values passed to sqlno commands suppliedhould be sanitized怎么办

Difference:
Introduction &&TWiki Release 4.2.0 is a minor release. TWiki releases are either major (major new features and changes in architecture), minor (enhancements and bug fixes), or patch releases (bug fixes only) which can be installed as upgrades on production installations.&&TWiki 4.2.0 was released 22 Jan 2008 and introduced some hot new features that make TWiki a better user experience for both beginners and experienced application developers. It also contained quite a number of bugfixes since 4.1.2.&&&TWiki Release 4.2.0 introduces some good enhancements and quite many bug fixes since 4.1.2.&&TWiki 4.2.1 is a patch release which only contains bug fixes. More than 150 bugs have been fixed since the release of 4.2.1 in all areas of TWiki.&&&The development team has done everything to maintain full compatibility with topics generated in TWiki-4.0 and there are no changes to the topic format when using normal TWikiUserMapping&&It is highly recommended to upgrade TWiki 4.2.0 to 4.2.1. Users will find the 4.2.1 much more stable in daily use.&
Pre-installed Extensions &&TWiki 4.2.0 is shipped with&&TWiki 4.2.1 is shipped with&
Plugins: CommentPlugin, EditTablePlugin, EmptyPlugin, InterwikiPlugin, PreferencesPlugin, RenderListPlugin, SlideShowPlugin, SmiliesPlugin, SpreadSheetPlugin, TablePlugin, TinyMCEPlugin, TwistyPlugin, WysiwygPlugin
Contribs: BehaviourContrib, JSCalendarContrib, MailerContrib, TipsContrib, TWikiUserMappingContrib, TwistyContrib
Table of Content (TOC) feature enhanced
User Mapping (mapping between login name and WikiName) code has been extended to allow pluggable modules to integrate with all sorts of alternative authentication and Management schemes. For normal cases you use the default TWikiUserMapping which is using the Main.TWikiUsers topic to map between login and WikiName. A new BaseUserMapping is provided for TWikis where you only have guests and an administrator. In this case you use the login and password given in configure to login as an admin.
&& Important Changes since 4.2.0
Perl 5.8 is now minimum requirement with Wysiwyg
In TWiki 4.2.1 the support of international characters has been improved. Especially when using the Wysiwyg editor. This requires that perl internally works with unicode and that the Encode CPAN lib is installed. For this reason Perl 5.8.X is required for Wysiwyg support. TWiki will run with perl 5.6.1 if WysiwygPlugin is disabled.
TWiki now installs and works with Perl 5.10.0.
Newer distributions of Linux now ships with Perl 5.10.0. TWiki has been tested with Perl 5.10.0 and it should work fine. If the CGI library is version 3.37 you will need to update it to a newer version as the 3.37 contains some fatal bugs. Simply updating your perl using the standard update feature in your distribution may be enough to cure this problem.
The RCS files in subdirectories feature removed
The feature related to the config option TWiki::cfg{RCS}{useSubDir} has been removed. It never really worked and there are all sorts of issues related to it with respect to distribution of extensions and packaged applications, and it does not really add any performance advantages. So instead of trying to repair a bad feature that never really worked it was decided to remove it.
The removal was announced in a news letter and in a proposal topic, and discussed at several release meetings, and noone objected against its removal.
If you have run TWiki with this feature (maybe with a self implemented fix of the code) you will need to simply copy all the ,v files in all RCS directories to the directory above (where you find the .txt file or the attached filed) when you upgrade to 4.2.1.
The Japanese language file has been renamed
We decided to rename the locale/jp.po to locale/ja.po to match the rule that the file has the same name as the code for the locale.
For those using the Japanese language file you need to do the following if you upgrade TWiki
Delete the old jp.po file
Delete the locale/languages.cache file (it gets recreated by TWiki first time it runs with language files)
Rename the entry $TWiki::cfg{Languages}{jp}{Enabled} = 1; in the lib/LocalSite.cfg to $TWiki::cfg{Languages}{ja}{Enabled} = 1;
Highlights of bug fixes since 4.2.0
Much more stable Wysiwyg editor
Better support for non-English characters
Better handling of bullet points
Pickaxe feature which enables quick swap between Wysiwyg and raw edit is more stable
Attachment of files within Wysiwyg editor working better
Linking feature fixed
More stable EditTablePlugin
Better support for UTF8 though UTF8 is still regarded as experimental and features such as wiki words do not work with non-english characters. UTF8 will be a good choice for languages such as Chinese, Japanese and Korean
Better support for non English charsets
Easier configuration of language settings in configure
Renaming of webs much improved
Compatibility with perl 5.10
Fixes related to mandatory fields in forms
Universal edit button with Firefox extension
Access controls using login ID instead of wikiname which was broken in 4.2.0 works again
Search features have had a few bugs fixed
Several bugs related to attaching files have been fixed
Some cross site scripting possibilities have been eliminated
Plugins that uses beforeAttachmentSaveHandler now works stable (e.g. BlackListPlugin)
The feature of having RCS files (the ,v file) in a separate directory never worked. Feature has now been removed as it really does not give any advantages.
