June is a busy month, but I still found a little time to mess around with our favourite website's code. Most of the following is part of a Bigger Plan:
- Editor cools are visible to everyone, including our guests. Editor cools by current editors can only be removed by the cooling editor themselves: the hackable loophole has been closed.
- Message-forwards to usergroups are identified as such on their 'user' pages.
- The New Logs Nodelet shows all logs, including the hidden ones.
- There is a security and sanity check on attempts to update users' settings by AJAX. Any VAR that needs to be updated by AJAX needs to be listed in ajaxVar along with a regular expression defining which values of it are legal.
While I was at it, I included the Zen Nodelet Collapser script by default as well. It's the sort of thing you should have to switch off rather than switch on. Even if I don't like the transitions (which should also be the sort of thing you can switch off, for which reason they now are).
Finally, I put async voting out to pasture, since its job is now done by Everything2 Ajax.