- Uses contexts in serializers to restore inaccessible field of hdas
- Overrides serialize to return only the inaccessible view of
inaccessible hdas (no other keys are returned): 'accessible', 'id',
'name', 'history_id', 'hid', 'history_content_type', 'state',
'deleted', 'visible'
- If a DatasetAssociation Backbone Model is inaccessible, considers it
to have details preventing the (failing) GET for more details
Should be revisited if/when thread local contexts (user/session) are
working.
Makes the 'updated since' contents query based on any previous update's
ajax Date response header instead of the client time. This may offer
more protection against incorrect client time.
This works (and may work better than the previous method) because the
Date header is floored and not rounded and seems to mark a time before
the contents query is made.
Resolves#2242 (hopefully)
- Waits 2s after history contents loading and fetches element_count
for all dataset collections in the history
- Removes element_count as a default summary field for HDCAs
- Adds element_count to summary serialization for hdcas through
history/{:id}/contents
- Implements a HistoryContents fetch method to decorate the hdcas
after loading if necessary
This sanitizes some instances where tool parameters were included
directly into the DOM.
workflow/run.mako displayed the parameter as a value in a hidden input.
This was base64 encoded as there was no better solution apparent at the
time. I'm not sure where this parameter is POSTed to but we should
figure that out and b64decode it, or remove the hidden parameter.
client/... added the parameter value into the DOM. This was easily
sanitized using a standard method.
workflow/display.mako included the parameter value directly into the
HTML. This was cgi.esacped
Conflicts:
static/scripts/bundled/libs.bundled.js.map
This sanitizes some instances where tool parameters were included
directly into the DOM.
workflow/run.mako displayed the parameter as a value in a hidden input.
This was base64 encoded as there was no better solution apparent at the
time. I'm not sure where this parameter is POSTed to but we should
figure that out and b64decode it, or remove the hidden parameter.
client/... added the parameter value into the DOM. This was easily
sanitized using a standard method.
workflow/display.mako included the parameter value directly into the
HTML. This was cgi.esacped
anuprulez