User mapping feature improved to ensure 1:1 mapping between canonical user ID and login ID which is important for security
See the full list of bug fixes at the bottom of this topic.& Important Changes since 4.1.2
New WYSIWYG Editor &
TWiki 4.2.0 Minor Release - Details &&The 4.2.0 release was built from SVN
revision 16278 (22 Jan 2008). &&The 4.2.0 release was built from SVN
revision 17311 (04 Aug 2008). &
When using SERVERTIME with $week in template TWIki fails on missing CPAN lib dependency
adding missing docs for NEWLINKFORMAT - introduced in 2006
speed re-enhancements
EDITTABLE with a simple text input in which the user has put
gets trunkated at the first BR
EDITTABLE with a simple text input in which the user has put %BR gets trunkated at the first BR
missing fetchUsers method in Password.pm
Performance: Copy hash
error link mailto
configure not honoring $TWiki::cfg{ScriptUrlPath}
: make buttons customizable and translatable
: undefined textarea size gives error in log
textarea bug!
EditTablePlugin textarea bug!
Installation process SNAFU if you don't set a configure PW
viewauth redirect loops to death when Main and TWiki webs both are view denied for TWikiGuest
EditPreferences of Main.TWikiPreferences broken
%INCLUDE breaks enumeration/tables when included topic has file attachments
Paragraphs not correctly handled
Patch for improper replacing of "0" with "" (empty string) in URLPARAM default value
causes an internal server error
%VAR causes an internal server error
HTMl embedded in lists breaks the translator
Empty bullets get a
Empty bullets get a br tag.
Error saving topic message not shown as code because of trailing space
Access check based on getWikiUserName (fails) vs. getWikiName (succeeds)
Add a note about adding a doc license to footer when installing TWiki
mentions geturl.pl, but does not point out the authentication problems with it
USERINFO{format="$groups"} always returns webDotWikiName identifiers
Cannot move attachment to topic with non-wikiword name
are not updated during page renames
bracket links are not updated during page renames
NativeSearch: give gentle warning when no parameters are passed to test.pl
Table rules for columns are invisible in Internet explorer
Document INCLUDE behaviour in TWikiAccessControl
configure needs a backlink to the TWiki/WebHome
&& TWiki 4.2.1 Minor Release - Details
The 4.2.1 release was built from SVN
revision 17311 (04 Aug 2008).
Make query search ref more clear in VarSEARCH.
REVINFO shows unknown user instead of the author value when it cannot map.
ApacheHtpasswdUser compile error
shortcircuit TWiki::_processTags shortpath for 10-30% TWiki render speed improvement
Forking search result collation regex can cause many spurious log entries
ResetPassword/ChangePassword combo "Oops: we could not recognize you"
regex SEARCH on Native Windows crashes when there are [^] chars or mismatched "s in the regex.
Automatic statistics denied by default server configuration
Edit in ClassicSkin with action=form still displays the text field for the topic
Double header in Classic skin when editing with action=text
EDITACTION only works on Edit but not Edit Raw
EDITACTION parameter does get replaced properly in the changeform templates if combined with setting EDITACTION
improved the security of the password generated for resetPassword
Adding MD5 Password Feature
Document that 4.2.1 with Wysiwyg will no longer work with Perl 5.6
%IF in a set statement fails
TWiki.InstalledPlugins lists Contribs and AddOns but no Skins
urlHost field initialized too late in TWiki::new
SubscribePlugin and perl 5.8.4 exposes a taint issue in the latest MailerContrib
potential dataloss bug in EditTablePlugin 4.8.2
LOCAL_SEARCH does expand nop'ed TML
don't rely on the author info being present in attachment meta data
square bracket url links don't escape their contents well enough
improve TemplateOopsAttentionNotFound message
MailerContrib cannot run multiple instances at the same time (document this fact)
base and current revisions reversed in diff URL of MailerContrib notify message
When renaming webs you get a File does not exist .. twiki_renamedelete.js
Easy to goof up web renaming because the default new webname includes subweb.
REVTITLE isn't rendered except on rdiff
twiki_httpd_conf.txt is inconsistent in the paths it has as default.
configure and perl 5.10 dies with Use of uninitialized value $filename in substitution (s///) at (eval 41) line 23
Changing a form when the old form has mandatory fields which are empty causes bogus error
Editing in Classic skin gives missing Save and Cancel buttons
When you Edit Raw and then add form you end up in Wysiwyg edit mode
TinyMCE not honouring Template Topic in special cases.
universal edit button work
Registration of Zyc ends in the end of TWiki users instead of the last entry in list of users
Putting setting with empty value in 'Topic Preference' interface does not work.
tempatetopic not implemented as per the docco in TWikiScripts
Chinese is fail on newest TinyMCEPlugin / WysiwygPlugin
Documentation of eachChangeSince uses $iterator and $it
TWikiScripts docco for formtemplate is missing details.
META tag does not show form field data in 4.2
IF and Query have problems if some part of an evaluated statement is undef
twiki form Hidden Labels aren't being hidden in view mode.
Named jp.po to ja.po to match locale. Fixed the translation of the word Japanese
CGI::charset called in BEGIN{} breaks mod_perl preloading of TWiki.pm
Query and IF info.version value is not compatible with the common external representation of topic revision
INCLUDE{"WebHome" section=""} returns nothing.
LINKTOOLTIPINFO format cannot be changed
REVINFO with topic= set to a non-existant topic returns stupid values.
readdir/closedir attempted on invalid dirhandle on perl-5.10
Main Web preferences lists nonexistant topic in WEBFORM
Documentation mistakes in TWikiFuncDotPm/saveTopic
moveAttachment creates duplicates when topic/web are the same as the source
WebStatistics topic was linking to the massive TWikiDocumentation topic
spooling erra's in the WebNotify topics
registration email does not explicitly tell the user what their login is.
