orion-dev http://dev.eclipse.org/mhonarc/lists/orion-dev/maillist.html orion-dev en-us Thu, 16 May 2013 21:00:09 GMT Thu, 16 May 2013 21:00:09 GMT http://blogs.law.harvard.edu/tech/rss MHonArc RSS 2.0 RCFile webmaster@eclipse.org (Webmaster) webmaster@eclipse.org (Webmaster) orion-dev http://www.eclipse.org/eclipse.org-common/themes/Phoenix/images/eclipse_home_header.jpg http://dev.eclipse.org/mhonarc/lists/orion-dev/maillist.html [orion-dev] Meeting minutes May 16th, 2013 http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02355.html http://wiki.eclipse.org/Orion/Meeting_minutes/20130516 http://wiki.eclipse.org/Orion/Meeting_minutes/20130516 ]]> Thu, 16 May 2013 20:52:42 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02355.html Simon_Kaegi@xxxxxxx (Simon Kaegi) Re: [orion-dev] Does Orion check for the protocol when cloning from a git repo http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02354.html Thanks Christian, That's not at all the intention and definitely a security problem. On OrionHub or a site setup with public access the intention is to allow sharing of a repo or workspace but the file layout should of course never be exposed and use of f... Thanks Christian,

That's not at all the intention and definitely a security problem. On OrionHub or a site setup with public access the intention is to allow sharing of a repo or workspace but the file layout should of course never be exposed and use of file URLs forbidden.
See Bug 408270 - Git clone MUST forbid use of file urls and other unexpected schemes with a whitelist
-Simon

Inactive hide details for "Halstrick, Christian" ---05/16/2013 08:41:19 AM---Hi, While playing with orions "clone from git repo"Halstrick, Christian" ---05/16/2013 08:41:19 AM---Hi, While playing with orions "clone from git repository" functionality I found out my local orion i


    From:

"Halstrick, Christian" <christian.halstrick@xxxxxxx>

    To:

"orion-dev@xxxxxxxxxxx" <orion-dev@xxxxxxxxxxx>,

    Date:

05/16/2013 08:41 AM

    Subject:

[orion-dev] Does Orion check for the protocol when cloning from a git repo

    Sent by:

orion-dev-bounces@xxxxxxxxxxx



Hi,

While playing with orions "clone from git repository" functionality I found out my local orion instance clones from URLs like 'file:/home/user/dondalfi'. With that I get access to all git repos hosted on the machine running the orion server. That's a security hole, or? Is it only that my local orion which can do that or  is it also true for orionhub.org?

Ciao
 Chris

_______________________________________________
orion-dev mailing list
orion-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/orion-dev



GIF image

GIF image

]]> Thu, 16 May 2013 17:35:07 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02354.html Simon_Kaegi@xxxxxxx (Simon Kaegi) [orion-dev] Does Orion check for the protocol when cloning from a git repo http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02353.html Hi, While playing with orions &quot;clone from git repository&quot; functionality I found out my local orion instance clones from URLs like 'file:/home/user/dondalfi'. With that I get access to all git repos hosted on the machine running the orion server. That's a s... Hi, While playing with orions "clone from git repository" functionality I found out my local orion instance clones from URLs like 'file:/home/user/dondalfi'. With that I get access to all git repos hosted on the machine running the orion server. That's a security hole, or? Is it only that my local orion which can do that or is it also true for orionhub.org? Ciao Chris ]]> Thu, 16 May 2013 12:40:23 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02353.html christian.halstrick@xxxxxxx (Halstrick, Christian) [orion-dev] Web Accessibility Tip of the Day: Tip #4 http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02352.html Tip #4: Use HTML5 section elements and ARIA landmark roles to semantically organize pages. HTML5 introduced 8 semantic sectioning elements [1] to help define areas of a web page: &lt;header&gt;, &lt;nav&gt;, &lt;section&gt;, &lt;article&gt;, &lt;aside&gt;, &lt;figcaption&gt;, &lt;figure&gt;, t;foo... Tip #4: Use HTML5 section elements and ARIA landmark roles to semantically organize pages.

HTML5 introduced 8 semantic sectioning elements [1] to help define areas of a web page:
<header>, <nav>, <section>, <article>, <aside>, <figcaption>, <figure>, <footer>, (and new in 5.1 <main>)
Some of these are now supported by the major browsers and screen readers.

ARIA has 8 landmark roles [2] to help define semantic areas of a web page:
application, banner, complementary, contentinfo, form, main, navigation, search
These are all supported by the major browsers and screen readers.

Screen reader users can list - and navigate to - landmark regions; and the name and type of landmark is announced when the user enters and leaves it.
Some browsers support landmark navigation without a screen reader, either through a setting or a plugin.

