summaryrefslogtreecommitdiff
path: root/public (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Respect DNT headerSheogorath2019-06-083-3/+3
| | | | | | | | | | | | | | | | | | | | Do Not Track (DNT) is an old web standard in order to notify pages that the user doesn't want to be tracked. Even while a lot of pages either ignore this header or even worse, use it for tracking purposes, the orignal intention of this header is good and should be adopted. This patch implements a respect of the DNT header by no longer including the optional Google Analytics and disqus integrations when sending a DNT header. This should reduce outside resource usage and help to stay more private. This should later-on extended towards other document content (i.e. iframe based content). The reason to not change the CDN handling is that CDNs will be deprecated with next release and removed in long term. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge pull request #97 from SISheogorath/fix/lintingSheogorath2019-06-0410-953/+958
|\ | | | | Fix eslint warnings
| * Fix eslint warningsSheogorath2019-05-3110-953/+958
| | | | | | | | | | | | | | | | | | | | | | Since we are about to release it's time to finally fix our linting. This patch basically runs eslint --fix and does some further manual fixes. Also it sets up eslint to fail on every warning on order to make warnings visable in the CI process. There should no functional change be introduced. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge pull request #93 from ttasovac/masterSheogorath2019-06-042-0/+63
|\ \ | | | | | | fixed styling of slides preview
| * | fixed styling of slides previewToma Tasovac2019-05-302-0/+63
| |/ | | | | | | Signed-off-by: Toma Tasovac <ttasovac@humanistika.org>
* | Release version 1.4.0Sheogorath2019-05-311-1/+74
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix hidden MathJax outputSheogorath2019-05-301-1/+11
|/ | | | | | | | | | | | | | | In order to have a better experience when linking to headlines based on their ID, a patch[1] introduced a new CSS construct to add some space in front of HTML tags with an id field. Therefore they would no longer be hidden by a visible navbar. This cause a regression bug by moving the rendered mathjax out of its visible area. This patch fixes the problem by restricting the previous change to headlines only. [1]: commit c9af13cf34d1b4d66e4c3a590b875669455122a4 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Add Discourse link to footerSheogorath2019-05-301-1/+1
| | | | | | | | As we are about to announce the community forum, we should provide a link to it in the footer. This patch adds Discouse between Riot, GitHub and Mastodon as platform to follow our progress. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge pull request #81 from SISheogorath/fix/codemirrorBottomCSSSheogorath2019-05-261-1/+4
|\ | | | | Fix CodeMirror toolbar hiding content
| * Fix CodeMirror toolbar hiding contentSheogorath2019-05-261-1/+4
| | | | | | | | | | | | | | | | | | As it may happens that the codemirror content flows underneath the status bar, this patch should help to avoid it. It adds the size of the status bar as margin-bottom so the codemirror window itself is forced above the statusbar. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Add vietnamese languageSheogorath2019-05-261-0/+1
| | | | | | | | | | | | | | | | There was some awesome work by Hồng in the recent days who translated CodiMD completely into Vietnamese language! This patch provides this awesome contributions. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix hidden header on linkSheogorath2019-05-241-0/+8
|/ | | | | | | | | | | | | | | | | When people link a section or use the ToC to scroll to it upwards, it happens that those become hidden behind the navbar. This patch adds a little hack from StackOverflow[1] in order to fix this problem. By adding a pseudo element in front of any field that contains an id, it's possible to add the needed space. There was no negative impact found except of marking around the header areas in the rendered view requires a bit preciser work. This needs some more detailed testing. [1]: https://stackoverflow.com/a/24298427 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* remove single quote preceding mastodon linkAmolith2019-05-201-1/+1
| | | | Signed-off-by: Amolith <amolith@nixnet.xyz>
* add mastodon link to index - complete #70Amolith2019-05-191-1/+1
| | | | Signed-off-by: Amolith <amolith@nixnet.xyz>
* fix issue 72Amolith2019-05-191-1/+1
| | | | Signed-off-by: Amolith <amolith@nixnet.xyz>
* Fix toolbar day modePedro Ferreira2019-05-125-54/+51
