<feed xmlns='http://www.w3.org/2005/Atom'>
<title>markzz/aurweb.git/web/template, branch v2.2.1</title>
<subtitle>aurweb working repository</subtitle>
<id>https://git.markzz.net/markzz/aurweb.git/atom/web/template?h=v2.2.1</id>
<link rel='self' href='https://git.markzz.net/markzz/aurweb.git/atom/web/template?h=v2.2.1'/>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/'/>
<updated>2013-03-19T13:03:34Z</updated>
<entry>
<title>Enforce e-mail validation during registration</title>
<updated>2013-03-19T13:03:34Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2013-03-19T12:44:08Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=f1a4b508e57879e2c17feded54f0d1b82ae54d2b'/>
<id>urn:sha1:f1a4b508e57879e2c17feded54f0d1b82ae54d2b</id>
<content type='text'>
Remove the password field from the account creation form and always send
a password reset request via e-mail instead. This ensures that only
users with valid e-mail addresses are able to login.

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Fix default selection on the account edit page</title>
<updated>2013-02-10T11:11:36Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2012-11-18T09:21:51Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=21e6c3f65ff4b0daeac75d6d66dcdd33fb98d646'/>
<id>urn:sha1:21e6c3f65ff4b0daeac75d6d66dcdd33fb98d646</id>
<content type='text'>
We used a mixture of account type IDs and account type descriptions on
the account edit page. This resulted in the account type field always
defaulting to "Normal user" after an invalid form had been submitted.

Consistently use account type IDs to avoid this.

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Merge branch 'maint'</title>
<updated>2013-01-30T08:25:42Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2013-01-30T08:25:42Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=8b791dee91bef312a0c3d06a8b77a5363720a88e'/>
<id>urn:sha1:8b791dee91bef312a0c3d06a8b77a5363720a88e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pkg_details.php: Add missing translatable string</title>
<updated>2013-01-30T08:25:27Z</updated>
<author>
<name>canyonknight</name>
<email>canyonknight@gmail.com</email>
</author>
<published>2013-01-22T02:14:56Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=e4ad05533f2929bc8291923a8d4bef1c8fc55675'/>
<id>urn:sha1:e4ad05533f2929bc8291923a8d4bef1c8fc55675</id>
<content type='text'>
Signed-off-by: canyonknight &lt;canyonknight@gmail.com&gt;
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Merge branch 'maint'</title>
<updated>2013-01-19T11:21:26Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2013-01-19T11:21:26Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=49e61845085aff6076a3dde056d08a278f447e6d'/>
<id>urn:sha1:49e61845085aff6076a3dde056d08a278f447e6d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>user_table.php: Remove unused link parameter</title>
<updated>2013-01-19T11:21:12Z</updated>
<author>
<name>canyonknight</name>
<email>canyonknight@gmail.com</email>
</author>
<published>2013-01-14T21:24:50Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=d23a8706716415ecd5a51e93c8cb2b0d69056f03'/>
<id>urn:sha1:d23a8706716415ecd5a51e93c8cb2b0d69056f03</id>
<content type='text'>
Signed-off-by: canyonknight &lt;canyonknight@gmail.com&gt;
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>We live in 2013 now</title>
<updated>2013-01-19T11:20:50Z</updated>
<author>
<name>Marcel Korpel</name>
<email>marcel.lists@gmail.com</email>
</author>
<published>2013-01-06T13:34:06Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=398fdb67ead0dd0fe82a9983f6aa0c99f322d806'/>
<id>urn:sha1:398fdb67ead0dd0fe82a9983f6aa0c99f322d806</id>
<content type='text'>
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Add description meta-element to package pages</title>
<updated>2013-01-19T11:18:13Z</updated>
<author>
<name>Marcel Korpel</name>
<email>marcel.lists@gmail.com</email>
</author>
<published>2013-01-09T17:41:33Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=8e1051932eb86ef87f7b64efc86f50e633201b56'/>
<id>urn:sha1:8e1051932eb86ef87f7b64efc86f50e633201b56</id>
<content type='text'>
Implements FS#33294

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>pkg_details.php: Fix potential XSS for package names and dep conditions</title>
<updated>2012-11-06T23:59:28Z</updated>
<author>
<name>canyonknight</name>
<email>canyonknight@gmail.com</email>
</author>
<published>2012-11-06T22:13:45Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=4161e147969a3445ffd84dcd10b99baaee523bce'/>
<id>urn:sha1:4161e147969a3445ffd84dcd10b99baaee523bce</id>
<content type='text'>
Package names and dep conditions can be specially crafted for an XSS
attack. Properly sanitize these variables on the package details page.

In addition, avoid including dep conditions as part of a package link.

Signed-off-by: canyonknight &lt;canyonknight@gmail.com&gt;
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Avoid use of "$_SERVER['REQUEST_URI']"</title>
<updated>2012-11-04T18:19:32Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2012-11-04T18:13:03Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=630f1cbae8473fb05e5f5af7244eccc60fe93812'/>
<id>urn:sha1:630f1cbae8473fb05e5f5af7244eccc60fe93812</id>
<content type='text'>
Use the routing library to build proper URIs instead of relying on the
"REQUEST_URI" server variable which can be manipulated and might return
bogus URIs.

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
</feed>
