##// END OF EJS Templates
auth: don't break hashing in case of user with empty password....
auth: don't break hashing in case of user with empty password. In some cases such as LDAP user created via external scripts users might set the passwords to empty. The hashing uses the md5(password_hash) to store reference to detect password changes and forbid using the same password. In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such case. This change makes it work for empty passwords now.

File last commit:

r1:854a839a default
r2203:8a18c3c3 default
Show More
release-notes-3.1.0.rst
49 lines | 1.6 KiB | text/x-rst | RstLexer

|RCE| 3.1.0 |RNS|

General

  • 2015-03-17

News

  • API: extended the API regarding |prs|. Added the following operations to support CI integrations.
    • get_pull_request
    • get_pull_requests
    • merge_pull_request
    • close_pull_request
    • comment_pull_request
  • VCS Server: improved handling for the user in the event that no VCS Server is enabled.
  • VCS Server: Added the vcs.server.enable configuration option, see :ref:`vcs-server`
  • VCS Server: improved system stability if the VCS Server is not installed.
  • Style: changed icon colors for the vcs back ends; Git, Mercurial and Subversion.

Fixes

  • Security: fixed XSS vulnerability in files view.
  • Pull Request: fixed dataTable integration for IE8 in Pull Request overview.
  • Files: adding a new file via web form has been fixed.
  • Diff: renames of files which have spaces in their file names are now displayed correctly.
  • Settings: Remove supervisor statistics page.
  • Style: improved headers on all Pull Request related pages to make them more consistent.
  • Style: improved headers on all repository related pages to make them more consistent.
  • Style: updated icons.
  • Style: removed border around checkboxes in IE10.
  • Style: improved display of permission summaries in admin settings for all browsers.
  • Style: fixed alignment of form labels across all browsers.
  • Style: improved title on the Changeset page.
  • Style: fixed display of select widgets in IE8 and IE9.
  • Style: fixed password input field for IE8.
  • Style: fixed button positioning in inline comment forms of diffs for IE8.