Diffusion Phabricator (stable) History

phabricator/src/aphront
stable

Mar 11 2021

36c6eb966393 Improve routing of "/robots.txt", "/favicon.ico", "/status/", and 404 on custom…
Author
epriestley
Revisions
D21606: Improve routing of "/robots.txt", "/favicon.ico", "/status/", and 404 on custom Sites
Browse Repository
Passed
No Audits

Feb 13 2021

2aac3156f791 Restructure Hovercards to support more context information
Author
epriestley
Revisions
D21553: Restructure Hovercards to support more context information
Browse Repository
Passed
No Audits

Jan 11 2021

18f049a282f4 Fix reading of the request path when running the PHP builtin webserver
Author
epriestley
Revisions
D21506: Fix reading of the request path when running the PHP builtin webserver
Browse Repository
Passed
No Audits

Apr 25 2020

454ecb56e3ac When proxying HTTP repository responses from repository nodes, discard content…
Author
epriestley
Revisions
D21167: When proxying HTTP repository responses from repository nodes, discard content description headers
Browse Repository
Passed
No Audits

Apr 24 2020

6f7147376f87 Parse "multipart/form-data" bodies even if "enable_post_data_reading" is on
Author
epriestley
Revisions
D21165: Parse "multipart/form-data" bodies even if "enable_post_data_reading" is on
Browse Repository
Passed
No Audits

Apr 19 2020

7a79131bf279 Replace old hard-coded URI-based "changes saved" jank with new overgeneralized…
Author
epriestley
Revisions
D21144: Replace old hard-coded URI-based "changes saved" jank with new overgeneralized cookie-based "changes saved" jank
Browse Repository
Passed
No Audits

Apr 14 2020

0ea6d131e072 In Conduit responses, assert that Phabricator supports a "gzip" capability
Author
epriestley
Revisions
D21120: In Conduit responses, assert that Phabricator supports a "gzip" capability
Browse Repository
Passed
No Audits

6b05d2be287e Add a setup warning to detect "SetInputFilter DEFLATE" and other "Content…
Author
epriestley
Revisions
D21116: Add a setup warning to detect "SetInputFilter DEFLATE" and other "Content-Encoding" request mangling
Browse Repository
Passed
No Audits

Apr 3 2020

067b04aaf148 If HTTP response headers are already sent, don't fiddle with "zlib.
Author
epriestley
Revisions
D21055: If HTTP response headers are already sent, don't fiddle with "zlib.output_compression"
Browse Repository
Failed
No Audits

Feb 15 2020

64cc4fe91515 Add a test to verify that all routing maps are plausibly valid, and remove some…
Author
epriestley
Revisions
D21000: Add a test to verify that all routing maps are plausibly valid, and remove some dead routes
Browse Repository
Passed
No Audits

Feb 12 2020

f9b3e3360b0c Continue moving classes with no callers in libphutil or Arcanist to Phabricator
Author
epriestley
Revisions
D20977: Continue moving classes with no callers in libphutil or Arcanist to Phabricator
Browse Repository
Passed
No Audits

af84f215f9b8 Move lingering "Aphront" classes to Phabricator
Author
epriestley
Revisions
D20975: Move lingering "Aphront" classes to Phabricator
Browse Repository
Passed
No Audits

Sep 30 2019

9944b669ade9 Make HTTP/403 say "Yikes!"
Author
epriestley
Revisions
D20847: Make HTTP/403 say "Yikes!"
Browse Repository
Passed
No Audits

Aug 23 2019

b3f8045b873e Make minor flavor updates
Author
epriestley
Revisions
D20734: Make minor flavor updates
Browse Repository
Passed
No Audits

26ec9247320b When a page throws an exception and response construction throws another…
Author
epriestley
Revisions
D20720: When a page throws an exception and response construction throws another exception, throw an aggregate exception
Browse Repository
Passed
No Audits

