Commit graph

14373 commits

Author SHA1 Message Date
wiz
fe0d9a87aa Remove more references to python-2.6. 2015-04-14 11:40:31 +00:00
wiz
fcbb1b66ac Remove python-2.6-only package py-ordereddict and references to it. 2015-04-14 11:25:37 +00:00
mef
6455f69946 Update 1.4.483.20120614 to 1.4.538.20141022 (sorry for long ChangeLog)
--------------------------------------------
2014-10-06  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-extra-numeric-character-reference): Add (?\C-m . ? ).
	[emacs-w3m:12378]

2014-10-01  Herbert J. Skuhra  <h.skuhra@gmail.com>

	* aclocal.m4 (AC_PATH_EMACS): Work for Emacs 25.

2014-08-01  Michael Heerdegen  <michael_heerdegen@web.de>
	Katsumi Yamaoka <yamaoka@jpl.org>

	* w3m.el (w3m-input-url-next-history-element): Abolish.
	(w3m-url-completion-map): Don't bind M-n key.
	(w3m-input-url-default-add-completions): New function.
	(w3m-input-url):
	Bind minibuffer-default-add-function to it locally in minibuffer.

2014-07-29  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-input-url-provide-initial-content): New user option.
	(w3m-input-url): Use it.
	(w3m-input-url-next-history-element): New function.
	(w3m-url-completion-map): Bind it.
	[emacs-w3m:12345]

2014-07-24  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-add-name-anchors): Subdivide long regexp.
	[emacs-w3m:12339]

2014-06-12  Katsumi Yamaoka  <yamaoka@jpl.org>

	* Makefile.in (install-lisp): Compress .el files.
	* doc/Makefile.in (install): Compress info files.

	* aclocal.m4 (AC_COMPRESS_INSTALL): New function.
	* configure.in: Use it.

2014-06-11  Kevin Ryde  <user42_kevin@yahoo.com.au>

	* w3m.el (w3m-zoom-out-image, w3m-resize-image-interactive): Treat
	zoom-out percentage as inverse of zoom-in, so "in" then "out" returns
	to the original size.
	(w3m-resize-inline-image-internal): Set w3m-image-scale property to
	flonum to avoid integer round-off when resizing in and out.  Use
	`round' rather than `truncate' when calling "convert" so flonum
	round-off 99.999 is original 100%.

2014-06-11  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-content-type-alist): Don't bug out for the case where
	browse-url-browser-function is set to a function symbol that is not yet
	defined.  [emacs-w3m:12317]

2014-04-21  Michael Ernst  <mernst@cs.washington.edu>

	* w3m-util.el (w3m-beginning-of-tag, w3m-end-of-tag): Work correctly
	for the case there is only whitespace between <tag> and </tag>.

2014-03-31  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-markup-urls-nobreak): Don't modify textarea.
	[emacs-w3m:12308]

2014-03-26  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-relationship-estimate-rules): Update regexps for Google.

2014-02-13  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-url-encode-string): Encode `:' and `/'.
	Suggested by Dan Jacobson <jidanni@jidanni.org>.

	* w3m-form.el (w3m-form-make-form-data, w3m-form-parse-and-fontify):
	Use car-less-than-car.

2014-02-10  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-subst-disabled-with-readonly): Relax regexp.

	* w3m-form.el (w3m-form-submit): Work for a url having no query part.

2014-01-08  Mirko M.  <mirko.m@hotmail.com>

	* w3m-util.el (w3m-delete-frames-and-windows): Don't clear the windows
	layout that used to be before visiting an emacs-w3m buffer.
	[emacs-w3m:12273]

2014-01-07  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-util.el (w3m-static-if, w3m-static-when, w3m-static-unless)
	(w3m-static-cond): Add edebug spec.

	* octet.el: Fix edebug spec for the static-* macros.

2013-12-03  Tatsuya Kinoshita  <tats@vega.ocn.ne.jp>

	* mew-w3m.el (mew-w3m-region): Set point to the end of <div> tag to
	prevent infinite loop.

2013-12-01  Tatsuya Kinoshita  <tats@vega.ocn.ne.jp>

	* mew-w3m.el (mew-w3m-region): Set point to minimum for
	`mew-w3m-cite-blockquote' to work.

2013-11-05  Katsumi Yamaoka  <yamaoka@jpl.org>

	* mew-w3m.el (mew-w3m-cite-blockquote): New function.
	(mew-w3m-region): Use it.

2013-11-26  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-subst-disabled-with-readonly): Rewrite.

	* w3m-filter.el (w3m-filter-subst-disabled-with-readonly):
	Fix the width of disabled select form.

2013-11-25  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-subst-disabled-with-readonly): Replace
	disabled or readonly select forms, that w3m doesn't support, with
	read-only input forms.  [emacs-w3m:12222]

	* w3m-form.el (w3m-form-parse-and-fontify): Make read-only text buttons
	for image, reset, and submit forms if readonly attr is turned on.

	* w3m-ems.el, w3m-form (w3m-form-make-button): Add the optional
	readonly argument; make a read-only text button if it is non-nil.

2013-11-20  Katsumi Yamaoka  <yamaoka@jpl.org>

	Make non-link urls unbreakable.  [emacs-w3m:12215]

	* w3m.el (w3m-markup-urls-nobreak): New function.
	(w3m-rendering-buffer): Use it.

2013-10-22  Katsumi Yamaoka  <yamaoka@jpl.org>

	Simplify the tab line control so as not to consume CPU.
	Thanks to Michael Heerdegen for good suggestions.

	* w3m-ems.el (w3m-tab-line-format, w3m-tab-timer): Abolish.
	(w3m-tab-mouse-track-selected-tab): Run `w3m-tab-line' instead of using
	its cache; remove unused argument `buffers'.
	(w3m-tab-line): Don't use chache and timer.

2013-10-17  Katsumi Yamaoka  <yamaoka@jpl.org>

	Replace `w3m-external-view-current-url', `w3m-external-view-this-url',
	and `w3m-view-url-with-external-browser' with
	`w3m-view-url-with-browse-url' that runs `browse-url'. [emacs-w3m:12190]

	* w3m.el (w3m-menubar, w3m-tab-button-menu-commands, w3m-link-map): Do.
	(w3m-external-view-current-url, w3m-external-view-this-url)
	(w3m-view-url-with-external-browser): Make obsolete.
	(w3m-view-url-with-browse-url): New function.
	(w3m-mode-map): Bind "M" to it.

