Literallie
|
d51da8c12c
|
Don't add nonce to CSP if unsafe-inline is on
Browsers ignore unsafe-inline if a nonce is sent
|
2017-10-22 00:03:46 +02:00 |
|
Literallie
|
91101c856c
|
Change CSP config format to be more intuitive
|
2017-10-22 00:03:46 +02:00 |
|
Literallie
|
996cb37991
|
CSP: Workaround for ws:// protocol
The spec allows wss:// for 'self', but not ws:// :(
|
2017-10-22 00:03:45 +02:00 |
|
Literallie
|
4238b9b3ef
|
Fix MathJax CSP issues
|
2017-10-22 00:03:45 +02:00 |
|
Literallie
|
080436aebb
|
CSP: Add nonce to slide view inline JS
|
2017-10-22 00:03:45 +02:00 |
|
Literallie
|
5d2d3ec875
|
CSP: Upgrade insecure requests if possible
Config option; default is to only upgrade if usessl
|
2017-10-22 00:03:45 +02:00 |
|
Literallie
|
ba183ce654
|
Add basic CSP support
|
2017-10-22 00:03:44 +02:00 |
|
Literallie
|
56411ca0e1
|
Make HSTS behaviour configurable; Fixes #584
|
2017-10-13 01:42:05 +02:00 |
|
Wu Cheng-Han
|
c8d3951d32
|
Add support of Danish locale
|
2017-06-11 15:52:04 +08:00 |
|
Wu Cheng-Han
|
cceb5b1a26
|
Fix import module name typo in app.js
|
2017-05-08 20:35:51 +08:00 |
|
Raccoon Li
|
d79997808a
|
fix(imageRouter): import missing dependency: getImageMimeType
|
2017-05-08 20:04:05 +08:00 |
|
BoHong Li
|
60ca6ed56c
|
refactor: Rename checkURiVaild to checkURIValid to fit coding standard
|
2017-05-08 19:29:07 +08:00 |
|
BoHong Li
|
3919d4fc0e
|
fix(app.js): Change config.maintenance to realtime.maintenance
|
2017-05-08 19:29:07 +08:00 |
|
BoHong Li
|
ecb0533605
|
refactor(config.js): Extract config file
* Separate different config source to each files
* Freeze config object
|
2017-05-08 19:29:07 +08:00 |
|
BoHong Li
|
4738ba7d36
|
fix: Add 'use strict' on app.js
|
2017-05-08 19:29:07 +08:00 |
|
BoHong Li
|
aca01f064d
|
refactor: Remove require extension filename
|
2017-05-08 19:29:06 +08:00 |
|
BoHong Li
|
d88502e331
|
refactor(app.js): Move passport serialize and deserialize to auth module
|
2017-05-08 19:29:06 +08:00 |
|
BoHong Li
|
7ef17fd4e6
|
refactor(app.js): Extract tooBusy
|
2017-05-08 19:29:06 +08:00 |
|
BoHong Li
|
768943002c
|
refactor(app.js): Extract upload image
|
2017-05-08 19:29:06 +08:00 |
|
BoHong Li
|
d90bd6da31
|
fix(app.js): Fixed typo
|
2017-05-08 19:24:38 +08:00 |
|
BoHong Li
|
689bade730
|
refactor(app.js): Extract note action
|
2017-05-08 19:24:38 +08:00 |
|
BoHong Li
|
e2ac73f5a3
|
refactor(app.js): Extract /me page
|
2017-05-08 19:24:38 +08:00 |
|
BoHong Li
|
e3fde01e3a
|
refactor(app.js): Remove unused modules
|
2017-05-08 19:24:38 +08:00 |
|
BoHong Li
|
706df11e23
|
refactor(app.js): Extract history api
|
2017-05-08 19:24:38 +08:00 |
|
BoHong Li
|
c99ae8e1f8
|
refactor(app.js): Remove unused import modules
|
2017-05-08 19:24:38 +08:00 |
|
BoHong Li
|
69a9f7ca38
|
refactor(app.js, auth.js): Extract all auth method to individual modules
|
2017-05-08 19:24:38 +08:00 |
|
BoHong Li
|
766022378a
|
refactor(app.js): Extract status pages