Image and Attachment references are trashed when using short URLs
Encoding problem with iso-8859 and umlauts
Jumping text with blockindent on IE
Core: edit window no longer has focus on load
ActionTracker with CommentPlugin order Dependencies
Selecting "All Public Webs" option not sticking in UI
Bug in lib/TWiki/Prefs/PrefsCache.pm (CGI::H3 should be CGI::h3)
Web Rename not following ALLOWWEBRENAME Preference
registerHandler should be called once per registration
default skin search template is broken for webchanges
raw=on broken on topics with a view_template
INCLUDE of attached HTML files fails in subwebs
Query type Search does not report with large number of topics
TWikiJavascript does not enable partial js usage.
it appears that BuildContrib defaults all unspecified permissions to 664?
Missuse of sort and loops
"action" parameter for "edit" script fail in 4.2
After you enable {UserInterfaceInternationalisation} first view shows an error
TWikiUserMapping: single character erroneously reported as a group
robots.txt is missing some obvious scripts - like login
IF{"$BANNER" does not really work.
missing contexts for several bin scripts
tmpl login script does not do writeCompletePage, so it does not get addToHEAD bits.
SEARCHes of type word do not work if word is non-English and with TWiki running utf-8
WebSearch link "Get notified on changes on this search" breaks when search string contains quote
"URLPARAM{" in Comment Box when type="bulletabove"
Wrong call $session-&{i18n}
LanguageSelector javascript breaks on topic names with underscores
suppressTWikiSaveValidation and validateTWikiMandatoryFields Javascript errors in IE and Firefox
IF & query String matching may be incorrectly greedy.
IF allows does not work correctly if the topic does not exist.
TWiki::UI::Resister::changePassword sends login, not cUID to TWiki::Users::setPassword
add twikiBroadcastMessage class div to default & classic skins
FileAttachment documentation fix - {AutoAttachPubDir} should read {AutoAttachPubFiles}
%REVTITLE2% not substituted in RDiff.pm
Personal left bar is potentially buggy in layout
Pickaxe saves absolute URL instead of ATTACHURL
default and classic search.tmpl's have one table per topic result
Hide Attachment option does not work
default skin does not show the form attached to the topic.
Rename web drop all link refer to the web
TinyMCE breaks Cyrillic Encoding (cp1251 or KOI8-R)
MailInContrib reveals error in Password.pm, that has been carried over to LdapContrib
MailInContrib docs refer to bin/mailincron but actually its in tools
TWiki::Sandbox::sysCommand leaves an extra process if command fails
If manage requires login, impossible to change password
Searches order="editby" are sorted by login ID (cUID) instead of WikiName making result look random
Image links inserted with Manage Attachment only work with lower case file extension
Register.pm redirects to TWikiUsers topic on error, even though that topic may not exist
reset password message has some errors
Topic save error with form does not remove nop
RSS feeds failing due to newlines at top of page.
readme.txt refers to missing 'install instructions' TWikiDocumentation.html
"You are trying to templatetopic a topic that does not exist" makes no sense
WebSearchAdvanced does not regex search when you select that it should
TWikiHierarchicalNavigation seach broken
DISPLAYTIME documentation improved
Adding bullet right after a heading adds annoying html paragraph tags
Issue with multi-span rows and the EditRowPlugin / TablePlugin
TWiki.pm sets wrong urlHost if https protocol and ShorterUrlCookbook is used
Comment regarding FINALPREFERENCES should also mention subwebs.
Logging in as admin still redirects to main home
PatternSkin small bug fixes and enhancements after 4.2
Can't set parent to none anymore
Attachment uploaded by name not shown as TWiki link in 4.2 for attachments uploaded by TWiki 4.1.2
Oops allows the template url parameter to pass through without filtering.
PHP flag in pub-htaccess.txt is not working with PHP running as CGI
TinyMCE breaks Chinese, Japanese, Korean Unicode Encoding upon entering "Edit Twiki Markup" from WYSIWYG
deep recursion in getEmails()
Plugins with beforeAttachmentSaveHandler break file attachments with TWiki 4.2.0
Wysywig & TinyMCE corrupt some topics.
DATE in TWiki.pm to follow configured displaytime
META tag doesn't call expandStandardEscapes() and crashes (trunk only does not affect 4.2.1)
Linking is totally broken - in 4.2 WikiWord links do not work - in 4.1.2 buttons are disabled
You cannot paste into Wysiwyg in IE unless you are in Intranet security zone (documentation issue)
EditTablePlugin dollar percent expansion does not work well together with SpreadSheetPlugin
Link to Release Notes 4.1 in distribution documentation of 4.2.0
Preview does not set ORIGINALREV and other values in edit.tmpl, so continuing from there has problems
TinyMCE pads bullets incl. "set" variables with trailing spaces breaking some plugins and TWiki apps.