	* w3m-lnum.el (w3m-lnum-actions-link-alist): Bind "M" to
	w3m-view-url-with-browse-url instead of w3m-external-view.
	(w3m-lnum-mode-map): Use the key bound to w3m-view-url-with-browse-url
	for w3m-lnum-external-view-this-url.
	(w3m-lnum-external-view-this-url): Use w3m-view-url-with-browse-url
	instead of w3m-external-view.

2013-10-16  Michael Heerdegen  <michael_heerdegen@web.de>

	* w3m-ems.el (w3m-tab-line):
	Run w3m-force-window-update unconditionally.  [emacs-w3m:12175]

2013-10-09  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-form.el (w3m-form-inactive): Add underline property.
	(w3m-form-input-textarea): Don't use it to view read-only textarea.

2013-10-08  Katsumi Yamaoka  <yamaoka@jpl.org>

	Make disabled or read-only forms inatcive.

	* w3m-form.el (w3m-form-parse-and-fontify): Make `select', `checkbox',
	`radio', and `file' input forms inactive.
	(w3m-form-input-checkbox, w3m-form-input-radio, w3m-form-input-file)
	(w3m-form-input-select): Don't allow keys if it is inactive.

2013-10-08  Thorsten Jolitz  <tjolitz@gmail.com>

	* w3m-form.el (w3m-form-input-textarea-mode-setup): New option for
	setting up the textarea input buffer in org-mode instead of text-mode.

	(w3m-form-input-textarea-org-mode-map) New minor-mode-map.
	(w3m-form-textarea-use-org-mode-p) New variable.
	(w3m-form-textarea-toggle-major-mode) New function.
	(w3m-form-input-textarea-mode-setup) Setup textarea edit buffer with
	major-mode 'org-mode if `w3m-form-textarea-use-org-mode-p' is non-nil.
	(w3m-form-input-textarea) Split window sensibly if
	`w3m-form-textarea-use-org-mode-p' is non-nil.
	(w3m-form-input-textarea-mode) Override default minor-mode map with
	new minor-mode-map in case major-mode is 'org-mode.

2013-10-08  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-form.el (w3m-form-input-textarea-mode-setup):
	Fix typo (unquoted `view-mode').

2013-10-04  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-form.el (w3m-form-input-textarea-mode-setup): Use view-mode to
	show disabled or readonly textarea.
	(w3m-form-input-textarea): Revert last change; use w3m-form-inactive
	face to show disabled or readonly textarea.

2013-10-03  Katsumi Yamaoka  <yamaoka@jpl.org>

	Make disabled forms not editable.  [emacs-w3m:12146]

	* w3m.el (w3m-use-filter): Default to t.
	(w3m-show-form-hint): Notice form is inactive.

	* w3m-filter.el (w3m-filter-subst-disabled-with-readonly): New function
	that substitutes the `disabled' attribute with the `readonly' attribute
	in an html source so as to enable w3m to handle.
	(w3m-filter-configuration): Add it.

	* w3m-form.el (w3m-form-inactive): New face.
	(w3m-fontify-textareas, w3m-form-parse-and-fontify): Use it if text is
	not editable.
	(w3m-form-input): Use w3m-message rather than message.
	(w3m-form-input-textarea): Don't allow editing text if it is disabled.
	(w3m-form-last-position): New variable.
	(w3m-form-restore-last-position): New function.
	(w3m-form-submit): Add it to w3m-fontify-after-hook.

2013-09-10  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-input-url): Default to `default' or "".
	(w3m-download): Prompt for url endlessly instead of bugging out.
	(w3m): Doc fix.

2013-09-09  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-url-completion-map): New overriding keymap.
	(w3m-input-url): Use it.
	Suggested by Manuel Giraud <manuel@ledu-giraud.fr>.

2013-09-06  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-ems.el (w3m-toolbar-make-buttons): Make tool-bar button use
	a single icon image if Emacs built with Gtk+ is running.
	cf. <http://thread.gmane.org/gmane.emacs.bugs/78021>
	(w3m-toolbar-use-single-image-per-icon): Add a note to docstring.

2013-09-04  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-util.el (w3m-decode-coding-string-with-priority):
	Move from w3m-ems.el and w3m-xmas.el.
	* w3m-ems.el, w3m-xmas.el
	(w3m-decode-coding-string-with-priority): Move to w3m-util.el.
	* w3m-proc.el: Don't Fbind it.

	* w3mhack.el (w3mhack-make-package):
	Avoid making a hard link for w3m-load.el twice.

2013-09-03  Manuel Giraud  <manuel@ledu-giraud.fr>

	* w3m.el (w3m-canonicalize-url): Do uri replace before normal parsing.

2013-09-02  Katsumi Yamaoka  <yamaoka@jpl.org>

	Prefer uris based on w3m-uri-replace-alist to Google's feeling lucky.
	Suggested by Michael Heerdegen <michael_heerdegen@web.de>.

	* w3m.el (w3m-canonicalize-url): Run w3m-uri-replace before falling
	back to Google's feeling lucky.
	(w3m-uri-replace): Simply return nil if there is no replacement.
	(w3m-goto-url): Move forward w3m-uri-replace to w3m-canonicalize-url.

2013-08-26  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-retrieve-and-render): Record failed urls as well to the
	arrived database.  Suggested by Dan Jacobson.
	(w3m-delete-buffer): Kill form buffers before killing a page buffer.
	(w3m-delete-buffer): Work around mysterious bug where window positions
	aren't restored if this command is called by a mouse event.  Reported
	by Dan Jacobson.

2013-08-26  Dan Jacobson  <jidanni@jidanni.org>

	* w3m.el (w3m-toolbar): Simplify the label used for w3m-history.

2013-08-13  Kevin Ryde  <user42@zip.com.au>

	* w3mhack.el (w3mhack-module-list): Remove w3mhack-load-file from the
	modules not to be byte compiled, so that it is byte compiled.
	(w3mhack-generate-load-file): Remove no-byte-compile from w3m-load.el.

2013-08-01  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-form.el (w3m-form-parse-and-fontify): Prefer base url if any
	rather than the current url when constructing urls that form buttons
	specify.  Thanks to Thorsten Jolitz [emacs-w3m: 12107].

2013-07-01  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m): Enable it again to fetch Gmane url and others.
	(w3m-gmane-url-at-point): Update url.

2013-06-26  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-use-cookies): Default to t.

