summaryrefslogtreecommitdiff
path: root/public (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Add export data UISheogorath2018-05-261-0/+1
| | | | | | | | | | This adds the UI for the export feature introduced in bcbb8c67c9f8092643c318140f6613324f306bd2 It allows to download all notes from the main page in the default user submenu. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Add token based security featureSheogorath2018-05-251-1/+1
| | | | | | | | | | | | In the current setup users could be tricked into deleting their data by providing a malicious link like `[click me](/me/delete)`. This commit prevents such an easy attack and need the user's deleteToken to get his data deleted. In case someone requests his deletion by email you can also ask him for this token. We can add a GUI that shows it later on. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Add delete user UISheogorath2018-05-252-14/+39
| | | | | | | | | | This provides the UI for the delete user feature introduced in 4229084c6211db3d22cd9abec99b957725650b9e Placing of the user delete button is not perfect, but can be moved to an own user tab later on. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Add privacy and ToS linksSheogorath2018-05-241-1/+1
| | | | | | | | | | | | | | To be GDPR compliant we need to provide privacy statement. These should be linked on the index page. So as soon as a document exist under `public/docs/privacy.md` the link will show up. Since we already add legal links, we also add Terms of Use, which will show up as soon as `public/docs/terms-of-use.md` exists. This should allow everyone to provide the legal documents they need for GDPR and other privacy and business laws. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Removing google drive integrationSheogorath2018-05-167-505/+2
| | | | | | | | | | | | | | | It's sad but it's not working. For multiple releases this should be already broken which shows how often it's used. As there is also a security issue related to that, it's better to remove the feature completely. Whoever wants to rewrite it, feel free to go. This commit removes the Google Drive integration from HackMD's Frontend editor and this way removes the need to provide any API key and Client ID in the frontend. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Revert "Workaround Google API problems"Christoph (Sheogorath) Kern2018-05-161-1/+9
|
* Remove Google Upload from UISheogorath2018-05-011-9/+1
| | | | | | | | | | This temporarily removes the Upload from the UI as it's broken right now. Needs a refactoring and can be added in again later on by undoing this commit. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge branch 'feature/releaseNotes1.1.0'Sheogorath2018-04-061-10/+74
|\
| * Minor fixes in relase notesSheogorath2018-04-061-9/+10
| | | | | | | | | | | | | | Fix some spelling and style issues as well as adding the latest changes. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
| * Update release notesSheogorath2018-03-301-10/+73
| | | | | | | | | | | | Providing release notes for version 1.1.0-ce Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge branch 'docs/features-1.1.0-ce'Sheogorath2018-04-061-3/+8
|\ \
| * | Provide feature changes in 1.1.0-ceSheogorath2018-03-301-3/+8
| |/ | | | | | | | | | | | | Adding some documentation for night mode and upload times. Extend the contact section for community support. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Add matrix.org / Riot linkSheogorath2018-04-051-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | As an active part of the community prefers Matrix.org over Gitter, we should link Matrix.org as a place to meet us. As the matrix and gitter channels are interconnected. We don't loose any message if a person decides to go for one or another. We use an more universal way of translation to make it easier to provide a link to various platforms. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge pull request #790 from SISheogorath/fix/nightModeCSSChristoph (Sheogorath) Kern2018-04-052-2/+21
|\ \ | | | | | | Fix modal and panel colors in night mode
| * | Fix code blocks color in night modeSheogorath2018-04-051-0/+5
| | | | | | | | | | | | | | | | | | This provides more eye-friendly code boxes when night mode is active. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
| * | Fix modal and panel colors in night modeSheogorath2018-03-291-2/+16
| |/ | | | | | | | | | | | | | | Night mode provides a generally, dark interface. This fix provides the needed CSS to also turn modal and panels into night mode design as well. This mainly effects the help modal. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* / Fix CSP for disqus and Google AnalyticsSheogorath2018-03-302-6/+5
|/ | | | | | | | | | | | | This commit should fix existing problems with Disqus and Google Analytics enabled in the meta-yaml section of a note. Before this commit they were blocked by the strict CSP. It's still possible to disable the added directives using `addDisqus` and `addGoogleAnalytics` in the `csp` config section. They are enabled by default to prevent breaking changes. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Fix night mode button after restoreSheogorath2018-03-251-0/+1
| | | | | | | | | | | The night mode toggle doesn't get the right state after restore from local storage. This results in the need to toggle twice to disable night mode. This patch adds the needed class so the toggleNightMode function gets the right state on execution. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge pull request #758 from SISheogorath/cleanup/configChristoph (Sheogorath) Kern2018-03-252-3/+3
|\ | | | | Change config to camel case with backwards compatibility
| * Change config to camel case with backwards compatibilitySheogorath2018-03-252-3/+3