May 24 2019

ce6fc5be9092 Fix a looping workflow when trying to submit a partially-effectless transaction…
Author
epriestley
Revisions
D20552: Fix a looping workflow when trying to submit a partially-effectless transaction group
Browse Repository
Passed
No Audits

May 1 2019

c43618a3a8bb Add "Move Left" and "Move Right" to dashboard tab panels
Author
epriestley
Browse Repository
Passed
No Audits

Mar 5 2019

ea6c0c9bdebf Refine the "Mangled Webserver Response" setup check
Author
epriestley
Revisions
D20235: Refine the "Mangled Webserver Response" setup check
Browse Repository
Passed
No Audits

Mar 1 2019

bfe8f43f1a6f Use "QUERY_STRING", not "REQUEST_URI", to parse raw request parameters
Author
epriestley
Revisions
D20227: Use "QUERY_STRING", not "REQUEST_URI", to parse raw request parameters
Browse Repository
Passed
No Audits

Feb 14 2019

c5772f51dea7 Fix Content-Security-Policy headers on "Email Login" page
Author
epriestley
Revisions
D20163: Fix Content-Security-Policy headers on "Email Login" page
Browse Repository
Passed
No Audits

5892c7898603 Replace all "setQueryParam()" calls with "remove/replaceQueryParam()"
Author
epriestley
Revisions
D20154: Replace all "setQueryParam()" calls with "remove/replaceQueryParam()"
Browse Repository
Passed
No Audits

241f06c9ffc6 Clean up final `setQueryParams()` callsites
Author
epriestley
Revisions
D20153: Clean up final `setQueryParams()` callsites
Browse Repository
Passed
No Audits

Feb 12 2019

fcd85b6d7bed Replace "getRequestURI()->setQueryParams(array())" with "getPath()"
Author
epriestley
Revisions
D20150: Replace "getRequestURI()->setQueryParams(array())" with "getPath()"
Browse Repository
Passed
No Audits

308c4f240754 Fix "AphrontRequest->getRequestURI()" for requests with "x[]=1" parameters in…
Author
epriestley
Revisions
D20147: Fix "AphrontRequest->getRequestURI()" for requests with "x[]=1" parameters in the URI
Browse Repository
Passed
No Audits

Feb 11 2019

187356fea515 Let the top-level exception handler dump a stack trace if we reach debug mode…
Author
epriestley
Revisions
D20142: Let the top-level exception handler dump a stack trace if we reach debug mode before things go sideways
Browse Repository
Passed
No Audits

b9a1260ef5c0 Improve top-level fatal exception handling in PHP 7+
Author
epriestley
Revisions
D20138: Improve top-level fatal exception handling in PHP 7+
Browse Repository
Passed
No Audits

e03079aaaad2 Try harder to present display/rendering exceptions to the user using standard…
Author
epriestley
Revisions
D20137: Try harder to present display/rendering exceptions to the user using standard exception handling
Browse Repository
Passed
No Audits

Feb 1 2019

b3e4743ad767 Read POST data sightly earlier in request startup
Author
epriestley
Revisions
D20073: Read POST data sightly earlier in request startup
Browse Repository
Passed
No Audits

Jan 31 2019

1767b80654fe Replace manual query string construction with "phutil_build_http_querystring()"
Author
epriestley
Revisions
D20053: Replace manual query string construction with "phutil_build_http_querystring()"
Browse Repository
Passed
No Audits

Jan 30 2019

a24e6deb5798 Read "$_POST" before hooking the profiler, and remove "aphront.default…
Author
epriestley
Revisions
D20046: Read "$_POST" before hooking the profiler, and remove "aphront.default-application-configuration-class"
Browse Repository
Passed
No Audits

13e4aeb59059 Give MFA gates a more consistent UI
Author
epriestley
Revisions
D20059: Give MFA gates a more consistent UI
Browse Repository
Passed
No Audits

