18 Aug
2011
18 Aug
'11
4:48 p.m.
On 08/17/2011 02:14 PM, Jerome Velociter wrote:
On Wed, Aug 17, 2011 at 5:24 PM, Alex Busenius
<alex.busenius(a)googlemail.com> wrote:
It can't happen like that for normal requests, since otherwise you lose
the ability to resubmit data. 4xx codes can't redirect, they just
display the error page.
The 4xx code should be returned only when request.ajax is set.
On 17.08.2011 11:23, Vincent Massol wrote:
Hi Alex,
Just popping in to suggest that with regard to CSRF protection, we
probably should return an HTTP code different that 302 when the token
is wrong. Probably a code in the 4xx range. It's especially important
for AJAX requests. For example the "save and continue" button is
broken right now when you have a CSRF error, it does not save, but
does not inform the user of the error either. It happens to me quite
often in development mode, since I tend to restart my server quite
often leaving all my tabs with page in edit mode open. Got used to it
now, but would be nice to fix.
Hi devs,
Could each of you update the status of the Roadmap items for XE 3.2 to know where we
stand. Be as precise as possible please. If you have any doubt about whether you'll be
able to implement something in due time please raise it so that we can discuss and try to
find solutions (reduce scope, get some help, etc).
As a reminder we have one more milestone (3.2M3) before the RC. Here are the dates
again:
* 3.2M3: 12 Sep 2011
* 3.2RC1: 26 Sep 2011
* 3.2 Final: 10 Oct 2011
Roadmap items:
• UI for extension manager + backend extension manager (continued, especially nice XAR
upgrades). Thomas + Jean-Vincent
• Search improvements and especially scoring, French support and wildcard issues
(continued from 3.1). Sergiu
• App Within Minutes. Marius
• XE-923: Implement user dashboard. Anca
• XWIKI-6504: Convert Panels application into syntax 2.0. Sergiu
• XWIKI-6676 (UI does not report failed delete actions of attachments) and XWIKI-6623
(Attachment upload failure gives no feedback to user). Sergiu
• Fix issues with Oracle support. Specifically XWIKI-6682 and XWIKI-6683. Vincent +
Sergiu + Sorin
• Fixes for HTTPS support. Specifically XWIKI-6690, XWIKI-4489 and XWIKI-5771. Sergiu to
help
• XWIKI-6687 Be able to delete a space from the UI. Marius
• Stats module improvements (Commit code from client projects without changes). Marius
• LDAP Admin UI (commit Jerome work without changes)
• XWIKI-5037: Clustering bug preventing a node from restarting. Vincent + Thomas
• XWIKI-6684 Use a predefined Space Template like Dashboard, Livetable when creating a
new space. Anca
• XWIKI-6073 Change stylesheet and javascript extension filename when a modification is
done on those
• Rest improvements (Restlet upgrade + re-organization of the rest module - already
started). Jerome
• Suggest widget improvements and bug fixes (better highlighting, better performance, new
options - already started as well). Jerome
• Cache improvements, namely: XWIKI-6170, XWIKI-6173 and XWIKI-6169. Caleb
• Fix functional tests to work with CSRF protection: XWIKI-5465. Alex
Done, Jenkins tests are running with CSRF protection since a few weeks
before M1, no other big problems were found so far.
>
> Alex
>
>> • Performance tests. Marius
>> • Selenium 1 to Selenium 2 move for the WYSIWYG functional tests. Marius
>> • Integrate some Wiki 3.0 workspace features into XEM. Eduard
>>
--
Sergiu Dumitriu
http://purl.org/net/sergiu/