| | | | | | | | | | | | | | | | This refactors the configs a bit to now use camel case everywhere. This change should help to clean up the config interface and make it better understandable. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Persist nightmode so we can re-enable itSheogorath2018-03-231-3/+18
|/ | | | | | | | | Right now the night mode is possible to set by a toggle in the menu bar but needs to be re-enabled on every document switch, reload, etc.. This is super annoying so we should keep this state in local storage or a cookie. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge pull request #772 from SISheogorath/fix/chromeFileErrorChristoph (Sheogorath) Kern2018-03-211-4/+7
|\ | | | | Some fixes for inline-Attachments in Codemirror
| * Reorganize usage of `getAsFile()`Sheogorath2018-03-181-2/+5
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
| * Fix typo in vedor extensionSheogorath2018-03-181-2/+2
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge pull request #743 from hackmdio/fix-to-use-url-safe-base64Christoph (Sheogorath) Kern2018-03-182-0/+47
|\ \ | |/ |/| Fix to use url-safe base64 in note url
| * Fix typoMax Wu2018-03-111-1/+1
| | | | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
| * Update to show log on migrate LZString type note url in historyMax Wu2018-03-111-1/+1
| | | | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
| * Update to migrate note url in the history of browser storage and cookieMax Wu2018-03-032-0/+47
| | | | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
* | Update styles of details, summary and figureMax Wu2018-02-261-2/+14
| | | | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
* | Update to allow rp tag for rubyMax Wu2018-02-261-0/+2
| | | | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
* | Remove manual allow details tag since default already allow itMax Wu2018-02-261-3/+1
|/ | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
* Extend HTML5 support by whitelisting various tagsSheogorath2018-02-252-1/+20
| | | | | | | | | | | | HTML5 provides a wide feature set of useful elements. Since Markdown usually supports HTML it should be able to use these HTML5 tags as well. As they were requested by some users and they where checked for being safe, whitelisting them isn't a problem. To make the experience the same as on GitHub when it comes to the basic look and feel of the rendered markdown, some CSS was added to make the summary and the details tag look like on GitHub. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Allow the usage of the esc-key by codemirrorSheogorath2018-02-241-3/+3
| | | | | | | | | | | | | This change allows all input modes of codemirror to use the information from an input esc-key and make this way vim and sublime more functional. To prevent this change from breaking the return from the fullscreen mode, it catches the esc-key in this case. Hopefully this is an acceptable solution. As before the vim-mode is handled different in fulltext-mode as it is esc-key heavy. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* don't require referer to find note id in socket.io connections (fixes #623)Stefan Bühler2018-02-051-0/+3
| | | | Signed-off-by: Stefan Bühler <buehler@cert.uni-stuttgart.de>
* Update socket.io to version 2.0.4Sheogorath2018-01-301-1/+1
| | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge pull request #704 from SISheogorath/fix/ldapProviderNameChristoph (Sheogorath) Kern2018-01-291-1/+1
|\ | | | | Fix ldap provider name in template
| * Fix ldap provider name in templateSheogorath2018-01-261-1/+1
| | | | | | | | | | | | | | | | Before this fix it's impossible to set the provider name in the sign-model since `ldap` is a boolean there and this way not able to have an attribute like `ldap.providerName`. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Upgrade reveal.js to 3.6.0 and useCDN option for CSS includeWu Cheng-Han2018-01-291-5/+4
|/
* Merge pull request #694 from SISheogorath/refactor/socialmediaChristoph (Sheogorath) Kern2018-01-251-6/+6
|\ | | | | Reorganize social media links and footer
| * Reorganize social media links and footerSheogorath2018-01-241-6/+6
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix task todo might not toggleMax Wu2018-01-241-2/+2
| | | | | | which caused by not matching syntax with double dashes correctly
* | Merge pull request #691 from SISheogorath/feature/uploadChristoph (Sheogorath) Kern2018-01-232-10/+7
|\ \ | | | | | | Allow more detailed configuration of upload mime types
| * | Allow more detailed configuration of upload mime typesSheogorath2018-01-202-10/+7
| | | | | | | | | | | | | | | | | | Fixes #637 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | | Merge pull request #598 from xxyy/feature/cspChristoph (Sheogorath) Kern2018-01-224-10/+12
|\ \ \ | |_|/ |/| | Implement basic CSP support
| * | Revert "Load js-url lib using legacy-loader"Literallie2017-11-022-8/+4
| | | | | | | | | | | | | | | | | | | | | | | | Didn't work in Firefox for some reason. `[Script Loader] ReferenceError: module is not defined` This reverts commit 5b83deb043296c23ff912a2472703c1f7faddb4b.
| * | Fix MathJax config not being picked upLiterallie2017-10-221-1/+1
| | | | | | | | | | | | thanks standard
| * | Move CSP logic to new file, Fix boolean config examplesLiterallie2017-10-221-1/+0
| | | | | | | | | | | | Not sure why I was quoting these in the first place
| * | Load js-url lib using legacy-loaderLiterallie2017-10-222-4/+9
| | | | | | | | | | | | Doesn't use eval, plus no window object access
| * | Fix MathJax CSP issuesLiterallie2017-10-224-9/+11
| | |
| * | CSP: Add nonce to slide view inline JSLiterallie2017-10-221-1/+1
| | |
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-23 10:38:52 +0000