Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fixed url injection by means of starting an url with "." and turning the ↵ | jonathan | 2022-03-19 | 1 | -1/+8 |
| | | | | prefix into a subdomain | ||||
* | add dot language output for repository map graphs | stuebinm | 2021-12-30 | 4 | -27/+60 |
| | |||||
* | apparently people are using inter-assembly links internally?? | stuebinm | 2021-12-29 | 1 | -2/+15 |
| | | | | lol | ||||
* | Merge branch 'pipeline-caching' into 'main' | stuebinm | 2021-12-29 | 1 | -5/+6 |
|\ | | | | | | | | | Pipeline caching See merge request hub/walint!9 | ||||
| * | Pipeline caching | stuebinm | 2021-12-29 | 1 | -5/+6 |
|/ | |||||
* | collides isn't unknown on tiles | stuebinm | 2021-12-29 | 1 | -1/+2 |
| | |||||
* | maps, maps, and yet more maps | stuebinm | 2021-12-29 | 6 | -21/+50 |
| | | | | | | | don't add maps to the result if their lint result looks the same as that of another list, just say it happened several times instead (this leads to a rather confusing Eq instance for MapResult which implements a very simple surface-level equality — perhaps change that later) | ||||
* | pipeline's not lazy enough | stuebinm | 2021-12-29 | 1 | -4/+4 |
| | | | | (thanks to jonathan for showing me that this exists) | ||||
* | pipeline's not lazy enough | stuebinm | 2021-12-29 | 1 | -0/+4 |
| | | | | (thanks to jonathan for showing me that this exists) | ||||
* | the lobby lacks reflexivity | stuebinm | 2021-12-29 | 1 | -1/+2 |
| | |||||
* | why aren't boolean values typechecked??? | stuebinm | 2021-12-29 | 1 | -1/+1 |
| | |||||
* | Merge branch 'tabascoeye-main-patch-92942' into 'main' | stuebinm | 2021-12-29 | 1 | -1/+1 |
|\ | | | | | | | | | Update CheckMap.hs to make missing back link to lobby an ERROR See merge request hub/walint!7 | ||||
| * | Update CheckMap.hs to make missing back link to lobby an ERROR | tabascoeye | 2021-12-28 | 1 | -1/+1 |
| | | |||||
* | | tiles can also have properties like tile layers | stuebinm | 2021-12-29 | 3 | -52/+79 |
|/ | |||||
* | disallow more things in urls | stuebinm | 2021-12-28 | 1 | -8/+1 |
| | |||||
* | script links can't contain @ | stuebinm | 2021-12-28 | 1 | -1/+3 |
| | |||||
* | Merge branch 'BBB-openTab' into 'main' | stuebinm | 2021-12-28 | 1 | -2/+2 |
|\ | | | | | | | | | open BBBs in new Tab so that they work now :/ See merge request hub/walint!5 | ||||
| * | open BBBs in new Tab so that they work now :/ | tabascoeye | 2021-12-28 | 1 | -2/+2 |
|/ | | | PLEASE review! I have no idea of haskell | ||||
* | wa gets an extra ausgang | stuebinm | 2021-12-28 | 1 | -1/+1 |
| | | | | | (please only deploy once https://git.cccv.de/hub/hub/-/merge_requests/492 is also deployed) | ||||
* | SECURITY: Fix path traversal in script verification | Serge Bazanski | 2021-12-27 | 1 | -2/+3 |
| | | | | | | | | The following used to be allowed: scripts: https://static.rc3.world/scripts/../maps/81c8add623eea2704f20/e65b545e-342f-4be0-b369-c0eacff7b15d/re-blessed.mp3.js This is obviously not good, as it allows scripts from arbitrary maps. | ||||
* | fix bbb urls a second time … | stuebinm | 2021-12-27 | 1 | -5/+1 |
| | |||||
