[task #9873] Submission of VladNput
|
View:
New views
20 Messages
—
Rating Filter:
Alert me
|
| < Prev | 1 - 2 | Next > |
 |
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
URL: <http://savannah.gnu.org/task/?9873> Summary: Submission of VladNput Project: Savannah Administration Submitted by: patrick133t Submitted on: Thu 05 Nov 2009 11:31:04 PM GMT Should Start On: Thu 05 Nov 2009 12:00:00 AM GMT Should be Finished on: Sun 15 Nov 2009 12:00:00 AM GMT Category: Project Approval Priority: 5 - Normal Status: None Privacy: Public Percent Complete: 0% Assigned to: None Open/Closed: Open Discussion Lock: Any Effort: 0.00 _______________________________________________________ Details: A new project has been registered at Savannah This project account will remain inactive until a site admin approves or discards the registration. = Registration Administration = While this item will be useful to track the registration process, *approving or discarding the registration must be done using the specific Group Administration <https://savannah.gnu.org/siteadmin/groupedit.php?group_id=10381> page*, accessible only to site administrators, effectively *logged as site administrators* (superuser): * Group Administration <https://savannah.gnu.org/siteadmin/groupedit.php?group_id=10381> = Registration Details = * Name: *VladNput* * System Name: *vladnput* * Type: non-GNU software & documentation * License: GNU Lesser General Public License ---- ==== Description: ==== VladNput is an HTTP request validation library for the Java programming language. It is intended to be used to help secure Java web applications written to the Java servlet specification. The library allows a white list of URLs and request parameter names to be defined in a file external or internal to the application. The URLs and parameter names can be expressed as literals or regular expressions for more flexibility. The data types that incoming parameter values are checked against can be defined as one of the pre-defined types or the user can subclass VladType to define their own. For parameter values that violate the policy, an error message will be logged and the application is provided a list of the errors and detailed messages for display to the client. All error messages can be specified in the configuration file if the defaults are not acceptable. ==== Other Software Required: ==== ANTLR: BSD http://www.antlr.org/license.html Log4j: ASL 2.0 http://logging.apache.org/log4j/1.2/license.html Servlet API: ASL 2.0 http://tomcat.apache.org/ ==== Tarball URL: ==== http://savannah.gnu.org/submissions_uploads/VladNput-0.1.tar.gz _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #1, task #9873 (project administration): -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 November 5th in Savannah item #9873: "Submission of VladNput" You must determine whether your project can run on a Free Software Java suite (see https://savannah.gnu.org/maintenance/JavaIssues and http://www.gnu.org/software/java/ for more information). It is mandatory to run on a fully free platform to be hosted in Savannah. We recommend you to test your project using IcedTea, or GCJ + GNU Classpath, and ensure that your Java code runs on this Free Software Java suite. IceTea is based on Sun's OpenJDK and uses free replacements for its proprietary parts. GCJ is the GNU Compiler for Java, part of the GCC (GNU Compiler Collection). The Classpath project aims to develop a free and portable implementation of the Java API (the classes in the 'java' package). More information is available at http://icedtea.classpath.org/, http://gcc.gnu.org/ and http://www.gnu.org/software/classpath/. Please provide us with more information about this point. Also, plese put and update (To LGPL 3 "or any later") the appropiate licence notiches on all files. A lot of files (*.expect, *.tokens, *.vlad, etc...) lacks Copyrigth information. Note that I am not a member of the Savannah administration team. I only try to help you to fix the remaining issues in this project submission that I could find. If all hosting requirements for Savannah are met, an administrator will approve this submission. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkrzfgMACgkQZ4DA0TLic4gNzQCcDVuH/IBAWQ90RfJB5MkBUnoc 7rAAnjZP7COLjsez6laBhNamPPdUUdJV =mkhb -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
|
