summaryrefslogtreecommitdiff
path: root/public/views (unfollow)
Commit message (Collapse)AuthorFilesLines
2021-05-17Add simple support for cindyjscindystuebinm1-0/+3
Notably, the error output (in case of compiler errors) is generated by overwriting the builtin console.error-function, which is a horrible idea for many reasons, but there isn't really any other way right now.
2021-05-09Escape custom Open Graph tagsDavid Mehren1-1/+1
HedgeDoc allows to specify custom Open Graph tags using the `opengraph` key in the YAML metadata of a note. These are rendered into the HTML delivered to clients using `ejs` and its `<%-` tag. This outputs the variable unescaped into the template and therefore allows to inject arbitrary strings, including `<script>` tags. This commit changes the template to use ejs's `<%=` tag instead, which automatically escapes the variables content, thereby mitigating the XSS vector. See also https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-gjg7-4j2h-94fq Co-authored-by: Christoph (Sheogorath) Kern <sheogorath@shivering-isles.com> Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-26Extract list of supported languages in separate fileErik Michelson1-38/+1
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2021-04-26Add support for freshly imported languagesDavid Mehren1-0/+7
New languages: bg, fa, gl, he, hu, oc, pt-br Signed-off-by: David Mehren <git@herrmehren.de>
2021-03-16Templates: Remove lang and add translation parameterPhilip Molares5-9/+9
Since the interface is not always in english, we mostly removed the lang attribute from all html tags. Since the error messages in error.ejs are not translated, but always in english, there the global lang="en" should be kept. Also in the slide and editor template the div, which contains the user generated text, has the attribute translate="no" now, to avoid unwanted translations. Since on the publish view (pretty.ejs) only the user generated content is shown, we set the lang to the language defined in yaml (or 'en') as a default, but that was also moved to the corresponding markdown div instead of html. Fixes #881 See also #437 Signed-off-by: Philip Molares <philip.molares@udo.edu>
2021-02-09Switch to ejs 3 compliant importsDavid Mehren11-45/+45
Signed-off-by: David Mehren <git@herrmehren.de>
2020-11-27Replace references to Matrix room with chat.hedgedoc.orgDavid Mehren1-1/+1
Signed-off-by: David Mehren <git@herrmehren.de>
2020-11-27Fixed shortcut icon urls pointing to old (nonexistent) filesErik Michelson5-11/+11
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2020-11-26Remove pdf export codeTilman Vatteroth1-8/+0
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>
2020-11-18Remove irritating footer filesTilman Vatteroth6-15/+13
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>
2020-11-15apply review suggestionsTilman Vatteroth5-4/+3
2020-11-14Correct repo nameTilman Vatteroth2-2/+2
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>
2020-11-14Replace placeholder with actual linkTilman Vatteroth1-1/+1
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>
2020-11-14Replace CodiMD with HedgeDocErik Michelson13-35/+52
Signed-off-by: Erik Michelson <github@erik.michelson.eu> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: References in public/views Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Update links in README Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Update links in SECURITY.md Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Update links in LICENSE Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Update links in docs/configuration.md Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Update links in bin/setup Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: References in docs/guides Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: References in docs/dev Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: References in docs/guides/auth Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: References in docs/setup Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Update various links in code to the new GitHub org. Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: codiMDVersion.js is now hedgeDocVersion.js Signed-off-by: David Mehren <git@herrmehren.de> Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: References in docs/setup/yunohost Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rebrand to HedgeDoc: Add banner and logo Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Update links in docs/guides/migrate-etherpad Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Remove note in docs/guides/auth/github Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Replace links in public/docs/features Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Add todo placeholder in docs/history Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Replace github link in public/views/index/body Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Replace github link in README Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Add logo to README Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Rename to HedgeDoc: Add note about the renaming to the front page Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de> Removed Travis from README.md and change CodiMD to HedgeDoc in some places Signed-off-by: Yannick Bungers <git@innay.de> Some more renaming to HedgeDoc - Fixed capitalization of HedgeDoc - Added renaming for etherpad migration doc Signed-off-by: Yannick Bungers <git@innay.de> Changed Repo name to hedgedoc Signed-off-by: Yannick Bungers <git@innay.de>
2020-11-10Update CDN links and integrity hashes for upgraded librariesDavid Mehren3-17/+16
Signed-off-by: David Mehren <git@herrmehren.de>
2020-09-28Change all element.io links to matrix.to linksErik Michelson2-2/+2
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2020-09-09Add Malayalam translationSheogorath1-0/+1
This patch adds the Malayalam translation to CodiMD. Do by our awesome translation supporters civic john, Sooraj Kenoth, Nithin Prabhakaran and Jothish. Thank you very much! Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2020-09-08Update matrix chat link from riot.im to app.element.io and change room aliasErik Michelson2-2/+2
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2020-08-13Made changed/created status translatableErik Michelson1-2/+3
The current version of CodiMD/HedgeDoc does only support translations to be filled on server-side rendering. To allow the translation of the changed/created texts, I duplicated the container that holds the text, and pre-filed these containers with the translation server-side. The client just needs to hide the unneeded container and show the right one to show the translated status text. Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2020-07-03Added dynamic lang-attr to pretty.ejsErik Michelson1-1/+1
CodiMD currently only uses the 'lang' attribute in YAML-metadata of a note for setting certain js-elements of the markdown-renderer. This commit adds the chosen lang into the published version of a note. Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2020-05-28Fix checksums of mermaidNick Hahn3-3/+3
Signed-off-by: Nick Hahn <nick.hahn@posteo.de>
2020-05-27Update to mermaid 8.5.1Nick Hahn3-3/+3
Signed-off-by: Nick Hahn <nick.hahn@posteo.de>
2020-05-26Add translations for permissionsSheogorath1-6/+6
Adding translations for permissions for a possible 1.6.1 release doesn't hurt but might helps some usecases of running CodiMD and we'll need the translations in the new frontend anyway. This patch adds the translations as well as the english local file. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2020-02-10Update mermaid in CDNAntoine Aflalo3-3/+3
Signed-off-by: Antoine Aflalo <antoine@warrantymaster.com>
2019-12-20Fix urlPath support, let CodiMD be served from a subpath correctlyEnrico Guiraud6-3/+7
Webpack now uses relative paths for resources linked from by static snippets. A templated <base> tag has been introduced in headers so app.js can set the base URL at runtime. Signed-off-by: Enrico Guiraud <enrico.guiraud@cern.ch>
2019-10-09Fixed bugs, added default imageErik Michelson3-6/+12
Signed-off-by: Erik Michelson <erik@liltv.de>
2019-10-05Slovak localeMartin Turoci1-0/+1
Signed-off-by: Martin Turoci <martinturoci@gmail.com>
2019-10-04Added customizable og-metadata to notesErik Michelson2-0/+8
Signed-off-by: Erik Michelson <erik@liltv.de>
2019-10-04Added og-metadata to index pageErik Michelson1-0/+9
- image and URL properties are only included if the server url is set, because opengraph protocol does not support relative links Signed-off-by: Erik Michelson <erik@liltv.de>
2019-10-03Added Czech translationPetrTodorov1-0/+1
Signed-off-by: PetrTodorov <info@petrtodorov.cz>
2019-08-26Add link to imprintMatthias Lindinger1-1/+1
Signed-off-by: Matthias Lindinger <m.lindinger@live.de>
2019-08-15Add arabian translationSheogorath1-0/+1
Thanks to our great translators that made it to translate the major parts of CodiMD into Arabic! Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-06-08Respect DNT headerSheogorath3-3/+3
Do Not Track (DNT) is an old web standard in order to notify pages that the user doesn't want to be tracked. Even while a lot of pages either ignore this header or even worse, use it for tracking purposes, the orignal intention of this header is good and should be adopted. This patch implements a respect of the DNT header by no longer including the optional Google Analytics and disqus integrations when sending a DNT header. This should reduce outside resource usage and help to stay more private. This should later-on extended towards other document content (i.e. iframe based content). The reason to not change the CDN handling is that CDNs will be deprecated with next release and removed in long term. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-05-30Add Discourse link to footerSheogorath1-1/+1