* | warn if main.json does not link back to lobby | stuebinm | 2021-12-27 | 1 | -6/+13 |
| | |||||
* | allow live.dort.c3voc.de for audio | stuebinm | 2021-12-27 | 1 | -1/+1 |
| | |||||
* | Merge branch 'tabascoeye-main-patch-20036' into 'main' | stuebinm | 2021-12-27 | 1 | -1/+1 |
|\ | | | | | | | | | I would like to show the fahrplan in an iframe. Please allow See merge request hub/walint!4 | ||||
| * | I would like to show the fahrplan in an iframe. Please allow | tabascoeye | 2021-12-27 | 1 | -1/+1 |
|/ | |||||
* | fix bbb url resolution | stuebinm | 2021-12-27 | 1 | -1/+1 |
| | |||||
* | allow *.streamproxy.rc3.world | stuebinm | 2021-12-27 | 1 | -1/+2 |
| | |||||
* | type systems don't protect against off-by-one | stuebinm | 2021-12-27 | 1 | -1/+1 |
| | |||||
* | urlencode dereferrer links | stuebinm | 2021-12-27 | 2 | -3/+4 |
| | |||||
* | openWebsiteTriggerMessage can also be used for openTab | stuebinm | 2021-12-26 | 1 | -2/+8 |
| | |||||
* | Merge branch 'main' into 'main' | stuebinm | 2021-12-26 | 1 | -1/+1 |
|\ | | | | | | | | | Allow to copy sounds for custom JS with ObjectProperty `loadSound` See merge request hub/walint!3 | ||||
| * | Allow to copy sounds for custom JS with ObjectProperty `loadSound` | Sven G. Brönstrup | 2021-12-26 | 1 | -1/+1 |
|/ | |||||
* | separate blocking for separate contexts | stuebinm | 2021-12-26 | 5 | -32/+56 |
| | | | | | (audio links now have their own allowlist, which won't put things through the dereferrer) | ||||
* | missing entrypoints can be non-fatal | stuebinm | 2021-12-26 | 1 | -7/+8 |
|\ | |||||
| * | index on main: ee61cc5 change lint msg for property suggestions | stuebinm | 2021-12-26 | 0 | -0/+0 |
|/ | |||||
* | change lint msg for property suggestions | stuebinm | 2021-12-26 | 1 | -1/+1 |
| | |||||
* | allow cdn.c3voc.de for audio streams | stuebinm | 2021-12-25 | 1 | -2/+2 |
| | | | | | (this is a temporary solution, since it would invoke the dereferrer for things that aren't allowed, which is silly) | ||||
* | add lint if people set tilesetCopyright on tiles | stuebinm | 2021-12-25 | 1 | -0/+2 |
| | |||||
* | whoops, forgot to delete an output field and now it's in the hub | stuebinm | 2021-12-25 | 1 | -1/+0 |
| | |||||
* | attempt to fix curl pipeline | stuebinm | 2021-12-25 | 1 | -2/+1 |
| | |||||
* | apply some hlint hints | stuebinm | 2021-12-25 | 1 | -3/+3 |
| | |||||
* | correct dereferrer link | stuebinm | 2021-12-25 | 1 | -1/+1 |
| | |||||
* | the lobby is allowed to contain defunct links | stuebinm | 2021-12-25 | 1 | -12/+15 |
| | |||||
* | hint if people set collides on tilesets | stuebinm | 2021-12-25 | 1 | -1/+2 |
| | |||||
* | add some allowed domains to default config | stuebinm | 2021-12-25 | 1 | -1/+1 |
| | |||||
* | don't print doubled lints twice | stuebinm | 2021-12-25 | 2 | -11/+11 |
| | |||||
* | better lint message | stuebinm | 2021-12-25 | 1 | -1/+1 |
| | |||||
* | persist, default aren't always booleans | stuebinm | 2021-12-24 | 1 | -1/+0 |
| | |||||
* | smaller changes | stuebinm | 2021-12-24 | 3 | -5/+4 |
| | |||||
* | allow openWebsiteAllowApi if website is on static.rc3.world | stuebinm | 2021-12-24 | 1 | -2/+12 |
| |