Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | - Patch #819388 by pwolanin: switch registry back to using hashes not file ↵ | Dries Buytaert | 2010-07-10 |
| | | | | mtime and ctime. | ||
* | #776956 by CrashTest_, Damien Tournoud, effulgentsia, chx: Fixed critical ↵ | Angie Byron | 2010-07-10 |
| | | | | bug: Complex widgets are not respecting '#disabled' state. | ||
* | #845742 by Damien Tournoud: Make Bartik the default core theme. | Angie Byron | 2010-07-08 |
| | |||
* | #715142 by effulgentsia, msmithgu, mr.baileys, Damien Tournoud, sun: Fixed ↵ | Angie Byron | 2010-07-07 |
| | | | | Various URLs escaped twice, since check_url() resp. filter_xss_bad_protocol() calls check_plain(). | ||
* | #363580 by rfay, chx, Berdir, Rob Loach, Gábor Hojtsy, Shawn DeArmond: ↵ | Angie Byron | 2010-07-07 |
| | | | | Fixed OpenID login fails when in maintenance mode, and 403 errors on certain user paths for logged-in users. | ||
* | - Patch #736298 by effulgentsia, eojthebrave, andypost, robeano: fixed ↵ | Dries Buytaert | 2010-07-02 |
| | | | | Refactor file.module to use proper button click detection, enabling FAPI to improve button click detection security. | ||
* | #841242 by justinrandell, Stevel: Fixed HEAD BROKEN: some file/image tests ↵ | Angie Byron | 2010-06-30 |
| | | | | are failing. | ||
* | #838438 follow-up by Damien Tournoud: db_prefix is no longer a global, wrong ↵ | Angie Byron | 2010-06-29 |
| | | | | path given to drupal_var_export() function file. | ||
* | - Patch #829484 by Berdir, Dave Reid, dereine: uncaught PDO Exception - XSS. | Dries Buytaert | 2010-06-28 |
| | |||
* | #838438 by Damien Tournoud, chx: Added basic tests for D6 => D7 upgrade ↵ | Angie Byron | 2010-06-28 |
| | | | | path, and framework for further extending upgrade test coverage. W00t! :D | ||
* | - Patch #693084 by dhthwy, jpmckinney, reglogge, clemens.tolboom, naxoc, ↵ | Dries Buytaert | 2010-06-26 |
| | | | | chx: file_munge_filename() extension handling broken by move to File Field. | ||
* | - Patch #808534 by dhthwy, Damien Tournoud, chx: file_get_file_references() ↵ | Dries Buytaert | 2010-06-26 |
| | | | | is completely broken. | ||
* | - Patch #832746 by dmitrig01: fix inconsistent formatting of ↵ | Dries Buytaert | 2010-06-25 |
| | | | | entity_query().test. | ||
* | - Patch #795174 by Berdir: use %alias in SelectQuery joins and remove ↵ | Dries Buytaert | 2010-06-25 |
| | | | | workarounds. | ||
* | - Patch #690746 by jbrown, Ognyan Kulev, Crell, MichaelCole, Damien ↵ | Dries Buytaert | 2010-06-25 |
| | | | | Tournoud: text column type doesn't reliably hold serialized variables. | ||
* | #834842 by Damien Tournoud, chx: Fixed oversight in field query routing API, ↵ | Angie Byron | 2010-06-24 |
| | | | | and added tests. | ||
* | #733028 by cha0s, agentrickard: Fixed SA-CORE-2010-001 - Open redirection. | Angie Byron | 2010-06-21 |
| | |||
* | #444228 follow-up by Tri, ridgerunner, Damien Tournoud, et al: Improve ↵ | Angie Byron | 2010-06-21 |
| | | | | Optimize CSS performance by removing support for Mac IE 5.5 comment hacks, and add tests. (Apologies; some of this went in with a previous commit http://drupal.org/cvs?commit=382522) | ||
* | - Patch #735800 by effulgentsia, fago, Frando: node form triggers form level ↵ | Dries Buytaert | 2010-06-17 |
| | | | | submit functions on button level submits, without validation. Oh yeah. | ||
* | - Patch #818206 by Berdir et al: apply coding standard for no-arg constructors. | Dries Buytaert | 2010-06-17 |
| | |||
* | - Patch #780154 by chx, noahb, dhthwy, pwolanin, aspilicious, jhodgdon, ↵ | Dries Buytaert | 2010-06-14 |
| | | | | dereine, bjaspan: listing API for field API. | ||
* | - Patch #621748 by grendzy, David Strauss: ip_address() is broken for ↵ | Dries Buytaert | 2010-06-14 |
| | | | | multi-tier architectures. | ||
* | - Patch #813492 by chx, Damien Tournoud, justinrandell: HTTPS sessions use ↵ | Dries Buytaert | 2010-06-14 |
| | | | | an invalid merge query. | ||
* | #551658 follow-up by pwolanin: Revert back to D6-style temporary folder ↵ | Angie Byron | 2010-06-12 |