Be sure to give your landmark regions a name, either with aria-label="Invisible name" or aria-labelledby="visible_name_element_id".
Usually the best visible_name_element for a landmark region is a <heading> or <h1>.

Some of the section elements and landmark roles overlap, and (as of this writing) doubling these up will give best results.

Here are some samples:
<main id="main"> for the main content of the page,
<header role="banner"> for the masthead of the site,
<nav role="navigation"> for each list of navigation links,
<form role="search"> for a search form,
<form role="form"> for a form,
<aside role="complementary"> for related information in a sidebar,
<footer role="contentinfo"> for copyright and contact info at the bottom,
<article role="article"> for an article,
<div role="application"> for a complex custom control (more on this in tip #5),
<section role="region"> for a region that doesn't have any of the above semantics.

Here are 7 steps to guide you through the thought process for breaking your page into semantic regions:
http://www.w3.org/WAI/PF/aria-practices/#kbd_layout_landmarks

Car

[1] http://www.w3schools.com/html/html5_semantic_elements.asp
[2] http://www.w3.org/WAI/PF/aria/roles#landmark_roles]]> Thu, 16 May 2013 06:08:01 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02352.html Carolyn_MacLeod@xxxxxxx (Carolyn MacLeod) Re: [orion-dev] Fw: [orion-releng] Orion Build : I20130514-2230 http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02351.html I am looking at it. Libing John Arthorne---05/15/2013 11:48:22 AM---Two server test failures also look related to this git user configuration change. I have entered a From: John Arthorne/Ottawa/IBM@IBMCA To: Orion developer discussions &lt;orion-dev@xxxxxxx... I am looking at it.
Libing


Inactive hide details for John Arthorne---05/15/2013 11:48:22 AM---Two server test failures also look related to this git user John Arthorne---05/15/2013 11:48:22 AM---Two server test failures also look related to this git user configuration  change. I have entered a

From: John Arthorne/Ottawa/IBM@IBMCA
To: Orion developer discussions <orion-dev@xxxxxxxxxxx>
Date: 05/15/2013 11:48 AM
Subject: Re: [orion-dev] Fw: [orion-releng] Orion Build : I20130514-2230
Sent by: orion-dev-bounces@xxxxxxxxxxx



Two server test failures also look related to this git user configuration change. I have entered a bug, can Libing and/or Szymon take a look at it: 

https://bugs.eclipse.org/bugs/show_bug.cgi?id=408140 

The third server test failure has been happening for a couple of days but I haven't been able to reproduce it. Somehow it looks like the gzip filter is interfering with our ETag headers. 

John 




From:        Ken Walker/Ottawa/IBM@IBMCA 
To:        "Orion developer discussions" <orion-dev@xxxxxxxxxxx>,
Date:        05/15/2013 10:14 AM 
Subject:        [orion-dev] Fw: [orion-releng] Orion Build : I20130514-2230 
Sent by:        orion-dev-bounces@xxxxxxxxxxx 



Deployed to orion.eclipse.org - A message about some changes from Libing:
    Please go to the settings-> git settings to reset the git user name and email. The previous information stored in the user profile is no longer used 


Ken Walker
Co-Lead Eclipse Orion Project | Tools for the Web, On the Web
http://orionhub.org | http://wiki.eclipse.org/Orion
@kwalker | @orionhub



----- Forwarded by Ken Walker/Ottawa/IBM on 2013/05/15 10:00 AM -----

    From:     

    e4Build@xxxxxxxxxxx     

    To:     

    orion-releng@xxxxxxxxxxx,

    Date:     

    2013/05/14 11:28 PM     

    Subject:     

    [orion-releng] Orion Build : I20130514-2230     

    Sent by:     

    orion-releng-bounces@xxxxxxxxxxx




See here for the build results: I20130514-2230
The build contains the following changes:
+ Bug 399023 - CBI (Maven/Tycho) based build for Orion (NEW)
+ Bug 406810 - [sidebar] Renaming/deleting current file in sidebar navigator causes trouble (FIXED)
+ Bug 407669 - Trying to save a deleted file pops up strange message. (FIXED)
+ Bug 408053 - Project copy/move fails with server context path (FIXED)
+ Bug 408065 - Server: Cloning a git repository to use the user name and email passed from the client side. (FIXED)

The following projects have changed:
org.eclipse.orion.client.core
org.eclipse.orion.client.editor
org.eclipse.orion.client.git
org.eclipse.orion.client.ui
org.eclipse.orion.client.users
org.eclipse.orion.server.core
org.eclipse.orion.server.git
org.eclipse.orion.server.servlets
org.eclipse.orion.server.tests
pom.xml

Test Results
    Test 
# Tests
Failures
Errors
Success Rate
Time
1478
0
0
100.00%
38.192
1476
0
0
100.00%
29.007
DNF
313
0
3
99.04%
257.465