| | | | | | Also moved the code to SCSS Signed-off-by: Pedro Ferreira <pedro@dete.st>
* Make upload button respect night modePedro Ferreira2019-05-122-4/+4
| | | | | | | Also set a title in the input field, so that the file name doesn't show up. Signed-off-by: Pedro Ferreira <pedro@dete.st>
* Update jQuery to version 3.4.1Sheogorath2019-05-065-5/+5
|
* Replace js-url with wurlSheogorath2019-04-163-5/+6
| | | | | | | | js-url is outdated and wurl is it's successor. This will fix some vulnerabilities in the dependencies and also optimize the build process by removing the external library toward internal tooling. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Fix stored XSS in the graphviz error message rendering [Security Issue]Max Wu2019-04-161-6/+7
| | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com> Co-Authored-By: Sheogorath <sheogorath@shivering-isles.com>
* Add community forum to help sectionSheogorath2019-04-121-2/+4
| | | | | | | | | | | We have a community forum and want to use it for users support and to bring developers and end-users together. In order to achieve this, it would be helpful to inform users about its existence. This patch adds the community forum as resource to the help section and aligns it along the Matrix channel and GitHub issue tracker. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Clean up headingsHenrik "HerHde" Hüttemann2019-04-041-147/+173
| | | | Signed-off-by: Henrik "HerHde" Hüttemann <mail@herh.de>
* Add new screenshotSheogorath2019-04-011-0/+0
| | | | | | | | | | | | The old screenshot is quite dated since it's from the earlier days of HackMD. But we developed a lot in the recent years. Changed the name, added a toolbar, moved buttons, and so on. This patch should represent those changes in the front page. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Add missing space to footerHenrik Hüttemann2019-04-011-1/+1
| | | | Signed-off-by: Henrik "HerHde" Hüttemann <mail@herh.de>
* striving for consistency across various docsClaudius2019-04-012-2/+2
| | | | Signed-off-by: Claudius <opensource@amenthes.de>
* Merge pull request #9 from SISheogorath/feature/moveUploadChristoph (Sheogorath) Kern2019-03-315-23/+13
|\ | | | | Move upload button into toolbar
| * Move upload button into toolbarSheogorath2019-03-255-23/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | Currently we have the odd situation to have two toolbars. One inside the header and one in the editor. Since we only show the image upload button when the editor is visible we should move the upload button into the editor toolbar. This patch does this by adding the image upload button besides the image tag button. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge pull request #8 from SISheogorath/fix/languagesChristoph (Sheogorath) Kern2019-03-311-6/+6
|\ \ | | | | | | Fix capital letters in language selection
| * | Fix capital letters in language selectionSheogorath2019-03-241-6/+6
| |/ | | | | | | | | | | | | | | | | | | | | | | | | Vladan[1] gave a hint about some minor problems with the capitalization of language names. This patch should fix most of them. and removes some "language" prefix and suffixes which are not needed to make clear what people are selecting here. [1]: https://github.com/cvladan Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Release version 1.3.2Sheogorath2019-03-291-0/+10
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix button background colorSheogorath2019-03-291-1/+1
| | | | | | | | | | | | | | | | | | | | When introducing night mode the rule for the background of the view switches seems to be generated from the view button. This patch should change the introduced rule to fix for all default buttons. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Update links to new repositoriesSheogorath2019-03-274-5/+5
|/ | | | | | | | | | | | After a long discussion, it turned out that CodiMD as community project and HackMD as a company, have fundamental different views on the project governance. Due to this, it came to point where the decision for a fork was made. After the fork and move towards an own organisation, this patch updates all links inside the project to the new repositories. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Release version 1.3.1Sheogorath2019-03-231-0/+25
| | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Merge pull request #1158 from SISheogorath/feature/serbianLanguageChristoph (Sheogorath) Kern2019-03-161-0/+1
|\ | | | | Add serbian language
| * Add serbian languageSheogorath2019-03-041-0/+1
