summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-10-28Merge branch '1.0.x' into schema-xBrion Vibber
Conflicts: plugins/CacheLog/locale/nb/LC_MESSAGES/CacheLog.po
2010-10-28Merge branch '0.9.x' into 1.0.xBrion Vibber
2010-10-28Merge remote branch 'origin/0.9.x' into 0.9.xBrion Vibber
2010-10-29Localisation updates from http://translatewiki.netSiebrand Mazeland
2010-10-28Merge branch 'master' into 0.9.xBrion Vibber
2010-10-28Kill a ping queue item if we get an error on loading up the notice's ↵Brion Vibber
poster's profile, rather than letting the item be retried over and over as if it were a transitory error. This shouldn't generally happen as it's an indicator of database inconsistency, but it's a condition we know happens.
2010-10-28Fix for regression: fatal error on group page display when not logged in.Brion Vibber
Bug was introduced with group deletion feature.
2010-10-28fall back to siteowner on bad nickname (Bug#2861)Evan Prodromou
2010-10-28Merge branch '0.9.x' of gitorious.org:statusnet/mainline into 0.9.xBrion Vibber
2010-10-28Tweak for OAuth headers not seen in $_SERVERBrion Vibber
2010-10-28Merge branch '0.9.x' of git://gitorious.org/statusnet/mainline into 0.9.xSiebrand Mazeland
2010-10-28Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-27Merge branch 'instrument' into 0.9.xBrion Vibber
2010-10-27ApiLogger plugin: dumps some information about API hits to aid in ↵Brion Vibber
researching future HTTP-level cachability improvements. Data are sent to the 'info' level of logging, like so: [lazarus.local:4812.86b23603 GET /mublog/api/statuses/friends_timeline.atom?since_id=1353] STATLOG action:apitimelinefriends method:GET ssl:no query:since_id cookie:no auth:yes ifmatch:no ifmod:no agent:Appcelerator Titanium/1.4.1 (iPhone/4.1; iPhone OS; en_US;) Fields: * action: case-normalized name of the action class we're acting on * method: GET, POST, HEAD, etc * ssl: Are we on HTTPS? 'yes' or 'no' * query: Were we sent a query string? 'yes', 'no', or 'since_id' if the only parameter is a since_id * cookie: Were we sent any cookies? 'yes' or 'no' * auth: Were we sent an HTTP Authorization header? 'yes' or 'no' * ifmatch: Were we sent an HTTP If-Match header for an ETag? 'yes' or 'no' * ifmod: Were we sent an HTTP If-Modified-Since header? 'yes' or 'no' * agent: User-agent string, to aid in figuring out what these things are The most shared-cache-friendly requests will be non-SSL GET requests with no or very predictable query parameters, no cookies, and no authorization headers. Private caching (eg within a supporting user-agent) could still be friendly to SSL and auth'd GET requests. We kind of expect that the most frequent hits from clients will be GETs for a few common timelines, with auth headers, a since_id-only query, and no cookies. These should at least be amenable to returning 304 matches for etags or last-modified headers with private caching, but it's very possible that most clients won't actually think to save and send them. That would leave us expecting to handle a lot of timeline since_id hits that return a valid API response with no notices. At this point we don't expect to actually see if-match or if-modified-since a lot since most of our API responses are marked as uncacheable; so even if we output them they're not getting sent back to us. Random subsampling can be enabled by setting the 'frequency' parameter smaller than 1.0: addPlugin('ApiLogger', array( 'frequency' => 0.5 // Record 50% of API hits ));
2010-10-28Update translator documentation.Siebrand Mazeland
2010-10-28i18n/L10n updates and superfluous whitespace removed.Siebrand Mazeland
2010-10-28* Superfluous whitespace removed.Siebrand Mazeland
* i18n review (no changes needed).
2010-10-28* i18n/L10n fixes.Siebrand Mazeland
* translator documentation updated. * superfluous whitespace removed.
2010-10-28* i18n/L10n fixes.Siebrand Mazeland
* translator documentation updated. * superfluous whitespace removed.
2010-10-27Merge branch 'nofollowexternallink' into 0.9.xEvan Prodromou
Conflicts: lib/default.php
2010-10-27Enable Strict Transport Security plugin by defaultCraig Andrews
2010-10-27use library function to determine if https should be used for recaptchaCraig Andrews
2010-10-27Load MS Virtual Earth javascript over https when browsing in httpsCraig Andrews
2010-10-26Use https for gravatarsCraig Andrews
No reason not to use https, and doing so prevents mixed content warnings when the avatars are used on https pages.
2010-10-26add StrictTransportSecurity pluginCraig Andrews
2010-10-26Set cookies with "secure" flag on SSL sites. Improves security.testingCraig Andrews
2010-10-26Fix OAuth verifier display page title and msgs for i18nZach Copley
2010-10-26UI on profile settings page to opt out of following everyoneEvan Prodromou
2010-10-26flag to let users opt out of following everyoneEvan Prodromou
2010-10-26Plugin to follow all new users by defaultEvan Prodromou
2010-10-26can't subscribe to blacklisted domains/usersEvan Prodromou
2010-10-26Blacklist plugin checks PuSH and Salmon noticesEvan Prodromou
2010-10-26userrole.php will take a profile id for remote profilesEvan Prodromou
2010-10-25readme: release candidate 0.9.60.9.6rc1Brion Vibber
2010-10-25Merge commit 'refs/merge-requests/2223' of ↵Zach Copley
git://gitorious.org/statusnet/mainline into integration
2010-10-25Updated mustard description and linkMichele macno Azzolari
2010-10-25Supress header, footer, sidebar on OAuth verifier pin page when in "desktop" ↵Zach Copley
mode
2010-10-25Merge branch '1.0.x' into schema-xBrion Vibber
Conflicts: plugins/CacheLog/locale/nb/LC_MESSAGES/CacheLog.po
2010-10-25Merge branch '0.9.x' into 1.0.xBrion Vibber
Conflicts: actions/subscriptions.php lib/router.php lib/xmppmanager.php lib/xmppoutqueuehandler.php
2010-10-25Base theme styling for oauth pin and desktop mode.Samantha Doherty
2010-10-25Forgot to add the OAuth verifier pin page to sensitive arrayZach Copley
2010-10-25We don't need to have editapplication (only showapplication) in theZach Copley
sensitive array because it doesn't expose the consumer keypair
2010-10-25Add OAuth token exchange endpoint to 'sensitive' array; i.e.: use SSL ifZach Copley
available
2010-10-25Add special CSS classes to OAuth authorization and pin pages whenZach Copley
in desktop mode
2010-10-25Less scary OAuth authorization messages when using anonymous consumerZach Copley
2010-10-25max_id is inclusiveEvan Prodromou
2010-10-25change max_id from < to <=Evan Prodromou
2010-10-23Localisation updates from http://translatewiki.net.Siebrand Mazeland
2010-10-23* onPluginVersion added.Siebrand Mazeland
* i18n fix: use _m() in plugins, don't use _() * some translator documentation added. * superfluous whitespace removed.
2010-10-23* translator documentation added.Siebrand Mazeland
* superfluous whitespace removed.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-08-25 05:03:17 +0000