	Make `w3m-input-url' offer no useless initial string.
	* w3m.el (w3m-active-region-or-url-at-point, w3m-input-url)
	(w3m-download, w3m-view-this-url, w3m-view-url-with-external-browser)
	(w3m-goto-url, w3m-goto-url-new-session, w3m): Do.

2013-06-21  Katsumi Yamaoka  <yamaoka@jpl.org>

	* aclocal.m4: Make configure work for term-mode running in Emacs.

2013-06-18  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (ffap-url-regexp): Silence the byte compiler.

	* mime-w3m.el: Require calist when compiling.

2013-05-30  Katsumi Yamaoka  <yamaoka@jpl.org>

	* mime-w3m.el: Don't use obsolete macro dont-compile.

	* w3m.el (w3m-goto-mailto-url): Bind display-buffer-alist instead of
	special-display-buffer-names and special-display-regexps for Emacs >=
	24.3.

	* w3m-ems.el (w3m-image-multi-frame-p): Exclude images that don't
	specify a delay.

2013-04-19  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter): Don't modify w3m-filter-rules.

2013-04-12  REN Lifeng  <renlifeng@wowfly.com>

	* w3m-session.el (w3m-session-rename): Don't infloop.

2013-04-11  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-configuration):
	Use w3m-language rather than w3m-use-japanese-menu.

2013-04-10  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-add-name-anchors): Fix regexp matching name
	anchors.  Reported by Dan Jacobson <jidanni@jidanni.org>.

2013-04-08  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-form.el (w3m-form-get-by-name): Distinguish the type of forms of
	the same names.  Reported by Kevin Ryde <user42@zip.com.au>.
	(w3m-form-resume, w3m-form-parse-and-fontify, w3m-form-input-map): Do.

2013-04-05  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-fix-tfoot-rendering): New filter.
	(w3m-filter-configuration): Add it but not activate.

	* w3m-ems.el (w3m-image-multi-frame-p): New alias.
	(w3m-image-animate): Use it.

2013-02-04  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-retrieve-and-render): Remove workaround.
	* w3m-util.el (w3m-force-window-update-later): Make 1st arg optional.
	* w3m-ems.el (w3m-force-window-update): A window need to be redisplayed
	for `force-window-update' to work (see the docstring).

2013-01-23  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-lnum.el (w3m-lnum-read-interactive): Replace w3m-scroll-up-1 with
	w3m-scroll-up.

	* w3m.el (w3m-scroll-up): Rename from w3m-scroll-up-1.
	(w3m-scroll-up, w3m-scroll-up-or-next-url): Make the bottom of a page
	border on the bottom of a screen when having finished scrolling
	the page up.
	(w3m-scroll-down): New function detached from
	w3m-scroll-down-or-previous-url.
	(w3m-scroll-down-or-previous-url): Move point to the top when having
	finished scrolling a page down.
	(w3m-mwheel-scroll-up, w3m-mwheel-scroll-down): New functions.
	(w3m-mode): Bind mwheel-scroll-(up,down)-function to
	w3m-mwheel-scroll-(up,down).
	Suggested by Dan Jacobson <jidanni@jidanni.org>.

2013-01-11  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-retrieve-and-render): Do (sit-for 0) to update the
	header-line appearance as a workaround; see the 2013-01-11 comment.
	(w3m-view-this-url-1): Revert 2010-01-15 change; don't popup new
	session if w3m-new-session-in-background is non-nil.
	Reported by Michael Heerdegen <michael_heerdegen@web.de>.

2012-12-25  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-search.el (w3m-search-do-search): Save history position.
	Reported by Dan Jacobson <jidanni@jidanni.org>.

2012-12-17  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-ems.el (w3m-ems-create-image): Abolish.
	(w3m-image-animate-seconds): New user option.
	(w3m-image-animate): New function.
	(w3m-create-image): Use it.

	* w3m.el (w3m-resize-inline-image-internal): Use w3m-image-animate.

	* w3m-xmas.el (w3m-image-animate): Alias to identity.

2012-12-10  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-decode-anchor-string): Decode url used to next/prev/...
	cf. http://emacs-w3m.namazu.org/ml/msg11824.html

2012-12-05  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-util.el (w3m-flet): Rewrite it using cl-letf.

2012-12-04  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-util.el (w3m-labels): Revert; use cl-labels if available.

2012-12-04  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-util.el (w3m-labels): Rewrite.

2012-11-19  Uday S Reddy  <u.s.reddy@cs.bham.ac.uk>

	* w3m.el (w3m-command-environment): Make the "CYGWIN" environment
	variable default to "binmode" for NTEmacs.

2012-10-18  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el (w3m-filter-configuration): Work around a widget bug.

2012-10-17  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-filter.el: Change file coding system to utf-8.
	(w3m-filter-configuration):
	New user option, a successor to w3m-filter-rules.
	(w3m-filter-rules):
	Make it semi-obsolete (but still usable) and default to nil.
	(w3m-filter):
	Use w3m-filter-configuration in addition to w3m-filter-rules.
	(w3m-filter-google-click-tracking)
	(w3m-filter-google-shrink-table-width, w3m-filter-add-name-anchors):
	New filters.

	* w3m.el (w3m-rendering-half-dump):
	Move function, that adds name anchors, to w3m-filter.el.
	(w3m-create-page): Move Google click-tracking filter to w3m-filter.el.

	* w3m-util.el (w3m-widget-type-convert-widget):
	Don't modify default sexp values.

2012-10-10  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-bookmark.el (w3m-bookmark-buffer): Use (0 0) as the Unix epoch.

	* w3m.el (w3m-create-page): Fix regexp matching Google's click-
	tracking urls.

2012-07-22  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-rendering-half-dump): Add name anchors for only existing
	internal links.

2012-07-19  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-util.el (w3m-flet): New macro.

2012-07-18  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-input-url): Decode url string by the coding system that
	url itself specifies if any.

	* w3m.el (w3m-goto-url): Allow optional save-pos argument, that leads
	it to run w3m-history-store-position.
	(w3m-view-parent-page, w3m-scroll-up-or-next-url)
	(w3m-scroll-down-or-previous-url): Run w3m-history-store-position.
	(w3m-gohome, w3m-browse-url, w3m-find-file, w3m-db-history)
	(w3m-history): Run w3m-history-store-position by way of w3m-goto-url.

	* w3m-util.el (w3m-labels): New macro that runs cl-labels in Emacs 24.2
	and later, otherwise runs labels.

