markzz/aurweb.git/web, branch v2.3.0

Release 2.3.0

2013-09-02T11:26:33Z

Signed-off-by: Lukas Fleischer

Specify charset in Content-Type header when returning JSON data from API.

2013-09-01T22:29:58Z

Signed-off-by: Lukas Fleischer

Only include current TUs in the last votes list

2013-08-27T23:52:40Z

Do not show users that took part in past TU votes but no longer have TU powers. Also, fix the sorting column while we're touching these lines. Signed-off-by: Lukas Fleischer

Move package comment check to packages.php

2013-08-27T09:35:26Z

Checking whether to add a comment is something that really does not belong to a function named display_package_details(). Signed-off-by: Lukas Fleischer

Use POST-Redirect-GET for most package actions

2013-08-27T09:25:14Z

Avoid showing a POST data resubmission dialog and simply redirect to the package page if a package action completed successfully. Signed-off-by: Lukas Fleischer

Add boolean return values to several pkg_*() functions

2013-08-27T09:19:45Z

Change the return values of following functions to return both error/success and an error/success message: * pkg_flag() * pkg_unflag() * pkg_adopt() * pkg_vote() * pkg_delete() * pkg_notify() * pkg_delete_comment() * pkg_change_category() Signed-off-by: Lukas Fleischer

Exclude running votes from "Last Votes by TU"

2013-08-27T08:52:38Z

Showing running votes potentially allows for tracking votes and associating yes/no/abstain votes with specific TUs. Signed-off-by: Lukas Fleischer

Pick sane default registration language

2013-08-27T00:42:19Z

Instead of defaulting to Català (which is the first entry in the list of supported languages), choose whatever language the unregistered user is browsing the AUR in. Fixes FS#34825. Suggested-by: canyonknight Signed-off-by: Lukas Fleischer

Re-add CRSF tokens to most package actions

2013-08-27T00:27:19Z

We fixed all known CRSF vulnerabilities in commit 2c93f0a (Implement token system to fix CSRF vulnerabilities, 2012-06-23). c349cb2 (Add virtual path support for package actions, 2012-07-17) partly reverted this by injecting a valid CRSF token when virtual paths are in use. This patch allows for keeping the virtual path feature, while reintroducing POST forms and CRSF tokens. Actions like package flagging, votes and notifications are no longer prone to CRSF (see FS#35437 for details). Signed-off-by: Lukas Fleischer

pkg_details: Convert most action links to forms

2013-08-27T00:10:13Z

Use forms and POST instead of GET for following actions: * Flagging/Unflagging a package out-of-date * Voting for a package and removing votes * Enabling/Disabling notifications Use CSS to make the submit buttons of these forms look like links. Signed-off-by: Lukas Fleischer