hedgedoc, branch cindy

Add simple support for cindyjs

2021-05-17T18:12:50Z

Notably, the error output (in case of compiler errors) is generated by overwriting the builtin console.error-function, which is a horrible idea for many reasons, but there isn't really any other way right now.

Merge pull request #1267 from hedgedoc/release/1.8.2

2021-05-11T19:41:11Z

Bump version to 1.8.2

2021-05-11T19:28:10Z

Signed-off-by: David Mehren

Add release notes for 1.8.2

2021-05-11T19:28:10Z

Signed-off-by: David Mehren

Merge pull request from GHSA-gjg7-4j2h-94fq

2021-05-11T19:13:25Z

Fix XSS in Open Graph & User metadata

Merge pull request #1259 from hedgedoc/renovate/master-lock-file-maintenance

2021-05-11T17:42:43Z

Lock file maintenance (master)

Lock file maintenance

2021-05-11T17:15:20Z

Signed-off-by: Renovate Bot

Merge pull request #1263 from hedgedoc/renovate/master-mermaid-8.x

2021-05-11T17:13:35Z

Update dependency mermaid to v8.10.1 (master)

Update dependency mermaid to v8.10.1

2021-05-10T17:39:12Z

Signed-off-by: Renovate Bot

Sanitize username and photo URL

2021-05-09T17:28:44Z

HedgeDoc displays the username and user photo at various places by rendering the respective variables into an `ejs` template. As the values are user-provided or generated from user-provided data, it may be possible to inject unwanted HTML. This commit sanitizes the username and photo URL by passing them through the `xss` library. Co-authored-by: Christoph (Sheogorath) Kern Signed-off-by: David Mehren