Locales problem in WebNotify.pm and Subscibe.pmI
Image not shown , when inserting image with Image button and not using any path
"save" does not treat bad templatetopic as an error
%SCRIPTSUFFIX is added twice in TOC links
Registration confirmation should contain name, not WikiName
Difference from 4.1.2 - 4.2: Apache loginname no longer works with access control lists
WYSIWYG Line Returns Removed In Opera
Dropdown in TinyMCE help text is confusing
urlDecode() not working for characters represented by Unicode code points
add the other meta field infos to the output of FORMFIELD{format=""}
Removal of RcsDirs feature (was RcsWrap does not support RcsDirs)
Security bug: TWiki's user management code needs rework again
Twisty addToHEAD does not work in login template
%META{"formfield" ....} does not expand
Document effect if INCLUDE on access control settings
Document what happens if access control set more than once
Possible to hijack TOPIC or WEB variable making editing a topic with one of these defined impossible
Simplify I18N configuration
preview of a slideshow is corrupted
Documented that CGI version 2.89 causes character entities to not be escaped in Raw View
Document EDITACTION
Enhancements
None!&&-- Note: Do not use Bugs: interwiki links because interwiki rule might not be defined
Set BUGS =
Introduction
TWiki Release 4.2.0 is a minor release. TWiki releases are either major (major new features and changes in architecture), minor (enhancements and bug fixes), or patch releases (bug fixes only) which can be installed as upgrades on production installations.
TWiki Release 4.2.0 introduces some good enhancements and quite many bug fixes since 4.1.2.
The development team has done everything to maintain full compatibility with topics generated in TWiki-4.0 and there are no changes to the topic format when using normal TWikiUserMapping
Pre-installed Extensions
TWiki 4.2.0 is shipped with
Plugins: CommentPlugin, EditTablePlugin, EmptyPlugin, InterwikiPlugin, PreferencesPlugin, RenderListPlugin, SlideShowPlugin, SmiliesPlugin, SpreadSheetPlugin, TablePlugin, TinyMCEPlugin, TwistyPlugin, WysiwygPlugin
Contribs: BehaviourContrib, JSCalendarContrib, MailerContrib, TipsContrib, TWikiUserMappingContrib, TwistyContrib
Skins: ClassicSkin, PatternSkin
New Features Highlights
Easier Installation and Upgrade
New Internal Admin Login feature. See below.
The Main.TWikiUsers topic is no longer distributed as a default topic in Main. See below.
A new directory working which per default is located in the twiki root which contains registration_approvals, tmp, and work_areas. See below
ResetPassword, ChangePassword, ChangeEmailAddress, and TWikiRegistration no longer contains yellow text that you have to remove.
Configure can now authenticate when connecting to local plugins repository.
Usability Enhancements
New WYSIWYG editor based on TinyMCE replaces the Kupu based editor. See below.
New "Restore topic" feature has been added to the More Topic Actions menu. You can now much more easily restore an older version of a topic including the values a topic form.
Attachment comments no longer has a limit to the length of the text.
The viewfile script now accepts similar simple URL path as used to access a topic. E.g. /twiki/bin/viewfile/TWiki/TWikiDocGraphics/addon.gif means the same as /twiki/bin/viewfile/TWiki/TWikiDocGraphics?filename=addon.gif. This make it simpler to use command line tools like wget in Linux to download attachments.
Application Platform Enhancements
Enhancements to IF: allows, ingroup, istopic, and isweb
Search Enhancements
New query search mode supports SQL-style queries over form fields
and other meta-data.
Skins and Templates Enhancements
The PatternSkin which is the default skin for TWiki has got a face lift.
The template have been heavily refactored. This will break some tailorings and home made skins but it was needed to make it easier to make skins in the future.
Miscellaneous Feature Enhancements
Many new functions in the API for plugin developers.
Table of Content (TOC) feature enhanced
User Mapping (mapping between login name and WikiName) code has been extended to allow pluggable modules to integrate with all sorts of alternative authentication and Management schemes. For normal cases you use the default TWikiUserMapping which is using the Main.TWikiUsers topic to map between login and WikiName. A new BaseUserMapping is provided for TWikis where you only have guests and an administrator. In this case you use the login and password given in configure to login as an admin.
Important Changes since 4.1.2
New WYSIWYG Editor
TWiki now ships with a new WYSIWYG editor based on TinyMCE replaces the Kupu based editor. TinyMCE is not a perfect Wysiwyg editor but it is magnitudes better than the Kupu editor
The WysiwygPlugin that drives the engine behind both TinyMCE has additionally been heavily improved so that less TWiki Applications are negatively affected by editing WYSIWYG
When TinyMCEPlugin is enabled the Edit button per default becomes WYSIWYG editing mode. A new Raw Edit link has been added to enable application developers to edit the good old way
The WYSIWYG button is removed when using TinyMCE instead of Kupu.
NEWTOPICLINKSYMBOL removed
The NEWTOPICLINKSYMBOL preference which was deprecated in 4.1 has now been removed from the code. If you want to control the appearance of new links, you can use the more flexible NEWLINKFORMAT.
UserForm and NewUserTemplate Customization
When a new user registers on TWiki his user topic is created based on the NewUserTemplate and UserForm.
The NewUserTemplate was located in the TWiki web and the UserForm in the Main web. When upgrading TWiki these were some of the topics you had to take care not to overwrite.
From 4.2.0 the UserForm and NewUserTemplate are distributed in the TWiki web. If you create the two in the Main web the Main web version will be used instead. So if you tailor the user topic format or the form then you should always copy the two files to the Main web and modify the ones in the Main web. When you later upgrade TWiki your tailored template and form will not be overwritten.
TWikiUsers no longer distributed
The Main.TWikiUsers topic contains all the registered users. It is a topic you do not want to overwrite when you upgrade TWiki.