_______________________________________________
orion-releng mailing list
orion-releng@xxxxxxxxxxx
http://dev.eclipse.org/mailman/listinfo/orion-releng
_______________________________________________
orion-dev mailing list
orion-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/orion-dev
_______________________________________________
orion-dev mailing list
orion-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/orion-dev

GIF image

GIF image

]]> Wed, 15 May 2013 20:20:55 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02351.html Libing_Wang@xxxxxxx (Libing Wang) Re: [orion-dev] Fw: [orion-releng] Orion Build : I20130514-2230 http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02350.html Two server test failures also look related to this git user configuration change. I have entered a bug, can Libing and/or Szymon take a look at it: https://bugs.eclipse.org/bugs/show_bug.cgi?id=408140 The third server test failure has been happening for a ... Two server test failures also look related to this git user configuration change. I have entered a bug, can Libing and/or Szymon take a look at it:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=408140

The third server test failure has been happening for a couple of days but I haven't been able to reproduce it. Somehow it looks like the gzip filter is interfering with our ETag headers.

John




From:        Ken Walker/Ottawa/IBM@IBMCA
To:        "Orion developer discussions" <orion-dev@xxxxxxxxxxx>,
Date:        05/15/2013 10:14 AM
Subject:        [orion-dev] Fw: [orion-releng] Orion Build : I20130514-2230
Sent by:        orion-dev-bounces@xxxxxxxxxxx



Deployed to orion.eclipse.org - A message about some changes from Libing:
Please go to the settings-> git settings to reset the git user name and email. The previous information stored in the user profile is no longer used



Ken Walker
Co-Lead Eclipse Orion Project | Tools for the Web, On the Web
http://orionhub.org | http://wiki.eclipse.org/Orion
@kwalker | @orionhub



----- Forwarded by Ken Walker/Ottawa/IBM on 2013/05/15 10:00 AM -----

From:
e4Build@xxxxxxxxxxx

To:
orion-releng@xxxxxxxxxxx,

Date:
2013/05/14 11:28 PM

Subject:
[orion-releng] Orion Build : I20130514-2230

Sent by:
orion-releng-bounces@xxxxxxxxxxx




See here for the build results: I20130514-2230
The build contains the following changes:
+ Bug 399023 - CBI (Maven/Tycho) based build for Orion (NEW)
+ Bug 406810 - [sidebar] Renaming/deleting current file in sidebar navigator causes trouble (FIXED)
+ Bug 407669 - Trying to save a deleted file pops up strange message. (FIXED)
+ Bug 408053 - Project copy/move fails with server context path (FIXED)
+ Bug 408065 - Server: Cloning a git repository to use the user name and email passed from the client side. (FIXED)

The following projects have changed:
org.eclipse.orion.client.core
org.eclipse.orion.client.editor
org.eclipse.orion.client.git
org.eclipse.orion.client.ui
org.eclipse.orion.client.users
org.eclipse.orion.server.core
org.eclipse.orion.server.git
org.eclipse.orion.server.servlets
org.eclipse.orion.server.tests
pom.xml

Test Results
Test
# Tests
Failures
Errors
Success Rate
Time
 JS Tests - Chrome 12
1478
0
0
100.00%
38.192
 JS Tests - Firefox 17.0
1476
0
0
100.00%
29.007
 JS Tests - Chrome Windows
DNF
 JUnit Tests: Server Tests
313
0
3
99.04%
257.465



_______________________________________________
orion-releng mailing list
orion-releng@xxxxxxxxxxx
http://dev.eclipse.org/mailman/listinfo/orion-releng
_______________________________________________
orion-dev mailing list
orion-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/orion-dev
]]> Wed, 15 May 2013 14:54:24 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02350.html John_Arthorne@xxxxxxx (John Arthorne) [orion-dev] Fw: [orion-releng] Orion Build : I20130514-2230 http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02349.html Deployed to orion.eclipse.org - A message about some changes from Libing: Please go to the settings-&gt; git settings to reset the git user name and email. The previous information stored in the user profile is no longer used Ken Walker Co-Lead Eclipse Orio... Deployed to orion.eclipse.org - A message about some changes from Libing:

    Please go to the settings-> git settings to reset the git user name and email. The previous information stored in the user profile is no longer used 


Ken Walker
Co-Lead Eclipse Orion Project | Tools for the Web, On the Web
http://orionhub.org | http://wiki.eclipse.org/Orion
@kwalker | @orionhub



----- Forwarded by Ken Walker/Ottawa/IBM on 2013/05/15 10:00 AM -----


    From:

e4Build@xxxxxxxxxxx

    To:

orion-releng@xxxxxxxxxxx,

    Date:

2013/05/14 11:28 PM

    Subject:

