summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* fix: package.json to reduce vulnerabilitiessnyk-bot2019-09-301-1/+1
| | | | | The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-HELMETCSP-469436
* Merge pull request #185 from codimd/snyk-fix-905c5c88626d5047fb1568d93ce366caSheogorath2019-09-261-1/+1
|\ | | | | [Snyk] Fix for 1 vulnerabilities
| * fix: package.json to reduce vulnerabilitiessnyk-bot2019-09-261-1/+1
| | | | | | | | | | The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063
* | Merge pull request #170 from ErikMichelson/post-note-urlSheogorath2019-09-262-13/+19
|\ \ | |/ |/| Added endpoint for note-creation with given alias
| * Refactored note-creation with given noteIdErik Michelson2019-09-042-14/+18
| | | | | | | | | | | | | | Known bugs/features: - pushing towards an existing note results in an error 500 Signed-off-by: Erik Michelson <erik@liltv.de>
| * Added endpoint for note-creation with given aliasErik Michelson2019-09-042-2/+4
| | | | | | | | Signed-off-by: Erik Michelson <erik@liltv.de>
* | Merge pull request #180 from ErikMichelson/fix/trailingSlashRedirectSheogorath2019-09-182-4/+4
|\ \ | | | | | | Fixed #179 (redirect loop with a trailing slash)
| * | Updated forbiddenNoteIDsErik Michelson2019-09-181-1/+1
| | | | | | | | | | | | Signed-off-by: Erik Michelson <erik@liltv.de>
| * | Fixed #179 (redirect loop with a trailing slash)Erik Michelson2019-09-181-3/+3
|/ / | | | | | | Signed-off-by: Erik Michelson <erik@liltv.de>
* | Merge pull request #173 from ErikMichelson/docsSheogorath2019-09-182-4/+45
|\ \ | | | | | | Extended config.js documentation on login methods and libravatar
| * | Added link to libravatar.orgErik Michelson2019-09-092-2/+2
| | | | | | | | | | | | Signed-off-by: Erik Michelson <erik@liltv.de>
| * | Extended login methods sectionErik Michelson2019-09-091-2/+43
| | | | | | | | | | | | Signed-off-by: Erik Michelson <erik@liltv.de>
| * | Changed Gravatar to LibravatarErik Michelson2019-09-092-2/+2
| | | | | | | | | | | | Signed-off-by: Erik Michelson <erik@liltv.de>
* | | Merge pull request #176 from SISheogorath/docs/securitySheogorath2019-09-121-0/+32
|\ \ \ | |/ / |/| | Add security note to repository
| * | Add security note to repositorySheogorath2019-09-101-0/+32
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | In order to simplify the communication with security researcher and allow reporting of issues, this document should provide a rough idea about: 1. What versions are supported 2. Who to contact 3. How to send findings properly secured 4. What to expect from an approved security issue 5. What if it's not considered a security issue Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge pull request #171 from soulchild/masterSheogorath2019-09-071-1/+1
|\ \ | |/ |/| Move sequelize-cli from devDependencies to dependencies, because it is needed to run migrations at run-time
| * Move sequelize-cli from devDependencies to dependencies, because it is ↵Tobias Kremer2019-09-061-1/+1
|/ | | | | | needed to run migrations at run-time Signed-off-by: Tobias Kremer <tobias.kremer@gmail.com>
* Merge pull request #168 from dargmuesli/fix/docker-secret-bufferSheogorath2019-09-031-1/+1
|\ | | | | Config: Return String Instead Of Buffer For Docker Secrets
| * Docker Secrets: Use Encoding Parameter DirectlyJonas Thelemann2019-09-031-1/+1
| | | | | | | | Signed-off-by: Jonas Thelemann <e-mail@jonas-thelemann.de>
| * Config: Return String Instead Of Buffer For Docker SecretsJonas Thelemann2019-09-031-1/+1
| | | | | | | | | | | | Prevents "TypeError: Cannot freeze array buffer views with elements". Signed-off-by: Jonas Thelemann <e-mail@jonas-thelemann.de>
* | Merge pull request #167 from dargmuesli/fix/docker-secret-pathSheogorath2019-09-031-1/+1
|\ \ | |/ |/| Docker Secrets: Correct Source Path
| * Docker Secrets: Correct Source PathJonas Thelemann2019-09-021-1/+1
|/ | | | Signed-off-by: Jonas Thelemann <e-mail@jonas-thelemann.de>
* Merge pull request #147 from codimd/snyk-fix-0aa72a9ec7fcf1d8b1832518c29b6f4cSheogorath2019-09-021-2/+2
|\ | | | | [Snyk] Fix for 2 vulnerable dependencies
| * fix: package.json to reduce vulnerabilitiessnyk-test2019-08-201-2/+2
| | | | | | | | | | | | The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AUTOLINKER-73494 - https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751
