From 89e54f3254c396fc924fe7ad81fd48ce25aecd6d Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Sat, 13 Jul 2013 11:05:02 -0400 Subject: [PATCH] Fixed possible NPE in forks page if user account no longer exists --- releases.moxie | 104 +++++++++++++++++++++++++++++++++++++++++----------- 1 files changed, 82 insertions(+), 22 deletions(-) diff --git a/releases.moxie b/releases.moxie index ea547f5..3772ed4 100644 --- a/releases.moxie +++ b/releases.moxie @@ -5,17 +5,16 @@ title: Gitblit ${project.version} Released id: ${project.version} date: ${project.buildDate} + note: '' + If you have forked repositories and your are upgrading to ${project.version}, please DO NOT RELOCATE your repositories folder when running ${project.version} the first time. Gitblit will update forked repository configs on the first execution and it is critical that ${git.repositoriesFolder} points to the same location used by 1.2.x. + '' security: - Raw servlet was insecure. If someone knew the exact repository name and path to a file, the raw blob could be retrieved bypassing security constraints. (issue 198) fixes: - - Could not reset settings with $ or { characters through Gitblit Manager because they are not properly escaped - - Added more error checking to blob page and blame page - - Disable SNI extensions for client SSL connections - - Fixed prettify language extension loading - - Fixed index out of bounds exceptions when generating client certificates for a user when the user's table has bene filtered - Use bash instead of sh in Linux/OSX shell scripts (issue 154) - Fix NPE when getting user's fork without repository list caching (issue 182) - Fix internal error on folder history links (issue 192) + - Fix NPE in repositories panel when viewing a federation proposal (issue 195) - Fix NPEs when initializing the context on a servlet containers which returns a null contextFolder (issue 199) - Fixed incorrect icon file name for .doc files (issue 200) - Do not queue emails with no recipients (issue 201) @@ -27,40 +26,74 @@ - Ensure Redmine url is properly formatted (issue 223) - Use standard ServletRequestWrapper instead of custom wrapper (issue 224) - Switch commit message back to a pre and ensure that it is properly escaped when combined with commit message regex substitution (issue 242) + - Fixed AddIndexedBranch tool --branch parameter (issue 247) + - Improve NPE handling for hook script enumeration (issue-253) + - Workaround missing commit information in blame page (JGit bug 374382, issue-254) + - Ignore orphan ".git" folder in the repositories root folder (issue-256) + - Fixed committer verification with merge commits (issue-264) + - Could not reset settings with $ or { characters through Gitblit Manager because they are not properly escaped + - Added more error checking to blob page and blame page + - Disable SNI extensions for client SSL connections + - Fixed prettify language extension loading + - Fixed index out of bounds exceptions when generating client certificates for a user when the user's table has been filtered + - Fixed AddindexedBranch tool when specifying the non-default branch. + - Fixed submodule diff display changes: + - Retrieve summary and metric graphs from Google over https (issue-61) + - Persist originRepository (for forks) in the repository config instead of relying on parsing origin urls which are susceptible to filesystem relocation (issue 190) - Improved error logging for servlet containers which provide a null contextFolder (issue 199) - - Improved the repository url display. This display now indicates your repository access permission, per-protocol. - Improve Gerrit change ref decoration in the refs panel (issue 206) + - Display full commit message on commitdiff page (issue-258) + - Improved the repository url display. This display now indicates your repository access permission, per-protocol. + - Automatically encode/decode usernames for urls using %XX notation on space, @, and \ - Disable Gson's pretty printing which has a huge performance gain - Properly set application/json content-type on api calls + - Make days back filter choices a setting + - Changed default days back filter setting to 7 days + - Set rel="nofollow" on compressed download links - Improved page title - Updated Polish translation - Updated Japanese translation additions: - - Added client application url menus for Git, SourceTree, Tower, and SparkleShare + - Added a ui for the ref log introduced in 1.2.1 (issue-177) + - Added weblogic.xml to WAR for deployment on WebLogic (issue 199) + - Support setting a custom header logo (issue 208) + - Support header color customizations (issue 209) + - Support username substitution in web.otherUrls (issue 213) + - Option to force client-side basic authentication instead of form-based authentication if web.authenticateViewPages=true (issue 222) + - Set author as tooltip of last change column in the repositories panel (issue-238) + - Setting to automatically create an user account based on an authenticated user principal from the servlet container (issue-246) + - Added WindowsUserService to authenticate users against Windows accounts (issue-250) + - Global and per-repository setting to exclude authors