[orion-releng] Orion Build : I20130514-2230

    Sent by:

orion-releng-bounces@xxxxxxxxxxx



See here for the build results: I20130514-2230
The build contains the following changes:
+ Bug 399023 - CBI (Maven/Tycho) based build for Orion (NEW)
+ Bug 406810 - [sidebar] Renaming/deleting current file in sidebar navigator causes trouble (FIXED)
+ Bug 407669 - Trying to save a deleted file pops up strange message. (FIXED)
+ Bug 408053 - Project copy/move fails with server context path (FIXED)
+ Bug 408065 - Server: Cloning a git repository to use the user name and email passed from the client side. (FIXED)

The following projects have changed:
org.eclipse.orion.client.core
org.eclipse.orion.client.editor
org.eclipse.orion.client.git
org.eclipse.orion.client.ui
org.eclipse.orion.client.users
org.eclipse.orion.server.core
org.eclipse.orion.server.git
org.eclipse.orion.server.servlets
org.eclipse.orion.server.tests
pom.xml

Test Results
Test
# Tests
Failures
Errors
Success Rate
Time
 JS Tests - Chrome 12
1478
0
0
100.00%
38.192
 JS Tests - Firefox 17.0
1476
0
0
100.00%
29.007
 JS Tests - Chrome Windows
DNF
 JUnit Tests: Server Tests
313
0
3
99.04%
257.465


_______________________________________________
orion-releng mailing list
orion-releng@xxxxxxxxxxx
http://dev.eclipse.org/mailman/listinfo/orion-releng

GIF image

]]> Wed, 15 May 2013 14:02:31 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02349.html Ken_Walker@xxxxxxx (Ken Walker) [orion-dev] LotD: Polymer http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02348.html &quot;Polymer - A new web framework by Google designed to leverage the evolving web platform.&quot; . http://polymer-project.appspot.com McQ. . "Polymer - A new web framework by Google designed to leverage the evolving web platform."
.     http://polymer-project.appspot.com

McQ.
.]]> Wed, 15 May 2013 14:02:23 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02348.html Mike_Wilson@xxxxxxx (Mike Wilson) [orion-dev] Web Accessibility Tip of the Day: Tip #3 http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02347.html Tip #3: Every focusable element needs a name. When an element gets focus, screen readers ask the browser for the element's name (aka label) so that it can be spoken aloud or rendered on a Braille display. You can specify an element's name in several ways: ... Tip #3: Every focusable element needs a name.

When an element gets focus, screen readers ask the browser for the element's name (aka label) so that it can be spoken aloud or rendered on a Braille display.
You can specify an element's name in several ways:
1) If the element has innerHTML and if it's a type of element that can use content as its name, i.e. <button>Name</button>, then give it a good name and you're done.
2) If there's a visible element that can be used as a label, then use the aria-labelledby attribute to use the text from the other element for the name (you can actually concatenate text from multiple elements).
3) If there's no visible element to use as a label, you can provide a name string with aria-label.
4) Provide <label> for <input> elements.
5) Provide alt text if the element is an <img> or other object that supports alt.
6) Optionally provide a title.

For grins, here is the somewhat complex algorithmic advice given to "User Agents" (aka browsers) for computing the name of an element:
http://www.w3.org/WAI/PF/aria-implementation/Overview.html#mapping_additional_nd_te

Car]]> Wed, 15 May 2013 07:02:39 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02347.html Carolyn_MacLeod@xxxxxxx (Carolyn MacLeod) [orion-dev] Web Accessibility Tip of the Day: Tip #2 http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02346.html Tip #2: Adding or augmenting the semantics of HTML elements with WAI-ARIA* You can fine-tune the semantics of HTML elements by adding ARIA roles, states, and properties in order to make them more accessible. The ARIA Authoring Practices &quot;Design Patternsot;... Tip #2: Adding or augmenting the semantics of HTML elements with WAI-ARIA*

You can fine-tune the semantics of HTML elements by adding ARIA roles, states, and properties in order to make them more accessible.
The ARIA Authoring Practices "Design Patterns" table specifies the expected keyboard interaction and ARIA roles, states, and properties you should use to implement many common design patterns:
http://www.w3.org/WAI/PF/aria-practices/#aria_ex

Take a look at the list of design pattern names (37 as of this writing) and then look at a couple of them in detail, for example, menubutton and menu:
http://www.w3.org/WAI/PF/aria-practices/#menubutton
http://www.w3.org/WAI/PF/aria-practices/#menu

* WAI-ARIA: Web Accessibility Initiative - Accessible Rich Internet Applications
]]> Tue, 14 May 2013 04:00:10 GMT http://dev.eclipse.org/mhonarc/lists/orion-dev/msg02346.html Carolyn_MacLeod@xxxxxxx (Carolyn MacLeod)