| | | | | | | | | | | | | | | | Thanks for the work of the translator Vladan we got a serbian translation added! Those few changes will add serbian language support for future CodiMD releases. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge pull request #1166 from SISheogorath/fix/exportEmojisChristoph (Sheogorath) Kern2019-03-131-1/+1
|\ \ | | | | | | Fix broken HTML export with emojis
| * | Fix broken HTML export with emojisSheogorath2019-03-091-1/+1
| |/ | | | | | | | | | | | | | | | | HTML export was broken due to missing alt-attribute for emojis. This patch adds the old alt-element style and restores the exportability this way. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix possible order changes for 'Powered by' in other languagesSheogorath2019-03-101-1/+1
| | | | | | | | | | | | | | | | Since not all languages use the same word oder and we run into potential issues, where the translation of powered by need to add something after the CodiMD link, this should give us the needed flexiblity. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Merge pull request #1076 from SISheogorath/fix/translationChristoph (Sheogorath) Kern2019-03-102-9/+9
|\ \ | |/ |/| Add some missing translations
| * Add some missing translationsSheogorath2018-11-232-9/+9
| | | | | | | | | | | | | | | | | | There are some places in our code that made it to be not translated. This patch fixes some small translation problems and adds some static strings in templates to translation. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Release version 1.3.0Sheogorath2019-03-041-0/+95
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix possible MathJax XSS issue [Security Issue]Max Wu2019-03-033-0/+6
| | | | | | | | | | | | see more at: http://docs.mathjax.org/en/latest/safe-mode.html Signed-off-by: Max Wu <jackymaxj@gmail.com>
* | Fix CI errors for unused variablesSheogorath2019-02-211-3/+2
| | | | | | | | Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Remove broken speakerdeck embeddingSheogorath2019-02-212-31/+7
| | | | | | | | | | | | | | | | | | | | | | | | The current speakerdeck implementation is broken. An alternative implementation using oembed doesn't work due to CORS, which could be solved by proxying the speakerdeck API, but we decided to not do this. This patch provides the link to the speakerdeck presentation instead, and this way doesn't break existing notes. This is right now the best solution we could come up with. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Update bootstrap from 3.3.7 to 3.4.0Sheogorath2019-01-116-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | Seems like finally there is a new bootstrap version for old version 3. This patch implements this new version with CodiMD and this way fixes some possible security issues in the frontend code. See: https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72889 https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-72890 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Fix to escape html comment tag [Security Issue]Max Wu2018-12-281-1/+1
| | | | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
* | Fix to sanitize disqus shortnames to remove slashes [Security Issue]Max Wu2018-12-281-1/+1
| | | | | | Signed-off-by: Max Wu <jackymaxj@gmail.com>
* | Update socket.ioSheogorath2018-11-281-1/+1
| | | | | | | | | | | | | | | | | | | | Our socket.io version is 2.0.4 while the current socket.io version is 2.1.1. This patch updates socket.io to version 2.1.1 and takes care of the CDN client version. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* | Update from to-markdown to turndownSheogorath2018-11-211-2/+7
|/ | | | | | | | | | | | | | We got a security alert for a regular expression DoS attack on our used library `to-markdown`. After checking `to-markdown` to be maintained or not, it turned out they renamed the library to `turndown`. So upgrading to `turndown` should fix this vulnerbility. References: https://www.npmjs.com/package/to-markdown https://github.com/domchristie/turndown/wiki/Migrating-from-to-markdown-to-Turndown Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Update reveal.js to version 3.7.0Sheogorath2018-11-191-3/+3
| | | | | | | | | | | | | | | There is a new reveal.js version out. As we try to keep up with upstream, time to integreate it. This patch updates reveal.js in for CDN-using instances as well as the ones using the libraries. Checked that speaker view in slide mode still works, so no CSP change needed. https://github.com/hakimel/reveal.js/releases/tag/3.7.0 https://github.com/hackmdio/codimd/blob/2d241b93002a3a23f81ffe8fab82f2c6c98feca4/lib/csp.js#L72-L74 Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>