	* mime-w3m.el (mime-w3m-insinuate):
	* w3m-bookmark.el (w3m-bookmark-safe-string):
	* w3m-proc.el (w3m-process-do-with-temp-buffer):
	* w3m-rss.el (w3m-rss-parse-date-string):
	* w3m-weather.el (w3m-weather-completion-table):
	Replace labels with w3m-labels.

	* w3mhack.el (w3mhack-nonunix-install): Don't use labels.

2012-07-13  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-input-url, w3m-header-line-insert):
	Don't decode only control characters.

2012-07-12  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-input-url): Don't decode %00~%1F and %7F~%9F in url.

2012-07-11  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-url-decode-string): Allow optional regexp matching %**.
	(w3m-header-line-insert): Don't decode %00~%1F and %7F~%9F in url.

	* w3m.el (w3m-create-page): Show raw contents briefly, not fully, when
	prompting a user for the content type.

2012-07-10  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-rendering-half-dump): Add name anchors fast.

2012-07-10  Naohiro Aota  <naota@elisp.net>

	* w3m.el: (w3m-data-retrieve): URL-decode data-string. It can have
	"%2b%2d%3d" representing "/+=".

2012-07-08  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-rendering-half-dump): Add name anchors that w3m can
	handle in nested tags.

2012-07-02  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-view-url-with-external-browser): Improve prompt string.
	Suggested by Dan Jacobson <jidanni@jidanni.org>.

2012-06-25  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-active-region-or-url-at-point, w3m-print-this-url):
	Try to pick #name anchor out.

	* w3m-search.el (w3m-search-read-variables): Make commands that use it
	error out when other processes run in the current w3m buffer.

	* w3m.el (w3m-mode): Add description of some missing commands to doc.

2012-06-20  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-create-page): Safely quit session when a user hits C-g;
	make sure to set w3m-current-url.

2012-06-19  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m.el (w3m-cache-header, w3m-cache-request-header)
	(w3m-cache-contents, w3m-cache-request-contents)
	(w3m-cache-available-p): Canonicalize given url.
	(w3m-show-error-information): Show as many info as possible.

2012-06-18  Katsumi Yamaoka  <yamaoka@jpl.org>

	* w3m-util.el (w3m-popup-buffer): Do nothing for the current buffer.

	* w3m.el (w3m-history-highlight-current-url): Extend href anchor to bol.

	* w3m.el (w3m-http-status-alist): New variable.
	(w3m-http-status): New variable.
	(w3m-w3m-retrieve): Set it.
	(w3m-retrieve): Clear it.
	(w3m-download, w3m-retrieve-and-render, w3m-show-error-information):
	Show http status if download or retrieving fails.
2015-04-14 02:21:29 +00:00
rodent
a7b568d574 Removing python26. EOL'd quite some ago and discussed a couple times on
tech-pkg@ and pkgsrc-users@.
2015-04-13 23:12:40 +00:00
manu
fc52e0f2c2 Allow apache 2.4 ito be used with ap2-auth-mellon. 2015-04-13 08:10:29 +00:00
mef
8bfda51aae Update to 2.2.7
---------------
* 2.2.7 *

Bluefish 2.2.7 is mostly a bug fix release. It fixes rare crashes in the
autocompletion, the filebrowser, the htmlbar plugin preferences, and in
file-load-cancel, fixes a rare case of broken syntax highlighting after
multiple search/replace actions. It furthermore displays better
error/warning output when parsing language files. It also finally fixes
javascript regex syntax highlighting. The loading of files with corrupt
encoding has been improved, and project loading over sftp has been improved.
Various HTML5 tags have been added, and HTML5 is the default now for php,
cfml and other languages that can include html syntax. Saving and loading
of UTF-16 encoded files was broken and has been fixes. Various languages
have better support, such as javascript, css, html, pascal/deplhi, and html
has improved autocompletion. On OSX the keys for tab switching no longer
confict with some keyboard layouts, and behavior at shutdown was improved.
The upload/download feature has a new option to ignore backup files.  The
home/end keys now work better on wrapped tekst.  And finally the search and
replace dialog correctly shows the number of results when searching in files
on disk.
2015-04-13 07:50:02 +00:00
martin
1b337407bd Add a "make test" target. Makes testing for PR 49828 easier. 2015-04-12 09:02:39 +00:00
martin
0ba981facd Workaround for Bug 1152776 (apparently only affecting architectures w/o real
JIT support). Better fix upstream in all newer branches already.
2015-04-12 06:24:32 +00:00
wen
82e7f33e8b Update to 0.159003
Upstream changes:
0.159003  2015-03-23 14:57:15+01:00 Europe/Amsterdam

    [ BUG FIXES ]
    * Fixed another memory leak with compiled hooks. (Sawyer X)
    * Fixed a memory leak with conditionally applied static middleware
      (Russell Jenkins)

    [ DOCUMENTATION ]
    * GH #854, #858: Fix after_template_render hook example. (Adam Weinberger)
    * GH #861: Improve documentation of 'forward'. (Andy Beverley)

0.159002  2015-03-03 19:21:21+01:00 Europe/Amsterdam

    [ BUG FIXES ]
    * GH #856: Memory leak when throwing exception from a hook. (Sawyer X)
2015-04-12 03:15:29 +00:00
schwarz
9b38563b15 updated www/mini_httpd to 1.21. See mini_httpd website for changes from
previous releases.
2015-04-11 16:16:54 +00:00
ryoon
c6dec6c370 Update to 37.0.1
* Sync with firefox-37.0.1
2015-04-10 16:50:01 +00:00
martin
347b69375d Avoid a crash on alignment critical architectures 2015-04-10 05:40:36 +00:00
jnemeth
22999426a1 sort 2015-04-09 06:16:32 +00:00
fhajny
d0c409d618 Update php-http to 2.4.3, based on patches provided by rodent@NetBSD.org.
Not backwards compatible with 1.x. Now depends on php-propro and php-raphf.

