Commit graph

1254 commits

Author SHA1 Message Date
Tom Hughes
8181cb4bf7 Add support for commenting on, and replying to, diary entries. 2008-01-17 23:12:25 +00:00
Richard Fairhurst
3eecc3ee5b 0.6c: bunch of minor improvements and bugfixes 2008-01-17 22:28:21 +00:00
Tom Hughes
459e16861a Set MIME type correctly for diary RSS feeds. 2008-01-16 10:28:57 +00:00
Tom Hughes
c3bd1f113b Tidy up message sensitisation a bit more, and add sensitisation of
information in the diary RSS feeds.
2008-01-16 10:02:42 +00:00
Tom Hughes
b416597507 Make the message reply link prefill the title with "Re: original title".
Closes #634.
2008-01-15 19:05:17 +00:00
Tom Hughes
2eec60b575 Automatically convert links in diary postings into HTML links. 2008-01-15 18:31:23 +00:00
Tom Hughes
9f909d7447 Add a few more escape calls to prevent nasty HTML being rendered. Also
switch to using sanitize() instead of h() to escape message bodies. This
is not quite as safe as there is no guarantee that the HTML scanner it
uses will find everything, but is does allow benign HTML tags to be
displayed again.
2008-01-15 18:22:08 +00:00
Tom Hughes
1e54573bae Escape message titles and bodies. This is an emergency fix as some genius
has decided to report this XSS problem to a public mailing list. Unfortunately
it means that some functionality (links in messages etc) has been lost for now.
2008-01-15 00:26:01 +00:00
Tom Hughes
bc309badb8 Point people at the wiki when GPX imports fail. 2008-01-10 12:15:34 +00:00
Tom Hughes
a31e61169c Back out attempt to commit partial support for POIs as this is not at
all ready for prime time yet.
2008-01-08 18:23:56 +00:00
Nick Whitelegg
1c7998009f began callback code for feature lookup 2008-01-07 20:44:16 +00:00
Nick Whitelegg
2e03861300 Began code for feature lookup: implemented code to respond to mouse click and latlon to non spherical Mercator (for the postgis database) 2008-01-07 20:25:12 +00:00
Tom Hughes
425b3654d7 Mark mails as auto submitted. Closes #627. 2008-01-06 13:21:50 +00:00
Tom Hughes
01f525c924 Fix typo. Closes #628. 2008-01-06 13:14:44 +00:00
Tom Hughes
7fc2dbecd5 Migrate web site to use rails 2.0.1. 2008-01-06 12:17:58 +00:00
Tom Hughes
26f28764dc Update the links when the active layers change.
Closes #622.
2008-01-02 09:54:19 +00:00
Richard Fairhurst
7acbc0c7c6 autocomplete (not compiled for now) and start of tile support 2007-12-23 12:59:59 +00:00
Tom Hughes
90fa3e650b Ban (for now at least) searching of nodes, and searching for a key
without giving a value as both of these will lock the server up for
a long time.
2007-12-22 11:55:15 +00:00
Tom Hughes
d6f6e4c7c1 Third time lucky - what it really wants is a hash of node IDs... 2007-12-20 10:33:25 +00:00
Tom Hughes
24ac6b49f7 The to_xml_node method for a way wants a list of node IDs, not a list
of nodes...
2007-12-20 10:23:46 +00:00
Tom Hughes
028f94fcca Pass the node list to to_xml_node when outputting a way so that it
lists the nodes in the way properly.
2007-12-20 10:21:22 +00:00
Tom Hughes
5400a938a8 Optimise tag searching of ways and relations a bit more... 2007-12-20 10:15:45 +00:00
Tom Hughes
a617159352 Optimise search queries for ways and relations to stand some chance
of being efficient.
2007-12-20 09:50:08 +00:00
Richard Fairhurst
3461b7a699 attempt fix for anon users 2007-12-12 20:17:12 +00:00
Richard Fairhurst
df3db35c96 enable revert 2007-12-09 15:20:47 +00:00
Tom Hughes
0c549650eb Change postcode searches to use z15 instead of z12. 2007-12-07 00:12:49 +00:00
Tom Hughes
15c492ebfe Try and make asset tagging actually work. 2007-12-06 18:42:45 +00:00
Tom Hughes
c1299fbb35 Use the z13 key for z13 and over. 2007-12-05 12:15:41 +00:00
Richard Fairhurst
ede76d8dc5 DROP TEMPORARY TABLE so Tom can turn the privs down 2007-12-03 17:15:07 +00:00
Richard Fairhurst
0ab2db3979 move preset tags and colours into config files 2007-12-01 10:32:35 +00:00
Tom Hughes
8225f0a6ea Reenable trace uploads. 2007-12-01 00:34:55 +00:00
Richard Fairhurst
5fd514fee3 further refinement to revert 2007-11-30 20:52:38 +00:00
Tom Hughes
52276be4a9 Disable GPX uploads. 2007-11-30 18:49:55 +00:00
Richard Fairhurst
e0c9a8c6d5 slight revert changes 2007-11-30 18:40:57 +00:00
Tom Hughes
6d6c9ddc8c Specify display_name and tag explicitly when generating pagination links
as they don't always seem to be default correctly. Closes #561.
2007-11-30 01:27:14 +00:00
Richard Fairhurst
914cad0aa2 show nearest 10 users (request by Blackadder) 2007-11-28 22:07:24 +00:00
Tom Hughes
f5c9a41e87 Use the new OSM OpenLayers stuff. 2007-11-28 19:24:58 +00:00
Richard Fairhurst
58e50383f9 bugfix for non-intersecting intersections (trac #592) 2007-11-26 14:29:31 +00:00
Tom Hughes
cb330ffd7a Force new users to enter their email address twice to try and avoid so
many incorrect email addresses with typos in...
2007-11-25 12:38:48 +00:00
Tom Hughes
f09b16cade When asked for ways which use a node, or relations which use some given
object, return 200 OK with an empty document if not matches are found
rather than 400 Bad Request (for ways) or 404 Not Found (for relations).
2007-11-24 14:47:50 +00:00
Tom Hughes
300c3b4ed4 Work round ruby's horribly broken URI.escape that deliberately doesn't
escape most characters which have special meaning in URIs...
2007-11-24 14:36:21 +00:00
Tom Hughes
7de4cb19b8 Wrap evaluation of default values for parameters inside the HTML escaping
as that causes nil to become "" hence defeating the conditional default.
2007-11-24 14:13:21 +00:00
Tom Hughes
144640c9ed Fix tag splitting. 2007-11-24 01:00:53 +00:00
Tom Hughes
2cbcabb3f6 HTML escape substituted parameter values to avoid injection attacks. 2007-11-23 00:49:55 +00:00
Tom Hughes
7b172efeb6 Don't indicate if a message has been read in the outbox view. 2007-11-21 23:54:14 +00:00
Mikel Maron
d736a158be message outbox 2007-11-21 18:24:29 +00:00
Tom Hughes
9ec8ef0220 Add escaping of semicolon and equals in node tags.
Based on patch from Dave Stubbs.
2007-11-21 13:30:55 +00:00
Richard Fairhurst
a8333a38a2 Require data to be public before editing 2007-11-20 10:08:58 +00:00
Richard Fairhurst
19965b2a5d waterway=stream,natural=peak 2007-11-13 15:49:22 +00:00
Richard Fairhurst
849397a336 0.5a: further revisions to merged ways, API->SWF error handling 2007-11-13 09:26:04 +00:00