| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | Merge pull request #598 from xxyy/feature/csp | Christoph (Sheogorath) Kern | 2018-01-22 | 1 | -0/+14 | |
| |\ \ | |/ |/| | Implement basic CSP support | |||||
| | * | Move CSP logic to new file, Fix boolean config examples | Literallie | 2017-10-22 | 1 | -73/+4 | |
| | | | | | | | | | Not sure why I was quoting these in the first place | |||||
| | * | Add dirty workaround for speakers view inline script | Literallie | 2017-10-22 | 1 | -0/+4 | |
| | | | ||||||
| | * | Allow any connect-src in CSP | Literallie | 2017-10-22 | 1 | -1/+1 | |
| | | | | | | | | | Managing these for all the integrations seems like a lot of effort | |||||
| | * | Don't add nonce to CSP if unsafe-inline is on | Literallie | 2017-10-22 | 1 | -1/+3 | |
| | | | | | | | | | Browsers ignore unsafe-inline if a nonce is sent | |||||
| | * | Change CSP config format to be more intuitive | Literallie | 2017-10-22 | 1 | -5/+35 | |
| | | | ||||||
| | * | CSP: Workaround for ws:// protocol | Literallie | 2017-10-22 | 1 | -2/+12 | |
| | | | | | | | | | The spec allows wss:// for 'self', but not ws:// :( | |||||
| | * | Fix MathJax CSP issues | Literallie | 2017-10-22 | 1 | -7/+7 | |
| | | | ||||||
| | * | CSP: Add nonce to slide view inline JS | Literallie | 2017-10-22 | 1 | -0/+7 | |
| | | | ||||||
| | * | CSP: Upgrade insecure requests if possible | Literallie | 2017-10-22 | 1 | -0/+5 | |
| | | | | | | | | | Config option; default is to only upgrade if usessl | |||||
| | * | Add basic CSP support | Literallie | 2017-10-22 | 1 | -0/+25 | |
| | | | ||||||
| * | | Fix not passing app key correctly in dropbox config | Wu Cheng-Han | 2018-01-19 | 1 | -1/+1 | |
| | | | ||||||
| * | | support Simplified Chinese and rename original zh to Traditional Chinese | Rwing | 2017-10-23 | 1 | -1/+1 | |
| |/ | ||||||
| * | Make HSTS behaviour configurable; Fixes #584 | Literallie | 2017-10-13 | 1 | -5/+10 | |
| | | ||||||
| * | Add support of Danish locale | Wu Cheng-Han | 2017-06-11 | 1 | -1/+1 | |
| | | ||||||
| * | Fix import module name typo in app.js | Wu Cheng-Han | 2017-05-08 | 1 | -1/+1 | |
| | | ||||||
| * | fix(imageRouter): import missing dependency: getImageMimeType | Raccoon Li | 2017-05-08 | 1 | -3/+0 | |
| | | ||||||
| * | refactor: Rename checkURiVaild to checkURIValid to fit coding standard | BoHong Li | 2017-05-08 | 1 | -2/+1 | |
| | | ||||||
| * | fix(app.js): Change config.maintenance to realtime.maintenance | BoHong Li | 2017-05-08 | 1 | -1/+1 | |
| | | ||||||
| * | refactor(config.js): Extract config file | BoHong Li | 2017-05-08 | 1 | -8/+5 | |
| | | | | | | * Separate different config source to each files * Freeze config object | |||||
| * | fix: Add 'use strict' on app.js | BoHong Li | 2017-05-08 | 1 | -0/+1 | |
| | | ||||||
| * | refactor: Remove `require` extension filename | BoHong Li | 2017-05-08 | 1 | -3/+3 | |
| | | ||||||
| * | refactor(app.js): Move passport serialize and deserialize to auth module | BoHong Li | 2017-05-08 | 1 | -19/+0 | |
| | | ||||||
| * | refactor(app.js): Extract tooBusy | BoHong Li | 2017-05-08 | 1 | -8/+2 | |
| | | ||||||
| * | refactor(app.js): Extract upload image | BoHong Li | 2017-05-08 | 1 | -84/+2 | |