Jan 24 2019

c9ff6ce390d6 Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)
Author
epriestley
Revisions
D20028: Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)
Browse Repository
Passed
No Audits

Dec 28 2018

1c89b3175f1c Improve UI messaging around "one-shot" vs "session upgrade" MFA
Author
epriestley
Revisions
D19900: Improve UI messaging around "one-shot" vs "session upgrade" MFA
Browse Repository
Passed
No Audits

Dec 17 2018

b8cbfda07ce6 Track MFA "challenges" so we can bind challenges to sessions and support SMS…
Author
epriestley
Revisions
D19886: Track MFA "challenges" so we can bind challenges to sessions and support SMS and other push MFA
Browse Repository
Passed
No Audits

Nov 19 2018

9481b9eff111 Allow "Can Configure Application" permissions to be configured
Author
epriestley
Revisions
D19822: Allow "Can Configure Application" permissions to be configured
Browse Repository
Passed
No Audits

Jul 30 2018

81a7c9ac43f2 Remove the execution time limit (if any) before sinking HTTP responses
Author
epriestley
Revisions
D19547: Remove the execution time limit (if any) before sinking HTTP responses
Browse Repository
Passed
No Audits

Apr 21 2018

7622f6afccf4 Fix excessively severe CSP URI error during first-time setup
Author
epriestley
Revisions
D19396: Fix excessively severe CSP URI error during first-time setup
Browse Repository
Passed
No Audits

Apr 9 2018

6dea2ba3b37f Fix DocumentEngine line behaviors in Diffusion
Author
epriestley
Revisions
D19305: Fix DocumentEngine line behaviors in Diffusion
Browse Repository
Passed
No Audits

Mar 23 2018

fb4ce851c4ae Add a PDF document "rendering" engine
Author
epriestley
Revisions
D19252: Add a PDF document "rendering" engine
Browse Repository
Passed
No Audits

Mar 5 2018

f31975f7a3be Don't emit Content-Security-Policy when returning a response during preflight…
Author
epriestley
Revisions
D19172: Don't emit Content-Security-Policy when returning a response during preflight setup checks
Browse Repository
Passed
No Audits

Mar 2 2018

42e5b8a04bec Include the primary domain in the Content-Security-Policy explicitly if there's…
Author
epriestley
Revisions
D19170: Include the primary domain in the Content-Security-Policy explicitly if there's no CDN
Browse Repository
Passed
No Audits

Mar 1 2018

4466402c5a6d Move Paste line range reading code into AphrontRequest
Author
epriestley
Revisions
D19162: Move Paste line range reading code into AphrontRequest
Browse Repository
Passed
No Audits

94d340fcffab Include OAuth targets in "form-action" Content-Security-Policy
Author
epriestley
Revisions
D19159: Include OAuth targets in "form-action" Content-Security-Policy
Browse Repository
Passed
No Audits

d5befb1a0ea3 Block use of "<base />" in the Content Security Policy
Author
epriestley
Revisions
D19158: Block use of "<base />" in the Content Security Policy
Browse Repository
Passed
No Audits

ab579f251110 Never generate file download forms which point to the CDN domain, tighten "form…
Author
epriestley
Revisions
D19156: Never generate file download forms which point to the CDN domain, tighten "form-action" CSP
Browse Repository
Passed
No Audits

a5efd7eedb3c Add "object-src 'none'" to the Content-Security-Policy
Author
epriestley
Revisions
D19154: Add "object-src 'none'" to the Content-Security-Policy
Browse Repository
Passed
No Audits

Feb 27 2018

9658249ac5a0 Add "Referrer-Policy: no-referrer" to standard HTTP headers
Author
epriestley
Revisions
D19144: Add "Referrer-Policy: no-referrer" to standard HTTP headers
Browse Repository
Passed
No Audits

dba4c4bdf6a8 Emit a "Content-Security-Policy" HTTP header
Author
epriestley
Revisions
D19143: Emit a "Content-Security-Policy" HTTP header
Browse Repository
Passed
No Audits

