aboutsummaryrefslogtreecommitdiffstats
path: root/mediagoblin
Commit message (Collapse)AuthorAgeFilesLines
* Call is_updated instead of testing it boolean.Brett Smith2013-03-251-1/+1
|
* Harden It's Dangerous key management.Brett Smith2013-03-241-20/+45
| | | | | | | | | | The previous code was theoretically subject to timing attacks, where an attacker could read the key in between the time it was saved to the file and when the chmod happened. This version prevents that by using umasks to ensure the files always have the right permissions. This version also avoids using a key that cannot be saved due to some system setup bug.
* First tests for the Session class.Brett Smith2013-03-241-0/+30
|
* Set a starting value for session.send_new_cookie.Brett Smith2013-03-241-1/+5
| | | | | | This makes session.__init__ slightly more complicated but probably simplifies everything else, especially if we make the class smarter later by having it track changes itself.
* Remove beaker stuff from the code.Brett Smith2013-03-245-77/+2
| | | | This is all obsoleted by It's Dangerous.
* Delete the session cookie on an empty session.Brett Smith2013-03-241-1/+4
|
* Back sessions with It's Dangerous.Brett Smith2013-03-243-3/+66
| | | | This is a contribution to #668.
* Improve fs security for itsdangerous secret.Elrond2013-03-221-2/+6
| | | | Set mode 700 on the directory, mode 600 on the file.
* Docs for get_timed_signer_url.Elrond2013-03-221-0/+26
|
* Basic itsdangerous infrastructure.Elrond2013-03-223-0/+61
| | | | | Implement the basic infrastructure for using itsdangerous in mediagoblin. Usage instructions will follow.
* piwigo start at pwg.images.addChunk.Elrond2013-03-211-1/+43
| | | | | | | | This function receives part of an upload. Does most parameter validation, but does not safe the data anywhere for now. Also fake pwg.images.exist
* piwigo: Add session.getStatus, improve categories.getListElrond2013-03-212-5/+10
| | | | | | | | | | | - pwg.session.getStatus returns the current user as "fake_user". When we have a session, we'll return something better. - pwg.categories.getList add a name and the parent id for its one and only "collection". - Improve logging a bit.
* piwigo: Sent a fake cookie.Elrond2013-03-211-1/+18
| | | | | | | shotwell needs a pwg_id cookie to continue. And really, it's the only cookie it supports, so in the long run, we need to send a proper session cookie as pwg_id.
* Add warning README.rst and fix pep8.Elrond2013-03-192-1/+24
|
* piwigo: Move tool functions into tools.pyElrond2013-03-192-83/+108
|
* Start at pwg.categories.getList and improve xml output.Elrond2013-03-191-13/+51
| | | | | | - The xml formatting is now in the main function. - Add PwgNamedArray to have named lists in xml output. - Remove gmg.test method
* piwigo: start xml response encoding, more (fake) methods.Elrond2013-03-191-2/+55
|
* Starting a piwigo api plugin.Elrond2013-03-192-0/+116
| | | | | | | This one just puts up the basic endpoint, some infrastructure and a fake login method. Lots more needed.
* A more realistic "con" explaination in the docstring of ↵Christopher Allan Webber2013-03-151-1/+4
| | | | | | | | exif_fix_image_orientation Thanks to dnet for catching this. This commit sponsored by Chester Zeller. Thanks!
* Changing "evil" submission test-script to be a bash script.Christopher Allan Webber2013-03-123-0/+0
|
* Now in 0.4.0 dev mode!Christopher Allan Webber2013-03-121-1/+1
|
* New version: 0.3.3 !Christopher Allan Webber2013-03-111-1/+1
|
* Committing extracted and compiled translationsChristopher Allan Webber2013-03-116-2/+2
|
* Committing present MediaGoblin translations before pushing extracted messagesChristopher Allan Webber2013-03-115-82/+83
|
* Fixing dates when uploaded in a video to a mediagoblin instance.Christopher Allan Webber2013-03-111-1/+32
| | | | | | | | There were some "serializing to json strings" issues. They should be fixed now... much more careful whitelist and cleaning of the video "tags" metadata out of gstreamer. This commit sponsored by Aimee Sullivan. Thanks!
