gnu-social/extlib
Evan Prodromou 81ea0f8117 Add HTMLPurifier to extlib
HTMLPurifier defangs arbitrary submitted HTML. We're using it in the
OStatus plugin, but it may be valuable for other parts of the codebase
(I think OEmbed might benefit, for example).
2010-02-20 11:35:01 -05:00
..
Auth Bump to Auth_OpenID 2.1.3 2009-10-30 01:30:42 -04:00
Console Revert "Revert "Add Console_Getopt"" 2009-06-22 16:18:41 -07:00
DB include DB_DataObject 1.9.0 2009-12-08 15:32:50 -05:00
htmLawed Sanitize html returned by oEmbed providers to protect laconica from XSS attacks 2009-07-27 13:42:03 -04:00
HTMLPurifier Add HTMLPurifier to extlib 2010-02-20 11:35:01 -05:00
HTTP Rebuilt HTTPClient class as an extension of PEAR HTTP_Request2 package, adding redirect handling and convenience functions. 2009-11-02 09:14:15 -08:00
libomb Temporary debug hack tracking down 'revoked accesstoken' issue with OMB posts 2010-02-15 15:19:16 -08:00
Mail added Mail/mimeDecode as mime-decode fallback 2009-06-30 16:11:46 -04:00
MIME Added configurable options for attachments: supported mimetypes and quotas for uploads. 2009-05-31 16:42:29 -04:00
Net Added Net_LDAP2 to extlib, and add a skeleton LDAP plugin 2009-11-04 13:39:56 -05:00
PEAR add missing PEAR_Exception file 2009-03-12 00:02:25 -04:00
php-gettext Fix a logic error in php-gettext's setlocale() check; if setlocale() failed to return, we fall back to checking LANG environment variable. Now actually works when doing a setlocale *check* instead of a *set*. 2009-10-16 11:19:52 -07:00
Services Allow whitespace before and after the = and require space before the href in <link href="url"> html 2009-09-01 23:18:39 -04:00
Stomp Bump to version 1.0.0 2009-11-16 11:14:00 -05:00
System Add System_Command so MIME type fallback works for uploaded files 2009-06-23 05:16:23 -07:00
XMPPHP Revert "DEBUG HACK: error checking for xml_parse in XMPPHP input stream" 2010-01-20 15:56:24 -05:00
Apache2.0.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
DB.php some extlibs that were missing from 0.6.0 2008-09-30 09:38:47 -04:00
get_temp_dir.php Add a sys_get_temp_dir substitute to extlib for easier installation on versions that lack it 2008-09-24 11:08:28 -04:00
gpl-2.0.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
lgpl-2.1.txt add LGPL 2010-01-02 22:46:50 -10:00
Mail.php some extlibs that were missing from 0.6.0 2008-09-30 09:38:47 -04:00
markdown.php include external libs in a subdir to make install easier 2008-08-22 09:17:14 -04:00
OAuth_LICENSE.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
OAuth.php Silence the NOTICE log messages on port not defined, we deal with 2009-09-11 20:49:24 -04:00
PEAR.php Cleanup for bug 1813: workaround sometimes-missing dl() in PHP 5.3 by defining our own bogus function rather than attempting to patch upstream libs. This keeps our fix across upstream versions (or when loading upstream library from outside extlib) 2009-11-16 15:45:15 -08:00
PHP_License_2_02.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
PHP_License_3.01.txt add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
PHP_Markdown_License.text add additional licenses into extlib subdir 2008-09-22 17:21:20 -04:00
README add a README warning devs from fracking around in extlib/ 2009-10-31 13:35:20 -04:00
Stomp.php Bump to version 1.0.0 2009-11-16 11:14:00 -05:00
Validate.php Added PEAR Services/oEmbed and its dependencies for multimedia integration. 2009-02-03 21:35:25 +00:00

DO NOT "FIX" CODE IN THIS DIRECTORY.

ONLY UPSTREAM VERSIONS OF SOFTWARE GO IN THIS DIRECTORY.

This directory is provided as a courtesy to our users who might be
unable or unwilling to find and install libraries we depend on.

If we "fix" software in this directory, we hamstring users who do the
right thing and keep a single version of upstream libraries in a
system-wide library. We introduce subtle and maddening bugs where
our code is "accidentally" using the "wrong" library version. We may
unwittingly interfere with other software that depends on the
canonical release versions of those same libraries!

Forking upstream software for trivial reasons makes us bad citizens in
the Open Source community and adds unnecessary heartache for our
users. Don't make us "that" project.

FAQ:

Q: What should we do when we find a bug in upstream software?

A: First and foremost, REPORT THE BUG, and if possible send in a patch.

   Watch for a release of the upstream software and integrate with it
   when it's released.

   In the meantime, work around the bug, if at all possible. Usually,
   it's quite possible, if slightly harder or less efficient.

Q: What if the bug can't be worked around?

A: If the upstream developers have accepted a bug patch, it's
   undesirable but acceptable to apply that patch to the library in
   the extlib dir. Ideally, use a release version for upstream or a
   version control system snapshot.

   Note that this is a last resort.

Q: What if upstream is unresponsive or won't accept a patch?

A: Try again.

Q: I tried again, and upstream is still unresponsive and nobody's
   checked on my patch. Now what?

A: If the upstream project is moribund and there's a way to adopt it,
   propose having the StatusNet dev team adopt the project. Or, adopt
   it yourself.

Q: What if there's no upstream authority and it can't be adopted?

A: Then we fork it. Make a new name and a new version. Include it in
   lib/ instead of extlib/, and use the StatusNet_* prefix to change
   the namespace to avoid collisions.

   This is a last resort; consult with the rest of the dev group
   before taking this radical step.