| Commit message (Expand) | Author | Age | Files | Lines |
* | Add dirty workaround for speakers view inline script | Literallie | 2017-10-22 | 1 | -0/+4 |
* | Allow any connect-src in CSP | Literallie | 2017-10-22 | 1 | -1/+1 |
* | Don't add nonce to CSP if unsafe-inline is on | Literallie | 2017-10-22 | 1 | -1/+3 |
* | Change CSP config format to be more intuitive | Literallie | 2017-10-22 | 5 | -14/+48 |
* | Load js-url lib using legacy-loader | Literallie | 2017-10-22 | 4 | -7/+17 |
* | CSP: Workaround for ws:// protocol | Literallie | 2017-10-22 | 1 | -2/+12 |
* | CSP: Allow more content types | Literallie | 2017-10-22 | 1 | -3/+7 |
* | Fix MathJax CSP issues | Literallie | 2017-10-22 | 5 | -16/+18 |
* | CSP: Add nonce to slide view inline JS | Literallie | 2017-10-22 | 4 | -2/+11 |
* | CSP: Upgrade insecure requests if possible | Literallie | 2017-10-22 | 2 | -2/+8 |
* | Add basic CSP support | Literallie | 2017-10-22 | 2 | -0/+35 |
* | Merge pull request #597 from hackmdio/fix-gist-tag-structure | Sheogorath | 2017-10-21 | 1 | -1/+1 |
|\ |
|
| * | Fix markdown-it gist plugin code closing tag | Yukai Huang | 2017-10-21 | 1 | -1/+1 |
|/ |
|
* | Merge pull request #595 from geekyd/swap | Sheogorath | 2017-10-19 | 1 | -0/+4 |
|\ |
|
| * | Hides empty export section | geekyd | 2017-10-18 | 1 | -0/+4 |
* | | Merge pull request #586 from PeterDaveHello/jsonlint | Sheogorath | 2017-10-18 | 1 | -1/+3 |
|\ \
| |/
|/| |
|
| * | Add jsonlint script to ensure all json files are valid | Peter Dave Hello | 2017-10-14 | 1 | -1/+3 |
* | | Merge pull request #593 from felixonmars/patch-1 | Sheogorath | 2017-10-17 | 1 | -1/+1 |
|\ \ |
|
| * | | Fix a typo in README.md | Felix Yan | 2017-10-17 | 1 | -1/+1 |
|/ / |
|
* | | Merge pull request #585 from xxyy/feature/hsts-cfg | Sheogorath | 2017-10-14 | 6 | -6/+52 |
|\ \ |
|
| * | | Add env vars for extra HSTS options | Literallie | 2017-10-13 | 3 | -0/+18 |
| * | | Add on/off env var for HSTS | Literallie | 2017-10-13 | 3 | -1/+8 |
| * | | Make HSTS behaviour configurable; Fixes #584 | Literallie | 2017-10-13 | 4 | -5/+26 |
| |/ |
|
* | | Merge pull request #569 from SISheogorath/feature/extendedPermissionDocs | Sheogorath | 2017-10-14 | 1 | -6/+9 |
|\ \
| |/
|/| |
|
| * | Provide table for permissions | Sheogorath | 2017-10-12 | 1 | -6/+9 |
* | | Merge pull request #581 from SISheogorath/fix/HMD_URL_ADDPORT | Sheogorath | 2017-10-12 | 1 | -1/+1 |
|\ \ |
|
| * | | Fix missing boolean setting for HMD_URL_ADDPORT | Sheogorath | 2017-10-11 | 1 | -1/+1 |
| |/ |
|
* | | Merge pull request #575 from PeterDaveHello/fix.travis.yml | Sheogorath | 2017-10-11 | 1 | -1/+0 |
|\ \ |
|
| * | | Remove duplicated nodejs version in .travis.yml | Peter Dave Hello | 2017-10-11 | 1 | -1/+0 |
| |/ |
|
* | | Merge pull request #566 from ccoenen/fix-mysql-revision-order | Sheogorath | 2017-10-11 | 1 | -4/+4 |
|\ \ |
|
| * | | createdAt DESC with quotation marks did not work with MySQL fixes #565 | Claudius Coenen | 2017-10-09 | 1 | -4/+4 |
| |/ |
|
* | | Merge pull request #573 from PeterDaveHello/add-version-badge | Claudius Coenen | 2017-10-10 | 1 | -0/+3 |
|\ \ |
|
| * | | Add version badge in README.md | Peter Dave Hello | 2017-10-10 | 1 | -0/+3 |
| |/ |
|
* | | Merge pull request #571 from SISheogorath/fix/shellcheck | Sheogorath | 2017-10-10 | 1 | -2/+2 |
|\ \
| |/
|/| |
|
| * | Prevent argument breaking by spaces | Sheogorath | 2017-10-10 | 1 | -2/+2 |
|/ |
|
* | Merge pull request #550 from SISheogorath/fix/gitlabAvatar | Sheogorath | 2017-10-08 | 1 | -2/+6 |
|\ |
|
| * | Fix broken profile images | Sheogorath | 2017-09-22 | 1 | -2/+6 |
* | | Merge pull request #564 from geekyd/pop_button | Claudius Coenen | 2017-10-08 | 1 | -3/+3 |
|\ \ |
|
| * | | Adds color to new note button | geekyd | 2017-10-07 | 1 | -3/+3 |
* | | | Merge pull request #563 from geekyd/master | Sheogorath | 2017-10-08 | 1 | -0/+3 |
|\ \ \
| |/ /
|/| | |
|
| * | | Increases max_line_len in uglifyjs | geekyd | 2017-10-07 | 1 | -0/+3 |
|/ / |
|
* | | Merge pull request #553 from weisslj/fix-s3-bucket-documentation | Sheogorath | 2017-10-07 | 2 | -4/+5 |
|\ \ |
|
| * | | Correct documentation of S3 bucket | Johannes Weißl | 2017-09-23 | 2 | -4/+5 |
| |/ |
|
* | | Fix to filter @import CSS syntax in style tag to prevent XSS [Security Issue] | Wu Cheng-Han | 2017-10-05 | 1 | -4/+9 |
* | | Fix unescape > symbol inside the style tags to make the CSS works | Wu Cheng-Han | 2017-10-05 | 1 | -0/+4 |
* | | Fix blockquote not parse correctly in slide mode | Wu Cheng-Han | 2017-10-05 | 2 | -3/+1 |
* | | Update .travis.yml | Max Wu | 2017-09-27 | 1 | -0/+4 |
* | | Update yarn.lock file | Wu Cheng-Han | 2017-09-27 | 1 | -1171/+1260 |
* | | Merge pull request #538 from madebyherzblut/fix-yarn-lock | Max Wu | 2017-09-27 | 1 | -4/+4 |
|\ \ |
|
| * | | Update yarn.lock | Christian Schuhmann | 2017-08-29 | 1 | -4/+4 |
| |/ |
|