* Added thingiview.js symlink, fixes webgl viewJoar Wandborg2013-03-101-0/+1
|
* 655: Fix collection fetching for media_collect()Elrond2013-03-101-3/+3
| | | | | | | | | | | | | | | | | | | | | | The problem is: Collection.query.filter_by(id=X, ...) 1. X = form.collection.data This works nicely for the completely empty form (X = None). It does not work for a selected collection, because X will be the collection, not its id. 2. X = request.form.get('collection') (old code). This one works mostly, except for the completely empty form on postgres, because in this case X = u"__None" and postgres does not like comparing an integer column with a string. Fix: collection = form.collection.data if collection and collection.creator != request.user.id: collection = None
* Providing warning to users about instability of OAuth/APIChristopher Allan Webber2013-03-081-0/+4
|
* Making a fix so that video codec name switched from "vp8 video" to "vp8"Christopher Allan Webber2013-03-061-3/+10
| | | | | | | | "vp8 video" is what vp8 is marked as in gstreamer's metadata. However, the browser expects it just as the name "vp8". So fixing that. This commit sponsored by Tyng-Ruey Chuang. Thank you!
* Committing extracted and compiled translationsChristopher Allan Webber2013-03-0457-1956/+1820
|
* Merge branch 'master' into 419_cherrypick_large_uploadsChristopher Allan Webber2013-03-0416-56/+275
|\
| * Removing an unnecessary video writeChristopher Allan Webber2013-03-041-3/+0
| | | | | | | | | | | | | | In the case of if we're skipping transcoding, we don't need to copy this file at all! This commit sponsored by Frank Zambrini III. Thanks!
| * Merge branch 'joar-skip_transcoding'Christopher Allan Webber2013-03-0414-52/+268
| |\
| | * self.media_data->self.media_manager in the docstring. Thanks for catching, ↵Christopher Allan Webber2013-03-031-1/+1
| | | | | | | | | | | | | | | | | | Elrond. This commit sponsored by Sebastian Hugentobler. Thank you!
| | * No reason really to pass in fetch_order anyway...Christopher Allan Webber2013-03-031-7/+5
| | | | | | | | | | | | | | | | | | | | | I think this is legacy code from get_display_media being a utility, or something. Removed! (Thanks for pointing this out, Elrond!) This commit sponsored by Tristan Chambers. Thank you!
| | * Another elrond suggestion: only init orig_metadata if there's anything in ↵Christopher Allan Webber2013-03-031-2/+4
| | | | | | | | | | | | | | | | | | the dict. This commit sponsored by Joshua Rosen. Thank you!
| | * Per Elrond's suggestions moving DEFAULT_WEBM_TYPE to media managerChristopher Allan Webber2013-03-033-4/+4
| | | | | | | | | | | | | | | | | | | | | The reason for this is to avoid defining this twice as we were previously (once in the template, once in video/models.py) This commit sponsored by Roland McIntosh. Thank you!
| | * Extrapolate type= based on the video metadata that we have, if we can.Christopher Allan Webber2013-03-033-2/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | It's kind of awkward because it relies on there being a entry.media_data, but that's not guaranteed... (see http://issues.mediagoblin.org/ticket/650) so we use a dopey fallback in the template in that case (kind of annoying info duplication). This commit sponsored by Piotr Wieczorek. Thank you!
| | * Mild cosmetic cleanups to video.html and adding missing </li> elements.Christopher Allan Webber2013-03-031-8/+16
| | | | | | | | | | | | This commit sponsored by Jukka Hellen. Thanks!
