github: shadowy octopus with the head of a robot, emblazoned with the Dreamwidth swirl (Default)
github ([personal profile] github) wrote in [site community profile] changelog2017-03-29 08:45 pm

[dreamwidth/dw-free] 2122dc: [#2034] use %LJ::KNOWN_HTTPS_SITES for simple whit...

Branch: refs/heads/develop
Home: https://github.com/dreamwidth/dw-free
Commit: 2122dc8f89aa547bf3962232ddefc34eaef699f1
https://github.com/dreamwidth/dw-free/commit/2122dc8f89aa547bf3962232ddefc34eaef699f1
Author: Kareila <kareila@dreamwidth.org>
Date: 2017-03-21 (Tue, 21 Mar 2017)

Changed paths:
M cgi-bin/LJ/CleanHTML.pm
M etc/config-local.pl
M t/https-url.t

Log Message:
-----------
[#2034] use %LJ::KNOWN_HTTPS_SITES for simple whitelist

Replaces regular expression in config with a list of domains
that support HTTPS connections, and tests the domain of the
given URL against that whitelist.

Also updates https-url.t with a working dummy proxy config.

Fixes #2034.


Commit: 5fba7e8d809fd73d98c390b536ea4d84935313cb
https://github.com/dreamwidth/dw-free/commit/5fba7e8d809fd73d98c390b536ea4d84935313cb
Author: Kareila <kareila@dreamwidth.org>
Date: 2017-03-21 (Tue, 21 Mar 2017)

Changed paths:
M cgi-bin/LJ/CleanHTML.pm

Log Message:
-----------
anchor the regular expression

I would prefer to keep this as a one-line expression instead of
using split and join to reconstruct the domain name, since we
can't be sure we've been given a well-formed URL to work with.


Commit: 49244aaf3398155ed8d4c7f47152b4e2ae7bf779
https://github.com/dreamwidth/dw-free/commit/49244aaf3398155ed8d4c7f47152b4e2ae7bf779
Author: Mark Smith <mark@qq.is>
Date: 2017-03-29 (Wed, 29 Mar 2017)

Changed paths:
M cgi-bin/LJ/CleanHTML.pm
M etc/config-local.pl
M t/https-url.t

Log Message:
-----------
Merge pull request #2042 from kareila/2034-sslsites

[#2034] use %LJ::KNOWN_HTTPS_SITES for simple whitelist


Compare: https://github.com/dreamwidth/dw-free/compare/5283f6f69fd5...49244aaf3398