antville/helma
antville/helma
1
1
Fork 0
Code Issues 5 Pull requests 5 Projects Releases 5 Activity Actions
2605 commits 10 branches 49 tags 53 MiB
Commit graph

2605 commits

This branch
This branch
All branches
Author SHA1 Message Date
hns
02d3e602cc * Use logError() instead of logEvent() and extra stack dumping 
in SessionManager.cleanupSessions().
 2007-11-30 12:33:52 +00:00
hns
70c50c5625 * Implement calling of User.onLogout in Session.logout(). 
Fixes bug 579 <http://helma.org/bugs/show_bug.cgi?id=579>
 2007-11-30 12:32:42 +00:00
hns
1e783a8c99 * Apply better protection against SQL injection following bug 577 
<http://helma.org/bugs/show_bug.cgi?id=577> by introducing 
  DbMapping.checkNumber() to catch anything not looking like a number literal 
  from being used as such. I't quite likely this breaks for some SQL type and 
  app out there, but it's better to be careful here.
* Introduce new DbMapping.virtual/DbMapping.isVirtual() flag that easily lets us 
  know whether a Node/DbMapping is a virtual one (collection, mountpoint etc)
  Using this in Node.getNonVirtualParent() fixes bug 566
  <http://helma.org/bugs/show_bug.cgi?id=566>.
* Remove obsolete and unused Node.setParent(Node, String).
* Set parentHandle directly instead of calling setParent(Node) in Node.getParent().
 2007-11-28 15:32:09 +00:00
hns
230469d544 * Rename FrameworkException to NotFoundException in order to 
reflect actual usage/semantics.
 2007-11-28 15:14:02 +00:00
hns
116a111d5a * Do not set the log level of the event log unless actually required. 2007-11-26 14:46:36 +00:00
hns
8cffcf5b57 * Reimplement Jetty log sedating by introducing a new private Log class that 
reduces the log verbosity for levels DEBUG and TRACE.
  This is a fix for the fix for bug 560   <http://helma.org/bugs/show_bug.cgi?id=560>, 
  which resulted in Jetty logfiles to be written to a subdirectory called "console".
 2007-11-26 14:43:42 +00:00
hns
61b41e098a * Always include local subnode version in lastSubnodeChange checksum. 
Fixes bug 567 <http://helma.org/bugs/show_bug.cgi?id=567>
 2007-11-26 12:45:38 +00:00
hns
ad635a3cf7 * Fix typo in comment. 2007-11-26 12:43:48 +00:00
hns
7258b95fcb * Do not mark prototype as updated in database when modifying the 
_prototype property on transient objects. Fixes bug 572. 
  <http://helma.org/bugs/show_bug.cgi?id=572>
* Tentative fix for bug 573: Calling HopObject.persist() on already persistent
  object causes object to be updated in database.
  <http://helma.org/bugs/show_bug.cgi?id=573>
 2007-11-22 10:27:04 +00:00
hns
1b873d3e11 * Exclude Jetty classes from console log. This is a hack to prevent 
all request and response headers to be dumped to console with debug=true.
  Fixes bug 560 <http://helma.org/bugs/show_bug.cgi?id=560>
 2007-11-20 15:13:55 +00:00
hns
90c02cadc0 * Make sure deleted objects aren't fetched again from database. 
Fixes the other half of bug 551
  <http://helma.org/bugs/show_bug.cgi?id=551>
* Renamed methods in Transactor to make their purpose clearer.
 2007-11-20 13:02:31 +00:00
hns
9858091c20 * Make sure child objects removed via removeChild() are not accessible 
anymore from that collection. 
  Fixes bug 551 <http://helma.org/bugs/show_bug.cgi?id=551>
 2007-11-20 09:37:39 +00:00
hns
ad68ca97b3 * Do not let 404 errors increase app.errorCount, even if 
no notfound action is defined.
 2007-11-14 16:44:27 +00:00
hns
e29a8aee38 * Fix bug where multiple parameter values with the same name aren't 
stored in parameter map for forms with enctype="multipart-formdata".
 2007-11-14 10:00:46 +00:00
hns
ae83283fc5 * Prevent response splitting vulnerability reported by Paul Alexandrow 
on helma-dev: Also fix res.setCookie() and add comments.
 2007-11-13 14:30:05 +00:00
hns
2721d55139 * Prevent response splitting vulnerability reported by 
Paul Alexandrow on helma-dev.
 2007-11-13 14:23:57 +00:00
hns
54617d09c1 * Limit maximal loop count for Macro.resolveHandler() lookup. 
Fixes symptoms of bug 543.
  <http://helma.org/bugs/show_bug.cgi?id=543>
 2007-11-12 14:43:48 +00:00
hns
5cd2021502 * Throw exception instead of removing the old node when adding 
a node to a named collection with a name that is already taken.
  Fixes bug 568 <http://helma.org/bugs/show_bug.cgi?id=568>
 2007-11-12 13:41:56 +00:00
hns
ac4e78cb17 * Allow HopObjects to be used as arguments in XML-RPC calls, interpreting 
them as dicts and ignoring child nodes. Resolves bug #345
  <http://helma.org/bugs/show_bug.cgi?id=345>
 2007-11-08 11:03:41 +00:00
hns
e0b814216e * Log error in XML-RPC method call. 2007-11-08 10:55:33 +00:00
hns
d896e79aeb * Do not allow constructor property to be defined as constant on HopObjects, 
as we need the constructor to be resettable in Helma with Rhino 1.7.
 2007-11-07 13:46:57 +00:00
hns
12423bb9a7 * Do not check parent nodes found via _parent setting - just trust 
getChildElement to be set appropriately.
 2007-11-07 10:31:35 +00:00
hns
1650407241 * Implement suppressErrorPage property to allow error pages 
for low level errors to be suppressed:

