1- ================================
2- Features needed for next release
3- ================================
4- * Regression testing
5- * See issues tracked in Github
1+ =======================================
2+ RELEASE PROCESS / AND HACKING PROCESS
3+ =======================================
64
7- ================================
8- TESTING NEEDED BEFORE RELEASE
9- ================================
5+ CHECK ISSUES TRACKED IN GITHUB
106
117BASIC REGRESSION TESTING:
12- Check main theme in MSIE
8+ Check main theme in MSIE / http://netrenderer.com/
139 Try to upload a non-image
1410 OpenSearch: http://friendfeed.com/bgolub/5e56afb1/i-like-how-google-chrome-deals-with-opensearch
15- Microformats: http://microformats.org/wiki/rel-tag
1611 Validate all HTML and CSS
1712 RSS: http://validator.w3.org/feed/check.cgi?url=camera.phor.net/rss.php%3Fq%3Dwill
1813 Try all the hacks
1914 mysqldump fdcl -d > setup/install.mysql # and add insert statements
2015 Test Amazon S3 http://github.com/technoweenie/parkplace
21- Gallery API
22- XSSme SQLinjectme wapiti
16+ Test Gallery API
2317
2418SECURITY TESTING:
2519 Remove support for strip slashes / and remove all stripslashes!
@@ -30,19 +24,17 @@ SECURITY TESTING:
3024 grep '\./' */*php | grep -v requ
3125 check for inputs as arrays!
3226 PHP E_ALL strict?
33- Each CL install gets random secret number. All requests hash against secret. Protect XSRF
34- Is this a differentiator? Put on "Compare Us" page versus Picasa, Gallery, ...
35- Hash implementation -- http://pajhome.org.uk/crypt/md5/auth.html -- http://www.owasp.org/index.php/Main_Page -- http://www.owasp.org/index.php/Philadelphia
36- When receiving the form, validate the hash.
3727 Login via OpenID / Facebook / Google / ...
28+ XSSme SQLinjectme wapiti
3829
30+ Make a new flyover install video
3931
4032-------------------
4133AUTOMATED RELEASE
4234edit the first line, save this file, then paste into a terminal...
4335-------------------
4436
45- VERSION='2.6.4b2 ' # <-- EDIT THIS
37+ VERSION='2.6.4 ' # <-- EDIT THIS
4638echo $VERSION > VERSION
4739sed -i "/this..version/s/'.*'/'$VERSION'/" main.inc
4840grep -lIZr . . | grep -z -v '\.git' | # no binary, no git
0 commit comments