Upstream changelog:

2.4.3
* Fixed bug #69357 (HTTP/1.1 100 Continue overriding subsequent 200 response
  code with PUT request)

2.4.2
* Fixed bug 69076 (http\Url throws Exception on empty querystring)
* Fixed bug 69313 (http\Client doesn't send GET body)
+ Added libidn2 and UIDNA as fallbacks for IDN support
- Deferred warnings/exceptions of the client, so callbacks for the
  currently failing requests will still be called

2.4.1
* Fixed build with PHP <= 5.4 (Remi)

2.4.0
* Split off pecl/apfd and pecl/json_post

2.3.2
* Fixed bug with http\QueryString::offsetSet() resetting the complete
  query string

2.3.1
* Fixed build on platforms that need stddef.h to define ptrdiff_t
  (e.g. CentOS 7.5)

2.3.0
+ Preliminiary HTTP2 support for http\Client (libcurl with nghttp2 support)
+ Improved performance of HTTP info parser (request/response line)
+ Improved performance of updating client observers
+ Improved performance of http\Env\Response output to streams
+ Improved the error messages of the header parser
+ Added http\Header\Parser class
+ Added http\Client::configure() method accepting an array with the following
  options for libcurl:
. maxconnects (int, size of the connection cache)
. max_host_connections (int, max number of connections to a single host,
  libcurl >= 7.30.0)
. max_pipeline_length (int, max number of requests in a pipeline,
  libcurl >= 7.30.0)
. max_total_connections (int, max number of simultaneous open connections
  of this client, libcurl >= 7.30.0)
. pipelining (bool, whether to enable HTTP/1.1 pipelining)
. chunk_length_penalty_size (int, chunk length threshold for pipelining,
  libcurl >= 7.30.0)
. content_length_penalty_size (int, size threshold for pipelining,
  libcurl >= 7.30.0)
. pipelining_server_bl (array, list of server software names to blacklist
  for pipelining, libcurl >= 7.30.0)
. pipelining_site_bl (array, list of server host names to blacklist
  for pipelining, libcurl >= 7.30.0)
. use_eventloop (bool, whether to use libevent, libcurl+libevent)
+ Added http\Client::getAvailableOptions() and
  http\Client::getAvailableConfiguration() methods
+ Added support for HTTP2 if libcurl was built with nghttp2 support.
+ Added http\Client\Curl\HTTP_VERSION_2_0 constant (libcurl >= 7.33.0)
+ Added http\Client\Curl\TLS_AUTH_SRP constant (libcurl >= 7.21.4)
+ Added pinned_publickey SSL request option (libcurl >= 7.39.0)
+ Added tlsauthtype, tlsauthuser and tlsauthpass SSL request option
  (libcurl >= 7.21.4)
+ Added verifystatus (a.k.a OCSP) SSL request option (libcurl >= 7.41.0)
+ Added proxyheader request option (libcurl >= 7.37.0)
+ Added unix_socket_path request option (libcurl >= 7.40.0)
* Fixed compress request option
* Fixed parsing authorities of CONNECT messages
* Fixed parsing Content-Range messages
* Fixed http\Env\Response to default to chunked encoding over streams
* Fixed superfluous output of Content-Length:0 headers
* Fixed persistent easy handles to be only created for persistent
  multi handles
* Fixed the header parser to accept not-yet-complete header lines
* Fixed http\Message::toStream() crash in ZTS mode
* Fixed the message stream parser to handle intermediary data bigger than 4k
* Fixed the message stream parser to handle single header lines without EOL
* Fixed http\Message\Body to not generate stat based etags
  for temporary streams
- Deprecated http\Client::enablePipelining(), use
  http\Client::configure(["pipelining" => true]) instead
- Deprecated http\Client::enableEvents(), use
  http\Client::configure(["use_eventloop" => true]) instead
- Removed the cookies entry from the transfer info, wich was very slow
  and generated a Netscape formatted list of cookies
- Changed the header parser to reject illegal characters

2.2.1
* Fixed Bug #69000 (http\Url breaks down with very long URL query strings)

2.2.0
- var_dump(http\Message) no longer automatically creates an empty body
+ Added http\Message\Parser class
+ Made http\Client::once() and http\Client::wait() available when using events
+ Added http\Url::PARSE_MBLOC, http\Url::PARSE_MBUTF8,
  http\Url::PARSE_TOIDN and http\Url::PARSE_TOPCT constants
+ Added http\Env\Response::setCookie()
+ Added http\Env\Request::getCookie()

2.1.4
* Fixed bug #68353 (QsoSSL support removed in libcurl 7.39)
* Fixed bug #68149 (duplicate content-length with libcurl < 7.23)
* Fixed bug #66891 (Unexpected HTTP 401 after NTLM authentication)

2.1.3
* Fix build with libcurl < 7.26 (Remi)

2.1.2
+ Added missing request option constants: POSTREDIR_303, AUTH_SPNEGO
  (libcurl >= 7.38.0), SSL_VERSION_TLSv1_{0,1,2} (libcurl >= 7.34)
* Fixed bug #68083 (PUT method not working after DELETE)
* Fixed bug #68009 (Segmentation fault after calling exit(0) after a request)
* Fixed bug #68000 (Extension does not build on FreeBSD)

2.1.1
* Fix httpVersion retrieval on bigendian (Remi)
* Fix etag/crc32b on bigendian (Remi)

2.1.0
- Removed port and scheme guessing of http\Url for portability
* Fixed PHP-5.3 compatibility
* Fixed PHP-5.4 compatibility
* Fixed possible bus error on shutdown when using events
* Fixed sovereignty of clients when using events
* Fixed a possible crash with http\Encoding\Stream\Dechunk::decode($unencoded)
* Fixed a leak in http\Client\Curl options
* Fixed bug #67733 (Compile error with libevent 2.x)
+ Added RFC5987 support in http\Params
+ Improved synthetic HTTP message parsing performace for ~20%
+ Added request options if libcurl has builtin c-ares support:
dns_interface, dns_local_ip4, dns_local_ip6 (all libcurl >= 7.33.0)
+ Added request options:
expect_100_timeout (libcurl >= 7.36.0), tcp_nodelay
+ Added transfer info:
curlcode, tls_session (libcurl >= 7.34.0), only available during transfer

2.0.7
* General improvements to the test suite
* Fixed http\Env\Response::send() ignoring some write errors
* Fixed bug #67528 (RFC compliant default user agent)
* Fixed a garbage collector issue with JSON POSTs
* Fixed refcount issue and double free of message bodies
* Fixed use after free if the http\Client::enqueue() closure returns TRUE
* Fixed bug #67584 (http\Client\Response not initialized as response
  on failure)

2.0.6
+ Added "uploaded" progress state
* Fixed bug #67089 (Segmentaion fault with ZTS)
* Fixed compatibility with PHP-5.6+
* Fixed re-use of request messages which content length remained untouched
  when the body was reset

2.0.5
* Fix rare crash with uninitialized CURLOPT_HTTPHEADER
* Fix build with -Werror=format-security (Remi)
* Fix build with extenal libs needed by libcurl

2.0.4
* Removed the pecl/event conflict
* Fixed bug #66388 (Crash on POST with Content-Length:0 and untouched body)

2.0.3
* Fixed typo

2.0.2
* Fixed bug #66250 (shutdown crash as shared extension)

2.0.1
* Fixed a bug with multiple ob_start(http\Env\Response) while
  replacing the body
* Fixed build on Windows with libevent2

2.0.0
Extended HTTP support. Again. Keep in mind that it's got the major version 2,
because it's incompatible with pecl_http v1.

