21 Commits

Author SHA1 Message Date
b4d7daf379 detect XSS attacks using is-html package
The isValidUrl method is using `idna-uts46-hx` to catch malformed domain
names and `is-html` to identify HTML elements in the URL.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-06-09 17:03:43 +02:00
e5bf39d23a add a redirect page warning user about possible attack
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-04-03 14:21:04 +02:00
951c6723ee drop @ from user path because iOS removes it
iOS is fucking retarded and removes @ from deep links.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-04-01 15:50:00 +02:00
bc2cc428f8 improve and fix tests using cheerio library
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-03-20 16:05:47 +01:00
ed6d320ccf redirect uppercase channel names to lowercase
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-03-12 10:17:05 +01:00
0a8fe19418 show error on incorrect length chat key
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-26 10:16:51 +01:00
e5d3ed7036 show errors for upper case ens names and public chats
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-26 10:16:51 +01:00
b9001265e7 add support for express route tests
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-26 10:16:51 +01:00
3fab600804
site overhaul changes
from https://github.com/NistorCristian/get-status

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2019-04-18 18:11:37 +02:00
Dylan Wilson
a66c14e7c2 Add extension path to shakedown tests 2018-12-03 10:03:21 +01:00
Chad
0a86450317 Use Testflight public links instead of Fastlane signup page 2018-09-26 19:55:22 +02:00
Andrea Maria Piana
694cb56d36 Allow slashes in browse url 2018-07-05 11:29:09 +02:00
Andrea Maria Piana
c346f67cfe match against lowercase version as well 2018-07-03 08:23:55 +02:00
Andrea Maria Piana
6cbf45843a redirect only on root 2018-07-02 20:48:58 +02:00
Andrea Maria Piana
d64c9faf30 add tests to pipeline 2018-07-02 15:41:06 +02:00
Andrea Maria Piana
227a1e8b27 Redirect server side 2018-07-02 15:07:30 +02:00
Andrea Maria Piana
b973007e42 Add apple association site 2018-06-28 22:11:52 +02:00
Andrea Maria Piana
da11b8a3a9 Add healthcheck endpoint 2018-06-28 13:15:58 +02:00
Andrea Maria Piana
fe86281cf8 add browse support 2018-06-28 09:27:15 +02:00
Andrea Maria Piana
155354c588 Move to express as we need a bit more finess 2018-06-28 08:59:27 +02:00
Andrea Maria Piana
d44fcb3efe Add asset link & setup 2018-06-27 17:01:29 +02:00