From 4.2.0 this file is no longer included in the TWiki distribution. When you register the first time TWiki creates the Main.TWikiUsers topic in the Main web if it does not exist already. This means that you can now upgrade TWiki without risk of overwriting the important TWikiUsers topic.
For new installers this makes no difference at all
For upgraders this is one less problem to worry about as your important Main.TWikiUsers topic now no longer gets overwritten when upgrading.
New working directory
A new directory working which per default is located in the twiki root, has been introduced which contains:
registration_approvals - with 4.2.0 it is moved to here from the data directory)
tmp - so we now avoid having to fight with special access rights and /tmp directory that gets cleaned out when booting.
work_areas - with 4.2.0 it is moved to here from the pub directory. Configure automatically moved the directory when you upgrade.
Note: Remember to restrict access to this new directory when you upgrade.
New Internal Admin Login
TWiki 4.2 introduces a new Internal Admin Login feature which uses "admin" (configurable) as username and the password from configure to become temporary administrator.
When you do a new installation you need to use this feature as Main.TWikiAdminGroup is now access restricted by default to avoid security attacks during the hours an installation may take.
From configure there is a link to the TWikiAdminGroup topic and on TWikiAdminGroup the step by step instructions are written in a yellow box.
Rearchitected User Mapping system (a transperant change for end users)
The User Mapping system has been further rearchitected to reduce its dependance on the traditional TWiki User topic based management and mapping implementation. TWiki is now capable of
dealing with login names that are not 7bit ascii (by transforming those logins into a 'cUID' that can be used by rcs). TWiki::Users now uses TWikiIterators opening the way for much larger
user sets.
API Enhancements (Func)
$TWiki::Plugins::VERSION is now 1.2
Added decodeFormatTokens($str) -& $unencodedString
Added eachChangeSince($web, $time) -& $iterator
Added eachGroup() -& $iterator
Added eachGroupMember($group) -& $iterator
Added eachMembership($wikiname) -& $iterator
Added eachUser() -& $iterator
Added emailToWikiNames( $email, $dontAddWeb ) -& @wikiNames
Added meta parameter to expandCommonVariables( $text, $topic, $web, $meta ) -& $text
Added getCanonicalUserID( $user ) -& $cUID
Added getExternalResource( $url ) -& $response
Added getSessionKeys() -& @keys
Added user parameter to getWikiName( $user ) -& $wikiName
Added user parameter to getWikiUserName($user ) -& $wikiName
Added isAnAdmin( $login ) -& $boolean
Added isGroup( $group ) -& $boolean
Added isGroupMember( $group, $login ) -& $boolean
Added isTrue( $value, $default ) -& $boolean
Added popTopicContext()
Added pushTopicContext($web, $topic)
Added setPreferencesValue($name, $val)
Added sanitizeAttachmentName($fname) -& ($fileName, $origName)
Added spaceOutWikiWord( $word, $sep ) -& $text
Added wikiNameToEmails( $wikiname ) -& @emails
Deprecated getOopsUrl( $web, $topic, $template, $param1, $param2, $param3, $param4 ) -& $url
Deprecated permissionsSet( $web ) -& $boolean
Deprecation Notices
The %MAINWEB% and %TWIKIWEB% variables have been deprecated. For compatibility reasons they are unlikely to ever be removed completely, but you should use the %USERSWEB% and %SYSTEMWEB% variables instead.
In Func getOopsUrl and permissionsSet have been declared deprecated. There is no plan to remove them yet.
TWiki 4.2.0 Minor Release - Details
The 4.2.0 release was built from SVN
revision 16278 (22 Jan 2008).
RenderListPlugin produces warnings with list with no level 1 bullets
When using SERVERTIME with $week in template TWIki fails on missing CPAN lib dependency
adding missing docs for NEWLINKFORMAT - introduced in 2006
TWikiUserMapping speed re-enhancements
EDITTABLE with a simple text input in which the user has put
gets trunkated at the first BR
missing fetchUsers method in Password.pm
Performance: Copy hash
error link mailto
Auto attach has hardcoded the string 'UnknownUser' for the attachment meta user attr
TablePlugin prepends 'table' to id parameter
"Here" link in merge_notice in templates/messages.tmpl
Template.pm prints incomplete and confusing error message
if you get a lease conflict when using EditTablePlugin, the oops conflict output link is unusable
TWISTY link parameter doesn't support (local) variables (set in topic and used with %) properly
If you register someone you are magically logged in as them
AutoAttach created META that will break topic rendering
TwistyPlugin: add behaviour earlier to head than twisty js
wrong expansion of deprecated URL tag
select+multi+values broken in various respects
default skin appears to have javascript in it
session files should only be created for web based sessions.
taint error when registering and verify is off
EditTablePlugin data corruption under mod_perl
ChangePassword form does not detect failure when .htpasswd is read-only
Pass topicparent when creating a new topic
lets use HTTP error codes in rest cgi, rather than rather less useful die's
rest cgi is not testing the URL correctly
checkpoint-save ignores EDIT_TEMPATE
0 is not recognized as valid input in a mandatory form field
tmp and working dir security needs work (docco and code
configure not honoring $TWiki::cfg{ScriptUrlPath}
EditTablePlugin: make buttons customizable and translatable
EditTablePlugin: undefined textarea size gives error in log
textarea bug!
