Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix urlPath support, let CodiMD be served from a subpath correctly | Enrico Guiraud | 2019-12-20 | 1 | -0/+1 |
| | | | | | | | | Webpack now uses relative paths for resources linked from by static snippets. A templated <base> tag has been introduced in headers so app.js can set the base URL at runtime. Signed-off-by: Enrico Guiraud <enrico.guiraud@cern.ch> | ||||
* | Respect DNT header | Sheogorath | 2019-06-08 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | Do Not Track (DNT) is an old web standard in order to notify pages that the user doesn't want to be tracked. Even while a lot of pages either ignore this header or even worse, use it for tracking purposes, the orignal intention of this header is good and should be adopted. This patch implements a respect of the DNT header by no longer including the optional Google Analytics and disqus integrations when sending a DNT header. This should reduce outside resource usage and help to stay more private. This should later-on extended towards other document content (i.e. iframe based content). The reason to not change the CDN handling is that CDNs will be deprecated with next release and removed in long term. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Update jQuery to version 3.4.1 | Sheogorath | 2019-05-06 | 1 | -1/+1 |
| | |||||
* | Fix possible MathJax XSS issue [Security Issue] | Max Wu | 2019-03-03 | 1 | -0/+2 |
| | | | | | | see more at: http://docs.mathjax.org/en/latest/safe-mode.html Signed-off-by: Max Wu <jackymaxj@gmail.com> | ||||
* | Update reveal.js to version 3.7.0 | Sheogorath | 2018-11-19 | 1 | -3/+3 |
| | | | | | | | | | | | | | | | There is a new reveal.js version out. As we try to keep up with upstream, time to integreate it. This patch updates reveal.js in for CDN-using instances as well as the ones using the libraries. Checked that speaker view in slide mode still works, so no CSP change needed. https://github.com/hakimel/reveal.js/releases/tag/3.7.0 https://github.com/hackmdio/codimd/blob/2d241b93002a3a23f81ffe8fab82f2c6c98feca4/lib/csp.js#L72-L74 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | removing global site layout vars from individual routers, putting them into ↵ | Claudius | 2018-11-03 | 1 | -12/+12 |
| | | | | | | app.local Signed-off-by: Claudius <opensource@amenthes.de> | ||||
* | Remove dead package octicon | Sheogorath | 2018-10-10 | 1 | -1/+0 |
| | | | | | | | | Octicon no longer provides its CSS classes and this way is useless in CodiMD. Replacing all used classes in the UI and remove it from build system. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Replace font-awesome with fork-awesome | Sheogorath | 2018-10-05 | 1 | -1/+1 |
| | | | | | | | | | | This patch replaces font-awesome with its fork called fork-awesome. Besides the fact that the newer versions of font-awesome can't be shipped with distros like debian due to license issues, fork-awesome also provides more FOSS related icons and builds on top of version 4.7.x of font-awesome, which we used until this patch. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Update highlight.js | Sheogorath | 2018-06-30 | 1 | -1/+1 |
| | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Update to octicon 4.4.0 | Sheogorath | 2018-06-30 | 1 | -1/+1 |
| | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Add Print icon to slide view | Sheogorath | 2018-06-24 | 1 | -1/+1 |
| | | | | | | | | It redirects the user to the print view of the document. I claim that people should either be smart enough to use ctrl+P or ask someone who knows how to print a webpage. I don't want to babysit our users. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Move polyfill to CDN section | Sheogorath | 2018-06-18 | 1 | -2/+1 |
| | | | | | | | We don't support it on CDN false instances, but it doesn't hurt to keep it in for CDN-enabled instances Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> | ||||
* | Upgrade reveal.js to 3.6.0 and useCDN option for CSS include | Wu Cheng-Han | 2018-01-29 | 1 | -5/+4 |
| | |||||
* | Merge pull request #598 from xxyy/feature/csp | Christoph (Sheogorath) Kern | 2018-01-22 | 1 | -4/+2 |
