summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-11-17Partial fix for tickets #2194, #2393: Workaround for Meteor breaking AJAX ↵Brion Vibber
error responses returned on posting new notices. Fixes things in Firefox 4, but Safari 5 and Chrome 8 still don't return data... either on success or failure! Sigh. The Meteor realtime plugin sets document.domain to the common prefix between the main server and the Meteor server's hostnames, which overrides the same-origin controls on JavaScript DOM access so the two parts of the app can speak to each other. This unfortunately causes "fun" side effects for XMLHTTPRequest access to the main domain... if the new domain doesn't match the actual host (eg 'status.net' instead of 'brion.status.net') then we can't access the XHR's responseXML attribute, which holds a DOM tree of the parsed XML return data. As a workaround, if we can't get at the contents there, we'll parse a fresh DOM tree in the local context from the responseText property, which remains available. In the longer term, recommend retooling the realtime stuff so it's not fiddling with document.domain. It could also be an issue as it could allow local JavaScript XSS attacks to migrate to subdomains in other open windows.
2010-11-17Add $config['attachments']['process_links'] to allow disabling processing of ↵Brion Vibber
mentioned URL links for attachment info (oEmbed lookups) and dereferencing of redirects that we didn't have shortened ourselves. This option may be useful for intranet sites that don't have direct access to the internet, as they may be unable to successfully fetch those resources.
2010-11-17include full updated source of JSON2 and use updated minified versionEvan Prodromou
2010-11-17use minified version of jquery.cookie.jsEvan Prodromou
2010-11-17use minified version of jquery.form.jsEvan Prodromou
2010-11-17upgrade jquery.form.jsEvan Prodromou
2010-11-17use minified version of meteorupdater.jsEvan Prodromou
2010-11-17use minified version of realtime.jsEvan Prodromou
2010-11-17Merge branch '0.9.x' into minifyjsEvan Prodromou
2010-11-17move EndScriptMessages event into if blockEvan Prodromou
2010-11-17Use minified version of util.jsEvan Prodromou
2010-11-17upgrade to JQuery 1.4.4Evan Prodromou
2010-11-16Use session token protection on oEmbed proxy action for LinkPreview... and ↵Brion Vibber
commit the file *sigh*
2010-11-16LinkPreview: clear preview thumbnails & data on form submission/resetBrion Vibber
2010-11-16Less redrawing of bits in the link thumbnail previewBrion Vibber
2010-11-16LinkPreview: restructure to make it easier to keep old link dataBrion Vibber
2010-11-16LinkPreview: use a local proxy for oEmbed lookups so we use a consistent ↵Brion Vibber
common code path, and don't open up to oohembed.com being evil
2010-11-16LinkPreview: restructure a bit so we can pass config overBrion Vibber
2010-11-16LinkPreview: piggyback on the counter update logic, cache lookups.Brion Vibber
2010-11-16LinkPreview: link the thumbnailsBrion Vibber
2010-11-16LinkPreview plugin more or less functioning (though not pretty), using ↵Brion Vibber
oohembed remote lookup and fixed sizes.
2010-11-16LinkPreview: flesh out stub JS code a bit. URL splitting doesn't quite match ↵Brion Vibber
core, note.
2010-11-16Stub LinkPreview pluginBrion Vibber
2010-11-16Merge branch 'master' into 0.9.xBrion Vibber
2010-11-16Ticket 2895: exclude silenced users from popular notice listsBrion Vibber
2010-11-16Prep for ticket #2895: consolidate common code from PopularNoticeList and ↵Brion Vibber
FavoritedAction for fetching popular notice lists
2010-11-15Merge branch 'master' into 0.9.xBrion Vibber
2010-11-15Forgot to commit the JS for ModPlus. :)Brion Vibber
2010-11-15Merge branch 'master' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-11-15visual cleanup on ModPlus remote profile info popup menuBrion Vibber
2010-11-15Tweak remote profile action: hide stats from sidebar, tweak wording on ↵Brion Vibber
remote notice
2010-11-15RemoteProfileAction cleanup:Brion Vibber
- meta robots to prevent spidering - a little notice if silenced
2010-11-15visual tweaks for RemoteProfileActionBrion Vibber
2010-11-15RemoteProfileAction: redirect to the regular user profile page if given a ↵Brion Vibber
local user.
2010-11-15Workaround for display of Twitter remote users in remoteprofile (ModPlus ↵Brion Vibber
plugin): use 73px avatar if no 96px present
2010-11-15Stub RemoteprofileAction to show the standard profile header stuff for ↵Brion Vibber
offsite users -- provides a way to get at the mod & block controls for remote users.
2010-11-15some User -> Profile cleanup to help in adapting the profile page action to ↵Brion Vibber
show stuff for remote users. Subscriptions, groups, roles, etc are all on profiles now so go ahead and use em.
2010-11-15Stub ModPlus plugin: will hold experimental UI improvements for mod actionsBrion Vibber
2010-11-15Merge branch 'master' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-11-15clear_jabber.php script to clear confirmed jabber/xmpp addresses from one or ↵Brion Vibber
more accounts
2010-11-15Add some data integrity checks on oembed tests (shows a bug on identi.ca ↵Brion Vibber
test case -- missing width/height in photo data)
2010-11-15Include width/height of locally-uploaded images in our oembed provider data ↵Brion Vibber
for attachment pages.
2010-11-15restore empty showFallback() for attachment display; still needed for one-offsBrion Vibber
2010-11-15Merge branch '0.9.x' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-11-15Drop PEAR Services_oEmbed -- ended up replaced by our oEmbedHelper wrapper. ↵Brion Vibber
The extra validation available there is problematic, and their code for building HTML for us wasn't being used anyway.
2010-11-15Test oEmbed lookups with oohembed both on and off explicitlyBrion Vibber
2010-11-15Restructure oembed test sourcesBrion Vibber
2010-11-15Add some basic oEmbed lookup test cases; fixed a bug in discovery fallback.Brion Vibber
2010-11-15Drop some debug linesBrion Vibber
2010-11-15Swap the Services_oEmbed wrapper in oEmbedHelper out for doing it ourselves...Brion Vibber
- workaround for providers that are skimpy on their data, such as missing width/height or thumbnail_width/thumbnail_height - workaround for YFrog listing "image" instead of "photo" type - generally more lax about formatting: if it comes back and looks kinda ok, we'll take it. - discovery uses system HTML parser, should be more robust if the links include things like ampersands with proper HTML-level escaping