Commit Graph

4376 Commits

Author SHA1 Message Date
Neil Williams
90cfcaaecc Update license headers to 2014.
Ok, now I'm getting some angst in my commit messages like my
predecessors had.  I understand now.  It's a terrible burden.  Why must
the calendar progress?  Why must numbers increment?  The world is
forever turning.

The future is here.

It is 2014.
2014-05-02 16:26:31 -04:00
Brian Simpson
fc607d0988 authorize: Don't swallow socket.error.
Exception in make_request was being caught but then instead of
handling it a generic value of `False` was returned, which would
be treated as a valid response by the calling method.
2014-05-02 16:26:20 -04:00
Brian Simpson
b9790bfeca authorize: Delete old TODO. 2014-05-02 16:26:11 -04:00
Brian Simpson
0ac4d30345 authorize: Don't include request in exception.
This could leak information into our logs.
2014-05-02 16:26:05 -04:00
Chad Birch
88f2c264aa Gold payment form: update label for using creddit 2014-05-02 14:24:06 -06:00
Chad Birch
a91323a642 Creddit reminder: only show when gilding 2014-05-02 14:23:58 -06:00
Chad Birch
3e118f01b3 Gold: Support purchasing codes by loggedout users 2014-05-02 14:23:45 -06:00
Jason Harvey
18efbd48f7 Remove active SQL view.
This view is only used operationally, and is not germane to the app schema or design.
2014-05-01 14:16:33 -08:00
dredmorbius
fd0645a7cb CSS Filter: Add "counters" keyword per CSS 2.1 spec for CSS counters. 2014-05-01 12:29:04 -07:00
Jason Harvey
32586deef6 Remove login_throttle() call. 2014-04-30 15:00:12 -08:00
Brian Simpson
c275ab25a0 sponsored.js: Add error handling for get_check_inventory. 2014-04-30 14:34:32 -04:00
Brian Simpson
d81795689a Use no location when targeting is disabled. 2014-04-30 14:34:26 -04:00
Brian Simpson
d61d970f44 Only permit sponsors to check location + target inventory. 2014-04-30 14:34:21 -04:00
Brian Simpson
499e4ac499 auth_transaction: Remove rotted test logic. 2014-04-30 14:34:09 -04:00
Brian Simpson
beed1bc8fd Cleanup POST_update_pay. 2014-04-30 14:34:03 -04:00
Brian Simpson
6a1036142d Handle AuthorizeNetException in edit_profile. 2014-04-30 14:33:58 -04:00
Brian Simpson
157c827a7c promotelinkform: Increase default budget to $50. 2014-04-30 14:33:51 -04:00
Brian Simpson
f83f46936b Record rejection reason in PromotionLog. 2014-04-30 14:33:40 -04:00
Brian Simpson
b907de04bd charge_transaction: Check error value from _make_transaction. 2014-04-30 14:33:33 -04:00
Brian Simpson
41129145db Disallow creating campaigns starting more than 30 days in the future.
That can create situations where the authorization hold expires
before being charged.
2014-04-30 14:33:27 -04:00
Brian Simpson
1af36dad3f emr_helpers: Avoid calling describe_jobflows() with no filters.
Replaces a catchall call to emr_connect.describe_jobflows() with
calls that specify states or jobflowid. This will reduce the size
of the response, which AWS has warned could trigger 400 errors.
2014-04-30 14:33:16 -04:00
Brian Simpson
8a52edc146 Delete unused describe_jobflows_by_ids. 2014-04-30 14:33:09 -04:00
Brian Simpson
67eefd3a05 VLocation: strip out "null" values. 2014-04-30 14:32:58 -04:00
Brian Simpson
d23ee7ab98 Retrieve deleted users with paypal gold subscriptions.
They won't get any gold but the event is logged so the subscription
can be deleted. Respond to paypal's IPN with a 200 rather than
raising an exception so the IPN isn't retried.
2014-04-30 14:31:13 -04:00
Brian Simpson
919fbca61a Add back POST_update for API clients. 2014-04-30 14:30:19 -04:00
Brian Simpson
5e14ea3ad9 Separate forms for updating email and password. 2014-04-30 14:30:04 -04:00
Andre D
1b4b6ca0da wiki: Fix sometimes not showing compare. 2014-04-30 10:59:04 -07:00
Andre D
5c4f27249b wiki: Fix showing extended on special pages. 2014-04-30 10:58:58 -07:00
Andre D
c7ff1d0db2 friends: Fix missing VUser. 2014-04-30 10:58:52 -07:00
Andre D
5497d03679 redirect: Use our actual redirect. 2014-04-30 10:58:40 -07:00
Andre D
b627f69a2a userlisting: Document endpoints. 2014-04-30 10:58:34 -07:00
Andre D
c21dc313e7 wiki: Correctly check wiki mod permission scope. 2014-04-30 10:58:16 -07:00
Neil Williams
1424a0a0b7 Remove obsolete css_validator_messages. 2014-04-29 13:13:18 -07:00
Neil Williams
84cab4adfc CSS Filter: Bring back the size check.
Woops.
2014-04-29 13:13:18 -07:00
Neil Williams
9afbde63a0 Fix missed ValueError->WikiBadRevision translation. 2014-04-29 13:13:18 -07:00
Alex Smith
b8beb8aa8b Allow steps() function in stylesheets 2014-04-29 12:09:11 -07:00
Neil Williams
1c4d6311b3 CSS Filter: unleash modern CSS.
Properties, functions, and at-rules from the following modules are added
to the safe lists:

