##// END OF EJS Templates
u » pc » rhodecode-enterprise-ce-fork-pc
RSS

Fork of rhodecode-enterprise-ce

shadow-repos: use safer way to destroy shadow repositories....
shadow-repos: use safer way to destroy shadow repositories. we had reported errors on removal of shadow repos. Not reproduced, however suspecting are filesystem sync/symlink race-conditions on shared storage. End result were existing shadow-repo directories that tricked rhodecode into thinking shadow repos is existing, but infact it was a dummy structure semi-removed. Using shutil.move we ENSURE rhodecode doesn't read those back even if removal fails.
marcink - - Load All Authors

File last commit:

r2257:9c2fac6d stable
r2791:27d869d5 stable
Show More
release-notes-4.10.5.rst
55 lines | 1.3 KiB | text/x-rst | RstLexer
/ docs / release-notes / release-notes-4.10.5.rst
History | Annotation | Raw |Copy content |Copy permalink

|RCE| 4.10.5 |RNS|

Release Date

  • 2017-11-23

New Features

General

  • dependencies: pin against rhodecode-tools 0.13.1. Fixes a cleanup-repos bug.

Security

  • Pull requests: security(low), check for permissions on exposure of repo-refs. Prevents exposure of branches/tags on private repositories.
  • Metatags: limit the scope of url => metatag to http, https and / links. Prevents possible JS injection in those types of links which is unsafe.

Performance

Fixes

  • Emails: fixed validation of emails with whitespace in them.
  • Repo groups: fix bad route redirect on check if user tried to revoke permissions on himself.
  • Comments: place the left over comments (outdated/misplaced) to the left or right pane in side-by-side diff.
  • Comments: allow to properly initialize outdated comments that are still attached. Fixes a problem when outdated TODO notes couldn't be properly resolved.
  • Diffs: fixed problem with rendering no newline at the end of file markers. In case of unified diff that would show incorrect diffs in rare cases.
  • Settings: fix potential 500 problem on bad data passed in.

Upgrade notes

  • Fixes regression in nested repository groups update. No upgrade problems should be expected