CRAM-MD5 authentication and alikes can be disabled using the
"disable-these-authenticators=..." option if needed;
plaintext will still work over TLS/SSL
a local database, so no extra network traffic). Enabled by default,
disable with "GeoIP no" in .conf if you don't want it.
discussed with/ok mbalmer (maintainer)
in-tree include: various XSS, SQL injection, saves sensitive data
in PHP session, crafted POST allows users to read files accessible
by the web server.
thanks bsd at openbsd.rutgers.edu for feedback, ok ckuethe
- fix depends for the drac FLAVOR in the process
- add a patch from cyrus bugzilla to allow imapd.conf to contain blank lines (!)
* Added statuscache.db to cache IMAP STATUS data
* Added option to unexpunge to restore messages by time interval
* Implemented incremental squat updates (see squatter.8)
* Fixed major bugs in reconstruct -k implementation
* Added code to promote transaction safety and to track the lock status of skiplist databases
* Allow long lines in imapd.conf to be split across multiple lines by using backslash as a continuation character.
* Fixed miscellaneous bugs and build issues
... and more
- don't bother trying to fix compiler optimization flag tests. they're
badly broken/linux spcific, and we don't use them anyway.
- the net source client became a "real" client (executable), instead of
an "in process" client (plugin)
- previous sun_driver patches accepted upstream, plus:
* fix cycle timing in duplex mode by moving calculations and function
calls out of the poll() synchronization loop
* shorten xrun and silence writing/reading messages
* remove unused variables
* attempt to stop continuous playback underruns in duplex mode that are
caused by the capture buffer overrunning
* try harder to make sure we have pristine buffers after
sun_driver_start()
* use native endian audio encodings
* report a delay when poll() times out, instead of effectively running
a null cycle
now jack works on my r10k sgi :)
It is designed to allow the programmer to express as much of the view
logic as desired in Python, and includes a pure Python XML expression
syntax named stan to facilitate this. However it also provides rich
support for designer-edited templates, using a very small XML
attribute language to provide bi-directional template manipulation
capability.
Nevow also includes Divmod Athena, a "two way web" implementation,
providing a two-way bridge between Python code on the server and
JavaScript code on the client. Modular portions of a page, known as
"athena fragments" in the server python and "athena widgets" in the
client javascript, can be individually developed and placed on any
Nevow-rendered page with a small template renderer. Athena abstracts
the intricacies of HTTP communication, session security, and
browser-specific bugs behind a simple remote-method-call interface,
where individual widgets or fragments can call remote methods on their
client or server peer with one method: "callRemote".
ok pyr@