Installation process SNAFU if you don't set a configure PW
viewauth redirect loops to death when Main and TWiki webs both are view denied for TWikiGuest
EditPreferences of Main.TWikiPreferences broken
swap twikistyle and defaultstyle definitions
Online installer not resolving dependencies
Wrong link to FileAttachment
Login screen has error messages the wrong order
When using a field type select+multi in a form used in a template topic, the field doesn't remember the selection
Reading static HTML's for upgrade/install is difficult without internet connection/behind firewall
Remove inline scripts from pattern skin
raw=all does not show all meta when VIEW_TEMPLATE is defined.
/bin/twiki is experimental stuff that should not be in distribution
Terrifying text appears below plugins list during new extensions install via configure
add expires header for css js etc
nested web creation is broken (it should prevent the user from creating them if its disabled...)
afterEditHandler is never called on "Quiet Save"
Unused EXPERT options are always shown
Improve the installation doc for how to setup apache config for configure
Repackage native search as a conrib, remove from 4.2
Lighter top bar background image
Standard user topics of TWikiUserMapping are referenced, but not defined
Forking search algorithm throws error if topic is nonexistent
Print view seems weird in both pattern skin and default skin
Search results now have empty line (= html P) between search header and results list
Update color scheme to match new neutral table borders
Add completePageHandler for plugins
default skin is a bit broken
close browser advice non-sensical when not using apache login
Adding CGI::Session with distribution and enable Template login by default.
Web rename renames content as well
renaming a topic destroys full qualified topic names
Change the strategy of protecting again html attach spam to not harm Wysiwyg editor
remove use of undefined variable un utf8 code
User shown as Unknown User (Login ID) when author is not in TWikiUsers. Bad feature
Rename "Checkpoint" to "Save and Continue"
configure generates apache errors
Improve how emailing is enabled and disabled in TWiki especially for registration
WebSearchAdvanced does not show selected state for default radion button "both"
Rename css class TWikiFooterNote to twikiFooterNote
Remove inline scripts
Prevent [ and ] in topic names when renaming topics
ResetPassword, ChangePassword, ChangeEmailAddress, TWikiRegistration needs to be hacked after each upgrade
User registration states incorrect user name
Inline rdiff between rev 0 and rev 1 is empty
As described in TWiki.TWikiScripts auth protect rest
Missing error message when registration mail fails to be sent
TemplateLogin messages not translated
Topic newsletter notifications in MailerContrib fail
A Set embedded in a list has problems
No (simple) way to create a Set
InterwikiPlugin: Change ISBN rule
reading the FORMFIELDs of another topic imposes its access rights
%INCLUDE breaks enumeration/tables when included topic has file attachments
Paragraphs not correctly handled
Patch for improper replacing of "0" with "" (empty string) in URLPARAM default value
causes an internal server error
HTMl embedded in lists breaks the translator
Empty bullets get a
Error saving topic message not shown as code because of trailing space
Access check based on getWikiUserName (fails) vs. getWikiName (succeeds)
Add a note about adding a doc license to footer when installing TWiki
Authenticating through REST does not work in MAIN
{Register}{NeedVerification} shoud not be an expert setting and disabled by default
mailnotify fails due to TWIki::Merge failing
default skin, and thus the classic skin, contains javascript
Custom META fields that don't have the name key are ignored by TWiki::Store
bulkregistration is unforgiving on TWikiTable format
TablePlugin generates invalid html attribute maxcols
Empty field values in searches are returned as strings containing "$value"
TablePlugin: TWikiTables in TWikiLists generate invalid html
OopsException allows anything from a URL to pass through to the generated HTML incl scripts
No error message for duplicate_activation
{SafeEnvPath} screws up windows
getListOfWebs() and webExists() disagree
TablePlugin overrides skin css AGAIN
Support topic permissions checking
Move hide-if-no-javascript functionality from TwistyPlugin to default templates
Update TwistyPlugin with TWiki 4 javascript files
Update TwistyContrib with TWiki 4 javascript files
Add MAKETEXT to all default templates
Get rid of default TH background color
Default templates and documentation topics assume pattern CSS classes
Pipe symbol (i.e. in SEARCH) breaks Form Definition Table
RegistrationApprovals is not a web
Malformed META embedded in text can crash TWiki
syntax error at /usr/lib/cgi-bin/TEST/lib/TWiki/ Users/ApacheHtpasswdUser.pm line 67, near "}"
Configure harmless errors confuse people when they have other unrelated errors.
Remove deprecated filename attribute from attach template
Add correct CSS class to select box
Usability: Warn if more than one {WebMasterEmail} e-mail address
Document how you become an admin user with new temporary admin login (sudo)
Show and hide WYSIWYG buttons based on COMPOSER setting
GROUPS variable kills server if there is a large group
TwistyPlugin: wrong use of plugin handlers
TWikiRegistration does not pass on multiple checkbox element values to UserForm.
