summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* server: admin interfacestuebinm2022-03-195-65/+118
| | | | (for now, just a list of all maps and their current status)
* server: present lint results in pretty htmlstuebinm2022-03-1911-47/+2359
| | | | | (this is mostly a rewrite / translation of the django templates built into rc3's hub)
* server: simple servant-lucid stuffstuebinm2022-03-198-12/+111
|
* server: simple toml configstuebinm2022-03-195-17/+49
|
* server: proper job handlingstuebinm2022-03-195-67/+114
| | | | | Note: the server will not check submissions for duplicates! (nor does it do any kind of rate-limiting)
* non-blocking serverstuebinm2022-03-196-94/+134
|
* basic server setup (using servant)stuebinm2022-03-197-3/+274
| | | | | | | adds a very basic http server that can be sent links to repositories & will download & lint them, then answer the request with the lints. Should probably do this in a non-blocking way …
* use hpack and clean up modulesstuebinm2022-03-1913-148/+219
| | | | as annoying as yaml is, cabal's package format is somehow worse, apparently
* playing around with typesstuebinm2022-03-194-1/+40
|
* use url package for parsing of urlsjonny2022-03-193-13/+32
|
* fixed url injection by means of starting an url with "." and turning the ↵jonathan2022-03-191-1/+8
| | | | prefix into a subdomain
* add dot language output for repository map graphsstuebinm2021-12-304-27/+60
|
* apparently people are using inter-assembly links internally??stuebinm2021-12-291-2/+15
| | | | lol
* Merge branch 'pipeline-caching' into 'main'stuebinm2021-12-291-5/+6
|\ | | | | | | | | Pipeline caching See merge request hub/walint!9
| * Pipeline cachingstuebinm2021-12-291-5/+6
|/
* collides isn't unknown on tilesstuebinm2021-12-291-1/+2
|
* maps, maps, and yet more mapsstuebinm2021-12-296-21/+50
| | | | | | | don't add maps to the result if their lint result looks the same as that of another list, just say it happened several times instead (this leads to a rather confusing Eq instance for MapResult which implements a very simple surface-level equality — perhaps change that later)
* pipeline's not lazy enoughstuebinm2021-12-291-4/+4
| | | | (thanks to jonathan for showing me that this exists)
* pipeline's not lazy enoughstuebinm2021-12-291-0/+4
| | | | (thanks to jonathan for showing me that this exists)
* the lobby lacks reflexivitystuebinm2021-12-291-1/+2
|
* why aren't boolean values typechecked???stuebinm2021-12-291-1/+1
|
* Merge branch 'tabascoeye-main-patch-92942' into 'main'stuebinm2021-12-291-1/+1
|\ | | | | | | | | Update CheckMap.hs to make missing back link to lobby an ERROR See merge request hub/walint!7
| * Update CheckMap.hs to make missing back link to lobby an ERRORtabascoeye2021-12-281-1/+1
| |
* | tiles can also have properties like tile layersstuebinm2021-12-293-52/+79
|/
* disallow more things in urlsstuebinm2021-12-281-8/+1
|
* script links can't contain @stuebinm2021-12-281-1/+3
|
* Merge branch 'BBB-openTab' into 'main'stuebinm2021-12-281-2/+2
|\ | | | | | | | | open BBBs in new Tab so that they work now :/ See merge request hub/walint!5
| * open BBBs in new Tab so that they work now :/ tabascoeye2021-12-281-2/+2
|/ | | PLEASE review! I have no idea of haskell
* wa gets an extra ausgangstuebinm2021-12-281-1/+1
| | | | | (please only deploy once https://git.cccv.de/hub/hub/-/merge_requests/492 is also deployed)
* SECURITY: Fix path traversal in script verificationSerge Bazanski2021-12-271-2/+3
| | | | | | | | The following used to be allowed: scripts: https://static.rc3.world/scripts/../maps/81c8add623eea2704f20/e65b545e-342f-4be0-b369-c0eacff7b15d/re-blessed.mp3.js This is obviously not good, as it allows scripts from arbitrary maps.
* fix bbb urls a second time …stuebinm2021-12-271-5/+1
|
* warn if main.json does not link back to lobbystuebinm2021-12-271-6/+13
|
* allow live.dort.c3voc.de for audiostuebinm2021-12-271-1/+1
|
* Merge branch 'tabascoeye-main-patch-20036' into 'main'stuebinm2021-12-271-1/+1
|\ | | | | | | | | I would like to show the fahrplan in an iframe. Please allow See merge request hub/walint!4
| * I would like to show the fahrplan in an iframe. Please allowtabascoeye2021-12-271-1/+1
|/
* fix bbb url resolutionstuebinm2021-12-271-1/+1
|
* allow *.streamproxy.rc3.worldstuebinm2021-12-271-1/+2
|
* type systems don't protect against off-by-onestuebinm2021-12-271-1/+1
|
* urlencode dereferrer linksstuebinm2021-12-272-3/+4
|
* openWebsiteTriggerMessage can also be used for openTabstuebinm2021-12-261-2/+8
|
* Merge branch 'main' into 'main'stuebinm2021-12-261-1/+1
|\ | | | | | | | | Allow to copy sounds for custom JS with ObjectProperty `loadSound` See merge request hub/walint!3
| * Allow to copy sounds for custom JS with ObjectProperty `loadSound`Sven G. Brönstrup2021-12-261-1/+1
|/
* separate blocking for separate contextsstuebinm2021-12-265-32/+56
| | | | | (audio links now have their own allowlist, which won't put things through the dereferrer)
* missing entrypoints can be non-fatalstuebinm2021-12-261-7/+8
|\
| * index on main: ee61cc5 change lint msg for property suggestionsstuebinm2021-12-260-0/+0
|/
* change lint msg for property suggestionsstuebinm2021-12-261-1/+1
|
* allow cdn.c3voc.de for audio streamsstuebinm2021-12-251-2/+2
| | | | | (this is a temporary solution, since it would invoke the dereferrer for things that aren't allowed, which is silly)
* add lint if people set tilesetCopyright on tilesstuebinm2021-12-251-0/+2
|
* whoops, forgot to delete an output field and now it's in the hubstuebinm2021-12-251-1/+0
|
* attempt to fix curl pipelinestuebinm2021-12-251-2/+1
|