| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Respect DNT header | Sheogorath | 2019-06-08 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | Do Not Track (DNT) is an old web standard in order to notify pages that the user doesn't want to be tracked. Even while a lot of pages either ignore this header or even worse, use it for tracking purposes, the orignal intention of this header is good and should be adopted. This patch implements a respect of the DNT header by no longer including the optional Google Analytics and disqus integrations when sending a DNT header. This should reduce outside resource usage and help to stay more private. This should later-on extended towards other document content (i.e. iframe based content). The reason to not change the CDN handling is that CDNs will be deprecated with next release and removed in long term. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
| * | Update jQuery to version 3.4.1 | Sheogorath | 2019-05-06 | 1 | -1/+1 |
| | | |||||
| * | Fix possible MathJax XSS issue [Security Issue] | Max Wu | 2019-03-03 | 1 | -0/+2 |
| | | | | | | | see more at: http://docs.mathjax.org/en/latest/safe-mode.html Signed-off-by: Max Wu <jackymaxj@gmail.com> | ||||
| * | Update bootstrap from 3.3.7 to 3.4.0 | Sheogorath | 2019-01-11 | 1 | -2/+2 |
| | | | | | | | | | | | | | | Seems like finally there is a new bootstrap version for old version 3. This patch implements this new version with CodiMD and this way fixes some possible security issues in the frontend code. See: https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72889 https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72890 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
| * | removing global site layout vars from individual routers, putting them into ↵ | Claudius | 2018-11-03 | 1 | -6/+6 |
| | | | | | | | app.local Signed-off-by: Claudius <opensource@amenthes.de> | ||||
| * | Remove dead package octicon | Sheogorath | 2018-10-10 | 1 | -1/+0 |
| | | | | | | | | | Octicon no longer provides its CSS classes and this way is useless in CodiMD. Replacing all used classes in the UI and remove it from build system. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
| * | Replace font-awesome with fork-awesome | Sheogorath | 2018-10-05 | 1 | -1/+1 |
| | | | | | | | | | | | This patch replaces font-awesome with its fork called fork-awesome. Besides the fact that the newer versions of font-awesome can't be shipped with distros like debian due to license issues, fork-awesome also provides more FOSS related icons and builds on top of version 4.7.x of font-awesome, which we used until this patch. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
| * | Update highlight.js | Sheogorath | 2018-06-30 | 1 | -1/+1 |
| | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
| * | Update to octicon 4.4.0 | Sheogorath | 2018-06-30 | 1 | -1/+1 |
| | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
| * | Move polyfill to CDN section | Sheogorath | 2018-06-18 | 1 | -1/+1 |
| | | | | | | | | We don't support it on CDN false instances, but it doesn't hurt to keep it in for CDN-enabled instances Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
| * | Merge pull request #598 from xxyy/feature/csp | Christoph (Sheogorath) Kern | 2018-01-22 | 1 | -3/+1 |
| |\ | | | | | Implement basic CSP support | ||||
| | * | Fix MathJax CSP issues | Literallie | 2017-10-22 | 1 | -3/+1 |
| | | | |||||
| * | | Upgrade mermaid to v7.1.0, fix #600 | Peter Dave Hello | 2017-10-30 | 1 | -1/+1 |
| |/ | |||||
| * | Merge pull request #427 from PeterDaveHello/fix-indent | Max Wu | 2017-04-18 | 1 | -5/+5 |
| |\ | | | | | Fix indent in views, shouldn't mix tabs with spaces | ||||
| | * | Fix indent in views, shouldn't mix tabs with spaces | Peter Dave Hello | 2017-04-18 | 1 | -5/+5 |
| | | | |||||
