aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
...
| | * | | | | | | | | Don't nest the #public_body_show grid-row when in authority preview.Louise Crow2014-09-02-0/+4
| |/ / / / / / / / /
| * | | | | | | | | Merge branch 'master' into rails-3-developGareth Rees2014-08-28-6/+20
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: locale/cy/app.po
| * \ \ \ \ \ \ \ \ \ Merge branch 'general-null-values' into rails-3-developGareth Rees2014-08-26-2/+2
| |\ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | Use null values for general settingsGareth Rees2014-08-26-2/+2
| |/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mySociety’s internal deployment system requires these to be set in some capacity (even if the value is null).
| * | | | | | | | | | Update translationsGareth Rees2014-08-26-208/+208
| | | | | | | | | | |
| * | | | | | | | | | Update translationsGareth Rees2014-08-26-6/+6
| | | | | | | | | | |
| * | | | | | | | | | Update translationsGareth Rees2014-08-26-378/+399
| | | | | | | | | | |
| * | | | | | | | | | Merge branch 'issues/1668-general-config-docs' into rails-3-developGareth Rees2014-08-26-124/+633
| |\ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | Update default RESPONSIVE_STYLINGGareth Rees2014-08-26-5/+4
| | | | | | | | | | | |
| | * | | | | | | | | | Provide sensible defaults for emailsGareth Rees2014-08-26-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Provide something that at least has a chance of existing and might get read
| | * | | | | | | | | | Use default setting for MINIMUM_REQUESTS_FOR_STATISTICSGareth Rees2014-08-26-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Defaults to 100 so use this in the example config
| | * | | | | | | | | | Add default MTA_LOG_PATHGareth Rees2014-08-26-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We default MTA_LOG_TYPE to exim so we can set the default log path too
| | * | | | | | | | | | Set default MAX_REQUESTS_PER_USER_PER_DAYGareth Rees2014-08-26-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We supply a default example for MAX_REQUESTS_PER_USER_PER_DAY so we might as well set it as default and allow the user to tune if they dislike the default.
| | * | | | | | | | | | Don't set non-default value for USE_GHOSTSCRIPT_COMPRESSIONGareth Rees2014-08-26-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We don't set this to true as a default so don't supply the non-default to new installs.
| | * | | | | | | | | | Emphasise suggestion to change emergency admin detailsGareth Rees2014-08-26-2/+2
| | | | | | | | | | | |
| | * | | | | | | | | | Add default INCOMING_EMAIL_PREFIXGareth Rees2014-08-26-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | All our examples use the 'foi+' prefix so lets make this the default. If people _really_ want no prefix, they can change the setting to ''. This will probably cover the more general cases.
| | * | | | | | | | | | Add documentation to general.yml parametersGareth Rees2014-08-26-117/+621
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also available at http://alaveteli.org/docs/customising/config
| | * | | | | | | | | | Add note about default config in general.ymlGareth Rees2014-08-22-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Default settings are taken from lib/configuration.rb if not set by the user.
| | * | | | | | | | | | Remove general.yml Admin sectionGareth Rees2014-08-22-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Many items underneath are not administration settings
| * | | | | | | | | | | Fix test failures in PublicBody overrideable CSV import specsSteven Day2014-08-22-2/+2
| | | | | | | | | | | |
| * | | | | | | | | | | Make csv import fields a class attribute that can be overridenSteven Day2014-08-22-14/+76
| |/ / / / / / / / / /
* | | | | | | | | | | Merge branch 'hotfix/0.19.0.12'Gareth Rees2014-11-25-3/+4
|\ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|_|_|_|/ |/| | | | | | | | | |
| * | | | | | | | | | Don't comment out example configuration0.19.0.12hotfix/0.19.0.12Gareth Rees2014-11-25-3/+4
|/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Breaks the mySociety internal deployment tooling.
* | | | | | | | | / Upgrade to Rails 3.2.210.19.0.10hotfix/0.19.0.10Louise Crow2014-11-17-26/+26
| |_|_|_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | Provides fix for CVE-2014-7829.
* | | | | | | | | Comment out spec which sends an invalid utf-8 param.0.19.0.9hotfix/0.19.0.9Louise Crow2014-10-31-6/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The original error `ActionView::Template::Error` that this spec was written to represent (#1406) occurred under ruby 1.8 when the decoded non-utf-8 string was used in the locale switcher on the 'not found' error page to generate a url for the alternative locales. Under Ruby >= 1.9, the error thrown in that situation is an `invalid byte sequence in UTF-8` error, thrown in the same place - the locale switcher. However, no error seems to be thrown when the same param is used in a request in production. The upgrade to Rails 3.2.20 causes `String.split` to be called on the request path in `actionpack/lib/action_dispatch/middleware/static.rb` in order to check for attempts to access files outside the `public` directory. This means that under Ruby >= 1.9, an `invalid byte sequence in UTF-8` error will be thrown there in running this spec. I think a possible solution is to use the `rack-utf8_sanitizer` gem to provide middleware to strip invalid utf-8 from request URIs and headers before they're processed by Rails, but it's currently unclear whether that would have any undesirable side-effects.
