Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-10-28 | Merge branch '1.0.x' into schema-x | Brion Vibber | |
Conflicts: plugins/CacheLog/locale/nb/LC_MESSAGES/CacheLog.po | |||
2010-10-28 | Merge branch '0.9.x' into 1.0.x | Brion Vibber | |
2010-10-28 | Merge remote branch 'origin/0.9.x' into 0.9.x | Brion Vibber | |
2010-10-29 | Localisation updates from http://translatewiki.net | Siebrand Mazeland | |
2010-10-28 | Merge branch 'master' into 0.9.x | Brion Vibber | |
2010-10-28 | Kill a ping queue item if we get an error on loading up the notice's ↵ | Brion Vibber | |
poster's profile, rather than letting the item be retried over and over as if it were a transitory error. This shouldn't generally happen as it's an indicator of database inconsistency, but it's a condition we know happens. | |||
2010-10-28 | Fix for regression: fatal error on group page display when not logged in. | Brion Vibber | |
Bug was introduced with group deletion feature. | |||
2010-10-28 | fall back to siteowner on bad nickname (Bug#2861) | Evan Prodromou | |
2010-10-28 | Merge branch '0.9.x' of gitorious.org:statusnet/mainline into 0.9.x | Brion Vibber | |
2010-10-28 | Tweak for OAuth headers not seen in $_SERVER | Brion Vibber | |
2010-10-28 | Merge branch '0.9.x' of git://gitorious.org/statusnet/mainline into 0.9.x | Siebrand Mazeland | |
2010-10-28 | Localisation updates from http://translatewiki.net. | Siebrand Mazeland | |
2010-10-27 | Merge branch 'instrument' into 0.9.x | Brion Vibber | |
2010-10-27 | ApiLogger plugin: dumps some information about API hits to aid in ↵ | Brion Vibber | |
researching future HTTP-level cachability improvements. Data are sent to the 'info' level of logging, like so: [lazarus.local:4812.86b23603 GET /mublog/api/statuses/friends_timeline.atom?since_id=1353] STATLOG action:apitimelinefriends method:GET ssl:no query:since_id cookie:no auth:yes ifmatch:no ifmod:no agent:Appcelerator Titanium/1.4.1 (iPhone/4.1; iPhone OS; en_US;) Fields: * action: case-normalized name of the action class we're acting on * method: GET, POST, HEAD, etc * ssl: Are we on HTTPS? 'yes' or 'no' * query: Were we sent a query string? 'yes', 'no', or 'since_id' if the only parameter is a since_id * cookie: Were we sent any cookies? 'yes' or 'no' * auth: Were we sent an HTTP Authorization header? 'yes' or 'no' * ifmatch: Were we sent an HTTP If-Match header for an ETag? 'yes' or 'no' * ifmod: Were we sent an HTTP If-Modified-Since header? 'yes' or 'no' * agent: User-agent string, to aid in figuring out what these things are The most shared-cache-friendly requests will be non-SSL GET requests with no or very predictable query parameters, no cookies, and no authorization headers. Private caching (eg within a supporting user-agent) could still be friendly to SSL and auth'd GET requests. We kind of expect that the most frequent hits from clients will be GETs for a few common timelines, with auth headers, a since_id-only query, and no cookies. These should at least be amenable to returning 304 matches for etags or last-modified headers with private caching, but it's very possible that most clients won't actually think to save and send them. That would leave us expecting to handle a lot of timeline since_id hits that return a valid API response with no notices. At this point we don't expect to actually see if-match or if-modified-since a lot since most of our API responses are marked as uncacheable; so even if we output them they're not getting sent back to us. Random subsampling can be enabled by setting the 'frequency' parameter smaller than 1.0: addPlugin('ApiLogger', array( 'frequency' => 0.5 // Record 50% of API hits )); | |||
2010-10-28 | Update translator documentation. | Siebrand Mazeland | |
