github: shadowy octopus with the head of a robot, emblazoned with the Dreamwidth swirl (Default)
github ([personal profile] github) wrote in [site community profile] changelog2017-03-29 08:45 pm

[dreamwidth/dw-free] 2122dc: [#2034] use %LJ::KNOWN_HTTPS_SITES for simple whit...

Branch: refs/heads/develop
Home: https://github.com/dreamwidth/dw-free
Commit: 2122dc8f89aa547bf3962232ddefc34eaef699f1
https://github.com/dreamwidth/dw-free/commit/2122dc8f89aa547bf3962232ddefc34eaef699f1
Author: Kareila <kareila@dreamwidth.org>
Date: 2017-03-21 (Tue, 21 Mar 2017)

Changed paths:
M cgi-bin/LJ/CleanHTML.pm
M etc/config-local.pl
M t/https-url.t

Log Message:
-----------
[#2034] use %LJ::KNOWN_HTTPS_SITES for simple whitelist

Replaces regular expression in config with a list of domains
that support HTTPS connections, and tests the domain of the
given URL against that whitelist.

Also updates https-url.t with a working dummy proxy config.

Fixes #2034.


Commit: 5fba7e8d809fd73d98c390b536ea4d84935313cb
https://github.com/dreamwidth/dw-free/commit/5fba7e8d809fd73d98c390b536ea4d84935313cb
Author: Kareila <kareila@dreamwidth.org>
Date: 2017-03-21 (Tue, 21 Mar 2017)

Changed paths:
M cgi-bin/LJ/CleanHTML.pm

Log Message:
-----------
anchor the regular expression

I would prefer to keep this as a one-line expression instead of
using split and join to reconstruct the domain name, since we
can't be sure we've been given a well-formed URL to work with.


Commit: 49244aaf3398155ed8d4c7f47152b4e2ae7bf779
https://github.com/dreamwidth/dw-free/commit/49244aaf3398155ed8d4c7f47152b4e2ae7bf779
Author: Mark Smith <mark@qq.is>
Date: 2017-03-29 (Wed, 29 Mar 2017)

Changed paths:
M cgi-bin/LJ/CleanHTML.pm
M etc/config-local.pl
M t/https-url.t

Log Message:
-----------
Merge pull request #2042 from kareila/2034-sslsites

[#2034] use %LJ::KNOWN_HTTPS_SITES for simple whitelist


Compare: https://github.com/dreamwidth/dw-free/compare/5283f6f69fd5...49244aaf3398

Post a comment in response:

This account has disabled anonymous posting.
If you don't have an account you can create one now.
HTML doesn't work in the subject.
More info about formatting

If you are unable to use this captcha for any reason, please contact us by email at support@dreamwidth.org