| Age | Commit message (Expand) | Author |
| 2009-09-15 | CSRF / auth fixes, golden data file checkpoint | Andy Staudacher |
| 2009-09-10 | Use abs_url() inside url::redirect() calls so that we don't just wind | Bharat Mediratta |
| 2009-09-08 | Move specialized (pretty) url generation back into Item_Model so that | Bharat Mediratta |
| 2009-09-05 | Change click() to change() so that we immediately update the UI when | Bharat Mediratta |
| 2009-09-05 | Revert previous edit. Prefer « none » (sweet, nice Unicode characters) inst... | Andy Staudacher |
| 2009-09-05 | Add missing view for language selection | Andy Staudacher |
| 2009-09-04 | placeholder for a missing view | Bharat Mediratta |
| 2009-09-04 | Shorten the name in the block so that it doesn't wrap. | Bharat Mediratta |
| 2009-09-04 | When changing user preferences, reset the session based locale preferences. | Andy Staudacher |
| 2009-09-04 | Add new locale preferences: Adding per session (cookie) locale preferences an... | Andy Staudacher |
| 2009-09-01 | XSS / style fixes for newly detected issues (after fixing XSS scanner) | Andy Staudacher |
| 2009-08-31 | Fix XSS vectors in HTML attributes (mostly t() calls) | Andy Staudacher |
| 2009-08-31 | Rename mark_safe() to mark_clean() | Andy Staudacher |
| 2009-08-30 | Change all instances of SafeString::of_safe_html() to html::mark_safe() in vi... | Andy Staudacher |
| 2009-08-29 | Update all code to use helper method html::clean(), html::purify(), ... inste... | Andy Staudacher |
| 2009-08-29 | Undo url helper changes - url methods no longer return a SafeString. | Andy Staudacher |
| 2009-08-29 | Merge commit 'upstream/master' | Andy Staudacher |
| 2009-08-29 | Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeS... | Andy Staudacher |
| 2009-08-29 | Fix active() to not use user::guest() as the fallback for our Session::get() ... | Bharat Mediratta |
| 2009-08-29 | Adding SafeString which is going to replace p::clean() and p::purify(). | Andy Staudacher |
| 2009-08-27 | Remove 'ENGINE=InnoDB' specification from tables that we create. Use | Bharat Mediratta |
| 2009-08-27 | Don't ask for csrf when we're resetting passwords. They're not gonna have on... | Bharat Mediratta |
| 2009-08-09 | Require a valid url for users. Fixes ticket #612. | Bharat Mediratta |
| 2009-08-08 | Change galleryPanel and galleryDialog widgets to gallery_panel and gallery_di... | Tim Almdal |
| 2009-08-08 | Refactor the gallery dialog into a jQuery widget | Tim Almdal |
| 2009-08-08 | Don't show the ajaxy login link in the top right corner if we're on the login... | Bharat Mediratta |
| 2009-08-06 | Cleanup the javascript for enabling dialog or panel links. | Tim Almdal |
| 2009-08-02 | Change the API for getting to the original state of an ORM. | Bharat Mediratta |
| 2009-07-29 | Clean up user form events. Thanks to Ben Smith (glooper). | Bharat Mediratta |
| 2009-07-28 | Use events to generate menus, instead of having xxx_menu helpers. | Bharat Mediratta |
| 2009-07-25 | fix for ticket #574. The user->url database wasn't being set when the user wa... | Tim Almdal |
| 2009-07-25 | Pass the variable when the "user_edit_form" event is fired. | Tim Almdal |
| 2009-07-23 | Add form processing events: | Bharat Mediratta |
| 2009-07-23 | Convert instances of theme_url() to just url() to match the API change | Bharat Mediratta |
| 2009-07-22 | Use the Kohana cascading filesystem to locate resources loaded by the | Bharat Mediratta |
| 2009-07-21 | In the logout link, urlencode the continue url so that ampersands, etc | Bharat Mediratta |
| 2009-07-21 | Escape bare & symbols so that we use valid entities. Fixes ticket #577. | Bharat Mediratta |
| 2009-07-19 | More thorough fix for #421. Create User_Model::display_name() which | Bharat Mediratta |
| 2009-07-21 | Changed "Forgot Your Password" text to use capital 'Y' on the word Your | Shai Ben-Naphtali |
| 2009-07-17 | Rename "locale" helper to "locales" to avoid conflicting with PHP 5.3. | Bharat Mediratta |
| 2009-07-16 | Second non-trivial change to the event code. We now publish model | Bharat Mediratta |
| 2009-07-16 | Non-trivial changes to the event handling code: | Bharat Mediratta |
| 2009-07-16 | Add missing ) dropped in 8f9a943f. | Bharat Mediratta |
| 2009-07-13 | Add quotes around all values that contain spaces in them, and add a | Bharat Mediratta |
| 2009-07-02 | Use Unicode characters (looks better to translator, and fixes normalization i... | Andy Staudacher |
| 2009-07-01 | Fix a bunch of XSS vulnerabilities turned up by manual inspection | Bharat Mediratta |
| 2009-06-28 | Rename $theme->url() to $theme->theme_url() for consistency wiht | Bharat Mediratta |
| 2009-06-28 | Use $theme->script() method to render module javascript files | Tim Almdal |
| 2009-06-23 | Refactor the install/upgrade code to be more flexible. | Bharat Mediratta |
| 2009-06-15 | Add string to localizer | unostar |