2010-10-28 | i18n/L10n updates and superfluous whitespace removed. | Siebrand Mazeland | |
2010-10-28 | * Superfluous whitespace removed. | Siebrand Mazeland | |
* i18n review (no changes needed). | |||
2010-10-28 | * i18n/L10n fixes. | Siebrand Mazeland | |
* translator documentation updated. * superfluous whitespace removed. | |||
2010-10-28 | * i18n/L10n fixes. | Siebrand Mazeland | |
* translator documentation updated. * superfluous whitespace removed. | |||
2010-10-27 | Merge branch 'nofollowexternallink' into 0.9.x | Evan Prodromou | |
Conflicts: lib/default.php | |||
2010-10-27 | Enable Strict Transport Security plugin by default | Craig Andrews | |
2010-10-27 | use library function to determine if https should be used for recaptcha | Craig Andrews | |
2010-10-27 | Load MS Virtual Earth javascript over https when browsing in https | Craig Andrews | |
2010-10-26 | Use https for gravatars | Craig Andrews | |
No reason not to use https, and doing so prevents mixed content warnings when the avatars are used on https pages. | |||
2010-10-26 | add StrictTransportSecurity plugin | Craig Andrews | |
2010-10-26 | Set cookies with "secure" flag on SSL sites. Improves security.testing | Craig Andrews | |
2010-10-26 | Fix OAuth verifier display page title and msgs for i18n | Zach Copley | |
2010-10-26 | UI on profile settings page to opt out of following everyone | Evan Prodromou | |
2010-10-26 | flag to let users opt out of following everyone | Evan Prodromou | |
2010-10-26 | Plugin to follow all new users by default | Evan Prodromou | |
2010-10-26 | can't subscribe to blacklisted domains/users | Evan Prodromou | |
2010-10-26 | Blacklist plugin checks PuSH and Salmon notices | Evan Prodromou | |
2010-10-26 | userrole.php will take a profile id for remote profiles | Evan Prodromou | |
2010-10-25 | readme: release candidate 0.9.60.9.6rc1 | Brion Vibber | |
2010-10-25 | Merge commit 'refs/merge-requests/2223' of ↵ | Zach Copley | |
git://gitorious.org/statusnet/mainline into integration | |||
2010-10-25 | Updated mustard description and link | Michele macno Azzolari | |
2010-10-25 | Supress header, footer, sidebar on OAuth verifier pin page when in "desktop" ↵ | Zach Copley | |
mode | |||
2010-10-25 | Merge branch '1.0.x' into schema-x | Brion Vibber | |
Conflicts: plugins/CacheLog/locale/nb/LC_MESSAGES/CacheLog.po | |||
2010-10-25 | Merge branch '0.9.x' into 1.0.x | Brion Vibber | |
Conflicts: actions/subscriptions.php lib/router.php lib/xmppmanager.php lib/xmppoutqueuehandler.php | |||
2010-10-25 | Base theme styling for oauth pin and desktop mode. | Samantha Doherty | |
2010-10-25 | Forgot to add the OAuth verifier pin page to sensitive array | Zach Copley | |
2010-10-25 | We don't need to have editapplication (only showapplication) in the | Zach Copley | |
sensitive array because it doesn't expose the consumer keypair | |||
2010-10-25 | Add OAuth token exchange endpoint to 'sensitive' array; i.e.: use SSL if | Zach Copley | |
available | |||
2010-10-25 | Add special CSS classes to OAuth authorization and pin pages when | Zach Copley | |
in desktop mode | |||
2010-10-25 | Less scary OAuth authorization messages when using anonymous consumer | Zach Copley | |
2010-10-25 | max_id is inclusive | Evan Prodromou | |
2010-10-25 | change max_id from < to <= | Evan Prodromou | |
2010-10-23 | Localisation updates from http://translatewiki.net. | Siebrand Mazeland | |
2010-10-23 | * onPluginVersion added. | Siebrand Mazeland | |
* i18n fix: use _m() in plugins, don't use _() * some translator documentation added. * superfluous whitespace removed. | |||
2010-10-23 | * translator documentation added. | Siebrand Mazeland | |
* superfluous whitespace removed. |