{5} Accepted, Active Tickets by Owner (Full Description) (15 matches)

We use a Drupal module for the front page carousel on the right side bar. It would be nice to replace this with standard bootstrap based on the example provided in the website guidelines: https://www.clarin.eu/group-page/website-guidelines

When copy-and-pasting titles from Word, the assymmetric quote characters are included in the (pathauto generated) URL, which looks ugly, eg:

​https://www.clarin.eu/event/2017/clarin-plus-workshop-%E2%80%9Ccreation-and-use-social-media-resources%E2%80%9D

Would be nice if we could strip them out automatically, just like it is the case for normal " quotes.

This concerns the CLARIN SPF Interoperability Test Page (ie. shib_test.pl that SPs make available on their service).

After we stopped using shibboleth as an apache module the script basically stopped working. After some inspection we found out it is caused by how the server variables are accessed.

From the CGI point of view, 'mail', 'HTTP_MAIL' and probably case variations of that are still one variable. But it is not so when you try to access them through %ENV. Ie. $ENV{'mail'} and $ENV{'HTTP_MAIL'} may yield different outcomes, but CGI::http('mail') and CGI::http('HTTP_MAIL') should not.

Below is a sketch of a patch, so if someone could review it and/or further modify the file to take what is mentioned above into account... The line numbers will probably be of as we have some other modifications in the file

--- a/secure/shib_test.pl
+++ b/secure/shib_test.pl
@@ -57,7 +57,7 @@ sub render_table_rows {
         $caption, '</th>', '</tr>';
     if (scalar(@{$keys}) > 0) {
        foreach my $key (@{$keys}) {
-           my $value = $ENV{$key};
+           my $value = CGI::http($key);
            $value =~ s!\n*!!gs;
            $value =~ s!\s*(;|\$)\s*!\n!gs;
            $value = xml_escape($value);
@@ -77,7 +77,7 @@ sub dump_shibboleth_attributes {
     my $debug_env = shift;
     
     my @keys = sort(keys(%ENV));
-    my @attrs = grep(!m/^(HTTPS|SERVER_|SCRIPT_|PATH|QUERY_STRING|GATEWAY|DOCUMENT_ROOT|REMOTE|REQUEST|HTTP_|AUTH_TYPE|Shib_)/i, @keys);
+    my @attrs = grep(!m/^(HTTPS|SERVER_|SCRIPT_|PATH|QUERY_STRING|GATEWAY|DOCUMENT_ROOT|REMOTE|REQUEST|HTTP_|AUTH_TYPE|Shib_)/i, @keys) || grep(m/^(HTTP_)/i, CGI::http());
     my @shib = grep(m/Shib_/i, @keys);
 
     render_table_rows('Shibboleth Attributes:', \@attrs);
@@ -107,7 +107,7 @@ sub dump_shibboleth_assertions {
     my $browser = LWP::UserAgent->new;
     ASSERTION:
     for (my $i = 1; $i <= $count; $i++) {
-        my $url = $ENV{sprintf('Shib_Assertion_%02d', $i)};
+        my $url = CGI::http(sprintf('Shib_Assertion_%02d', $i));
         next ASSERTION unless defined ($url);
 
        print '<tr class="', ($j++ % 2 == 0 ? 'even' : 'odd'), '">';
@@ -192,13 +192,11 @@ sub scan_attributes {
        my @attrs = split(':', $aliases);
 
         KEY:
-       foreach my $b (keys(%ENV)) {
-           foreach my $a (@attrs) {
-               if (lc($a) eq lc($b)) {
-                   $found = $b;
+       foreach my $a (@attrs) {
+               if (defined CGI::http($a)) {
+                   $found = $a;
                    last KEY;
                }
-           }
        }
 
        if (defined($found)) {
@@ -226,9 +224,9 @@ sub main {
     my $q = shift;
     print slurp($HEADER_FILE);  
     print '<h1>CLARIN SPF Interoperability Test Page</h1>';
-    if (defined($ENV{'Shib_Session_ID'})) {
+    if (defined(CGI::http('Shib_Session_ID'))) {
        # logout link
-       my $idp = $ENV{'Shib_Identity_Provider'};
+       my $idp = CGI::http('Shib_Identity_Provider');
        if (!defined($idp)) {
            $idp = '<span class="error">[UNKNOWN]</span>';
        }
@@ -256,7 +254,7 @@ sub main {
        }
 
        # remote user
-       my $user = $ENV{'REMOTE_USER'};
+       my $user = CGI::http('REMOTE_USER');
        $warnings++ unless defined($user);
        print '<p class="attr ', (defined($user) ? 'ok' : 'warn'), '">';
        print 'REMOTE_USER: ',
@@ -280,7 +278,7 @@ sub main {
        print '<table class="attr">';
        my $debug_env = (defined($q) && $q->param('debug_env'));
        dump_shibboleth_attributes($debug_env);
-       dump_shibboleth_assertions($ENV{'Shib_Assertion_Count'});
+       dump_shibboleth_assertions(CGI::http('Shib_Assertion_Count'));
        print '</table>';
     }
     else {

we need some (high-level) summary information about the data in the Repository. There is a first proposal in a xquery file: source:MDRepository/trunk/xquery/cmd-stats.xql​ It also shall serve as consistency check. As it is very computationally intensive, it needs to be solved yet, to run it only once and cache the results (and refresh only on demand).

​https://www.djangoproject.com/weblog/2016/mar/01/security-releases/

A client POST request containing e.g. <headline>JQuery & AJAX</headline> leads to a backend error:

HTTP Status 400 - Bad Request The request sent by the client was syntactically incorrect.

TODO: The client needs to be able to replace all special characters with their predefined entity names (e.g. & = &amp;). This is important for content contained within the <headline>-element but also the <xhtml:span>-element contained within the <body>-element. See also: ​http://en.wikipedia.org/wiki/List_of_XML_and_HTML_character_entity_references.

Reported by Oliver:

If PID minting fails for some reason, the VCR should be smarter then retrying every minute. That's a hard one, because the VCR would need to determine, if the error was is transient (e.g. EPIC is offline) or something is really broken ...