hedgedoc - Hedgedoc with support for CindyScript

summary refs log tree commit diff

path: root/lib/config/default.js (unfollow)

	Commit message (Collapse)	Author	Files	Lines
2018-05-16	Revert "Workaround Google API problems"	Christoph (Sheogorath) Kern	1	-1/+0

2018-04-13	Use API key instead of clientSecret	Sheogorath	1	-0/+1
	As recently discovered we send the clientSecret to the webclient which is potentionally dangerous. This patch should fix the problem and replace the clientSecret with the originally intended and correct way to implement it using the API key. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-30	Fix CSP for disqus and Google Analytics	Sheogorath	1	-0/+2
	This commit should fix existing problems with Disqus and Google Analytics enabled in the meta-yaml section of a note. Before this commit they were blocked by the strict CSP. It's still possible to disable the added directives using `addDisqus` and `addGoogleAnalytics` in the `csp` config section. They are enabled by default to prevent breaking changes. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-26	Automatically generate a session secret if default is used	Sheogorath	1	-0/+1
	The session secret is used to sign and authenticate the session cookie and this way very important for the authentication process. By default the session secret is set to `secret` and never changes. This commit will add a generator for a dynamic session secret if it stays unchanged. It prevents session hijacking this way and will warn the user about the missing secret. This also implies that on a restart without configured session secret will log out all users. While it may seems annoying, it's for the users best. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-25	Change config to camel case with backwards compatibility	Sheogorath	1	-35/+33
	This refactors the configs a bit to now use camel case everywhere. This change should help to clean up the config interface and make it better understandable. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-14	Add config option for report URI in CSP	Sheogorath	1	-1/+2
	This option is needed as it's currently not possible to add an report URI by the directives array. This option also allows to get CSP reports not only on docker based setup but also on our heroku instances. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-03-05	Remove unused LDAP option `tokenSecret`	Felix Schäfer	1	-1/+0
	hackmdio/hackmd#754 Signed-off-by: Felix Schäfer <felix@thegcat.net>
2018-03-01	Introduce ldap.useridField	Dustin Frisch	1	-0/+1
	Signed-off-by: Dustin Frisch <fooker@lab.sh>
2018-01-27	Remove camel case from `imageuploadtype` in config	Sheogorath	1	-1/+3
	This removes the only camel cased option of the config options we added to the config.json. In auth provider's config parts are a lot of camel cased options provided. We shouldn't touch them to keep them as similar as possible to the examples. Fixes #315 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-01-20	Add option to enable `freely` permission in closed instance	Dario Ernst	1	-0/+1
	Before, closed disallowed guest edits completely, by removing the `freely` permission. This makes it possible to explicitely bring back guest-editing, but not guest-note-creation, to closed instances. Signed-off-by: Dario Ernst <dario@kanojo.de>
2018-01-19	Fix not passing app key correctly in dropbox config	Wu Cheng-Han	1	-1/+2

2017-12-09	Add setting `ldap.usernameField`	Lukas Kalbertodt	1	-0/+1
	This determines which ldap field is used as the username on HackMD. By default, the "id" is used as username, too. The id is taken from the fields `uidNumber`, `uid` or `sAMAccountName`. To give the user more flexibility, they can now choose the field used for the username instead.
2017-12-04	added guide for SAML settings	Norihito Nakae	1	-1/+0

2017-11-29	fixed the SAML callback URL to unconfigurable.	Norihito Nakae	1	-1/+0

2017-11-28	Initial support for SAML authentication	Norihito Nakae	1	-0/+16

2017-10-31	Add mattermost authentication	Christoph Witzany	1	-0/+5

2017-10-25	Adds PDF export via config	geekyd	1	-1/+2

2017-10-22	Change CSP config format to be more intuitive	Literallie	1	-9/+1

2017-10-22	CSP: Allow more content types	Literallie	1	-3/+7

2017-10-22	CSP: Upgrade insecure requests if possible	Literallie	1	-2/+3
	Config option; default is to only upgrade if usessl
2017-10-22	Add basic CSP support	Literallie	1	-0/+10

2017-10-13	Make HSTS behaviour configurable; Fixes #584	Literallie	1	-0/+6

2017-08-30	Add support for minio	Marc Deop	1	-0/+7

2017-05-08	refactor(config.js): Extract config file	BoHong Li	1	-0/+92
	* Separate different config source to each files * Freeze config object