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #2, task #9873 (project administration): -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 November 7th in Savannah item #9873: "Submission of VladNput" You should response using the web interface https://savannah.gnu.org/task/index.php?9873 or write to savannah-register-public@... but usally simply cliking in reply in an email client will send the response to INVALID.NOREPLY@... and your e-letter is simply discarded. AFIK OpenJDK is free software too so if your program compiles and run under it the Java issue is solved. Maybe the .expect and .tokens files can be considered trivial and therefore will not need trival notices but i are unsure. Some administrator can help in this issue?. Anyway a README files than list that *.expect and *.tokens files and say than they are under the LGPL 2.1 (Or 3 if you upgrade) will solve this. I ignore the practical differences between LGPL 2.1+ and LGPL 3+ but i are sure than the FSF have a good reason to publish that new version. There is some reason to use the version 2.1 instead of the latest, the 3.0? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkr2SkEACgkQZ4DA0TLic4ixHACfWeP7cSj3lJNxE5MTrX6DYnk6 hAcAoIrK4FjWj7D/cM27T3rFlDUbAvVx =izSU -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Update of task #9873 (project administration): Status: None => Ping-ed Assigned to: None => marioxcc _______________________________________________________ Follow-up Comment #3: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 November 22th in Savannah item #9873: "Submission of VladNput" I am waiting for an answer from you. If within one week I still do not get a reply, I will remove your project. You will still be able to register it again once you have the time to deal with the registration issues. Are you still willing to host your project at Savannah? If not, please tell us - we don't bite, and it will make us gain time. Regards. Item Status changes: Status -> Ping-ed Assigned to -> marioxcc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEAREIAAYFAksJ284ACgkQZ4DA0TLic4g5+ACeMMgSYRa0uV1phKVWWPC7k1oG VrgAn3Oj0lCE2Wk9TJOmQ7oef+UKoo// =h0z5 -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #4, task #9873 (project administration): I hadn't responded because I didn't think there was any response needed. I thought you said you were not an administrator so I was waiting to see if an administrator would respond. The *.tokens files are generated by ANTLR from the *.g files and *.expect files are the expected results from running regression tests, so they are basically automatically generated files, too. I don't care to put any notices about copyright on them because they are computer generated. The only thing I really need to complete is the documentation on the configuration language, but I have been busy and have not gotten around to it yet. Is there anything else I need to do? I would still like to use Savannah to host VladNput, I'm just concerned that I have not heard from any admins yet. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #5, task #9873 (project administration): Hi Patrick, we have been following the items on the tracker all the time. But we agreed with Mario's assessments, therefore we didn't write extra comments. :) Sorry. But in the meantime Mario has joined our staff anyway. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Update of task #9873 (project administration): Status: Ping-ed => In Progress _______________________________________________________ Follow-up Comment #6: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 November 25th 2009 in GNU Savannah item 9873: "Submission of VladNput" All distributed files should carry the Copyright and licence notice, even if they are auto generated. Make the generation program to put the licencing information in genrated files. If they can't carry comments just enumerate the files, their licence notices and Copyright holder in a file README. Item status changes: Status -> In progress. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEAREIAAYFAksN/tIACgkQZ4DA0TLic4hXmgCbBpYo7nzWzL224k9G1UTapFZl ngUAn0AMsFu/W/ZXiW5lMKtiqjKBxCcf =4SFQ -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #7, task #9873 (project administration): The code generation program is ANTLR, which is an external project. I have added a README and INSTALL file. I have not found a way to upload an updated tar file. Is there one? In the mean time, here is the contents of the README file. Is this acceptable? This file is part of VladNput, an input validation framework for applications using the Java servlet API. VladNput is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 2.1 of the License, or (at your option) any later version. VladNput is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with VladNput. If not, see <http://www.gnu.org/licenses/>. There are some files in the VladNput distribution that do not contain copyright notices. These files typically do not allow comments and thus cannot contain such notices. All files with a .req, .expect, .properties, .tokens, .vlad, or .vladi extension are copyright 2009 Patrick Higgins. They are licensed under the GNU LGPL version 2.1 or any later version. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #8, task #9873 (project administration): -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 December 2nd 2009 in GNU Savannah item 9873: "Submission of VladNput" You can find an form to upload files at the end of this tracker (Section Attached Files https://savannah.gnu.org/task/?9873#attached). Update and upload your tarball with the following changes so we can approve the project if all is ok or comment with your the nessesary changes (Like we are doing currently): The clearest the better: README file should enumerate all the files unless there is a good reason for not do so. On a GNU box you can easily generate the list of files with the "find" command: On the VladNput root directory run: find -name "*.req" find -name "*.expect" find -name "*.properties" find -name "*.tokens" find -name "*.vlad" find -name "*.vladi" Then put this in the README file: The following files are part of VladNput: <HERE THE LIST GENERATED BY THE 6 ABOVE COMMANDS> VladNput is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 2.1 of the License, or (at your option) any later version. VladNput is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with VladNput. If not, see <http://www.gnu.org/licenses/>. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEAREIAAYFAksXDKEACgkQZ4DA0TLic4hibQCfeiZR49vJN0jOlaz6F89aayAC 65EAnieLMwvfoM1w+TKDAp6Jp+xP1b55 =b+jS -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Update of task #9873 (project administration): Status: In Progress => Ping-ed Percent Complete: 0% => 80% _______________________________________________________ Follow-up Comment #9: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 December 7th 2009 in GNU Savannah item 9873: "Submission of VladNput" Hi, I am waiting than you upload a new tarball with all the changes applied if all is ok and hosting requirements are meet VladNput will be approved. If within one week I still do not get a reply, I will remove your project. You will still be able to register it again once you have the time to deal with the registration issues. Are you still willing to host your project at Savannah? If not, please tell us - we don't bite, and it will make us gain time. Regards. Item status changes: Percent complete -> 80% Status -> Ping-ed -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEAREIAAYFAksdfskACgkQZ4DA0TLic4hhKQCcCTcvgl3NtXoAgrvwtLZkwljb 2+QAnR07I5o2NV9bsp8qyXsk+19ypuDC =dBgn -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #10, task #9873 (project administration): Sorry, I had written a long response last week and then accidentally closed my browser window before I could post it. (Ugh!) I haven't had time to write it again until now. The upload link says it restricts file sizes to 512kb, which is too small for my code. I'll try to upload anyway and see how it goes. I was thinking I could add some code to my "ant dist" build target to automatically generate the file list for the README and to put copyright and license notices on all the files that accept them. That way I don't have to manually maintain the README file every time I add a new source file. Of course, that means that files will not have those notices in git, only in the distribution tar files. Is that acceptable? _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #11, task #9873 (project administration): The upload failed because my tar file is too large. I've gone ahead and added a target to my build.xml to create the README file when building a distribution tar file. I have not yet written any code to automatically add copyright and license information to individual files. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Update of task #9873 (project administration): Status: Ping-ed => In Progress _______________________________________________________ Follow-up Comment #12: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 December 7th 2009 in GNU Savannah item 9873: "Submission of VladNput" >Sorry, I had written a long response last week and then accidentally >closed my browser window before I could post it. (Ugh!) I haven't had >time to write it again until now. Oh, it's a pity than you loose your long response. I have happen a couple of times to me. In Fire Fox (Or derivated like IceCat or IceWeasel) you can go to Historial -> Recently closed pages, then you click the appropiate one, FF reminds the text in text box :). >I have not yet written any code to automatically add copyright and >license information to individual files. >That way I don't have to manually maintain the README file every time >I add a new source file. >Of course, that means that files will not have those notices in git, >only in the distribution tar files. Is that acceptable? AFIK public GIT counts as distribution since the code will then be publicly available through anonymous access, therefore same conditions apply. So yes, AFAIR you should maintain README and licence notices up to date. For be sure write your question to licencing@.... Usually one add the copy-permissions to the hand writen files at creation time. At least I do it in that way. For auto generated files remember if it is too hard to make the generation program put the copy-permissions you can instead list it in the README file. >The upload failed because my tar file is too large. I've gone ahead >and added a target to my build.xml to create the README file when >building a distribution tar file. You try to compress it with bzip2 -9?. Well, anyway you can send the tarball to me <mariocastelancastro@...