| | | | | logic to avoid various platform issues. | ||
* | - Patch #768040 by jhodgdon, janusman, codycraven: truncate_utf8() only ↵ | Dries Buytaert | 2010-06-10 |
| | | | | works for latin languages and drupal_substr() had a bug. | ||
* | - Patch #803212 by effulgentsia, Heine: protection against forgery of input ↵ | Dries Buytaert | 2010-06-05 |
| | | | | selection value doesn't work with checkboxes. | ||
* | - Patch #701358 by aaron, quicksketch, chx, pwolanin, aspilicious: the file ↵ | Dries Buytaert | 2010-06-02 |
| | | | | API presumes a hiearchical file storage. | ||
* | - Patch #809698 by Damien Tournoud, tstoeckler: refrain from using the || ↵ | Dries Buytaert | 2010-05-28 |
| | | | | operator for concatenation. | ||
* | - Patch #174972 by rfay, stBorchert, gaele: user creation setting should be ↵ | Dries Buytaert | 2010-05-27 |
| | | | | 'Visitors, with admin approval'. | ||
* | - Patch #782056 by aspilicious: removing tabs and trailing white space. | Dries Buytaert | 2010-05-26 |
| | |||
* | - Patch #714964 by mr.baileys: ActionLoopTestCase was fragile on some databases. | Dries Buytaert | 2010-05-26 |
| | |||
* | - Patch #592800 by cpliakas, Berdir, aufumy: critical bug: dependent modules ↵ | Dries Buytaert | 2010-05-26 |
| | | | | are still installed when required modules return errors in hook_requirements(). | ||
* | - Patch #303838 by c960657, Aron Novak: drupal_http_request() - case ↵ | Dries Buytaert | 2010-05-20 |
| | | | | sensitive HTTP header field names. | ||
* | - Patch #763850 by c960657: require_once() and drupal_get_path() ↵ | Dries Buytaert | 2010-05-18 |
| | | | | inconsistencies. | ||
* | - Patch #796120 by c960657: do not urldecode() parameters in drupal_goto(). | Dries Buytaert | 2010-05-18 |
| | |||
* | - Patch #785782 by cafuego: support comments in built queries. | Dries Buytaert | 2010-05-15 |
| | |||
* | - Patch #730046 by pwolanin, Damien Tournoud: performance settings page is ↵ | Dries Buytaert | 2010-05-12 |
| | | | | inconsistent. | ||
* | - Patch #793604 by matt2000, chx: DBTNG JOINs are close to useless. | Dries Buytaert | 2010-05-11 |
| | |||
* | - Patch #777830 by Wim Leers: file_create_url() does not support ↵ | Dries Buytaert | 2010-05-11 |
| | | | | protocol-relative nor root-relative file URLs. | ||
* | #331951 by aspilicious, sun, jhodgdon, Morbus, et al: Figure out and apply ↵ | Angie Byron | 2010-05-06 |
| | | | | coding standard for casting. | ||
* | - Patch #769554 by jpmckinney, Berdir, cha0s: fixed trivial SQL injection(s) ↵ | Dries Buytaert | 2010-05-05 |
| | | | | with SelectQuery. | ||
* | - Patch #296326 by dereine, kscheirer, nagba, mr.baileys: l() and active ↵ | Dries Buytaert | 2010-05-04 |
| | | | | class tests. | ||
* | - Patch #723802 by pwolanin, grendzy: convert to sha-256 and hmac from md5 ↵ | Dries Buytaert | 2010-05-01 |
| | | | | and sha1. | ||
* | - Patch #645800 by katbailey, effulgentsia, rfay: ajax_deliver() ignores ↵ | Dries Buytaert | 2010-04-30 |
| | | | | #ajax['method'] and incorrectly forces 'replaceWith' for simple AJAX callbacks, D6->D7 regression. | ||
* | - Patch #755566 by effulgentsia: use of ID within theme_filter_guidelines() ↵ | Dries Buytaert | 2010-04-30 |
| | | | | breaks HTML validation with more than 1 field item on a page. | ||
* | #764094 by David_Rothstein: Add tests to check that the theme system works ↵ | Angie Byron | 2010-04-29 |
| | | | | in hook_init() (i.e., as early as possible). | ||
* | - Patch #755030 by jhedstrom, sivaji, kkaefer: #field_prefix()/suffix is ↵ | Dries Buytaert | 2010-04-28 |
| | | | | displayed before the label. With tests. | ||
* | - Patch #765860 by effulgentsia, dww, dereine, mikey_p, sun: make ↵ | Dries Buytaert | 2010-04-28 |
| | | | | drupal_alter() support multiple alter hooks executed by module weight. | ||
* | #211182 follow-up by clemens.tolboom, David_Rothstein, tstoeckler: Re-work ↵ | Angie Byron | 2010-04-28 |
| | | | | update depencency check to deal with array_merge_recursive() edge case (with tests). | ||
* | - Patch #701888 by jhodgdon: subqueries are not altered and test clean-up. | Dries Buytaert | 2010-04-27 |
| |