| | * {% set %} the display_type and display_path and use that elsewhereChristopher Allan Webber2013-03-031-2/+3
| | | | | | | | | | | | | | | | | | This will make some stuff a bit cleaner that's coming up... This commit sponsored by J B Nicholson-Owens. Thanks!
| | * pdb.set_trace() in mediagoblin code is Not Allowed(TM), removing from audio codeChristopher Allan Webber2013-03-031-3/+0
| | | | | | | | | | | | | | | | | | | | | | | | Of course, the version that appears here is not really dangerous because it's for the "call the file individually" form of debugging, but it isn't allowed anyway. This commit sponsored by Michael Faryniarz. Thanks!
| | * Now store metadata info from processing into the media type.Christopher Allan Webber2013-03-033-0/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | | This comes in several parts: - Store the metadata from gstreamer during processing - Add a new JSONEncoded field to the VideoData table - And, of course, add a migration for that field! This commit sponsored by Julius Tuomisto. Thank you, Julius!
| | * Huge amount of work to (mostly) allow .ogg (and maybe other) formats to skip ↵Christopher Allan Webber2013-03-027-17/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | transcode - Update get_display_media in several ways: - now uses the media type's own declaration of the order of things - returns both the media_size and the media_path, as per the docstring - implicitly uses self.media_files as opposed to forcing you to pass it in - update videos to use get_display_media - update images to declare media_fetch_order in the media manager (videos also) - update stl to use media.media_files['original'] instead of weird use of get_display_media - update sidebar to only conditionally show webm_640 TODO still: identify video type information *during* processing, show that in the <video><source /></video> element. This commit sponsored by Nathan Yergler. Thanks, nyergler!
| | * If we're not transcoding, copy this file directly over to ['original']Christopher Allan Webber2013-03-011-6/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There's no reason to copy it over to 'webm_640' in such a case, clearly. Added logic so we don't do it twice either. Haven't tested this yet though ;) This commit sponsored by Algot Runeman. Thank you!
| | * Merge branch 'master' into joar-skip_transcodingChristopher Allan Webber2013-03-01124-6619/+9781
| | |\ | | | | | | | | | | | | | | | | Conflicts: mediagoblin/config_spec.ini
| | * | Added option to skip transcodingJoar Wandborg2013-01-224-20/+109
| | | | | | | | | | | | | | | | | | | | - If the video input matches the configurable rules, just copy it to the output without transcoding it.
| * | | Elrond points out that we should use form.collection.dataChristopher Allan Webber2013-03-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | That's true; I'm not sure what it's fixing, but he thinks it's fixing something. Anyway, it's correct :) This commit sponsored by Philippe Gauthier. Thanks!
| * | | Give a more useful error if a table already exists and so we can't create it ↵Christopher Allan Webber2013-03-041-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | during migrations This commit sponsored by Andrzej Prochyra. Thanks!
| * | | Three fixes to collection adding view, one of them a serious security bugChristopher Allan Webber2013-03-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Don't let people who aren't the authors of a collection from adding things to it (handled by forcing the user check in the query) - request url in case invalid collection selected fixed - collection_item.author doesn't yet exist; removing the selection (we might want multiple people to be able to edit a collection in the future but that future does not yet exist; as Elrond said, remove this "false hope") Thanks to Elrond to pointing out these issues. And thanks to David Kindler for sponsoring this commit!
* | | | Make copying to/from storage systems memory efficient (#419)Sebastian Spaeth2013-03-032-7/+8
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The copy_locally and copy_local_to_storage (very inconsistent terms BTW) were simply slurping in everything in RAM and writing it out at once. (the copy_locally was actually memory efficient if the remote system was local) Use shutil.copyfileobj which does chunked reads/writes on file objects. The default buffer size is 16kb, and as each chunk means a separate HTTP request for e.g. cloudfiles, we use a chunksize of 4MB here (which has just been arbitrarily set by me without tests). This should help with the failure to upload large files issue #419.
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-08 19:14:56 +0000