summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-10-29README bump for 0.9.6 final0.9.6Brion Vibber
2010-10-29Merge branch 'master' into 0.9.xBrion Vibber
2010-10-29Merge remote branch 'gitorious/master'Evan Prodromou
2010-10-29add a hack to show ads on single-notice pagesEvan Prodromou
2010-10-28Merge remote branch 'origin/0.9.x' into 0.9.xBrion Vibber
2010-10-29Localisation updates from http://translatewiki.netSiebrand Mazeland
2010-10-28Merge branch 'master' into 0.9.xBrion Vibber
2010-10-28Kill a ping queue item if we get an error on loading up the notice's ↵Brion Vibber
poster's profile, rather than letting the item be retried over and over as if it were a transitory error. This shouldn't generally happen as it's an indicator of database inconsistency, but it's a condition we know happens.
2010-10-28Fix for regression: fatal error on group page display when not logged in.Brion Vibber
Bug was introduced with group deletion feature.
2010-10-28fall back to siteowner on bad nickname (Bug#2861)Evan Prodromou
2010-10-28Merge branch '0.9.x' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-10-28Tweak for OAuth headers not seen in $_SERVERBrion Vibber
2010-10-28Merge branch '0.9.x' of git://gitorious.org/statusnet/mainline into 0.9.xSiebrand Mazeland
2010-10-28Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-27Merge branch 'instrument' into 0.9.xBrion Vibber
2010-10-27ApiLogger plugin: dumps some information about API hits to aid in ↵Brion Vibber
researching future HTTP-level cachability improvements. Data are sent to the 'info' level of logging, like so: [lazarus.local:4812.86b23603 GET /mublog/api/statuses/friends_timeline.atom?since_id=1353] STATLOG action:apitimelinefriends method:GET ssl:no query:since_id cookie:no auth:yes ifmatch:no ifmod:no agent:Appcelerator Titanium/1.4.1 (iPhone/4.1; iPhone OS; en_US;) Fields: * action: case-normalized name of the action class we're acting on * method: GET, POST, HEAD, etc * ssl: Are we on HTTPS? 'yes' or 'no' * query: Were we sent a query string? 'yes', 'no', or 'since_id' if the only parameter is a since_id * cookie: Were we sent any cookies? 'yes' or 'no' * auth: Were we sent an HTTP Authorization header? 'yes' or 'no' * ifmatch: Were we sent an HTTP If-Match header for an ETag? 'yes' or 'no' * ifmod: Were we sent an HTTP If-Modified-Since header? 'yes' or 'no' * agent: User-agent string, to aid in figuring out what these things are The most shared-cache-friendly requests will be non-SSL GET requests with no or very predictable query parameters, no cookies, and no authorization headers. Private caching (eg within a supporting user-agent) could still be friendly to SSL and auth'd GET requests. We kind of expect that the most frequent hits from clients will be GETs for a few common timelines, with auth headers, a since_id-only query, and no cookies. These should at least be amenable to returning 304 matches for etags or last-modified headers with private caching, but it's very possible that most clients won't actually think to save and send them. That would leave us expecting to handle a lot of timeline since_id hits that return a valid API response with no notices. At this point we don't expect to actually see if-match or if-modified-since a lot since most of our API responses are marked as uncacheable; so even if we output them they're not getting sent back to us. Random subsampling can be enabled by setting the 'frequency' parameter smaller than 1.0: addPlugin('ApiLogger', array( 'frequency' => 0.5 // Record 50% of API hits ));
2010-10-28Update translator documentation.Siebrand Mazeland
2010-10-28i18n/L10n updates and superfluous whitespace removed.Siebrand Mazeland
2010-10-28* Superfluous whitespace removed.Siebrand Mazeland
* i18n review (no changes needed).
2010-10-28* i18n/L10n fixes.Siebrand Mazeland
* translator documentation updated. * superfluous whitespace removed.