from metrics (issue-251) + - Added commit cache to improve Activity, Dashboard, and Project page generation times + - Added SalesForce.com user service + - Added simple star/unstar function to flag or bookmark interesting repositories + - Added Dashboard page which shows a news feed for starred repositories and offers a filterable list of repositories you care about + - Added client application menus for Git, SmartGit/Hg, SourceTree, Tower, GitHub for Windows, and GitHub for Mac - Added GO http/https connector thread pool size setting - Added a server setting to force a particular translation/Locale for all sessions - - Added smart Git Daemon serving. If enabled, git:// access will be offered for any repository which permits anonymous access. If the repository permits anonymous cloning, anonymous git:// clone will be permitted while anonmymous git:// pushes will be rejected. + - Added smart Git Daemon serving. If enabled, git:// access will be offered for any repository which permits anonymous access. If the repository permits anonymous cloning, anonymous git:// clone will be permitted while anonmymous git:// pushes will be rejected. - Option to automatically tag branch tips on each push with an incremental revision number - Implemented multiple repository owners - Optional periodic LDAP user and team pre-fetching & synchronization + - Added config setting to use SMTPS + - Added option to index all local branches in AddIndexedBranches tool - Display name and version in Tomcat Manager - FogBugz post-receive hook script - Chinese translation - Support --baseFolder parameter in Federation Client - - Added weblogic.xml to WAR for deployment on WebLogic (issue 199) - - Support username substitution in web.otherUrls (issue 213) - - Option to force client-side basic authentication instead of form-based authentication if web.authenticateViewPages=true (issue 222) contributors: - Bandarupalli Satyanarayana - - Chad H. + - Chad Horohoe - Christian Aistleitner + - Colin Bowern - David Ostrovsky - Egbert Teeselink - Hige Maniya + - Hirotaka Honma - Ikslawek - Jay Meyer - John Crygier @@ -70,7 +103,9 @@ - Lukasz Jader - Martijn Laan - Matthias Bauer + - Michael Pailloncy - Michael Schaefers + - Oliver Doepner - Philip Boutros - Rafael Cavazin - Ryan Schneider @@ -79,19 +114,44 @@ - Slawomir Bochenski - Stardrad Yin - Thomas Pummer + - William Whittle - Yukihiko Sawanobori - - github/akquinet - - github/dapengme + - github/akquinet + - github/dapengme dependencyChanges: - - JGit 3.0.0-SNAPSHOT + - JGit 3.0.0.201306101825-r + - Iconic font + - AngularJS 1.0.7 + - FreeMarker 2.3.19 + - Waffle 1.5 + - JNA 3.5.0 + - Guava 13.0.1 settings: - { name: 'git.daemonBindInterface', defaultValue: 'localhost' } - { name: 'git.daemonPort', defaultValue: 0 } - - { name: 'git.defaultIncrementalPushTagPrefix', defaultValue: 'r' } - - { name: 'web.allowAppCloneLinks', defaultValue: true } + - { name: 'git.defaultIncrementalPushTagPrefix', defaultValue: 'r' } + - { name: 'mail.smtps', defaultValue: 'false' } + - { name: 'realm.container.autoCreateAccounts', defaultValue: 'false' } + - { name: 'realm.salesforce.backingUserService', defaultValue: 'users.conf' } + - { name: 'realm.salesforce.orgId', defaultValue: 0 } + - { name: 'realm.windows.defaultDomain', defaultValue: ' ' } + - { name: 'realm.windows.backingUserService', defaultValue: 'users.conf' } + - { name: 'web.activityDuration', defaultValue: 7 } + - { name: 'web.activityDurationChoices', defaultValue: '1 3 7 14 21 28' } + - { name: 'web.activityCacheDays', defaultValue: 14 } + - { name: 'web.allowAppCloneLinks', defaultValue: 'true' } - { name: 'web.forceDefaultLocale', defaultValue: ' ' } + - { name: 'web.headerLogo', defaultValue: '${baseFolder}/logo.png' } + - { name: 'web.headerBackgroundColor', defaultValue: ' ' } + - { name: 'web.headerForegroundColor', defaultValue: ' ' } + - { name: 'web.headerHoverColor', defaultValue: ' ' } + - { name: 'web.headerBorderColor', defaultValue: ' ' } + - { name: 'web.headerBorderFocusColor', defaultValue: ' ' } + - { name: 'web.metricAuthorExclusions', defaultValue: ' ' } + - { name: 'web.overviewReflogCount', defaultValue: 5 } + - { name: 'web.reflogChangesPerPage', defaultValue: 10 } - { name: 'server.nioThreadPoolSize', defaultValue: 50 } } @@ -102,12 +162,12 @@ title: Gitblit 1.2.1 Released id: 1.2.1 date: 2013-01-15 - note: '' + html: '' Because there are now several types of files and folders that must be considered Gitblit data, the default location for data has changed. - - You will need to move a few files around when upgrading. Please see the Upgrading section of the <a href="setup.html">setup</a> page for details. - - <b>Express Users</b> make sure to update your web.xml file with the ${baseFolder} values! + <p /> + You will need to move a few files around when upgrading. Please review the <a href="upgrade_go.html">upgrading GO</a> or <a href="upgrade_war.html">upgrading WAR</a> page for details. + <p /> + <b>Express Users</b> make sure to update your web.xml file with the ${baseFolder} values! '' fixes: - Fixed nullpointer on recursively calculating folder sizes when there is a named pipe or symlink in the hierarchy -- Gitblit v1.9.1