FEATURE: Add extraSecurity main.bit configuration option to enable extra security measures that have a performance (small) impact.
TEST: revise ejs quoting unit test
TEST: ejs unit test for URL valid chars
FIX: missing quote in espEmail.
Merge branch 'dev' of github.com:embedthis/appweb-4 into dev
Update ESP html-mvc component
- Add MPR stof API
- Cleanup doc.
- Fix esp generate scaffold without any fields.
- Rename renderRec, renderGrid, renderResult to be send*
- Add getFieldErrors
- Regen doc and projects with LEGACY enabled.
- Cleanup
- Enable legacy mode by default
- Fix windows single core locking primitives in MPR. Don’t use SpinCount.
- Regen doc
- Regen projects
- Flat compile for html-mvc.
- Add renderSecurityToken to generate input field in html-mvc.
- Remove old call to securityToken in ESP pages. Now done in framework.
- Use flash instead of feedback in html-mvc.
- Move form/endform back to espDeprecated.
- Fix compiling views when under client.
- Add doc for ediFilter
- REFACTOR: Cleanup
- Add httpAuthenticate.
- REFACTOR: cleanup
- Refactor flash and feedback APIs.
- Refactor Security Token
- Change server side prefix char to “|”
- Refactor httpUri to not take options parameter. Create httpUriEx with options.
- Add aggregate table CSS class “list”
- FIX: test for mprCreateEventOutside if shutting down.
- Revise flash messages to persist over a redirect
- Fix storage of flash message.
- Fix badUrl test for new valid chars verification
- Fix ejs unit test for invalid URL chars
- Fix esp-input-group to define label
- Fix esp-input for text type
- Add renderErrors to input() generated fields in ESP.
- Fix generation of config.json for ESP gen app. Generate files in top-down component order.
- Add offset to ediGetNextField
- Call setRec from updateRec to define current record.
Resolve merge conflicts in projects
Harden httpStealConn.
Update doc
Update doc and projects
TEST: Add unit test for directory traversal
HARDEN: URI validation
Regenerate Makefiles
Cleanup
Add URI character validation unit tests
Fix comp warning on windows
Set HttpTx.info.checked even if URL is invalid