>. I will evaluate it an resent to savannah-hackers-public@... so an administrator can do an final review. Regards. Item status changes: Status -> In progress. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEAREIAAYFAksdstUACgkQZ4DA0TLic4gycgCdHRWaXNNU74nB0lQ34zMBquC4 w4UAnR4AiQk70V9UeucGqa23iFX4l8/V =RtaZ -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #13, task #9873 (project administration): Thanks for the tip about Firefox, Mario. I never knew about that one! I think I was using Chromium at the time, though. :-/ I had a lot of time to work on VladNput today so I went ahead and put license headers on everything except the .tokens files, but there are exactly three of those and that probably won't change over the lifetime of the project. I've put the notice about those into the README. I've also updated the README with details about the dependencies and their licenses. I've updated my build script to put license information into the generated jar files and the dist.properties file. Thus, now all files have license and copyright info whether they come from git or a release tar. I will send the update VladNput-0.1.4.tar.gz file to you in email (you can ignore the version I sent earlier today). Thanks for reviewing this for me! _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #14, task #9873 (project administration): -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 December 8th 2009 in GNU Savannah item 9873: "Submission of VladNput" Ohh, I can read "All right reserved" in the HTML files and no further copy permissions. That turn the documentation into propietary and we do not allow that. If you want to make the documentation free put the documentation under a free documentation licence like the FDL See http://www.gnu.org/licenses/fdl-howto.html. As this files are not to be distributed in printed format you can use the (L)GPL too. Regards. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEAREIAAYFAkse7tQACgkQZ4DA0TLic4iy9ACfQKLL2UIlbJkXvXjpAc2PUdRG tvwAn384Gp048VFstfe3hr1G+OWFuHKs =aGBQ -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Follow-up Comment #15, task #9873 (project administration): Oops. I put that in following an ant example I found. I've updated my build.xml to put the following footer on the Javadoc API documentation: This is part of the VladNput API documentation. Copyright © 2009 Patrick Higgins Licensed under the GNU Free Documentation License version 1.3 or (at your option) any later version. See COPYING-DOC in the VladNput distribution for full copying conditions. I've also added COPYING-DOC to the top-level containing the FDL v1.3. I'll email the tar to you. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Update of task #9873 (project administration): Status: In Progress => Need Admin Percent Complete: 80% => 90% _______________________________________________________ Follow-up Comment #16: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 December 9th 2009 in GNU Savannah item 9873: "Submission of VladNput" I think than the hosting requirement are meet but I can't approve the project. I will send your last tarball to savannah-hackers-public@.... An administrator will do a final review and approve the project if all is ok. The SHA256 of tarball is 4e17b44b952d0f7f4ad4f35de8435189726e586e9c01bbc8eaf285e794c12eb1. Regards. Item status changes: Status -> Need Admin Percent complete -> 90% -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEAREIAAYFAksgHZAACgkQZ4DA0TLic4gDNgCeL7FjkYi2ZV6S2CSFS5WRKxAA BvYAoIKC+hdZs7Nkc1k0Rc4YSubWB+0V =Ko65 -----END PGP SIGNATURE----- _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Additional Item Attachment, task #9873 (project administration): File name: VladNput-0.1.4.tar.gz.part1 Size:488 KB _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
|
|
[task #9873] Submission of VladNput
by Mario Castelán Castro
::
Rate this Message:
Additional Item Attachment, task #9873 (project administration): File name: VladNput-0.1.4.tar.gz.part2 Size:371 KB _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/task/?9873> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ |
| < Prev | 1 - 2 | Next > |
| Free embeddable forum powered by Nabble | Forum Help |