* Introduces the http namespace.
* Message bodies have been remodeled to use PHP temporary streams instead
  of in-memory buffers.
* The utterly misunderstood HttpResponse class has been reimplemented
  as http\Env\Response inheriting http\Message.
* Currently, there's only one Exception class left, http\Exception.
* Errors triggered by the extension can be configured statically by
  http\Object::$defaultErrorHandling or inherited http\Object->errorHandling.
* The request ecosystem has been modularized to support different libraries,
  though for the moment only libcurl is supported.
2015-04-08 19:57:23 +00:00
ryoon
8af42d1506 Add matcha-sns. 2015-04-08 19:12:29 +00:00
ryoon
1246094304 Import php54-matcha-sns-1.3.6 as www/matcha-sns.
Matcha SNS is Social Networking Service (SNS) software for intranet
and the Internet SNS.  This software has Japanese UI only.
It is formerly known as sencha-sns.
2015-04-08 19:11:09 +00:00
ryoon
7103efa6fd Remove sencha-sns.
It is renamed to matcha-sns.
2015-04-08 19:02:18 +00:00
wen
a9f2433ab4 Update to 6.07
Upstream changes:
6.07  2015-04-07
  - Fixed Windows bug in "daemon.t".

6.06  2015-04-06
  - Added element_count_is method to Test::Mojo. (Zoffix)
  - Added "chat.pl" to example scripts.
  - Improved Mojo::DOM::CSS to handle attribute selectors with single quotes
    correctly.

6.05  2015-03-24
  - Fixed circular require bug in Mojo::Base and Mojo::Util.

6.04  2015-03-23
  - Improved Mojo::Reactor::EV and Mojo::Reactor::Poll to fail more
    consistently.
  - Improved Mojo::Base performance slightly.
  - Fixed a few bugs in Mojo::DOM::CSS that required class, id and attribute
    selectors, as well as pseudo-classes, to be in a specific order.

6.03  2015-03-16
  - Added support for overriding the HTTP request method with the _method query
    parameter.
  - Added suggested_method method to Mojolicious::Routes::Route.
  - Improved portability of some tests.

6.02  2015-03-09
  - Added daemon attribute to Mojo::Server::Morbo.
  - Improved portability of Mojo::Server::Morbo.
  - Fixed empty template handling in Mojo::Template.

6.01  2015-03-03
  - Added content_with helper to Mojolicious::Plugin::DefaultHelpers.
  - Relaxed request-line handling in Mojo::Message::Request.
  - Fixed code name in version command and built-in templates.
2015-04-08 06:47:35 +00:00
rodent
3359987183 s/devel/www 2015-04-07 23:59:40 +00:00
rodent
1cec355fc3 +php-propro 2015-04-07 23:57:43 +00:00
rodent
c96e3ae477 Import php55-propro-1.0.0 as www/php-propro.
Property proxy:  A reusable split-off of pecl_http's property proxy API.
2015-04-07 23:56:07 +00:00
he
980e10326d Add a local fix to make this work with non-MySQL backends:
Quoting database identifiers with backticks as is done in 2.17 is
not portable, and only works with a MySQL backend.  Instead, use
the DBI quote_identifier method as hinted in
https://rt.cpan.org/Public/Bug/Display.html?id=101561

Bump PKGREVISION to 1.
2015-04-07 08:06:14 +00:00
wen
23c78309cd Update to 1.0034
Upstream changes:
1.0034  2015-02-02 21:42:42 CET
    [SECURITY]
        - Fixed a possible directory traversal with Plack::App::File on Win32 (sri)

    [IMPROVEMENTS]
        - Documentation improvements (timbunce, oalders, autarch, frioux)
        - Avoid warnings in Plack::App::WrapCGI (frioux)
2015-04-06 15:40:36 +00:00
wen
49355a3707 Update to 1.24.2
Upstream changes:
MediaWiki 1.24.2
This is a security and maintenance release of the MediaWiki 1.24 branch.

Changes since 1.24.1
(bug T85848, bug T71210) SECURITY: Don't parse XMP blocks that contain XML entities, to prevent various DoS attacks.
(bug T85848) SECURITY: Don't allow directly calling Xml::isWellFormed, to reduce likelihood of DoS.
(bug T88310) SECURITY: Always expand xml entities when checking SVG's.
(bug T73394) SECURITY: Escape > in Html::expandAttributes to prevent XSS.
(bug T85855) SECURITY: Don't execute another user's CSS or JS on preview.
(bug T64685) SECURITY: Allow setting maximal password length to prevent DoS when using PBKDF2.
(bug T85349, bug T85850, bug T86711) SECURITY: Multiple issues fixed in SVG filtering to prevent XSS and protect viewer's privacy.
Fix case of SpecialAllPages/SpecialAllMessages in SpecialPageFactory to fix loading these special pages when $wgAutoloadAttemptLowercase is false.
(bug T70087) Fix Special:ActiveUsers page for installations using PostgreSQL.
(bug T76254) Fix deleting of pages with PostgreSQL. Requires a schema change and running update.php to fix.
2015-04-06 15:30:03 +00:00
tron
a45124c254 Update "firefox" package to version 37.0.1. Changes since version 37.0:
- Disabled HTTP/2 AltSvc
- Start-up crash due to graphics hardware and third party software
- Various security fixes
2015-04-06 10:50:50 +00:00
adam
9071d6b787 Revbump after updating textproc/icu 2015-04-06 08:17:13 +00:00
rodent
c0fbbd1aca Fix build for OpenBSD and Bitrig (from sevan@'s report). 2015-04-06 02:35:54 +00:00
rodent
2951bbd7fe Remove group and world writeable permissions on files in ${EGG_INFODIR} in
post-install. Shown from build failure on OmniOS.
2015-04-05 23:26:27 +00:00
rodent
a72bf3bc7d +Don't install ${EGG_INFODIR}/requires.txt for py3x. Shown in build failure
on OmniOS. Bump PKGREVISION.
2015-04-05 23:23:13 +00:00
ryoon
46db1817ec Update to 31.6.0
* Sync with firefox-31.6.0.
2015-04-05 12:58:41 +00:00
ryoon
e83073792a Update to 31.6.0
Changelog:
Fixed in Firefox ESR 31.6

