on very large python files (>1000 lines) sometimes they queue up and we
have to wait for all requests that were queued by zope.

XXX maybe this does not happen when accessing through haproxy/apache, I
am observing this when hitting zope directly

See merge request nexedi/erp5!1512

See merge request nexedi/erp5!1522

Adding **kw prevents "Unexpected keyword argument 'select_favorite'".
The removed arguments url, user and password aren't used by the Script and can therefore be removed.

Allows using an empty fallback value with "replace" set to trigger header
removal.

See merge request nexedi/erp5!1501

erp5_openid_connect_client_login: Add dedicated cache factory to work with open id connect

erp5_openid_connect_client_login: Add Scope, Client Metadata and state

* Add configurable scope to connector
* Client Metadata is a JSON defined on connector
* Add state parameter to make redirect non repeatable

erp5_openid_connect_client_login: Update OpenId Connect to be be fully functionnal

erp5_openid_connect_client_login: Add tests and some minor fixup

erp5_openid_connect_client_login: Don't call create user on each call to callback

erp5_openid_connect_client_login: Test create connector in portal web services

erp5_openid_connect_client_login: Fix test on open Id connector creation in afterSetUp

OpenIDConnect: Add Extraction Plugin

openidconnect: Have functionnal Extractor

erp5_core: Add Case of OpenId Connect Client

erp5_xhtml_style: Add OpenId Connect to Login Form

erp5_web: Add OpenId Connect Logout

erp5_web_renderjs_ui: Add OpenId Connect to Login Form and Logout

erp5_credential: Add OpenId Connect to login form

It is GPDR compliant, as no cookie is set

Use CSP to improve protection against XSS and improve user privacy.

No javascript is supposed to be executed on the error page.

Such web sites are meant for anonymous access only, to improve CDN usage.

Do not load any JS, because the gadget may crash too, as no erp5 field is rendered

Allow users to go to the homepage.

Prevent img to increase the page width.

Most listbox functionnalities are not supported by web_js_style for now, as no form is used by default

Their contents is already provided by the HTML page template.

Generate a hfeed in the HTML rendering.
https://indieweb.org/feed

Provide a RSS feed automatically.

Only generate the feed when rendering the web section in view mode.

Extract all feed informations in Javascript to allow styling it as a blog.

Add bt5 dependency to erp5_dms to retrieve the author title.

This allows called script to call script on them

This stopped working when the signature of Message.__init__ changed in
06aee0c2 (CMFActivity.ActivityTool: Use uid for identity check instead of
oid., 2019-09-17)

"Access Tool" sounds like a tool to access, but this setting is about
giving access to ERP5 tools from the module list.

See merge request nexedi/erp5!1509

See merge request nexedi/erp5!1510

we have such error:
....
if context.getValidationState() in ["draft", "deleted", "cancelled", "archived"]:
  Module Products.ERP5Type.Accessor.WorkflowState, line 60, in __call__
    return wf._getWorkflowStateOf(instance, id_only=1)
  Module Products.ERP5Type.Core.Workflow, line 609, in _getWorkflowStateOf
    state_id = 'state_' + status.get(self.getStateVariable(), None)
TypeError: cannot concatenate 'str' and 'NoneType' objects

This stopped working long time ago, probably with slapos commit aa102f28f
(erp5testnode: use newer shellinabox, with a caddy frontend, 2018-09-21)

Web Site/Section were still indexable when rendering in xhtml style.

See nexedi/erp5@6c5db57b

See merge request nexedi/erp5!1504

See merge request nexedi/erp5!1508