Oct 13 2017

3f53718d107f Modularize rate/connection limits in Phabricator
Author
epriestley
Revisions
D18703: Modularize rate/connection limits in Phabricator
Browse Repository
Passed
No Audits

9777c66576ff Allow Phabricator to run with "enable_post_data_reading" disabled
Author
epriestley
Revisions
D18702: Allow Phabricator to run with "enable_post_data_reading" disabled
Browse Repository
Passed
No Audits

Oct 9 2017

9bd6a3705559 Fix spelling
Author
0
Revisions
D18693: Fix spelling
Browse Repository
Failed
No Audits

Jun 20 2017

c71d9c601f97 Pass all Throwables to Exception Handlers, not just Exceptions
Author
epriestley
Revisions
D18136: Pass all Throwables to Exception Handlers, not just Exceptions
Browse Repository
Passed
No Audits

May 8 2017

a1f5d37357d6 Improve the behavior of PhabricatorFileEditField for Macros
Author
epriestley
Revisions
D17853: Improve the behavior of PhabricatorFileEditField for Macros
Browse Repository
Passed
No Audits

Apr 22 2017

3698e4a14f6c Update rate limiting for APCu and X-Forwarded-For
Author
epriestley
Revisions
D17758: Update rate limiting for APCu and X-Forwarded-For
Browse Repository
Passed
No Audits

Apr 18 2017

b479941ceb6e Make "Range" HTTP header work for Celerity static resource requests
Author
epriestley
Revisions
D17724: Make "Range" HTTP header work for Celerity static resource requests
Browse Repository
Passed
No Audits

Apr 5 2017

f2a26b260100 When requesting file data, make "Range: bytes=0-" work correctly
Author
epriestley
Revisions
D17627: When requesting file data, make "Range: bytes=0-" work correctly
Browse Repository
Passed
No Audits

d1a971e22156 Support "Range: bytes=123-" requests
Author
epriestley
Revisions
D17626: Support "Range: bytes=123-" requests
Browse Repository
Passed
No Audits

c4c3de7bfaf3 Correct an issue where the wrong "Content-Length" was set for partial content…
Author
epriestley
Revisions
D17624: Correct an issue where the wrong "Content-Length" was set for partial content responses
Browse Repository
Passed
No Audits

Jan 4 2017

c07ec8fee642 Preserve nonstandard ports during 404 redirects which add "/" to the ends of…
Author
epriestley
Revisions
D17134: Preserve nonstandard ports during 404 redirects which add "/" to the ends of URIs
Browse Repository
Passed
No Audits

Dec 14 2016

5215eb306791 Fix an issue where unexpected debugging output would run afoul of automatic…
Author
epriestley
Revisions
D17052: Fix an issue where unexpected debugging output would run afoul of automatic compression
Browse Repository
Passed
No Audits

Dec 13 2016

842710608e49 Don't combine automatic output compression with "Content-Length"
Author
epriestley
Revisions
D17045: Don't combine automatic output compression with "Content-Length"
Browse Repository
Passed
No Audits

Dec 8 2016

ffdc082852fe Add a wide range of HTTP-request-based setup checks
Author
epriestley
Revisions
D12622: Add a wide range of HTTP-request-based setup checks
Browse Repository
Passed
No Audits

Dec 5 2016

6058d3305f82 Normalize remote IP addresses when writing to logs, etc
Author
epriestley
Revisions
D16987: Normalize remote IP addresses when writing to logs, etc
Browse Repository
Passed
No Audits

Nov 30 2016

9730f5a34fd7 Allow custom Sites to have custom 404 controllers
Author
epriestley
Revisions
D16966: Allow custom Sites to have custom 404 controllers
Browse Repository
Passed
No Audits

