40b6b06f57
feat(hsts): trun includeSubdomain to false
...
BREAKING CHANGE: change default setting from `true` to `false`
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-03-02 11:53:35 +08:00
66ec25dddb
Merge pull request #1430 from hackmdio/bugfix/fix-validate-url-regex
...
fix: use validator.isURL to avoid regex catastrophic backtracking
2020-02-29 20:04:58 +08:00
69a0cb5054
Merge pull request #1428 from hackmdio/feature/plantuml-codemirror-grammer
...
Bump codemirror version to 5.49.5
2020-02-29 20:00:08 +08:00
eb27db8f3e
fix: use validator.isURL to avoid regex catastrophic backtracking
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-29 19:51:20 +08:00
e3b9263b6c
Merge pull request #1429 from hackmdio/feature/upgrade-markdown-it-10.0.0
...
feat: upgrade markdown-it to 10.0.0 for supporting em in strong tag
2020-02-29 19:48:21 +08:00
451a02fff3
feat: upgrade markdown-it to 10.0.0 for supporting em in strong tag
...
for example: ex***amp***le
e519e6ac1983ed53e12a
2020-02-29 19:31:50 +08:00
85e5d0adfe
Merge pull request #1427 from hackmdio/feature/update-pandoc-i18n
...
Update pandoc i18n
2020-02-29 19:28:58 +08:00
e3e42f4f7d
Bump codemirror version to 5.49.5
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-29 19:28:46 +08:00
ee534a46ed
Update pandoc i18n
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-29 18:43:20 +08:00
c9badcf2e4
Merge pull request #1426 from hackmdio/feat/support-google-hosted-name
...
Support hostedName in google OAuth provider
2020-02-28 18:03:19 +08:00
b9f0e37eee
feat: support hostedName in google OAuth 2.0 provider
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 17:53:04 +08:00
371e985e29
Merge pull request #1289 from hackmdio/feature/embed-geolocation
...
Support embedding geolocation data
2020-02-28 17:37:23 +08:00
1a000226b0
fix: unwrap the geo div and throw error when input
...
location search not found
also fix the CSP rule that the img with data src might be violated
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
Co-authored-by: Max Wu <jackymaxj@gmail.com>
2020-02-28 15:48:09 +08:00
a6f2ff4aa3
Merge pull request #1424 from hackmdio/fix/oauth2-email-may-undefined
...
fix server crash when use oauth2 provider with email not exists
2020-02-28 15:03:32 +08:00
72c5b0d14e
feat: support customize scope in OAuth2 provider
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 02:13:58 +08:00
d5d0f3d820
fix: extractProfileAttribute not working correctly
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-28 01:53:25 +08:00
8a05276339
Specifiy leaflet version to 1.6.0
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
e3c460308c
Fix coding style
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
d857f0d12f
Bundle default leaflet marker images
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
0bb3e2614b
Handle geo address lookup
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
d9851f2a28
Support embed OSM
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:10 +08:00
6ef0d8698a
Install leaflet library
...
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
2020-02-27 21:51:07 +08:00
06f578e6f8
Merge pull request #1422 from hackmdio/feature/support-vega-lite-code-highlight-svg
...
Feature/support vega lite code highlight svg
2020-02-27 19:06:01 +08:00
50cbf036e3
Merge pull request #1420 from hackmdio/feature/upgrade-reveal.js-3.9.2
...
Feature/upgrade reveal.js 3.9.2
2020-02-27 19:04:52 +08:00
b22b4d3fb4
fix: use const for ignoreOverlay since it's never reassigned
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
3cc563ec59
feat: define vega code block using json overlay mode in editor
...
to get vega-lite syntax highlighting work
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
3a5c6fa5ed
feat: use svg for vega-lite renderer
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
0a253a4f32
feat: upgrade vega to 5.9.1, vega-embed to 6.2.2, vega-lite to 4.4.0
...
also update the schema link in the features.md
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-27 18:20:41 +08:00
e33bafd35d
Merge pull request #1421 from hackmdio/fix/cannot-download-pdf
...
Fix server crash when download pdf twice
2020-02-27 00:31:51 +08:00
b8fb9dbb9e
fix: download pdf twice may crash server
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-27 00:02:18 +08:00
90898e700f
Merge pull request #1419 from hackmdio/bugfix/fix-graphviz-error-render
...
fix: catch viz.js render async error and recreate Viz instance
2020-02-26 22:59:14 +08:00
98fa323b15
fix (test): update CSP tests for CDN directives and file hash
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
1417f65a22
fix: mermaid docs link in features.md
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
adf3503c31
feat: update CSP nonce for reveal.js 3.9.2 speaker notes feature
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
0b9037fb11
feat: upgrade reveal.js to 3.9.2
...
remove headjs dependency after 3.8.0 and update lock file
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 22:36:25 +08:00
72bff3f0b8
Merge pull request #1418 from hackmdio/feature/upgrade-mermaid-8.4.8
...
Feature/upgrade mermaid 8.4.8
2020-02-26 16:11:15 +08:00
40a04f76f8
fix: catch viz.js render async error and recreate Viz instance
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 16:05:43 +08:00
919c60c696
feat: update lock file for mermaid upgrade
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 11:52:09 +08:00
cdc8581174
fix: solve conflict of label class in mermaid and bootstrap
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 11:52:09 +08:00
edd27af26e
feat: upgrade mermaid to 8.4.8
...
Signed-off-by: Max Wu <jackymaxj@gmail.com>
2020-02-26 11:52:09 +08:00
b260093947
Merge pull request #1416 from hackmdio/fix/user-type-error
...
Fix some issues after code refactoring
2020-02-26 11:51:06 +08:00
da3fd00577
refactor: change errorServiceUnavailable function signature to avoid parameter passing error
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:26:56 +08:00
13ed2e6b44
refactor: change errorInternalError function signature to avoid parameter passing error
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:26:01 +08:00
8787177991
refactor: change errorTooLong function signature to avoid parameter passing error
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:23:55 +08:00
35a2135b36
refactor: change errorBadRequest function signature to avoid parameter passing error
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:22:59 +08:00
09a353ffcc
refactor: change errorNotFound function signature to avoid parameter passing error
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:20:42 +08:00
6b1ce381df
fix: change errorForbidden function signature, add req into function parameter
...
avoid incorrect function parameter passing
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 11:13:45 +08:00
7870b82249
fix: server throw TypeError when user not sign-in
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 10:25:25 +08:00
db615e5111
fix: page broken when shortId doesn't exists
...
Signed-off-by: BoHong Li <raccoon@hackmd.io>
2020-02-26 10:25:25 +08:00
05dd6eb739
Merge pull request #1415 from hackmdio/bugfix/enable-version-check-only-in-production
...
Enable version check only in NODE_ENV production
2020-02-25 14:28:53 +08:00
BoHong Li
Yukai Huang
Max Wu