tick_twiki.pl broken
Fixing twiki cgi for logging in
Javascript: twiki object overwritten
Add global setting to allow non-WikiWords
Documentation VarENCODE param typo
Remove max length on attachment comment
Topic templates are not documented
Doc bug in TWikiUpgradeGuide.html
Create default directive for non-view pages
WebSearch: Fix checkbox state based on url param web=all
Add css style to raw textarea
Broken Links to Topics and Subwebs
Downloading extension via configure sometimes end up in an "Invalid header block" message
Add dmg to mime.types
Hexadecimal character references do not work
Document how to reset a password with ApacheLogin
Reset password message doesn't make sense any more
template login Error message activated when there was no error
EditTablePlugin: Password shown in URL params after template login on direct sort urls (authenticated setups)
PatternSkin: More space in topic name fields and file field
attachments have bad user name display issues
Broken formfield "name" and "title" attributes
METASEARCH doc not complete. format option and probably more are missing in the doc
Topic rename: error in javascript so select all does not work
A garbled CommentPlugin text
configure link for 'Expert mode' missing t= parameter to prevent caching
Remove preferences edit button from TWiki.TWikiPreferences
More options: do not show "View previous topic revision" when there is no previous version
Add spaceOutWikiWord to Func
Problematic Values for FINALPREFERENCES in Distribution
viewauth Redirect May Add Superfluous Slash
Emails may be 8bit, not 7bit
Base HREF is wrong when scripturls are changed
Mandatory fields will not accept 0
RCS command-line settings should be EXPERT
Search 'Number of topics' does not show on first search on advanced regex searches
Better documentation on how to install CPAN libs (including a reference in the install doc)
PREFERENCE values not carried over to preview and then save
Make TOPICLIST topic parameter equivalent to other vars
renderWikiWordHandler called at wrong place in Render. change to support bracket notation
Add .changes API to Func
Some plugins cannot be downloaded using configure
default preview tmpl has major bug in release value="%REDIRECTTO"
Pattern skin template documentation update
Reset Password is broken in MAIN branch
New CARET preferences variable
Fix sanitizeAttachmentName
Structure the TWiki version number to make accessible from plugins (code included)
Do not automatically lock user homepages when this is not set in NewUserTemplate
EDITTABLE expands variables in table cells
$EXISTS() should default to topic in current web
Plugin installation doesn't work through some proxies
No rendering of TML after
used in table cells and multiline bullets
Topic rename does not find URL references from topics in different web
Better documentation of $FORMAT(PERCENT, ...)
renderWikiWordHandler is not documented
Parameter passed to preRenderingHandler incorrect
WEBLIST docco spelling error (selection=)
TWiki.TWikiSiteTools mentions geturl.pl, but does not point out the authentication problems with it
USERINFO{format="$groups"} always returns webDotWikiName identifiers
Cannot move attachment to topic with non-wikiword name
are not updated during page renames
NativeSearch: give gentle warning when no parameters are passed to test.pl
Table rules for columns are invisible in Internet explorer
Document INCLUDE behaviour in TWikiAccessControl
Web reference gets inappropriately inserted into bracketed links inside verbatim tags.
Space in username not rejected when resetting password
add true and false to TWiki::isTrue
footerrows setting is ignored when adding rows
TemplateLogin.pm doesn't return the error from the underlying PasswordManager
%!USERINFO{format="$groups"}% crashes
Javascript: ensuring variables are local
Web statistic severely broken
TWiki.TWikiDocumentation jumps to top at double click
Rename across webs bugs
Pattern skin small template refactoring
Add Sanitize Attachment Name to TWiki::Func
Table with backslash breaks EditTablePlugin
Lock WebPreferences to person creating web
Commentplugin makes inappropriate line ending handling when targeting an anchor
TWiki::Func::getOopsUrl() doesn't support def parameter
Dutch translation files some special chars mangled
Can't create configuration subsection for plugins and contribs
configure docco for mail handler should say howto force twiki to use sendmail
With rename topic, topic texts are changed as well
MailerContrib not mailing groups
Remark "There is no size limit for uploaded files." is not relevant to users
TWikiRegistrationAgent produces wrongly formated entries
Need to document parameterized include
Doc fix to AdminSkillsAssumptions
EXTEND.pm fails to move directories across filesystems
Input bugs in SpreadSheetPlugin::Calc
Short description containing TML does not get rendered properly in PLUGINDESCRIPTIONS
Avoid "detailed instructions are beyond the scope of this document"
WYSIWYG broken for bolded WikiWords
Can' e-mail wiped out in .htpasswd entry
BulkRegister not functioning properly if password Manger is set to NONE
Incorrect number of topics indicated with multiple SEARCHes
& in the size field of a form will crash the forms code
exec return an exit code of 1 for a perfectly valid grep
CommentPlugin location only works if it is above the %COMMENT... tag
Page loads unreasonable slow under IE with Twisty enabled (clone of 3582)
Make redirectto parameter work for rename
Over-complex CPAN installation instructions
Bad expression error in 'more' screen if parent is missing
Broken links in topic A if includes topic B in which InterWiki links are defined
Document standard extensions in release notes
I18N: Urls to file attachments that has umlauts only works in some browsers
Make edit form somewhat less spacious
Access key char invisible on hover
Extension installer in configure floods error_log when checking for installed plugins.
Topic URL parameter overwrites revision to which REVINFO variable refers
Can't delete attachment with pluses in file name
Improve visibility of attachment twisty
URL rendering cuts off first part of URL
Can't save template topic with mandatory form fields
Cleaning up Main.TWikiPreferences
'configure' password gets saved as 'smtp' password (in plain text!)