* CSS Color Module Level 3
* Media Queries
* CSS Backgrounds and Borders Module Level 3
* CSS Values and Units Module Level 3
* CSS Flexible Box Layout Module
* CSS Text-decoration Level 3
* CSS Transitions
* CSS Animations
* CSS Transforms Level 1
* CSS Text Level 3

As documented on https://developer.mozilla.org/en-US/docs/Web/CSS/CSS3
2014-04-29 11:09:43 -07:00
umbrae
6ded0ea833 Trigger a reflow on CSS preview so webkit browsers reset animations. 2014-04-29 11:09:43 -07:00
Jordan Milne
291449a983 CSS Filter: add security test suite. 2014-04-29 11:09:43 -07:00
Neil Williams
dce6b6d84f CSS Filter: replace cssutils with tinycss2.
The aim of this patch is to allow a mostly equivalent subset of CSS
through as the cssutils-based parser did.

The subset of valid properties represented in this are the entirety of
CSS2.1 plus a handful of newer ones that are already in active use on
reddit.

Several IE hacks like the "filter" property, "_height", etc. are no
longer allowed.
2014-04-29 11:09:43 -07:00
Neil Williams
6e97142cdc Disable subreddit stylesheets for old IEs.
Their CSS parsing is so poor that the risk of exploits is much higher.
2014-04-29 11:09:43 -07:00
Neil Williams
1424f2eb50 CSS Filter: move preview link/comment generation to r2.lib.pages.
These functions, while used in the CSS filter UI, are view code and
should be separate from the filter itself.
2014-04-29 11:09:43 -07:00
Neil Williams
02d5dca1d7 CSS Filter: remove unnecessary save_sr_image wrapper. 2014-04-29 11:09:43 -07:00
Neil Williams
1ceb9f20d8 Don't use general ValueError for specific wiki exception.
It masks bugs.
2014-04-29 11:09:43 -07:00
powerlanguage
55a7b1ec80 Update contact page.
Add advertising and more contact options.
2014-04-28 16:52:06 -07:00
GrandfatherOfSaul
723643433b Remove extra "ago" in comment's time seen through compact view. 2014-04-28 12:25:17 -07:00
Techwolf
9845ed5f7f Remove extra closing brace from "last edited" text. 2014-04-25 16:53:50 -07:00
umbrae
07d6eb399f Clean up registration/login validation errors. 2014-04-24 04:57:31 -07:00
Max Goodman
f93b5c42ed Quantize listing dates to "just now", like in JS. 2014-04-25 15:49:32 -07:00
Max Goodman
6a27c1bf78 Add iso8601 polyfill necessary for timetext in old browsers. 2014-04-25 15:49:32 -07:00