3beedc8d4d
add an ignore on the local dev conf file
2019-02-06 23:03:55 +01:00
74dc6c5894
various changes to support python3
...
* changes in urllib imports since quote_plus in urllib with python 2 and
in urllib.parse in python 3
* changes in imports for Sets since set is a native type in python 3 and
doesn't requires an import
* fix in __import__, '-1' level for module path discovery is not supported
anymore, switching to 0 (absolute import only).
2019-02-06 22:32:40 +01:00
69526610f3
add a small script to generate a local dev config
2019-02-06 22:30:59 +01:00
921a0820f4
switch to using lists in templates
...
Sets are not available in mako templates when using python3.
Reverting to using lists with 'if not in' checks to avoid duplication.
2019-02-06 22:26:46 +01:00
2df56d2de2
fix template over-escaping + python 3 support
...
The templates were html escaping the generated js code for the
autofill and the role management. This was breaking these features.
It's okay to not escape these as they are coming from a trusted source
(configuration file).
Also make the templates python3 compatible (not need to import Set in
python 3)
2019-02-06 21:38:11 +01:00
5b0c72a572
Merge pull request #17 from jthiltges/escfix
...
Escape form values with markupsafe
2019-01-03 23:39:53 +01:00
c6cce54d5f
Escape form values with markupsafe
...
- Use markupsafe to format escaped HTML fragments
- Correct the formatting problems introduced with the XSS fixes
2019-01-03 13:12:53 -06:00
1f79648d57
Update ChangeLog.rst
2019-01-02 23:59:03 +01:00
636400b75f
Merge pull request #16 from jthiltges/escape
...
Protect against XSS vulnerabilities in URL redirection
2019-01-02 23:54:42 +01:00
6f98076281
Protect against XSS vulnerabilities in URL redirection
...
- Switch from base64 to URL encoding for the passing the URL, using the built-in Mako filtering
- Apply HTML filtering to Mako output by default
- Disable HTML filtering for nested templates in adduser, modify, and selfmodify
2019-01-02 14:31:10 -06:00
1ed654c91b
Update README.rst
2018-02-07 19:54:23 +01:00
c329e53811
Update README.rst
2018-02-07 19:52:29 +01:00
05e3a0d665
Update README.rst
2017-10-26 10:08:16 +02:00
4bd6314b3b
remove useless tests
2017-06-12 19:50:42 +02:00
c5dae7039a
remove duplicated import in docs conf.py
2017-06-12 19:47:43 +02:00
ca1f78173f
better documenation
2017-06-09 23:40:23 +02:00
9ed6007b02
including fastcgi configuration example in the documentation
2017-06-09 23:25:58 +02:00
4d696a29ef
adding example for unix socket in defautl conf
2017-06-09 23:24:20 +02:00
45d64120ae
adding an nginx configuration exmaple for fastcgi
2017-06-09 23:09:11 +02:00
00a4d22dd9
remove pip install method
2017-04-06 21:53:58 +02:00
32c513f96e
change install method (pip install just doesn't work)
2017-04-06 21:37:02 +02:00
7019cc2348
fix setup.py
2017-04-06 20:58:20 +02:00
a404cf0b39
add auto message for tagging script
2017-04-06 20:57:42 +02:00
9649803dd6
changelog
2017-04-06 20:52:55 +02:00
eecccac106
fix import of version in docs/conf.py and setup.py
2017-04-06 20:46:58 +02:00
f357adcd9a
put version in standalone file
...
this way, it avoids error due to missing imports
2017-04-06 20:34:32 +02:00
e7998ced78
adding a simple tagging script
2017-04-06 20:28:44 +02:00
8270988ed4
changelog + version bump + factorize version
2017-04-06 20:21:31 +02:00
2e2453f309
fix camelcase
2017-04-06 01:26:54 +02:00
bbb13454bf
more warning removal
2017-04-06 01:21:57 +02:00
3378822d2e
fix some warnings
2017-04-06 01:20:51 +02:00
6e526b6f15
hack to have a cleaner resize
2017-04-06 00:32:24 +02:00
5b1803cb05
changelog + version bump
2017-04-05 23:48:08 +02:00
de5f760c37
removing duplicate option in form select fields
2017-04-05 23:37:41 +02:00
a33a46e8b8
add dynamic resizing to align input-group-addon
...
* add class to identify the 2 form columns
* add a js that calculate max width and resize all input-group-addon
spans
* load the js in the base template
2017-04-05 23:24:19 +02:00
eb36830845
fixes
2017-03-16 03:03:59 +01:00
3fd6dcee82
fix issue related to python-ldap returning lists
...
Before, no particular treatment was done on the user attributes.
This caused some issues because python-ldap systematically returns
the attribute value as a list (even if it's mono-valuated).
Now we recover the attributes used in the group attr templates,
and we "normalize" the user attributes before using it in add_to_groups
and del_from_groups.
By normalize, we mean, transforming the list to it's unique value.
In case the attribute doesn't exist or is multi-valuated, it raises an
error.
2017-03-16 02:45:23 +01:00
55ce2bec5e
small cleaning
2017-03-16 02:40:23 +01:00
e02a1a7f28
adding posixGroups in test ldap
2017-03-16 02:39:41 +01:00
f9a3051328
Merge branch 'master' of https://github.com/kakwa/ldapcherry
2017-03-12 17:46:49 +01:00
e4effc64ec
fixing log errors in auth "none" mode
...
replacing None by unknown as a default value in order to avoid
error in generating log msg because None is not a string
2017-03-12 17:45:01 +01:00
b3a361afee
remove broken download stats badge
2017-03-10 00:43:51 +01:00
a802ce772a
adding documention of textfielf and better documenation for other types
2017-03-07 23:21:27 +01:00
3a1966324d
adding more try catch for template debugging
2017-03-07 22:34:05 +01:00
819e575a28
pep8ification
2017-03-07 22:23:11 +01:00
12bb597903
Merge pull request #6 from rooty0/feat/template-parse-error
...
adding support for display template parse error
2017-03-07 22:19:15 +01:00
7afe6c0ca7
Merge pull request #5 from rooty0/feat/add-textarea
...
adding textarea
2017-03-07 22:14:18 +01:00
e1a27aa0a7
adding support for display template parse error
2017-03-02 19:06:54 -08:00
f7f72c7e11
adding textarea
2017-03-02 18:47:49 -08:00
e37b88dbda
fix some errors in unused code
2017-01-31 20:59:49 +01:00
kakwa