Monday, April 21st, 2008

Updated : SVN Notifier 1.0.1

By Chris LoSacco

Thomas Roessler sent us a note that we had a pretty major security hole in our lab widget, SVN Notifier, that allowed unrestricted system access (yikes!) to nefarious commit messages. We spent some time in the code today and plugged up that hole, and made a few other fixes and tweaks as well. This latest release, 1.0.1, is recommended for all users (you can get it from the lab).

Thanks very much for the heads up, Thomas!

10 Responses

  1. 4/30/2008
    John said:

    Thanks for keeping this updated!
    FYI: On MacUpdate.com you guys mentioned that this release should fix the issue with running this on Tiger. Just wanted to let you know that it doesn’t (at least for me). I’m seeing an error in the console:
    SVN%20Notifier.wdgt/SVN%20Notifier.js: Object (result of expression xmlMySvnInfo.indexOf) does not allow calls. (line: 111)

  2. 4/30/2008
    Chris LoSacco said:

    John -
    Can you do me a favor? Open Terminal and run the command “/usr/bin/which svn” and let me know what the response is?
    Thanks,
    Chris

  3. 6/2/2008
    Andrei Popescu said:

    Doesn’t work on Tiger for me, here’s the response to your question for John:
    MacBookPro:~ xxx$ /usr/bin/which svn
    /usr/local/bin/svn

  4. 8/27/2008
    Jay Sonmez said:

    Thanks for sharing that little widget with us.
    I started using it recently, it is quite handy.
    Is it possible for you to add a feature to watch more than one repository link?
    That’s be very helpful feature improvement.

  5. 8/27/2008
    Chris LoSacco said:

    Jay -
    You can add multiple instances of the widget on your Dashboard to keep track of multiple copies/repositories.
    Hope this helps,
    Chris

  6. 9/7/2009
    Buzz said:

    I get this error in my logs:
    Sep 7 18:04:51 buzzs-macbook-pro-2 DashboardClient[3457]: (com.arc90.widget.svnnotifier) file:///Users/buzz/Library/Widgets/SVN%20Notifier.wdgt/SVN%20Notifier.js: TypeError: Result of expression ‘xmlMySvnInfo’ [undefined] is not an object. (line: 111)
    Sep 7 18:04:51 buzzs-macbook-pro-2 [0x0-0xb00b].com.apple.dock[1202]: 2009-09-07 18:04:51.923 DashboardClient[3457:10b] (com.arc90.widget.svnnotifier) file:///Users/buzz/Library/Widgets/SVN%20Notifier.wdgt/SVN%20Notifier.js: TypeError: Result of expression ‘xmlMySvnInfo’ [undefined] is not an object. (line: 111)

  7. 3/4/2010
    Gerald said:

    Thanks for making this nifty tool available. I’m using it on WinXP and get this error:
    C:\apps\sample:
    svn: OPTIONS of ‘http://svnsrv/svn/tools/trunk/projects/sample': authorization failed: Could not authenticate to server: rejected Basic challenge (http://svnsrv)

    I’m using SlikSVN client and my authentication is cached locally. How do I configure Notifier to use my cached auth?

  8. 8/13/2010
    Inspector Kludgeso said:

    I’m sure you’ve gotten requests for a Windows version, but it might be easier than you think:

    http://kludgets.com/developer/

    kludget.xml

    SVN Notifier

    Creative Commons Attribution 2.5

    I added this to the package, zipped it back up, opened it in Kludget engine. The widget appears, and I set the path to an https repository path, but nothing happens. Red icon, and no text except the label. Failing on some Mac-specific code, maybe?

    P.S. You might want to change “label” to “title” – for anyone who has used Vault source control, a label is a comment you attach to a file or folder, which appears in the history log. I had no idea what to enter in the field at first.

  9. 8/13/2010
    Inspector Kludgeso said:

    Okay, let’s try this again with html encoding…

    <?xml version=”1.0″ encoding=”UTF-8″?>
    <widget id=”com.arc90.widget.svnnotifier” name=”SVN Notifier”
    version=”1.0.1″ width=”300″ height=”182″ debug=”1″>
    <name>SVN Notifier</name>
    <author email=”contact@arc90.com” url=”http://lab.arc90.com/2008/04/02/svn-notifier/”/>
    <license>Creative Commons Attribution 2.5</license>
    <content src=”SVN Notifier.html”/>
    <access local=”true” network=”true” plugin=”true” system=”true”/>
    </widget>

  10. 8/13/2010
    Inspector Kludgeso said:

    I missed that last comment before mine… someone already using it on WinXP? But I didn’t see a Windows version to download. Gerald, if you come back… did you get it working in Kludget Engine, or something else?

Leave a Comment