summaryrefslogtreecommitdiff
path: root/public/views/pretty.ejs (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Respect DNT headerSheogorath2019-06-081-1/+1
| | | | | | | | | | | | | | | | | | | | Do Not Track (DNT) is an old web standard in order to notify pages that the user doesn't want to be tracked. Even while a lot of pages either ignore this header or even worse, use it for tracking purposes, the orignal intention of this header is good and should be adopted. This patch implements a respect of the DNT header by no longer including the optional Google Analytics and disqus integrations when sending a DNT header. This should reduce outside resource usage and help to stay more private. This should later-on extended towards other document content (i.e. iframe based content). The reason to not change the CDN handling is that CDNs will be deprecated with next release and removed in long term. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Update jQuery to version 3.4.1Sheogorath2019-05-061-1/+1
|
* Fix possible MathJax XSS issue [Security Issue]Max Wu2019-03-031-0/+2
| | | | | | see more at: http://docs.mathjax.org/en/latest/safe-mode.html Signed-off-by: Max Wu <jackymaxj@gmail.com>
* Update bootstrap from 3.3.7 to 3.4.0Sheogorath2019-01-111-2/+2
| | | | | | | | | | | | | Seems like finally there is a new bootstrap version for old version 3. This patch implements this new version with CodiMD and this way fixes some possible security issues in the frontend code. See: https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72889 https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72890 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* removing global site layout vars from individual routers, putting them into ↵Claudius2018-11-031-6/+6
| | | | | | app.local Signed-off-by: Claudius <opensource@amenthes.de>
* Remove dead package octiconSheogorath2018-10-101-1/+0
| | | | | | | | Octicon no longer provides its CSS classes and this way is useless in CodiMD. Replacing all used classes in the UI and remove it from build system. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Replace font-awesome with fork-awesomeSheogorath2018-10-051-1/+1
| | | | | | | | | | This patch replaces font-awesome with its fork called fork-awesome. Besides the fact that the newer versions of font-awesome can't be shipped with distros like debian due to license issues, fork-awesome also provides more FOSS related icons and builds on top of version 4.7.x of font-awesome, which we used until this patch. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Update highlight.jsSheogorath2018-06-301-1/+1
| | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Update to octicon 4.4.0Sheogorath2018-06-301-1/+1
| | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Move polyfill to CDN sectionSheogorath2018-06-181-1/+1
| | | | | | | We don't support it on CDN false instances, but it doesn't hurt to keep it in for CDN-enabled instances Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge pull request #598 from xxyy/feature/cspChristoph (Sheogorath) Kern2018-01-221-3/+1
|\ | | | | Implement basic CSP support
| * Fix MathJax CSP issuesLiterallie2017-10-221-3/+1
| |
* | Upgrade mermaid to v7.1.0, fix #600Peter Dave Hello2017-10-301-1/+1
|/
* Merge pull request #427 from PeterDaveHello/fix-indentMax Wu2017-04-181-5/+5
|\ | | | | Fix indent in views, shouldn't mix tabs with spaces
| * Fix indent in views, shouldn't mix tabs with spacesPeter Dave Hello2017-04-181-5/+5
| |
* | Use abcjs on cdnjs, cc @jackycutePeter Dave Hello2017-04-181-0/+1
|/
* Update to use CDN css for emojify.js when applicableWu Cheng-Han2017-03-211-1/+1
|
* Fix to use minified CDN file source in mermaidWu Cheng-Han2017-02-021-1/+1
|
* Update viz.js and mermaid CDN linksWu Cheng-Han2017-02-021-2/+2
|
* Fix template partial pathWu Cheng-Han2017-01-211-7/+7
|
* Refactor templates and rearrange its pathWu Cheng-Han2017-01-211-7/+7
|
* Upgrade dependenciesWu Cheng-Han2016-12-191-6/+6
|
* Optimize pretty page resource packing and load ordersWu Cheng-Han2016-11-261-26/+16
|
* Fix possible XSS in yaml-metadata and turn using ejs escape syntax than ↵Wu Cheng-Han2016-11-261-4/+4
| | | | external lib [Security Issue]
* Update to separate polypill for IE to a templateWu Cheng-Han2016-11-261-7/+1
|
* Add font css to templatesYukai Huang2016-11-031-0/+2
|
* Require pretty stylesheetsYukai Huang2016-11-021-3/+0
|
* Update mathjax cdn path and source pathWu Cheng-Han2016-10-251-2/+4
|
* Fix config.js use cdn option not parse properly and add missing cdn resourcesWu Cheng-Han2016-10-231-0/+1
|
* Use CDNJS by default with https and SRI supportPeter Dave Hello2016-10-231-18/+18
|
* Fix to use bower version emojify.jsWu Cheng-Han2016-10-191-0/+1
|
* Update emoji parser using markdown-it-emoji instead of emojify to solve ↵Wu Cheng-Han2016-10-181-1/+1
| | | | issue #217
* Move gist-embed to CDNYukai Huang2016-10-141-0/+1
|
* Move highlight.js to CDNYukai Huang2016-10-141-0/+1
|
* Fix HTML exportingYukai Huang2016-10-131-0/+1
|
* Remove jquery-scrollspy dependencyYukai Huang2016-10-131-1/+0
| | | | scrollspy is bootstrap built-in plugin
* Fix lastchangeui and moment timestampsYukai Huang2016-10-131-0/+1
|
* Fix scrollspyYukai Huang2016-10-131-1/+2
|
* Optimize common assets with CDNYukai Huang2016-10-131-5/+5
| | | | | | | * jquery * lodash * socket.io * boostrap
* Config CDN for viz.jsYukai Huang2016-10-131-0/+1
|
* Fix stylesheet orderingYukai Huang2016-10-121-2/+1
|
* Enable production assets hashYukai Huang2016-10-121-3/+2
|
* Merge branch 'master' into webpack-frontendYukai Huang2016-10-111-3/+10
|\
| * Update npm and bower dependencies with related patchWu Cheng-Han2016-10-101-2/+2
| |
| * Update to support showing owner on the infobarWu Cheng-Han2016-10-101-1/+8
| |
| * Extract config.js from common.js to make client setting file clean and also ↵Wu Cheng-Han2016-10-101-0/+1
| | | | | | | | make upgrade easier
* | Optimize viz.js async rendering through webpack chunkYukai Huang2016-10-111-1/+1
| |
* | Manage more packages with npm and webpackYukai Huang2016-10-111-2/+0
| |
* | Split common vendor javascript into chunksYukai Huang2016-10-111-1/+1
| |
* | Remove redundant entry pointYukai Huang2016-10-101-1/+1
| |