|
2017-05-08 19:24:37 +08:00 |
|
BoHong Li
|
66c68254b4
|
refactor(app.js): Extract index, 403, 404, 500 pages
|
2017-05-08 19:24:37 +08:00 |
|
BoHong Li
|
9f1f16c8e3
|
refactor(app.js): Extract urlencodedParser to utils module
|
2017-05-08 19:24:37 +08:00 |
|
BoHong Li
|
dee77c459a
|
refactor(app.js): Extract middleware to module
extract check URi is valid, redirect without trailing slashes
|
2017-05-08 19:24:37 +08:00 |
|
BoHong Li
|
7ba0d600f1
|
fix(app.js): Stream log
use logger instead of logger.stream
|
2017-05-08 19:24:37 +08:00 |
|
LluisArevalo
|
6e277100ca
|
Add reference to utils library
|
2017-05-08 10:52:30 +02:00 |
|
LluisArevalo
|
03ef1bf4f0
|
Add Content-Type to the images uploaded to AWS S3
|
2017-05-08 10:22:52 +02:00 |
|
Wu Cheng-Han
|
dde6e622a4
|
Fix front-end constants generation not getting config properly
|
2017-03-23 20:00:48 +08:00 |
|
Wu Cheng-Han
|
011d043b2a
|
Update to indicate version in status API header
|
2017-03-22 23:44:09 +08:00 |
|
Wu Cheng-Han
|
e751684aa3
|
Update to print info on exit term signals handled
|
2017-03-22 15:31:39 +08:00 |
|
Wu Cheng-Han
|
0bcd83576f
|
Update to handle SIGQUIT
|
2017-03-22 15:26:35 +08:00 |
|
Wu Cheng-Han
|
7989b89591
|
Add support of Catalan locale
|
2017-03-20 14:52:25 +08:00 |
|
Wu Cheng-Han
|
19a64f6b06
|
Fix typo and possible wrong value on provider is false on generating front-end constants
|
2017-03-20 01:54:44 +08:00 |
|
Wu Cheng-Han
|
448b006194
|
Update to generate front-end constants on server startup
To avoid extra webpacking on changing configs and follow the 12 factor app
|
2017-03-20 01:39:09 +08:00 |
|
Wu Cheng-Han
|
506a381eca
|
Add config option for gitlab api scope and auto adapt gitlab snippet feature on it
|
2017-03-14 18:04:23 +08:00 |
|
BoHong Li
|
4889e9732d
|
Use JavaScript Standard Style
Introduce JavaScript Standard Style as project style rule,
and fixed all fail on backend code.
|
2017-03-08 18:45:51 +08:00 |
|
NV
|
90c83ebd5b
|
Fix image path problem when using filesystem backend
|
2017-02-09 14:07:36 +09:00 |
|
Wu Cheng-Han
|
92ad67b813
|
Update to remove history cache to lower application coupling
|
2017-02-03 21:39:08 +08:00 |
|
Jan Kunzmann
|
20dc3127b1
|
Handle SIGTERM the same way SIGINT is handled
|
2017-01-20 02:13:09 +01:00 |
|
Max Wu
|
4851098477
|
Merge pull request #317 from SISheogorath/master+allowEmailRegister
Add `allowemailregister` option
|
2017-01-12 23:37:28 +08:00 |
|
Sheogorath
|
747629e549
|
Add allowemailregister option
|
2017-01-12 13:54:45 +01:00 |
|
Wu Cheng-Han
|
fc788e805e
|
Fix SIGINT checkClean should only log error instead throw error
|
2017-01-12 17:17:01 +08:00 |
|
Max Wu
|
b13635aac9
|
Merge pull request #279 from alecdwm/ldap-auth
Support for LDAP server authentication
|
2017-01-09 00:49:40 +08:00 |
|
James Stephenson
|
ec1ae8c6b5
|
Added Esperanto translation
Translation by Jonathan Powell and James Stephenson
|
2016-12-30 22:02:57 -05:00 |
|