* | | | | | | | | Upgrade to Rails 3.2.20 - fixes CVE-2014-7818Louise Crow2014-10-31-26/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Arbitrary file existence disclosure in Action Pack
* | | | | | | | | Results of running 'bundle update rails'Louise Crow2014-10-31-3/+3
| | | | | | | | |
* | | | | | | | | Latest translations from Transifex0.19.0.8hotfix/0.19.0.8Louise Crow2014-10-27-12/+3876
| | | | | | | | |
* | | | | | | | | Latest translations from transifex.0.19.0.7hotfix/0.19.0.7Louise Crow2014-10-24-433/+435
| | | | | | | | |
* | | | | | | | | Merge branch 'hotfix/0.19.0.6'0.19.0.6Gareth Rees2014-09-24-1/+2
|\ \ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ / |/| | | | | | | / | | |_|_|_|_|_|/ | |/| | | | | |
| * | | | | | | Redirect GET signup to signinhotfix/0.19.0.6Gareth Rees2014-09-24-1/+2
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After allowing only POST requests to signup in 316b1e: > What I think will happen at least sometimes is that someone will enter > information in the signup form, submit it via a post request, and end > up on the URL /profile/signup, at which point they want to refresh and > start again, at which point they hit the URL in the address bar to do > so. Currently that would mean they get a 404. I wonder about adding > another route match '/profile/sign_up' => 'user#signin', :as => > :signin, :via => :get to handle this case. That would mean that a get > request to profile/signup renders the empty form. > > – https://github.com/mysociety/alaveteli/pull/1850#issuecomment-55387700
* | | | | | | Remove translation of interpolated variable.0.19.0.5Louise Crow2014-09-22-10/+10
| | | | | | |
* | | | | | | Update from Spanish fileLouise Crow2014-09-22-80/+85
| |_|_|_|_|/ |/| | | | |
* | | | | | Latest translations from Transifex0.19.0.4hotfix/0.19.0.4Louise Crow2014-09-22-289/+4423
| |_|_|_|/ |/| | | |
* | | | | Whitelist UserController#signup params0.19.0.3hotfix/0.19.0.3Gareth Rees2014-09-09-1/+15
| | | | | | | | | | | | | | | | | | | | Protects from mass-assignment exploit attempts
* | | | | Merge branch 'hotfix/0.19.0.2'0.19.0.2Gareth Rees2014-09-05-2/+4
|\ \ \ \ \ | |_|_|/ / |/| | | / | | |_|/ | |/| |
| * | | Allow RAILS_ENV to be set in sysvinit-thinhotfix/0.19.1hotfix/0.19.0.2Gareth Rees2014-08-29-2/+4
| | |/ | |/| | | | | | | Install script on AWS uses development mode by default
* | | Add integration spec.0.19.0.1hotfix/0.19.0.1Louise Crow2014-09-01-0/+31
| | |
* | | Return a list of all cache directories for the requestLouise Crow2014-09-01-8/+18
| | |
* | | Use request dirs method.Louise Crow2014-09-01-2/+1
| | |
* | | Use path relative to Rails root.Louise Crow2014-09-01-1/+1
| | |
* | | Move method to model to make it more testable, add spec.Louise Crow2014-09-01-8/+20
|/ /
* | Merge remote-tracking branch 'origin/release/0.19'0.19Gareth Rees2014-08-28-3432/+4064
|\ \
| * | Fix translation bug in variable interpolationrelease/0.19Louise Crow2014-08-28-3/+3
| | |
| * | Update translationsGareth Rees2014-08-26-208/+208
| | |
| * | Update translationsGareth Rees2014-08-26-6/+6
| | |
| * | Add note about HighlightHelper#excerpt backportGareth Rees2014-08-26-0/+10
| | | | | | | | | | | | Requires Hash options
| * | Update ALAVETELI_VERSIONGareth Rees2014-08-26-1/+1
| | |
| * | note commonlib update in changelogGareth Rees2014-08-26-0/+2
| | |
| * | Update translationsGareth Rees2014-08-26-378/+399
| | |