| * | | Use abcjs on cdnjs, cc @jackycute | Peter Dave Hello | 2017-04-18 | 1 | -0/+1 |
| |/ | |||||
| * | Update to use CDN css for emojify.js when applicable | Wu Cheng-Han | 2017-03-21 | 1 | -1/+1 |
| | | |||||
| * | Fix to use minified CDN file source in mermaid | Wu Cheng-Han | 2017-02-02 | 1 | -1/+1 |
| | | |||||
| * | Update viz.js and mermaid CDN links | Wu Cheng-Han | 2017-02-02 | 1 | -2/+2 |
| | | |||||
| * | Fix template partial path | Wu Cheng-Han | 2017-01-21 | 1 | -7/+7 |
| | | |||||
| * | Refactor templates and rearrange its path | Wu Cheng-Han | 2017-01-21 | 1 | -7/+7 |
| | | |||||
| * | Upgrade dependencies | Wu Cheng-Han | 2016-12-19 | 1 | -6/+6 |
| | | |||||
| * | Optimize pretty page resource packing and load orders | Wu Cheng-Han | 2016-11-26 | 1 | -26/+16 |
| | | |||||
| * | Fix possible XSS in yaml-metadata and turn using ejs escape syntax than ↵ | Wu Cheng-Han | 2016-11-26 | 1 | -4/+4 |
| | | | | | external lib [Security Issue] | ||||
| * | Update to separate polypill for IE to a template | Wu Cheng-Han | 2016-11-26 | 1 | -7/+1 |
| | | |||||
| * | Add font css to templates | Yukai Huang | 2016-11-03 | 1 | -0/+2 |
| | | |||||
| * | Require pretty stylesheets | Yukai Huang | 2016-11-02 | 1 | -3/+0 |
| | | |||||
| * | Update mathjax cdn path and source path | Wu Cheng-Han | 2016-10-25 | 1 | -2/+4 |
| | | |||||
| * | Fix config.js use cdn option not parse properly and add missing cdn resources | Wu Cheng-Han | 2016-10-23 | 1 | -0/+1 |
| | | |||||
| * | Use CDNJS by default with https and SRI support | Peter Dave Hello | 2016-10-23 | 1 | -18/+18 |
| | | |||||
| * | Fix to use bower version emojify.js | Wu Cheng-Han | 2016-10-19 | 1 | -0/+1 |
| | | |||||
| * | Update emoji parser using markdown-it-emoji instead of emojify to solve ↵ | Wu Cheng-Han | 2016-10-18 | 1 | -1/+1 |
| | | | | | issue #217 | ||||
| * | Move gist-embed to CDN | Yukai Huang | 2016-10-14 | 1 | -0/+1 |
| | | |||||
| * | Move highlight.js to CDN | Yukai Huang | 2016-10-14 | 1 | -0/+1 |
| | | |||||
| * | Fix HTML exporting | Yukai Huang | 2016-10-13 | 1 | -0/+1 |
| | | |||||
| * | Remove jquery-scrollspy dependency | Yukai Huang | 2016-10-13 | 1 | -1/+0 |
| | | | | | scrollspy is bootstrap built-in plugin | ||||
| * | Fix lastchangeui and moment timestamps | Yukai Huang | 2016-10-13 | 1 | -0/+1 |
| | | |||||
| * | Fix scrollspy | Yukai Huang | 2016-10-13 | 1 | -1/+2 |
| | | |||||
| * | Optimize common assets with CDN | Yukai Huang | 2016-10-13 | 1 | -5/+5 |
| | | | | | | | | * jquery * lodash * socket.io * boostrap | ||||
| * | Config CDN for viz.js | Yukai Huang | 2016-10-13 | 1 | -0/+1 |
| | | |||||
| * | Fix stylesheet ordering | Yukai Huang | 2016-10-12 | 1 | -2/+1 |
| | | |||||
| * | Enable production assets hash | Yukai Huang | 2016-10-12 | 1 | -3/+2 |
| | | |||||
| * | Merge branch 'master' into webpack-frontend | Yukai Huang | 2016-10-11 | 1 | -3/+10 |
| |\ | |||||
| | * | Update npm and bower dependencies with related patch | Wu Cheng-Han | 2016-10-10 | 1 | -2/+2 |
| | | | |||||
| | * | Update to support showing owner on the infobar | Wu Cheng-Han | 2016-10-10 | 1 | -1/+8 |
| | | | |||||
| | * | Extract config.js from common.js to make client setting file clean and also ↵ | Wu Cheng-Han | 2016-10-10 | 1 | -0/+1 |
| | | | | | | | | | make upgrade easier | ||||
| * | | Optimize viz.js async rendering through webpack chunk | Yukai Huang | 2016-10-11 | 1 | -1/+1 |
| | | | |||||
| * | | Manage more packages with npm and webpack | Yukai Huang | 2016-10-11 | 1 | -2/+0 |
| | | | |||||
| * | | Split common vendor javascript into chunks | Yukai Huang | 2016-10-11 | 1 | -1/+1 |
| | | | |||||
| * | | Remove redundant entry point | Yukai Huang | 2016-10-10 | 1 | -1/+1 |
| | | | |||||
 |
index : hedgedoc | |
| Hedgedoc with support for CindyScript |
| summaryrefslogtreecommitdiff |