|\ | | | | | Implement basic CSP support | ||||
| * | Fix MathJax CSP issues | Literallie | 2017-10-22 | 1 | -3/+1 |
| | | |||||
| * | CSP: Add nonce to slide view inline JS | Literallie | 2017-10-22 | 1 | -1/+1 |
| | | |||||
* | | Upgrade mermaid to v7.1.0, fix #600 | Peter Dave Hello | 2017-10-30 | 1 | -1/+1 |
| | | |||||
* | | Externalise trivial inline styles from slide.ejs | Literallie | 2017-10-23 | 1 | -5/+5 |
|/ | | | | Dynamic background images need some further work | ||||
* | add the ability to set slide theme in slide options | butlerx | 2017-05-31 | 1 | -0/+4 |
| | |||||
* | Merge pull request #427 from PeterDaveHello/fix-indent | Max Wu | 2017-04-18 | 1 | -6/+6 |
|\ | | | | | Fix indent in views, shouldn't mix tabs with spaces | ||||
| * | Fix indent in views, shouldn't mix tabs with spaces | Peter Dave Hello | 2017-04-18 | 1 | -6/+6 |
| | | |||||
* | | Use abcjs on cdnjs, cc @jackycute | Peter Dave Hello | 2017-04-18 | 1 | -0/+1 |
|/ | |||||
* | Update to use CDN css for emojify.js when applicable | Wu Cheng-Han | 2017-03-21 | 1 | -1/+1 |
| | |||||
* | Fix to use minified CDN file source in mermaid | Wu Cheng-Han | 2017-02-02 | 1 | -1/+1 |
| | |||||
* | Update viz.js and mermaid CDN links | Wu Cheng-Han | 2017-02-02 | 1 | -2/+2 |
| | |||||
* | Fix template partial path | Wu Cheng-Han | 2017-01-21 | 1 | -7/+7 |
| | |||||
* | Refactor templates and rearrange its path | Wu Cheng-Han | 2017-01-21 | 1 | -7/+7 |
| | |||||
* | Upgrade dependencies | Wu Cheng-Han | 2016-12-19 | 1 | -6/+6 |
| | |||||
* | Update webpack and slide resource loading to reduce pack size | Wu Cheng-Han | 2016-11-29 | 1 | -1/+0 |
| | |||||
* | Fix slide resource path and style load orders to avoid conflicts | Wu Cheng-Han | 2016-11-29 | 1 | -5/+8 |
| | |||||
* | Optimize slide page resource packing and load orders, fix possible wrong ↵ | Wu Cheng-Han | 2016-11-26 | 1 | -32/+17 |
| | | | | chunks orders and font awesome version | ||||
* | Fix possible XSS in yaml-metadata and turn using ejs escape syntax than ↵ | Wu Cheng-Han | 2016-11-26 | 1 | -5/+5 |
| | | | | external lib [Security Issue] | ||||
* | Fix slide might trigger script when processing markdown which cause XSS ↵ | Wu Cheng-Han | 2016-11-26 | 1 | -1/+1 |
| | | | | [Security Issue] | ||||
* | Update to separate polypill for IE to a template | Wu Cheng-Han | 2016-11-26 | 1 | -7/+1 |
| | |||||
* | Fix syntax highlighting not apply correctly in slides | Wu Cheng-Han | 2016-11-07 | 1 | -3/+3 |
| | |||||
* | Merge pull request #243 from Yukaii/google-font-optional-cdn | Max Wu | 2016-11-04 | 1 | -0/+2 |
|\ | | | | | Google font optional cdn | ||||
| * | Add font css to templates | Yukai Huang | 2016-11-03 | 1 | -0/+2 |
| | | |||||
* | | Fix slide highlighting styles not apply properly and add missing styles ↵ | Wu Cheng-Han | 2016-11-04 | 1 | -3/+3 |
|/ | | | | dependency of prism in html export | ||||
* | Require slide mode stylesheets | Yukai Huang | 2016-11-02 | 1 | -3/+2 |
| | |||||
* | Fix slide export pdf styles not applied issue and add shiv and shim for IE | Wu Cheng-Han | 2016-10-29 | 1 | -4/+16 |
| | |||||
* | Update mathjax cdn path and source path | Wu Cheng-Han | 2016-10-25 | 1 | -2/+4 |
| | |||||
* | Fix config.js use cdn option not parse properly and add missing cdn resources | Wu Cheng-Han | 2016-10-23 | 1 | -0/+3 |
| | |||||
* | Fix some typo of PR #230 | Wu Cheng-Han | 2016-10-23 | 1 | -1/+0 |
| | |||||
* | Use CDNJS by default with https and SRI support | Peter Dave Hello | 2016-10-23 | 1 | -14/+15 |
| | |||||
* | Fix to use bower version emojify.js | Wu Cheng-Han | 2016-10-19 | 1 | -0/+1 |
| | |||||
* | Merge branch 'master' of https://github.com/jackycute/HackMD | Wu Cheng-Han | 2016-10-18 | 1 | -0/+1 |
|\ | |||||
| * | Add missing tooltip script | Yukai Huang | 2016-10-18 | 1 | -0/+1 |
| | | |||||
* | | Update emoji parser using markdown-it-emoji instead of emojify to solve ↵ | Wu Cheng-Han | 2016-10-18 | 1 | -1/+1 |
|/ | | | | issue #217 | ||||
* | Move gist-embed to CDN | Yukai Huang | 2016-10-14 | 1 | -0/+1 |
| | |||||
* | Move highlight.js to CDN | Yukai Huang | 2016-10-14 | 1 | -0/+1 |
| |