cccms/app/views/rss, branch erdgeist-modernize-auth

Fix malformed-HTML fallout across RSS, link rewriting, and flash messaging

2026-07-09T13:29:40Z

Editors' TinyMCE output can contain unclosed void elements like
, which is valid HTML5 but invalid XML -- three different places assumed the stricter rule and broke or silently misbehaved on the looser one. The Atom feed's block required real, well-formed XML structure but was handed a raw, unescaped body string; switched to type="html" with CGI.escapeHTML, matching how title/summary already handle the same content. rewrite_links_in_body used libxml's strict XML parser to rewrite internal links to be locale-prefixed, which raised on exactly this class of malformed markup -- silently, since the whole method was wrapped in rescue; nil, meaning the link rewrite (not the save) quietly failed with no error anywhere. Replaced with Nokogiri's lenient HTML parser, which repairs malformed void elements rather than rejecting them; also drops the bare rescue now that the actual failure mode it was guarding against shouldn't occur, and fixes two adjacent bugs found while in this method: a typo'd /sytem/uploads/ regex that could never match, and a missing https:// exclusion alongside the existing http:// one. Also addresses stale flash messaging surfaced while testing the above: update's save confirmation was being clobbered by edit's own "locked and ready" notice on the very next request, since nothing distinguished a fresh lock acquisition from a redirect back after saving. The save confirmation now names the next step (publish from Status) and flags a stale translation if one exists, using Page#outdated_translations?, already present but previously unused by any controller.

Remove recent_changes RSS feed. It leaks unpublished drafts and the basic auth was only symbolic

2026-06-30T17:21:09Z

rss: add per-tag Atom feed at /rss/tags/:tag/updates.xml

2026-06-27T21:19:22Z

- rss#tag_updates action: filters Page.heads by tag name, default locale, 20 items, same caching as updates feed - tag_updates.xml.builder: Atom feed with CGI.escapeHTML on title and summary, consistent with updates.xml.builder - tags/show.html.erb: add subscription link above article list - routes: two routes per existing pattern (format-less + .:format constrained to /xml/)

rss: fix self link to include .xml suffix

2026-06-27T20:49:21Z

/rss/updates without format suffix returns HTTP 406 when the client does not send an appropriate Accept header. The self link in the Atom feed was pointing to the format-less URL, causing feed readers that follow the self link to hit the 406. Fixed to /rss/updates.xml.

Stop forcing escaped HTML into the database just because XML Builder was used wrong

2026-06-27T18:29:25Z

Big overhaul patch and style changes

2025-01-28T21:47:15Z

hmm this should've been there all along.

2010-01-31T19:07:36Z

rdf needs the path to be the url

2009-11-18T13:24:10Z

added template for old RDF feed - needs to be validated though

2009-11-18T11:54:25Z

Resolved issue of changing rss feed ids when changing the slugs of nodes

2009-11-14T12:51:27Z

Closes #35