summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-11-22Merge branch 'master' into 0.9.xBrion Vibber
2010-11-22Fixes for delete_status_network.sh:Brion Vibber
* add some sanity checking: abort on failures instead of plodding through * add some progress / error output * fetch the target database server name from the status_network entry and use that to target the DROP DATABASE Note that database names and other overrides in status_network entry may still not be seen.
2010-11-19Merge branch 'master' into 0.9.xBrion Vibber
2010-11-19Fix ticket #2700: some numeric IDs were misinterpreted as hex numbers ↵Brion Vibber
instead of strings when '0x123' passed in. Switched from is_numeric() to a custom self::is_decimal() which is more strict. This makes our behavior match Twitter's API a bit better, so eg this: http://identi.ca/api/statuses/home_timeline/0x6d686b.xml should now be equivalent to: http://identi.ca/api/statuses/home_timeline.xml?screen_name=0x6d686b instead of: http://identi.ca/api/statuses/home_timeline.xml?user_id=7170155
2010-11-19Merge branch 'master' into 0.9.xBrion Vibber
2010-11-19Ticket #2724: gracefully handle attempts to delete or fave/unfave a remote ↵Brion Vibber
Twitter notice if a failure occurs. Most annoying error case being where the notice was already faved or deleted on Twitter! :) Such errors will now just fail out and log a note to the syslog -- the rest of what we were doing will continue on unhindered, so you can still delete, favorite, etc and it just won't sync the info over in that case.
2010-11-19Merge branch 'master' into 0.9.xBrion Vibber
2010-11-19Ticket #2796: don't allow arbitrary overriding of the 'action' class and ↵Brion Vibber
other parameters pulled from the URL mapper. This protects against oddities such as manual invocation of the ClientError action, which can spoof error messages.
2010-11-19Ticket #2797: replace addslashes() with explicit escape calls on the DB objectsBrion Vibber
2010-11-19Merge branch 'master' into 0.9.xBrion Vibber
2010-11-19Ticket #1987: support since_id on API notice search methods.Brion Vibber
max_id is not yet implemented, as it'll need support added to the search backends. (since_id we get 'for free' by just cropping off the list, it'll do for now)
2010-11-19Merge branch 'master' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-11-19Ticket #2441: fix deletion of avatars when a profile is deleted.Brion Vibber
Code was doing a batch call to $avatar->delete() which fails to properly engage the file deletion code. Calling the existing profile->delete_avatars() function deletes them individually, which makes it all work nice again.
2010-11-19Drop PEAR HTTP_Request library -- no longer used since Services_oEmbed was ↵Brion Vibber
dropped. (HTTP_Request2 is separate and is widely used. Net_URL is also used separately by Net_URL_Mapper.)
2010-11-19Merge branch 'master' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-11-19Ticket #2899: clean up inbox/outbox DM form a bit:Brion Vibber
- "To" drop-down list now defaults to showing "Select recipient:" instead of the first person on your list, reducing liklihood of accidentally sending a message to the wrong person. - When there are no mutual subscribers to send to, instead of an empty list the list now shows 'No mutual subscribers.' In both cases, attempting to send when the default is selected displays an error message. I'm not disabling form elements in part because our themes right now don't show disabled button state correctly; we might want to tighten that up a bit more once fixed.
2010-11-19Merge branch 'master' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-11-18Automatically make Facebook admin panel available if the FacebookBridgeZach Copley
plugin is installed.
2010-11-18scripts/deletegroup.php -- basic CLI script to delete a group by id or local ↵Brion Vibber
nickname. Like deleteuser.php, this can be used in batch runs by providing the -y override.
2010-11-18Fix regression in PopularNoticeSection: tag parameter was broken, causing ↵Brion Vibber
sidebar on tag pages to show untagged favorites.
2010-11-18Facebook: Add needed perms to plain login URLZach Copley
2010-11-18Fix name of Facebook Bridge pluginZach Copley
2010-11-17Merge branch '0.9.x' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-11-17Partial fix for tickets #2194, #2393: Workaround for Meteor breaking AJAX ↵Brion Vibber
error responses returned on posting new notices. Fixes things in Firefox 4, but Safari 5 and Chrome 8 still don't return data... either on success or failure! Sigh. The Meteor realtime plugin sets document.domain to the common prefix between the main server and the Meteor server's hostnames, which overrides the same-origin controls on JavaScript DOM access so the two parts of the app can speak to each other. This unfortunately causes "fun" side effects for XMLHTTPRequest access to the main domain... if the new domain doesn't match the actual host (eg 'status.net' instead of 'brion.status.net') then we can't access the XHR's responseXML attribute, which holds a DOM tree of the parsed XML return data. As a workaround, if we can't get at the contents there, we'll parse a fresh DOM tree in the local context from the responseText property, which remains available. In the longer term, recommend retooling the realtime stuff so it's not fiddling with document.domain. It could also be an issue as it could allow local JavaScript XSS attacks to migrate to subdomains in other open windows.
2010-11-17Merge branch '0.9.x' of git@gitorious.org:statusnet/mainline into 0.9.xZach Copley
2010-11-17Remove dumb debugging statementZach Copley
2010-11-17Facebook: Gracefully handle disconnectionZach Copley
2010-11-17Add $config['attachments']['process_links'] to allow disabling processing of ↵Brion Vibber
mentioned URL links for attachment info (oEmbed lookups) and dereferencing of redirects that we didn't have shortened ourselves. This option may be useful for intranet sites that don't have direct access to the internet, as they may be unable to successfully fetch those resources.
2010-11-17include full updated source of JSON2 and use updated minified versionEvan Prodromou
2010-11-17use minified version of jquery.cookie.jsEvan Prodromou
2010-11-17use minified version of jquery.form.jsEvan Prodromou
2010-11-17upgrade jquery.form.jsEvan Prodromou
2010-11-17use minified version of meteorupdater.jsEvan Prodromou
2010-11-17use minified version of realtime.jsEvan Prodromou
2010-11-17Merge branch '0.9.x' into minifyjsEvan Prodromou
2010-11-17move EndScriptMessages event into if blockEvan Prodromou
2010-11-17Use minified version of util.jsEvan Prodromou
2010-11-17upgrade to JQuery 1.4.4Evan Prodromou
2010-11-16Use session token protection on oEmbed proxy action for LinkPreview... and ↵Brion Vibber
commit the file *sigh*
2010-11-16LinkPreview: clear preview thumbnails & data on form submission/resetBrion Vibber
2010-11-16Less redrawing of bits in the link thumbnail previewBrion Vibber
2010-11-16LinkPreview: restructure to make it easier to keep old link dataBrion Vibber
2010-11-16LinkPreview: use a local proxy for oEmbed lookups so we use a consistent ↵Brion Vibber
common code path, and don't open up to oohembed.com being evil
2010-11-16LinkPreview: restructure a bit so we can pass config overBrion Vibber
2010-11-16LinkPreview: piggyback on the counter update logic, cache lookups.Brion Vibber
2010-11-16LinkPreview: link the thumbnailsBrion Vibber
2010-11-16LinkPreview plugin more or less functioning (though not pretty), using ↵Brion Vibber
oohembed remote lookup and fixed sizes.
2010-11-16LinkPreview: flesh out stub JS code a bit. URL splitting doesn't quite match ↵Brion Vibber
core, note.
2010-11-16Stub LinkPreview pluginBrion Vibber
2010-11-16Merge branch 'master' into 0.9.xBrion Vibber