As we are about to announce the community forum, we should provide a link to it in the footer. This patch adds Discouse between Riot, GitHub and Mastodon as platform to follow our progress. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-05-26Add vietnamese languageSheogorath1-0/+1
There was some awesome work by Hồng in the recent days who translated CodiMD completely into Vietnamese language! This patch provides this awesome contributions. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-05-20remove single quote preceding mastodon linkAmolith1-1/+1
Signed-off-by: Amolith <amolith@nixnet.xyz>
2019-05-19add mastodon link to index - complete #70Amolith1-1/+1
Signed-off-by: Amolith <amolith@nixnet.xyz>
2019-05-19fix issue 72Amolith1-1/+1
Signed-off-by: Amolith <amolith@nixnet.xyz>
2019-05-06Update jQuery to version 3.4.1Sheogorath5-5/+5
2019-04-16Replace js-url with wurlSheogorath1-1/+0
js-url is outdated and wurl is it's successor. This will fix some vulnerabilities in the dependencies and also optimize the build process by removing the external library toward internal tooling. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-04-12Add community forum to help sectionSheogorath1-2/+4
We have a community forum and want to use it for users support and to bring developers and end-users together. In order to achieve this, it would be helpful to inform users about its existence. This patch adds the community forum as resource to the help section and aligns it along the Matrix channel and GitHub issue tracker. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-04-01Add missing space to footerHenrik Hüttemann1-1/+1
Signed-off-by: Henrik "HerHde" Hüttemann <mail@herh.de>
2019-03-27Update links to new repositoriesSheogorath2-2/+2
After a long discussion, it turned out that CodiMD as community project and HackMD as a company, have fundamental different views on the project governance. Due to this, it came to point where the decision for a fork was made. After the fork and move towards an own organisation, this patch updates all links inside the project to the new repositories. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-25Move upload button into toolbarSheogorath1-6/+0
Currently we have the odd situation to have two toolbars. One inside the header and one in the editor. Since we only show the image upload button when the editor is visible we should move the upload button into the editor toolbar. This patch does this by adding the image upload button besides the image tag button. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-24Fix capital letters in language selectionSheogorath1-6/+6
Vladan[1] gave a hint about some minor problems with the capitalization of language names. This patch should fix most of them. and removes some "language" prefix and suffixes which are not needed to make clear what people are selecting here. [1]: https://github.com/cvladan Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-10Fix possible order changes for 'Powered by' in other languagesSheogorath1-1/+1
Since not all languages use the same word oder and we run into potential issues, where the translation of powered by need to add something after the CodiMD link, this should give us the needed flexiblity. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-04Add serbian languageSheogorath1-0/+1
Thanks for the work of the translator Vladan we got a serbian translation added! Those few changes will add serbian language support for future CodiMD releases. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2019-03-03Fix possible MathJax XSS issue [Security Issue]Max Wu3-0/+6
see more at: http://docs.mathjax.org/en/latest/safe-mode.html Signed-off-by: Max Wu <jackymaxj@gmail.com>
2019-01-11Update bootstrap from 3.3.7 to 3.4.0Sheogorath6-8/+8
Seems like finally there is a new bootstrap version for old version 3. This patch implements this new version with CodiMD and this way fixes some possible security issues in the frontend code. See: https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72889 https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72890 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-12-28Fix to sanitize disqus shortnames to remove slashes [Security Issue]Max Wu1-1/+1
Signed-off-by: Max Wu <jackymaxj@gmail.com>
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-22 22:55:36 +0000