Nov 23 2016

f19924310431 Clean up another insufficiently-general exception
Author
epriestley
Revisions
D16930: Clean up another insufficiently-general exception
Browse Repository
Passed
No Audits

Nov 21 2016

78040e0ff577 Run "DatabaseSetup" checks against all configured hosts
Author
epriestley
Revisions
D16902: Run "DatabaseSetup" checks against all configured hosts
Browse Repository
Passed
No Audits

Oct 31 2016

f7b0c09ac47f Make the "All Day Event" control use a checkbox instead of a dropdown
Author
epriestley
Revisions
D16776: Make the "All Day Event" control use a checkbox instead of a dropdown
Browse Repository
Passed
No Audits

Oct 12 2016

86a00ee4abd6 Make Calendar ICS imports sort of work in a crude, approximate way
Author
epriestley
Revisions
D16699: Make Calendar ICS imports sort of work in a crude, approximate way
Browse Repository
Passed
No Audits

Sep 6 2016

00bb0c907147 Raise setup warnings immediately when failing to load configuration from the…
Author
epriestley
Revisions
D16501: Raise setup warnings immediately when failing to load configuration from the database
Browse Repository
Passed
No Audits

309960146344 Split setup check phases into "preflight" and "post-config"
Author
epriestley
Revisions
D16500: Split setup check phases into "preflight" and "post-config"
Browse Repository
Passed
No Audits

Aug 26 2016

90294713e850 Use phutil_json_encode() in AphrontResponse to raise better errors
Author
epriestley
Revisions
D16457: Use phutil_json_encode() in AphrontResponse to raise better errors
Browse Repository
Passed
No Audits

Aug 16 2016

95cf83f14ead Convert some whiny exceptions into quiet MalformedRequest exceptions
Author
epriestley
Revisions
D16402: Convert some whiny exceptions into quiet MalformedRequest exceptions
Browse Repository
Passed
No Audits

Jul 13 2016

a46a4362dbfb Smooth over a few more transaction compatibility/structure issues with Calendar…
Author
epriestley
Revisions
D16282: Smooth over a few more transaction compatibility/structure issues with Calendar events
Browse Repository
Passed
No Audits

Jun 4 2016

67482fd19d2c Continue modernizing application access to user preferences
Author
epriestley
Revisions
D16015: Continue modernizing application access to user preferences
Browse Repository
Passed
No Audits

Apr 30 2016

c2227d3ed24c Fix "acccess" spelling error
Author
epriestley
Revisions
D15827: Fix "acccess" spelling error
Browse Repository
Passed
No Audits

Apr 13 2016

66366137ffa9 Don't apply `security.require-https` to intracluster requests
Author
epriestley
Revisions
D15696: Don't apply `security.require-https` to intracluster requests
Browse Repository
Passed
No Audits

Apr 9 2016

997460f12fba When proxying cluster HTTP requests, forward only selected headers
Author
epriestley
Browse Repository
Passed
Audited

Apr 8 2016

60e91d393421 Fix an issue with passing HTTP headers through in proxied cluster requests
Author
epriestley
Revisions
D15660: Fix an issue with passing HTTP headers through in proxied cluster requests
Browse Repository
Passed
No Audits

Apr 7 2016

cdec31914390 Convert Countdown to EditEngine
Author
epriestley
Revisions
D15655: Convert Countdown to EditEngine
Browse Repository
Passed
No Audits

Apr 6 2016

5664c838fbbc Reduce thumbnail flickering in comment previews
Author
epriestley
Revisions
D15646: Reduce thumbnail flickering in comment previews
Browse Repository
Passed
No Audits

439821c7b2cd Don't require one-time tokens to view file resources
Author
epriestley
Revisions
D15642: Don't require one-time tokens to view file resources
Browse Repository
Passed
No Audits

Mar 17 2016

2b02024e2329 Use AphrontRequestStream to read request input
Author
epriestley
Revisions
D15484: Use AphrontRequestStream to read request input
Browse Repository
Passed
No Audits

