One Click Orgs » Releases

One Click Orgs v1.2.3 released

Charles Armstrong — Thu, 17 Nov 2011 21:33:19 +0000

Today One Click Orgs announces release of version 1.2.3. For this release the team focused on enhancing security across the platform. A formal vulnerability test was carried out to identify all potential security issues then a series of code changes was implemented to remedy them. The v1.2.3 release includes the following security fixes:

HTML was not properly escaped in proposal descriptions and comments. This is fixed.
Users could be redirected to an external site by abusing the URL used for registering a vote. This is fixed.
Members could set their email to that of an existing member and new members could be added with the same email as an existing member. This is fixed.
Browsers were permitted to cache login credentials. This is fixed.
The password reset system allowed a non-member to determine whether or not an email address corresponded to a valid user or not. This is fixed.
The organisation’s name was not properly escaped for the ’From’ field of emails. This is fixed.
Some invalid characters were allowed in members’ email addresses. This is fixed.
Users could be redirected to an external site by inserting special characters into the organisation’s subdomain. This is fixed

In addition to the security fixes the following enhancements are also included:

A vote taking place under the ‘veto’ voting system now closes early if
all members vote in favour.
Rails is upgraded to version 3.0.10.
Members can now specify what role they play in the organisation.
Proposal comments are now displayed in date order.

Particular thanks to Andrew Black and Darren McDonald for contributions, testing and reports for this release.

Source and downloads are available at Github.

One Click Orgs v1.0 is live!

Charles Armstrong — Thu, 17 Mar 2011 22:11:24 +0000

At an event in London this evening One Click Orgs officially launched its free public service. The version 1.0 platform helps community groups and fledgling non-profits organise themselves with a legal structure and voting system.

One Click Orgs Associations are compatible with English law. We think they can be used in other countries too. However in some places an Association must be registered with state agencies. We’d welcome input from lawyers who can tell us exactly what’s needed for different jurisdictions

In countries where a One Click Orgs Association isn’t recognised as a civil society organisation groups are still welcome to create a One Click Orgs constitution and use the voting system with their members.

Go and create a One Click Orgs Association!

Say hallo to One Click Orgs Beta

Charles Armstrong — Wed, 14 Oct 2009 00:07:33 +0000

At last week’s planning meeting we decided (with a One Click Orgs vote, naturally) that the platform was ready to enter Beta release. Since the start of 2009 three groups have been using the Alpha platform and giving us valuable feedback. With the new 0.5 release we’re opening an invitation to 20 groups to use One Click Orgs and help guide the next stage of development. Our partners at the Open Knowledge Foundation have kindly made hosting facilities available to support this.

We’ve already got a dozen groups lined up for the Beta. If your group would like to join them and be one of the first to run on a virtual platform write to us at open [at] CIRCUS-foundation [dot] org or send a message via our Facebook group. Meanwhile we’ve published a simple Beta FAQ answering some of the key questions from groups that are interested.