Max Goodman
0f4e3adb8b
Fix _login invocation for resetpassword.
2011-10-07 22:06:07 -07:00
Max Goodman
9954c55906
Specify tabindex on login inputs for mouse-free usage.
2011-10-07 15:11:37 -07:00
Max Goodman
b128a46f62
Focus the username box when a login/register popup is shown.
2011-10-07 15:11:37 -07:00
Max Goodman
575b3bd8df
Do not 403 CORS requests with non-allowed origin.
2011-10-07 15:11:37 -07:00
Max Goodman
3752c677ca
Omit tracking pixel on secure .compact pages.
2011-10-07 15:11:37 -07:00
Max Goodman
d6d1887ac4
Expect the domain prefix for authorized cname origins.
2011-10-07 15:11:36 -07:00
Max Goodman
d3fb892a11
Take the domain prefix into account for g.origin.
2011-10-07 15:11:36 -07:00
Max Goodman
be975f395d
Fix validation of dest redirects to cnames.
2011-10-07 15:11:36 -07:00
Max Goodman
9ef872e7b3
Implement http login on subreddit cnames.
2011-10-07 15:11:32 -07:00
Max Goodman
c2cf57007d
Add missing preamble to framebuster.
2011-10-07 14:51:25 -07:00
Max Goodman
5ec91a62f8
Specify the cookie path when deleting for Konqueror.
2011-10-07 14:51:25 -07:00
Max Goodman
bb6beb7445
Set the frame name as an iframe attribute for Konqueror.
2011-10-07 14:51:25 -07:00
Max Goodman
17dafa6a14
Handle JS-free POSTs in the login form.
2011-10-07 14:51:25 -07:00
Max Goodman
607cb4fa5a
Update error_field to check c.errors properly.
2011-10-07 14:51:25 -07:00
Max Goodman
6cba543441
Omit the powered_by logo on reddit subdomains.
2011-10-07 14:51:25 -07:00
Max Goodman
b847757069
Use cross domain https for slightly safer login.
...
Login UI code has been simplified and moved into the client side. CORS
is used for the cross-domain POST if available, otherwise an iframe and
cookie polling technique is used. Start fleshing out the new JS tree. :)
2011-10-07 14:51:25 -07:00
Max Goodman
edbefbcf4f
Add CORS support and cross-domain response helpers.
2011-10-07 14:51:25 -07:00
Max Goodman
bad98ec030
Move the preamble above library JS in mobile.
2011-10-07 14:51:25 -07:00
Max Goodman
70ff6b6178
Remove and simplify sendstring function.
2011-10-07 14:51:25 -07:00
Max Goodman
a6ec4dbd6b
Remove old Firefox 3 access control implementation.
2011-10-07 14:51:25 -07:00
Max Goodman
3144033318
Prettify the login popup.
2011-10-07 14:51:25 -07:00
Max Goodman
4b1d3de26d
Allow multple different cookies to pass through the cleanup middleware.
2011-10-07 14:51:25 -07:00
Max Goodman
71d7ecfb8c
Remove non-functioning subreddit counting for now.
2011-10-07 14:51:25 -07:00
Max Goodman
205cfb5967
Add general jQuery cookie library and replace jquery.json.
2011-10-07 14:51:25 -07:00
Max Goodman
bf1ff113a7
Move external JS libs to their own directory.
2011-10-07 14:51:25 -07:00
Andre D
1ecb427fdd
Add an option to disable rate limiting. For testing.
2011-10-07 14:51:24 -07:00
Max Goodman
e853b9285f
Add quick support for an announcement message in the .ini.
2011-10-07 14:51:24 -07:00
Max Goodman
5a7d823e1a
Add lab.reddit.com to the middleware exception.
2011-10-07 14:51:24 -07:00
Max Goodman
16d74d3684
Require JSON APIs are requested with a .json extension.
2011-10-07 14:51:24 -07:00
Max Goodman
c280c6aca1
Fix handling of an unset language override.
...
Add setting to example.ini.
2011-10-07 14:51:24 -07:00
Neil Williams
93a65a6a3a
Move onload out of the app.
...
We need onload to be able to get a client-IP based
tracking validation hash, but it doesn't actually need
to do any database work to make those hashes. It also
fails a huge number of times per day. This moves the hash
calculation out to an external app with no db dependencies.
2011-10-06 08:22:16 -07:00
Neil Williams
581cb4eac5
Make clean_static remove reddit.js and mobile.js.
2011-10-06 08:12:34 -07:00
Neil Williams
5d8179265a
Remove temporarily disabled click-tracking JS.
...
Until it's back in action, this is just wasting bytes on the wire.
2011-10-06 08:12:19 -07:00
Neil Williams
ea07f046d0
Remove "defunct" JS.
2011-10-06 08:11:57 -07:00
Max Goodman
a0bd8cfee7
Exclude ssl.reddit.com from the subreddit redirection middleware.
2011-10-06 08:11:51 -07:00
Max Goodman
c051491717
Add an separating pi from the server info line.
2011-10-06 08:11:46 -07:00
Max Goodman
739288fdb0
Footer spacing cleanup.
2011-10-06 08:11:41 -07:00
Max Goodman
3dfef4b0e4
Fix whitespace requirement for SPRITE comments in nymph.
2011-10-05 16:27:42 -07:00
Max Goodman
e1dd8ea68a
Don't include the subreddit path in the inbox links.
2011-09-23 18:35:22 -07:00
Max Goodman
a0eda96c95
Move IE hacks to the leper colony.
2011-09-23 15:34:53 -07:00
Max Goodman
deb0da397c
CSS hack IE6/7 to display header tabs as inline-block.
2011-09-23 15:34:53 -07:00
Max Goodman
310d276469
Add width/height attributes to the default logo.
2011-09-23 15:34:53 -07:00
Max Goodman
e20fdfb06e
Sprite all the things.
...
Lots of crazy CSS hacking in here. Sizing the header-bottom-right bits
required a lot of twiddling to appear consistently between Firefox, IE,
and Chrome. Edit at your own risk.
2011-09-23 15:34:53 -07:00
Max Goodman
9db33733c4
Clean up the active modmail icon.
2011-09-23 15:34:53 -07:00
Neil Williams
bc289092d9
Remove unused app restart code obviated by uWSGI.
2011-09-21 11:49:45 -07:00
Neil Williams
24503f09ed
Limit maximum query length for searches.
2011-09-21 11:49:39 -07:00
Max Goodman
a47201f2b4
Move the server info into a little expando.
2011-09-21 11:49:34 -07:00
Neil Williams
e576b3c500
Remove unused admin sidebar. Show everyone app id.
2011-09-21 11:49:28 -07:00
Max Goodman
3735033907
Add support for special user distingushes.
...
Special distinguishes are granted by setting "special_distinguish_*"
properties on an Account. A post can only be a single type of [admin,
special, mod] distinguished. Admins can be granted a special
distinguish.
2011-09-21 11:49:23 -07:00
Neil Williams
de2102e975
Restore old runscripts for backwards compatibility.
...
These are still deprecated, but they are necessary
to keep running if you installed before the Natty
installer.
2011-09-20 12:33:35 -07:00