| | | ||||||
| * | fix(app.js): Fixed typo | BoHong Li | 2017-05-08 | 1 | -1/+1 | |
| | | ||||||
| * | refactor(app.js): Extract note action | BoHong Li | 2017-05-08 | 1 | -17/+4 | |
| | | ||||||
| * | refactor(app.js): Extract /me page | BoHong Li | 2017-05-08 | 1 | -28/+1 | |
| | | ||||||
| * | refactor(app.js): Remove unused modules | BoHong Li | 2017-05-08 | 1 | -1/+0 | |
| | | ||||||
| * | refactor(app.js): Extract history api | BoHong Li | 2017-05-08 | 1 | -11/+1 | |
| | | ||||||
| * | refactor(app.js): Remove unused import modules | BoHong Li | 2017-05-08 | 1 | -2/+0 | |
| | | ||||||
| * | refactor(app.js, auth.js): Extract all auth method to individual modules | BoHong Li | 2017-05-08 | 1 | -157/+1 | |
| | | ||||||
| * | refactor(app.js): Extract status pages | BoHong Li | 2017-05-08 | 1 | -78/+1 | |
| | | ||||||
| * | refactor(app.js): Extract index, 403, 404, 500 pages | BoHong Li | 2017-05-08 | 1 | -14/+1 | |
| | | ||||||
| * | refactor(app.js): Extract urlencodedParser to utils module | BoHong Li | 2017-05-08 | 1 | -6/+1 | |
| | | ||||||
| * | refactor(app.js): Extract middleware to module | BoHong Li | 2017-05-08 | 1 | -20/+2 | |
| | | | | | extract check URi is valid, redirect without trailing slashes | |||||
| * | fix(app.js): Stream log | BoHong Li | 2017-05-08 | 1 | -1/+1 | |
| | | | | | use logger instead of logger.stream | |||||
| * | Add reference to utils library | LluisArevalo | 2017-05-08 | 1 | -0/+3 | |
| | | ||||||
| * | Add Content-Type to the images uploaded to AWS S3 | LluisArevalo | 2017-05-08 | 1 | -0/+3 | |
| | | ||||||
| * | Fix front-end constants generation not getting config properly | Wu Cheng-Han | 2017-03-23 | 1 | -3/+7 | |
| | | ||||||
| * | Update to indicate version in status API header | Wu Cheng-Han | 2017-03-22 | 1 | -1/+2 | |
| | | ||||||
| * | Update to print info on exit term signals handled | Wu Cheng-Han | 2017-03-22 | 1 | -0/+1 | |
| | | ||||||
| * | Update to handle SIGQUIT | Wu Cheng-Han | 2017-03-22 | 1 | -0/+1 | |
| | | ||||||
| * | Add support of Catalan locale | Wu Cheng-Han | 2017-03-20 | 1 | -1/+1 | |
| | | ||||||
| * | Fix typo and possible wrong value on provider is false on generating ↵ | Wu Cheng-Han | 2017-03-20 | 1 | -3/+3 | |
| | | | | | front-end constants | |||||
| * | Update to generate front-end constants on server startup | Wu Cheng-Han | 2017-03-20 | 1 | -0/+16 | |
| | | | | | To avoid extra webpacking on changing configs and follow the 12 factor app | |||||
| * | Add config option for gitlab api scope and auto adapt gitlab snippet feature ↵ | Wu Cheng-Han | 2017-03-14 | 1 | -2/+4 | |
| | | | | | on it | |||||
| * | Use JavaScript Standard Style | BoHong Li | 2017-03-08 | 1 | -554/+556 | |
| | | | | | | Introduce JavaScript Standard Style as project style rule, and fixed all fail on backend code. | |||||
| * | Fix image path problem when using filesystem backend | NV | 2017-02-09 | 1 | -1/+1 | |
| | | ||||||
| * | Update to remove history cache to lower application coupling | Wu Cheng-Han | 2017-02-03 | 1 | -3/+3 | |
| | | ||||||
 |
index : hedgedoc | |
| Hedgedoc with support for CindyScript |
| summaryrefslogtreecommitdiff |