Feb 2 2016

9d125b459ea8 Use large text columns to store IP addresses
Author
epriestley
Revisions
D15165: Use large text columns to store IP addresses
Browse Repository
Passed
No Audits

Jan 8 2016

23367265e18c Strip "Transfer-Encoding" headers from proxied HTTP responses
Author
epriestley
Browse Repository
Passed
Audited

Jan 2 2016

2328e739b760 Fix an issue where Phame could post to the wrong blog
Author
epriestley
Browse Repository
Passed
Audited

Dec 17 2015

e869e7df0b79 When logged-out users hit a "Login Required" dialog, try to choose a better…
Author
epriestley
Revisions
D14804: When logged-out users hit a "Login Required" dialog, try to choose a better "next" URI
Browse Repository
Passed
No Audits

Dec 11 2015

dc79d9ea84cc Put back "PhabricatorResourceSite"
Author
epriestley
Browse Repository
Failed
Audited

8a906b0e18a7 Remove skins from Phame
Author
epriestley
Revisions
D14740: Remove skins from Phame
Browse Repository
Passed
No Audits

Dec 2 2015

c1ae5321d745 Support HTTP parameter prefilling in EditEngine forms for CustomFields
Author
epriestley
Revisions
D14634: Support HTTP parameter prefilling in EditEngine forms for CustomFields
Browse Repository
Passed
No Audits

Nov 30 2015

56be70056111 Improve code structure of PHID fields in EditEngine
Author
epriestley
Revisions
D14601: Improve code structure of PHID fields in EditEngine
Browse Repository
Passed
No Audits

Nov 9 2015

d8111f828f4d Allow a domain other than the install domain to serve as a short Phurl domain
Author
lpriestley
Revisions
D14447: Allow a domain other than the install domain to serve as a short Phurl domain
Browse Repository
Passed
No Audits

Nov 4 2015

621f806e3b54 Provide formal Users/Projects/Mailable fields for EditEngine
Author
epriestley
Revisions
D14404: Provide formal Users/Projects/Mailable fields for EditEngine
Browse Repository
Passed
No Audits

20e4c3fbd46b Modularize complex HTTP parameter types
Author
epriestley
Revisions
D14402: Modularize complex HTTP parameter types
Browse Repository
Passed
No Audits

Oct 26 2015

6e7ceb996bb3 Set a property so that unit tests run on PHP7
Author
Mnkras
Revisions
D14345: Set a property so that unit tests run on PHP7
Browse Repository
Passed
No Audits

Oct 13 2015

3ff5ca789a60 Fix `/tag/aa%20bb` project URIs
Author
epriestley
Revisions
D14260: Fix `/tag/aa%20bb` project URIs
Browse Repository
Passed
No Audits

Sep 8 2015

6915011067d6 Provide an AphrontController implementation of willSendResponse()
Author
epriestley
Revisions
D14079: Provide an AphrontController implementation of willSendResponse()
Browse Repository
No Builds
No Audits

Sep 3 2015

1fc60a9a6e70 Modularize Aphront exception handling
Author
epriestley
Revisions
D14049: Modularize Aphront exception handling
Browse Repository
No Builds
No Audits

20ce1a905f3a Replace AphrontUsageException with AphrontMalformedRequestException
Author
epriestley
Revisions
D14047: Replace AphrontUsageException with AphrontMalformedRequestException
Browse Repository
No Builds
No Audits

Sep 1 2015

a13db0a3ec0c Allow Controllers to return a wider range of "response-like" objects
Author
epriestley
Revisions
D14032: Allow Controllers to return a wider range of "response-like" objects
Browse Repository
No Builds
No Audits

Aug 31 2015

bcc5e55af288 Push construction of routing maps into Sites
Author
epriestley
Revisions
D14008: Push construction of routing maps into Sites
Browse Repository
No Builds
No Audits