    2015-40 Same-origin bypass through anchor navigation
    2015-37 CORS requests should not follow 30x redirections after preflight
    2015-33 resource:// documents can load privileged pages
    2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin
    2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6)
2015-04-05 12:58:07 +00:00
ryoon
d3a11aa8e0 Update to 37.0
* Sync with firefox-37.0.
2015-04-05 12:55:45 +00:00
ryoon
2f2458aa1b Update to 37.0
* Bump nspr requirement.

Changelog:
New Heartbeat user rating system - your feedback about Firefox
New Yandex set as default search provider for the Turkish locale
New Bing search now uses HTTPS for secure searching
New Improved protection against site impersonation via OneCRL centralized certificate revocation
New Opportunistically encrypt HTTP traffic where the server supports HTTP/2 AltSvc
Changed Disabled insecure TLS version fallback for site security
Changed Extended SSL error reporting for reporting non-certificate errors
Changed TLS False Start optimization now requires a cipher suite using AEAD construction
Changed Improved certificate and TLS communication security by removing support for DSA
Changed Improved performance of WebGL rendering on Windows
HTML5 Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube (Windows only)
HTML5 Added support for CSS display:contents
HTML5 IndexedDB now accessible from worker threads
HTML5 New SDP/JSEP implementation in WebRTC
Developer Debug tabs opened in Chrome Desktop, Chrome for Android, and Safari for iOS
Developer New Inspector animations panel to control element animations
Developer New Security Panel included in Network Panel
Developer Debugger panel support for chrome:// and about:// URIs
Developer Added logging of weak ciphers to the web console
Fixed Various security fixes

Fixed in Firefox 37
    2015-42 Windows can retain access to privileged content on navigation to unprivileged pages
    2015-41 PRNG weakness allows for DNS poisoning on Android
    2015-40 Same-origin bypass through anchor navigation
    2015-39 Use-after-free due to type confusion flaws
    2015-38 Memory corruption crashes in Off Main Thread Compositing
    2015-37 CORS requests should not follow 30x redirections after preflight
    2015-36 Incorrect memory management for simple-type arrays in WebRTC
    2015-35 Cursor clickjacking with flash and images
    2015-34 Out of bounds read in QCMS library
    2015-33 resource:// documents can load privileged pages
    2015-32 Add-on lightweight theme installation approval bypassed through MITM attack
    2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin
    2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6)
2015-04-05 12:54:11 +00:00
schmonz
072000c1cf Remove a couple files from PLIST no longer installed with the l10n option. 2015-04-04 16:08:26 +00:00
rodent
98224b658d Use PKGVERSION_NOREV in GITHUB_RELEASE. 2015-04-03 22:02:54 +00:00
rodent
b253fc14d4 PYTHON_VERSIONS_INCOMPATIBLE= 26 # via py-orderedmultidict 2015-04-03 16:29:17 +00:00
manu
5523cc2f65 Remove obsolete PKG_DESTDIR_SUPPORT 2015-04-03 15:53:34 +00:00
rodent
926c3bc863 uWSGI 2.0.10
[20150317]
Bugfixes

    Don't lower security standards with gcc 4.9 (Riccardo Magliocchetti)
    Perl/PSGI make sure that at least two params are passed to xs_input_seek (Ivan Kruglov)
    Per/PSGI fixed multiple interpreters usage
    spooler: fixed scandir usage
    fixed exception handler arguments management
    fixed 'log-master' +  'daemonize2' disables all logging
    fixed http Range header management

New Features
safeexec hook

this is like 'exec' but do not exit on error even if the executed command returns a non-zero value
backported --emperor-wrapper-fallback and --emperor-wrapper-override

the --emperor-wrapper-fallback option allows you to specify an alternative binary to execute when running a vassal and the default binary_path is not found (or returns an error). (you can specify it multiple times)

The --emperor-wrapper-override is similar but 'overrides' the default wrapper (you can specify it multiple times)
added support for UNIX sockets to rsyslog

The rsyslog logger can now get a unix socket as address (arguments starting with a slash are recognized as a unix path)
forcecl transformation

this transformation works like 'fixcl' but generates the Content-Length header even if Content-Length has been listed for removal.
2015-04-03 15:21:59 +00:00
wiz
f61838cd80 Recursive bump for vala-0.28.0 update. 2015-04-03 07:38:34 +00:00
rodent
804c7c2ac3 +yahttp 2015-04-02 23:54:26 +00:00
rodent
d8342f9e96 YaHTTP aims to be a pure http request/response parser that has no IO ties. It is
intended to be used on small-footprint applications and other utilities that
want to use HTTP over something else than network IO.
2015-04-02 23:52:50 +00:00
rodent
38b2aa6cae +py-flask-limiter 2015-04-02 23:30:05 +00:00
rodent
f28a17b698 Import py27-Flask-Limiter-0.7.9 as www/py-flask-limiter.
Flask-Limiter provides rate limiting features to flask routes. It has support
for a configurable backend for storage with current implementations for in-
memory, redis and memcache.
2015-04-02 23:26:50 +00:00
rodent
dd825bb3e4 0.9.7 (2014-12-22)
Added blank_value option for GroupedQuerySelectField
    Add py34 to test matrix
    Fixed midnight handling for TimeField
2015-04-02 23:10:28 +00:00
rodent
4e4541119e Updated to 0.4.5. No public changelog, although the repo commits state that
py{26,3x} are supported now. Tested with py33 and import worked.
2015-04-02 23:08:03 +00:00
rodent
af1966e71f Changes aren't reflected in CHANGES file. Usually, this package is sync'd
to changes made upstream in the bootstrap package.
2015-04-02 22:53:02 +00:00
wiz
76052ec882 Update to 4.14:
4.14 2015-04-01

    [ RELEASE NOTES ]
    - This release removes the AUTOLOAD and compile optimisations from CGI.pm
      that were introduced into CGI.pm twenty (20) years ago as a response to
      its large size, which meant there was a significant compile time penalty.