    suppressErrorPage = true
 2007-11-05 14:03:02 +00:00
hns
a21d31830e * Backpaddle from incompatible change: return file name instead of 
file path from MimePart.writeToFile() again as in Helma 1.6.0.
 2007-11-05 09:32:31 +00:00
hns
6d2f294252 * Implement onDebuggerStatement(Context) added in Rhino 1.7. 
* Minor Javadoc and import cleanup.
 2007-10-29 09:37:59 +00:00
hns
e307d212fd * Rename Config to ServerConfig in order to prepare for an ApplicationConfig class. 2007-10-11 13:26:02 +00:00
hns
beed995659 * Enabling use of ID sequence generators in H2 databases. 
Patch by Robert Gaggl, fixes bug 562 - http://helma.org/bugs/show_bug.cgi?id=562
 2007-10-11 12:31:49 +00:00
hns
ae0536eb26 * Allow _parent to consist of three elements, such as page.comments.blocked. 
Fixes bug 563 - http://helma.org/bugs/show_bug.cgi?id=563
* Throw an exception when adding to a collection with accessname defined and the 
  collection already contains an object with the given name. Previously, the old object 
  was deleted from the database. 
  Fixes bug 561 - http://helma.org/bugs/show_bug.cgi?id=561
 2007-10-11 12:21:40 +00:00
hns
3c059e8778 * Update to stock Apache XML-RPC 2.0.1. 2007-10-11 12:13:07 +00:00
hns
b1980dceec * Update tagsoup.jar to version 1.1.3. Tagsoup is used by getHtmlDocument() as well as Jala. 2007-10-11 11:58:40 +00:00
hns
a58b4a084f * Allow type.properties to be named after their prototype (e.g. Root.properties). 
Implement feature request 553: http://helma.org/bugs/show_bug.cgi?id=533
 2007-10-11 10:05:53 +00:00
hns
033659c8c5 * Don't mark a HopObject dirty if added to transient collection. 
This is a rather conservative fix for bug 554.
  http://helma.org/bugs/show_bug.cgi?id=554
 2007-10-11 09:51:17 +00:00
hns
9874ec1cd9 * Remove toggle link for debug output. 2007-10-10 12:30:10 +00:00
hns
4ab4f0ef9c Define svn:externals for helma modules trunk 2007-10-09 13:31:47 +00:00
hns
2fa6005ee1 Simplify implementation: 
* No need to use reflection because we always have JDK 1.4 functionality. 
* Use java.util.BitSet for lookup of URI-safe characters.
 2007-10-03 14:43:39 +00:00
hns
9b75760568 * Add try/catch and logging to updateProperties(), and remove duplicate code. 2007-10-03 14:40:21 +00:00
hns
72fffb0aa1 robert: set svn:mime-type property on all html files 2007-09-28 13:29:58 +00:00
hns
463a175753 robert: removed svn:mime-type and set svn:keywords property of all text files 2007-09-28 13:16:38 +00:00
hns
f03f405f04 * Check if changeSet is null in commitCompilation() to avoid NullPointerException. 
Fixed bug http://helma.org/bugs/show_bug.cgi?id=466
 2007-09-26 12:46:21 +00:00
hns
e9e11ddb9a * Add write() and writeToString() variants that take an additional boolean argument 
to write node in shallow/internal database mode. 
  Fixes bug http://helma.org/bugs/show_bug.cgi?id=404
* Some code and javadoc cleanup.
 2007-09-26 12:07:34 +00:00
hns
ff20cddcda * Refactor constructors a lil bit, make className final, clean up import statements. 2007-09-26 12:03:06 +00:00