Unwanted question mark link in bracket link text
redirectto implemented redundantly in several places
Usability: [Save] of preferences screen should support access key
Deprecate permissionsSet from Func
Usability: Use pub url instead of viewfile url in attachment table
Usability: Time consuming to create new topic
TablePlugin: css attributes priority of site/web preferences too agressive
Possible to create topics with unsupported characters
Document how to use .spec files for plugin setting in TWiki.TWikiPlugins
Doc is unclear that Space In Path Causes Error
UnprocessedBulkRegistrationLog is improperly formatted
Refactor object names for clarity
No existance check for topic used in include
EditTablePlugin ignores valid table syntax
Update doc topics that have forms
invalid Date: header in mailnotify
attach a filename with paraens and wikiwords
Fix save_error template
WysiwygPlugin alters things inside complex twiki vars so they break
Don't include anything when trying to include a non existing section
Usability: Misleading
"Invalid Activation Code" error message
Wasted vertical space below edit box
NEWTOPICFGCOLOR and NEWTOPICBGCOLOR never used
Need clear definition of the impact of spaces on EditTable definition
EditTablePlugin format fails for last item
I18N: Using UTF8 in headers breaks header anchors
Allow date format in form fields
TWiki dies with SEARCH on topic that has form field named *Foobar*
Mailto link should use %20 instead of   for spaces
EditTablePlugin: remove sort links from headers when editing the table
Username vs WikiName is confusing in Configure
Fully document exposed APIs
WebExist uses WebPreferences as opposed to WebHome to determine the validity of a web
FuncUsersContrib and MoreFuncContrib and FuncusersContrib should be merged into Func
Remove the secret NEWTOPICLINKSYMBOL (was missing docs for NEWTOPIC* )
Documented METASEARCH parameter defaults are not the actual defaults
.changes is hardcoded to 500 entries, affecting WebStatistics and MailerContrib
Better installation doc for TWikiAdminGroup
Some UTF8 characters in form values broken (CGI.pm interaction)
Cannot change configure password without making other changes
IE eats newlines
Not possible to use CDATA in SEARCH output (prev: RSS feeds chokes on HTML entities in SEARCH results)
ResetPassword usability
Improvements to installation docs
NewUserTemplate should be in Main
Lease files are not deleted or renamed when you delete/rename topics with cancelled edit
Rendering bug of headings when using MBCS as a heading string
RcsFile::searchInWebContent doesn't check exit status of the grep command
Table sorting confused when using variables.
Enhancements
configure plugins should be sorted case-insensitively
EditTablePlugin: Omit Edit button in print view
SpreadSheetPlugin: New FORMATTIMEDIFF() function
ConditionalBasedOnGroupMembership
Update small T-logo badge in bottom bar
Add timestamps to history revisions (rdiff)
Offer RSS feed on search results
Improve TOC display in TWiki documentation
Improve TWiki variables documentation
pop-ups need to pass extra url parameters
need a way to set preferences from TWiki::Func
check that we have a testable can_edit state
'Changed' link should point to most recent changes, not the entire history
Add Bugs rule
Add a way to pass authentication information to an extra plugins repository
TablePlugin: put all css styling in head
TwistyContrib: support TwistyPlugin 1.4
TwistyPlugin 1.4: remove ugly javascript init calls
Add Adobe Air to mimetypes
Simplify default templates more, and use CSS
CSS class twikiUnvisited
SlideShowPlugin: Add VarSLIDESHOWSTART and VarSLIDESHOWEND variable documentation
RenderListPlugin: Add VarRENDERLIST variable documentation
TablePlugin: Add VarTABLE variable documentation
EditTablePlugin: Add VarEDITTABLE variable documentation
CommentPlugin: Add VarCOMMENT variable documentation
SpreadSheetPlugin: Add VarCALC variable documentation
Add templatetopic url parameter to WebTopicCreator
Add control over TOC rendering
Template unification
Support standard escapes in IF statements
Configurable date format to enable
Main.TWikiUsers no longer in distribution but gets created from template if non existing
PatternSkin: visual update to form elements
Enhance MailerContrib To Allow Exclusion Of Webs
Normalise viewfile so it is able to use path syntax as well as the ?filename= syntax.
PatternSkin: Add RSS feed icon to WebLeftBar
Add RSS feed icon to TWikiDocGraphics
Extend SEARCH to allow SQL-type queries over form fields
Japanese translation
show subwebs="" in WEBLIST relative to a web
Add expandStandardEscapes to TWiki::Func
Propose adding $admin attribute to USERINFO rather than appending "isAdmin()" to $group output
twikiNotification: CSS style for notifcations
Add getSessionKeys to Func
Handlers don't have access to the full topic
Enhance EditTablePlugin with DHTML; fi graceful fall fix css styling
TWiki inserts html into text areas which have text in them
SEARCH summary should remove leading exclamation point
SpreadSheetPlugin doc work for 4.2
Support interface to getting URLs in Func
Make scope="all" the default search in WebSearch
Need a way to tell if mod_perl is in use
Table column headers always centered
Make redirectto parameter work for upload
Existing attachments: change header from "Other attachments of" to "Attachments of"
Allow infinite expiry of cookies
PatternSkin minor CSS changes for 4.2
Add new type=word search to search on word boundaries
Poor/nonexistent revert-to-previous-version design
Add a ?template=viewplain template for plain view
Attach help contains note for Internet Explorer 4 that can be removed now
configure needs a backlink to the TWiki/WebHome
&-- Note: Do not use Bugs: interwiki links because interwiki rule might not be defined
Set BUGS =
Related Topic:
Copyright & by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki?
Note: Please contribute updates to this topic on TWiki.org at TWiki:TWiki.TWikiReleaseNotes04x02}

我要回帖

更多关于 sanitized version 的文章

更多推荐

版权声明:文章内容来源于网络,版权归原作者所有,如有侵权请点击这里与我们联系,我们将及时删除。

点击添加站长微信