    - This optimisation is no longer relevant and makes the code difficult to
      deal with as well as making test coverage metrics incorrect. Benchmarks
      show that advantages of AUTOLOAD / lazy loading / deferred compile are
      less than 0.05s, which will be dwarfed by just about any meaningful code
      in a cgi script. If this is an issue for you then you should look at
      running CGI.pm in a persistent environment (FCGI, etc)

    - To offset some of the time added by removing the AUTOLOAD functionality
      the dependencies have been made runtime rather than compile time. The
      POD has also been split into its own file. CGI.pm now contains around
      4000 lines of code, which compared to some modules on CPAN isn't really
      that much

    - This essentially deprecates the -compile pragma and ->compile method. The
      -compile pragma will no longer do anything, whereas the ->compile method
      will raise a deprecation warning. More importantly this also REMOVES the
      -any pragma because as per the documentation this pragma needed to be
      "used with care or not at all" and allowing arbitrary HTML tags is almost
      certainly a bad idea. If you are using the -any pragma and using arbitrary
      tags (or have typo's in your code) your code will *BREAK*

    - Although this release should be back compatible (with the exception of any
      code using the -any pragma) you are encouraged to test it throughly as if
      you are doing anything out of the ordinary with CGI.pm (i.e. have bugs
      that may have been masked by the AUTOLOAD feature) you may see some issues.

    - References: GH #162, GH #137, GH #164

    [ FEATURES ]
    - CGI::Carp now has $CGI::Carp::FULL_PATH for displaying the full path to the
      offending script in error messages

    - CGI now has env_query_string() for getting the value of QUERY_STRING from the
      environment and not that fiddled with by CGI.pm (which is what query_string()
      does) (GH #161)

    - CGI::ENCODE_ENTITIES var added to control which chracters are encoded by the
      call to the HTML::Entities module - defaults to &<>"\x8b\x9b' (GH #157)

    [ SPEC / BUG FIXES ]
    - Add the multi_param method to :cgi export (thanks to xblitz for the patch
      and tests. GH #167)

    - Fix warning for lack of HTTP_USER_AGENT in CGI::Carp (GH #168)

    - Fix imports when called from CGI::Fast, restores the import of CGI functions
      into the callers namespace for users of CGI::Fast (GH leejo/cgi-fast#11 and
      GH leejo/cgi-fast#12)

    [ INTERNALS ]
    - Remove dependency on constant - internal DEBUG, XHTML_DTD and EBCDIC
      constants changes to $_DEBUG, $_XHTML_DTD, and $_EBCDIC

    [ DOCUMENTATION ]
    - Add missing documentation for env variable fetching routines (GH #163)
2015-04-02 22:47:24 +00:00
rodent
dd0f3edf33 Changes
0.9.2 (2014-12-05)

Fixes:

    HTML escape SQL queries when syntax highlighting is not available
    Use case-insensitive comparison to normalize filenames on Windows
    Fix exception when SQL query contained non-ASCII characters

0.9.1 (2014-11-24)

Fixes:

    Fix SQL queries with byte strings on Python 3
    Fix displaying values whose repr() contains unprintable characters
2015-04-02 22:44:35 +00:00
jperkin
320db52d66 Bring in 'set -o posix' handling from newer autoconf, fixes a build loop
when mksh is used as CONFIG_SHELL.

Analysis and fix from Olivier Duclos in joyent/pkgsrc#256.
2015-04-02 12:34:06 +00:00
manu
f234f28884 Update mod_auth_mellon after lasso upgrade. Approved by wiz@
NEWS since last version imported in pkgsrc

Version 0.10.0
---------------------------------------------------------------------------

* Make sure that we fail in the unlikely case where OpenSSL is not able
  to provide us with a secure session id.

* Increase the number of key-value pairs in the session to 2048.

* Add MellonMergeEnvVars-option to store multi-valued attributes in
  a single environment variable, separated with ';'.

* Bugfixes:

  * Fix the [MAP] option for MellonCond.

  * Fix cookie deletion for the session cookie. (Logout is not dependent
    on the cookie being deleted, so this only fixes the cookie showing
    up after the session is deleted.)

Version 0.9.1
---------------------------------------------------------------------------

* Bugfixes:

  * Fix session offset calculation that prevented us from having
    active sessions at once.

  * Run mod_auth_mellon request handler before most other handlers,
    so that other handlers cannot block it by accident.


Version 0.9.0
---------------------------------------------------------------------------

* Set the AssertionConsumerServiceURL attribute in authentication
  requests.

* Bugfixes:

  * Fix use of uninitialized data during logout.

  * Fix session entry overflow leading to segmentation faults.

  * Fix looking up sessions by NameID, which is used during logout.


Version 0.8.1
---------------------------------------------------------------------------

This is a security release with fixes backported from version 0.9.1.

It turned out that session overflow bugs fixes in version 0.9.0 and
0.9.1 can lead to information disclosure, where data from one session
is leaked to another session. Depending on how this data is used by the
web application, this may lead to data from one session being disclosed
to an user in a different session. (CVE-2014-8566)

In addition to the information disclosure, this release contains some
fixes for logout processing, where logout requests would crash the
Apache web server. (CVE-2014-8567)


Version 0.8.0
---------------------------------------------------------------------------

* Add support for receiving HTTP-Artifact identifiers as POST data.

* Simplify caching headers.

* Map login errors into more appropriate HTTP error codes than
  400 Bad Request.

* Add MellonNoSuccessErrorPage option to redirect to a error page on login
  failure.

* Turn session storage into a dynamic pool of memory, which means that
  attribute values (and other items) can have arbitrary sizes as long as
  they fit in the session as a whole.

* Various bugfixes:

  * Fix for compatibility with recent versions of CURL.

  * Fix broken option MellonDoNotVerifyLogoutSignature.

  * Fix deadlock that could occur during logout processing.

  * Fix some compile warnings.

  * Fix some NULL derefernce bugs that may lead to segmentation faults.

  * Fix a minor memory leak during IdP metadata loading.


Version 0.7.0
---------------------------------------------------------------------------

* Add MellonSPentityId to control entityId in autogenerated metadata

* Fix compatibility with Apache 2.4.

* Handle empty RelayState the same as missing RelayState.

* Add MellonSetEvnNoPrefix directive to set environment variables
  without "MELLON_"-prefix.
2015-04-01 14:08:13 +00:00