* | Merge pull request #143 from Fonata/improve-docsSheogorath2019-09-024-30/+31
|\ \ | | | | | | Slightly improve documentation
| * | Documentation: improved 'Users and Privileges' sectionChristian Bläul2019-08-172-5/+5
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation: improved EnglishChristian Bläul2019-08-171-2/+2
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Not serverurl, but serverURL is used as a default for issuerChristian Bläul2019-08-172-2/+2
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation: improved sessionLife descriptionChristian Bläul2019-08-172-2/+2
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation: improved 'Email (local account)' sectionsChristian Bläul2019-08-172-4/+4
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation: improved dbURL descriptionChristian Bläul2019-08-172-2/+2
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation: Improved descriptions of 'Users and Privileges' sectionChristian Bläul2019-08-171-3/+3
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation: converted descriptions to sentences to allow more detailsChristian Bläul2019-08-171-7/+7
| | | | | | | | | | | | | | | | | | No content was added; this is just a formatting commit. Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Improved docs for YAML metadataChristian Bläul2019-08-171-2/+3
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Config documentation: Improved spelling and capitalization of servicesChristian Bläul2019-08-171-6/+6
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation of config options: Improve loglevelChristian Bläul2019-08-171-1/+1
| | | | | | | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
| * | Documentation of config options: Improve dbChristian Bläul2019-08-171-1/+1
| |/ | | | | | | Signed-off-by: Christian Bläul <christian@blaeul.de>
* | Merge pull request #32 from codimd/aws-endpointsSheogorath2019-09-022-2/+5
|\ \ | | | | | | make aws s3 endpoint configurable
| * | make aws s3 endpoint configurableMathias Merscher2019-02-112-2/+5
| | | | | | | | | | | | Signed-off-by: Mathias Merscher <Mathias.Merscher@dg-i.net>
* | | Merge pull request #165 from morpheus-87/imprint-docsSheogorath2019-09-021-0/+9
|\ \ \ | | | | | | | | Add documentation for the new imprint feature
| * | | Remove useless blank lineMatthias Lindinger2019-09-021-1/+0
| | | | | | | | | | | | | | | | Signed-off-by: Matthias Lindinger <m.lindinger@live.de>
| * | | Add documentation for the new imprint featureMatthias Lindinger2019-09-021-0/+10
|/ / / | | | | | | | | | Signed-off-by: Matthias Lindinger <m.lindinger@live.de>
* | | Merge pull request #158 from morpheus-87/add-imprint-linkSheogorath2019-09-024-1/+4
|\ \ \ | |_|/ |/| | Add link to imprint
| * | Add link to imprintMatthias Lindinger2019-08-264-1/+4
|/ / | | | | | | Signed-off-by: Matthias Lindinger <m.lindinger@live.de>
* | Release version 1.5.0Sheogorath2019-08-152-1/+48
| |
* | Update yarn.lockSheogorath2019-08-151-16/+49
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Add arabian translationSheogorath2019-08-153-1/+123
| | | | | | | | | | | | | | Thanks to our great translators that made it to translate the major parts of CodiMD into Arabic! Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Disable PDF export due to security issueSheogorath2019-08-151-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | As a temporary fix, to keep you and your users save, this patch disables the PDF export feature. Details of the attack along with a fix for future versions of CodiMD will be released in future. I hope you can live with this solution for this release because I'm super short on time and the alternative would be to ship no fix at all. This appears to be the better solution for this release. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Switch mysql library to mysql2Sheogorath2019-08-151-1/+1
| | | | | | | | | | | | | | The recent sequelize upgrade introduced some other dependencies, this is one of them. This patch replaces the old `mysql` library with `mysql2`. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix variable names for docker secretsSheogorath2019-08-151-5/+5
| | | | | | | | | | | | | | It seems like since we switched to camelcase we missed to update some variable names in the config section. This patch fixes those. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-26 04:13:51 +0000