Commit Graph

2575 Commits

Author SHA1 Message Date
Max Wu d658903d01
Merge pull request #1433 from hackmdio/feature/disable-include-subdomain-hsts
Disable HSTS IncludeSubdomain, to prevent unexpected behavior
2020-03-02 18:29:03 +08:00
Max Wu b20c8ea83f
Merge pull request #1434 from hackmdio/feat/change-default-anonymous-setting
Change default anonymous setting for more privacy
2020-03-02 18:28:28 +08:00
Max Wu 0c919381c3
Merge pull request #1437 from hackmdio/fix/geo-map-not-support-minus
Fix west longitude and south latitude not parsed correctly in geo map
2020-03-02 18:09:30 +08:00
BoHong Li 5b5d0417f5
fix(geo-map): fix west longitude and south latitude not parsed correctly
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-03-02 14:07:53 +08:00
BoHong Li ac0f5a9461
feat: change default anonymous setting
BREAKING CHANGE: change allowAnonymous to `false` and setup
allowAnonymousEdits and allowAnonymousViews to `true`

Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-03-02 11:58:29 +08:00
BoHong Li 40b6b06f57
feat(hsts): trun includeSubdomain to false
BREAKING CHANGE: change default setting from `true` to `false`

Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-03-02 11:53:35 +08:00
Yukai Huang 66ec25dddb
Merge pull request #1430 from hackmdio/bugfix/fix-validate-url-regex
fix: use validator.isURL to avoid regex catastrophic backtracking
2020-02-29 20:04:58 +08:00
Max Wu 69a0cb5054
Merge pull request #1428 from hackmdio/feature/plantuml-codemirror-grammer
Bump codemirror version to 5.49.5
2020-02-29 20:00:08 +08:00
Max Wu eb27db8f3e fix: use validator.isURL to avoid regex catastrophic backtracking
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-29 19:51:20 +08:00
Yukai Huang e3b9263b6c
Merge pull request #1429 from hackmdio/feature/upgrade-markdown-it-10.0.0
feat: upgrade markdown-it to 10.0.0 for supporting em in strong tag
2020-02-29 19:48:21 +08:00
Max Wu 451a02fff3 feat: upgrade markdown-it to 10.0.0 for supporting em in strong tag
for example: ex***amp***le
e519e6ac19
83ed53e12a

Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-29 19:31:50 +08:00
Max Wu 85e5d0adfe
Merge pull request #1427 from hackmdio/feature/update-pandoc-i18n
Update pandoc i18n
2020-02-29 19:28:58 +08:00
Yukai Huang e3e42f4f7d
Bump codemirror version to 5.49.5
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-29 19:28:46 +08:00
Yukai Huang ee534a46ed Update pandoc i18n
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-29 18:43:20 +08:00
Max Wu c9badcf2e4
Merge pull request #1426 from hackmdio/feat/support-google-hosted-name
Support hostedName in google OAuth provider
2020-02-28 18:03:19 +08:00
BoHong Li b9f0e37eee
feat: support hostedName in google OAuth 2.0 provider
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 17:53:04 +08:00
Max Wu 371e985e29
Merge pull request #1289 from hackmdio/feature/embed-geolocation
Support embedding geolocation data
2020-02-28 17:37:23 +08:00
Yukai Huang 1a000226b0
fix: unwrap the geo div and throw error when input
location search not found

also fix the CSP rule that the img with data src might be violated

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
Co-authored-by: Max Wu <jackymaxj@gmail.com>
2020-02-28 15:48:09 +08:00
Max Wu a6f2ff4aa3
Merge pull request #1424 from hackmdio/fix/oauth2-email-may-undefined
fix server crash when use oauth2 provider with email not exists
2020-02-28 15:03:32 +08:00
BoHong Li 72c5b0d14e
feat: support customize scope in OAuth2 provider
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 02:13:58 +08:00
BoHong Li d5d0f3d820
fix: extractProfileAttribute not working correctly
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 01:53:25 +08:00
Yukai Huang 8a05276339
Specifiy leaflet version to 1.6.0
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
Yukai Huang e3c460308c
Fix coding style
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
Yukai Huang d857f0d12f
Bundle default leaflet marker images
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
Yukai Huang 0bb3e2614b
Handle geo address lookup
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
Yukai Huang d9851f2a28
Support embed OSM
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
Yukai Huang 6ef0d8698a
Install leaflet library
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:07 +08:00
Raccoon 06f578e6f8
Merge pull request #1422 from hackmdio/feature/support-vega-lite-code-highlight-svg
Feature/support vega lite code highlight svg
2020-02-27 19:06:01 +08:00
Raccoon 50cbf036e3
Merge pull request #1420 from hackmdio/feature/upgrade-reveal.js-3.9.2
Feature/upgrade reveal.js 3.9.2
2020-02-27 19:04:52 +08:00
Max Wu b22b4d3fb4 fix: use const for ignoreOverlay since it's never reassigned
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
Max Wu 3cc563ec59 feat: define vega code block using json overlay mode in editor
to get vega-lite syntax highlighting work

Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
Max Wu 3a5c6fa5ed feat: use svg for vega-lite renderer
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
Max Wu 0a253a4f32 feat: upgrade vega to 5.9.1, vega-embed to 6.2.2, vega-lite to 4.4.0
also update the schema link in the features.md

Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
Max Wu e33bafd35d
Merge pull request #1421 from hackmdio/fix/cannot-download-pdf
Fix server crash when download pdf twice
2020-02-27 00:31:51 +08:00
BoHong Li b8fb9dbb9e
fix: download pdf twice may crash server
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-27 00:02:18 +08:00
Max Wu 90898e700f
Merge pull request #1419 from hackmdio/bugfix/fix-graphviz-error-render
fix: catch viz.js render async error and recreate Viz instance
2020-02-26 22:59:14 +08:00
Max Wu 98fa323b15 fix (test): update CSP tests for CDN directives and file hash
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
Max Wu 1417f65a22 fix: mermaid docs link in features.md
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
Max Wu adf3503c31 feat: update CSP nonce for reveal.js 3.9.2 speaker notes feature
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
Max Wu 0b9037fb11 feat: upgrade reveal.js to 3.9.2
remove headjs dependency after 3.8.0 and update lock file

Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
Max Wu 72bff3f0b8
Merge pull request #1418 from hackmdio/feature/upgrade-mermaid-8.4.8
Feature/upgrade mermaid 8.4.8
2020-02-26 16:11:15 +08:00
Max Wu 40a04f76f8 fix: catch viz.js render async error and recreate Viz instance
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 16:05:43 +08:00
Max Wu 919c60c696 feat: update lock file for mermaid upgrade
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 11:52:09 +08:00
Max Wu cdc8581174 fix: solve conflict of label class in mermaid and bootstrap
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 11:52:09 +08:00
Max Wu edd27af26e feat: upgrade mermaid to 8.4.8
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 11:52:09 +08:00
Max Wu b260093947
Merge pull request #1416 from hackmdio/fix/user-type-error
Fix some issues after code refactoring
2020-02-26 11:51:06 +08:00
BoHong Li da3fd00577
refactor: change errorServiceUnavailable function signature to avoid parameter passing error
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:26:56 +08:00
BoHong Li 13ed2e6b44
refactor: change errorInternalError function signature to avoid parameter passing error
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:26:01 +08:00
BoHong Li 8787177991
refactor: change errorTooLong function signature to avoid parameter passing error
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:23:55 +08:00
BoHong Li 35a2135b36
refactor: change errorBadRequest function signature to avoid parameter passing error
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:22:59 +08:00