hns
fd598f23cf * Set session cookie in request object. Fixes bug 547. 
http://helma.org/bugs/show_bug.cgi?id=547
* Use java.security.SecureRandom for session id generation,
  with fallback to java.util.Random.
 2007-09-25 11:01:30 +00:00
hns
f7f2604969 * Move cleanupSessions() from Application to SessionManager. 2007-09-25 10:43:04 +00:00
hns
a35d3ea425 * Convert file name into an absolute path in saveAs(). 
* Build directories in saveAs() if they don't exist, 
  fixing bug 324 <http://helma.org/bugs/show_bug.cgi?id=324>
 2007-09-21 14:57:22 +00:00
hns
4b23a48c14 * Try to be more robust if getInputStream() is called after writeToFile() has been called 
by getting the InputStream from the new file instead of the old one, which may not exist 
  anymore. Fixes bug 559 <http://helma.org/bugs/show_bug.cgi?id=559>
* Print error messages when catching Exceptions, plus a little more cleanup.
 2007-09-21 14:55:10 +00:00
hns
262eb22335 * Fall back to property name if a filter reference can't be resolved as column name. 
Fixes bug 557 <http://helma.org/bugs/show_bug.cgi?id=557>
 2007-09-21 13:12:46 +00:00
hns
74b3b217ee * Mark object references as COMPLEX_REFERENCE if the foreign key column is also 
mapped as primitive property. Fixes bug 555.
  <http://helma.org/bugs/show_bug.cgi?id=555>
* Get group mapping from parent DbMapping. Fixes bug 553.
  <http://helma.org/bugs/show_bug.cgi?id=553>
 2007-09-21 09:31:15 +00:00
hns
9395ebcd06 * Update lib/jetty.jar to Jetty 5.1.14 and lib/servlet.jar with the following patch for AJP13 request paths: 
--- jetty-5.1.14/src/org/mortbay/http/ajp/AJP13Connection.java  2007-03-05 01:15:05.000000000 +0100
+++ jetty-5.1.14-patched/src/org/mortbay/http/ajp/AJP13Connection.java  2007-09-20 17:28:17.000000000 +0200
@@ -208,12 +208,9 @@
                        log.warn(packet.toString());
                    }
 
-                    String path=packet.getString();
-                    int sc=path.lastIndexOf(";");
-                    if (sc<0)
-                        request.setPath(URI.encodePath(path));
-                    else
-                        request.setPath(URI.encodePath(path.substring(0,sc))+path.substring(sc));
+                    // fix request path encoding issue, see
+                    // http://grazia.helma.at/pipermail/helma-user/2007-March/006911.html 
+                    request.setPath(packet.getString());
 
                     _remoteAddr=packet.getString();
                     _remoteHost=packet.getString();
 2007-09-20 15:33:41 +00:00
hns
a961a2d6cb * Update lib/jetty.jar to Jetty 5.1.14 and lib/servlet.jar to Servlet API 2.4. 
* Remove LongSink code from helma.main.Server.
Fixes bug 550 http://helma.org/bugs/show_bug.cgi?id=550
 2007-09-20 14:55:00 +00:00
hns
e9fbe01c68 * Fully implement simple object references that don't use the primary key on either side. 
Fixes bug 218.
 2007-09-20 10:39:31 +00:00