2010-10-28* i18n/L10n fixes.Siebrand Mazeland
* translator documentation updated. * superfluous whitespace removed.
2010-10-27Merge branch 'nofollowexternallink' into 0.9.xEvan Prodromou
Conflicts: lib/default.php
2010-10-26Set cookies with "secure" flag on SSL sites. Improves security.testingCraig Andrews
2010-10-26Fix OAuth verifier display page title and msgs for i18nZach Copley
2010-10-26UI on profile settings page to opt out of following everyoneEvan Prodromou
2010-10-26flag to let users opt out of following everyoneEvan Prodromou
2010-10-26Plugin to follow all new users by defaultEvan Prodromou
2010-10-26can't subscribe to blacklisted domains/usersEvan Prodromou
2010-10-26Blacklist plugin checks PuSH and Salmon noticesEvan Prodromou
2010-10-26userrole.php will take a profile id for remote profilesEvan Prodromou
2010-10-25readme: release candidate 0.9.60.9.6rc1Brion Vibber
2010-10-25Merge commit 'refs/merge-requests/2223' of ↵Zach Copley
git://gitorious.org/statusnet/mainline into integration
2010-10-25Updated mustard description and linkMichele macno Azzolari
2010-10-25Supress header, footer, sidebar on OAuth verifier pin page when in "desktop" ↵Zach Copley
mode
2010-10-25Base theme styling for oauth pin and desktop mode.Samantha Doherty
2010-10-25Forgot to add the OAuth verifier pin page to sensitive arrayZach Copley
2010-10-25We don't need to have editapplication (only showapplication) in theZach Copley
sensitive array because it doesn't expose the consumer keypair
2010-10-25Add OAuth token exchange endpoint to 'sensitive' array; i.e.: use SSL ifZach Copley
available
2010-10-25Add special CSS classes to OAuth authorization and pin pages whenZach Copley
in desktop mode
2010-10-25Less scary OAuth authorization messages when using anonymous consumerZach Copley
2010-10-25max_id is inclusiveEvan Prodromou
2010-10-25change max_id from < to <=Evan Prodromou
2010-10-23Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-23* onPluginVersion added.Siebrand Mazeland
* i18n fix: use _m() in plugins, don't use _() * some translator documentation added. * superfluous whitespace removed.
2010-10-23* translator documentation added.Siebrand Mazeland
* superfluous whitespace removed.
2010-10-22Additional fixes found while looking at ticket #2532: when given a screen ↵Brion Vibber
name as API parameter for a profile, do the nickname lookup on local users only. The profile table can't guarantee unique lookups, so using names isn't currently safe there. This won't affect anything using local nicknames correctly, and may avoid some weird bugs if there were conflicts between local and remote nicknames.
2010-10-22Fix for ticket #2532: fixed API block create/destroy when specifying the ↵Brion Vibber
target user/profile as a separate query parameter, such as api/blocks/create.xml?param=xxx The router settings weren't quite right so we ended up with bogus regex values passed in as the 'id' parameter, which broke the regular fallback ordering of parameter checks.
2010-10-22Merge branch '0.9.x' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-10-22Fix for 140-char replies being unexpectedly cropped when bridged to Twitter.Brion Vibber
This drops the '@' -> ' @' hack for CURL meta-chars in outgoing Twitter bridge, added in commit 04b95c25 back in the day. The Twitter bridge has since been switched from using direct CURL calls to using HTTPClient, which even with the CURL backend enabled doesn't trigger this issue, as POST parameters are formatted directly. Prepending the space before we did the message cropping was leading to 140-char messages getting cropped unnecessarily, which was confusing: Examples of broken messages: http://identi.ca/notice/57172587 vs http://twitter.com/marjoleink/status/28398050691 http://identi.ca/notice/57172878 vs http://twitter.com/marjoleink/status/28398492563
2010-10-22Normalize HTML body ids to lowercase when the user is logged out as well.Zach Copley