From owner-cvs-all Wed May 22 1:31:15 2002 Delivered-To: cvs-all@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 2497537B410; Wed, 22 May 2002 01:31:07 -0700 (PDT) Received: (from knu@localhost) by freefall.freebsd.org (8.11.6/8.11.6) id g4M8V7t70403; Wed, 22 May 2002 01:31:07 -0700 (PDT) (envelope-from knu) Message-Id: <200205220831.g4M8V7t70403@freefall.freebsd.org> From: Akinori MUSHA Date: Wed, 22 May 2002 01:31:06 -0700 (PDT) To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: www/en/cgi cvsweb.cgi cvsweb.conf cvsweb.conf-netbsd cvsweb.conf-openbsd X-FreeBSD-CVS-Branch: HEAD Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG knu 2002/05/22 01:31:06 PDT Modified files: en/cgi cvsweb.cgi cvsweb.conf cvsweb.conf-netbsd cvsweb.conf-openbsd Log: Merge from FreeBSD-cvsweb 2.0.3. 2002-05-22 Akinori MUSHA * cvsweb.cgi: Read configuration files with `do' instead of `require' to unbreak mod_perl support. [Submitted by: "Khachaturov, Vassilii" ] * cvsweb.cgi: Cosmetic fixes. Use and/or rather than &&/|| to connect sentences. * cvsweb.cgi: Exit with -1 if exec() fails. * cvsweb.cgi: Do not print a redundant `Diff' for rev.1.1. [Submitted by: Ville Skytt,Ad(B ] * cvsweb.cgi: Prevent cross-site scripting. [Submitted by: Motoyuki Konno (modified)] * cvsweb.cgi: Skip a possible `locked by' clause and extract a revision number out of a log entry properly. [Submitted by: "Khachaturov, Vassilii" ] * cvsweb.cgi: Apply some HTML cleanups and use CSS instead of ancient HTML 3/4 tags and attributes. [Submitted by: Ville Skytt,Ad(B ] * cvsweb.cgi: Pass `use' features to import to make it more memory efficient. [Submitted by: Ville Skytt,Ad(B ] * cvsweb.cgi: Add new configuration variables: $allow_log_extra, $allow_dir_extra, and $allow_source_extra. [Submitted by: "Khachaturov, Vassilii" ] * cvsweb.cgi: Release as FreeBSD-cvsweb 2.0.2. * cvsweb.cgi: Previous fixes against cross-site scripting vulnerabilities were insufficient and buggy (error messages were messed up). Revamp fatal() to HTML-quote automatically and fix error message output. * cvsweb.cgi: Release as FreeBSD-cvsweb 2.0.3. 2002-05-11 Akinori MUSHA * cvsweb.cgi: There are no spaces at EOL in modern rlog output. [Submitted by: "Khachaturov, Vassilii" ] 2002-05-08 Motoyuki Konno * cvsweb.cgi: Fix a cross-site scripting vulnerablity. 2002-05-07 Akinori MUSHA * cvsweb.conf-netbsd, cvsweb.conf-openbsd: NetBSD and OpenBSD don't use $CVSHeader$ but $Id$. [Submitted by: motoyuki@FreeBSD.org] * cvsweb.cgi: Work around a bug of cvs -p; expand symlinks in a cvsroot. [Submitted by: motoyuki@FreeBSD.org] * cvsweb.cgi: Fix parsing in 'tags' state. [Submitted by: "Khachaturov, Vassilii" ] Revision Changes Path 1.82 +394 -304 www/en/cgi/cvsweb.cgi 1.27 +11 -2 www/en/cgi/cvsweb.conf 1.12 +2 -2 www/en/cgi/cvsweb.conf-netbsd 1.10 +2 -2 www/en/cgi/cvsweb.conf-openbsd To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message