throwing any MailException anymore and returning the status code only
 * sendMail() now is using helma.Mail (so we can debug message output)
This commit is contained in:
Tobi Schäfer 2007-08-23 17:17:40 +00:00
parent 7d21e881e3
commit e9a7800a87
24 changed files with 401 additions and 436 deletions
Download patch file Download diff file Expand all files Collapse all files

6
code/Image/Image.js
View file

@ -150,7 +150,7 @@ Image.prototype.editlink_macro = function(param) {
}
if (session.user) {
try {
this.checkEdit(session.user, req.data.memberlevel);
this.checkEdit(session.user, res.data.memberlevel);
} catch (deny) {
return;
}
@ -173,7 +173,7 @@ Image.prototype.deletelink_macro = function(param) {
}
if (session.user) {
try {
this.checkDelete(session.user, req.data.memberlevel);
this.checkDelete(session.user, res.data.memberlevel);
} catch (deny) {
return;
}
@ -228,7 +228,7 @@ Image.prototype.replacelink_macro = function(param) {
if (this.layout && path.Layout != this.layout) {
if (session.user) {
try {
path.Layout.images.checkAdd(session.user, req.data.memberlevel);
path.Layout.images.checkAdd(session.user, res.data.memberlevel);
} catch (deny) {
return;
}

4
code/Image/type.properties
View file

@ -53,11 +53,11 @@ thumbnail.foreign = IMAGE_ID
creator = object(User)
creator.local = IMAGE_F_USER_CREATOR
creator.foreign = USER_ID
creator.foreign = id
modifier = object(User)
modifier.local = IMAGE_F_USER_MODIFIER
modifier.foreign = USER_ID
modifier.foreign = id
tags = collection(TagHub)
tags.local.1 = $id