summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* disallow more things in urlsstuebinm2021-12-281-8/+1
|
* script links can't contain @stuebinm2021-12-281-1/+3
|
* Merge branch 'BBB-openTab' into 'main'stuebinm2021-12-281-2/+2
|\ | | | | | | | | open BBBs in new Tab so that they work now :/ See merge request hub/walint!5
| * open BBBs in new Tab so that they work now :/ tabascoeye2021-12-281-2/+2
|/ | | PLEASE review! I have no idea of haskell
* wa gets an extra ausgangstuebinm2021-12-281-1/+1
| | | | | (please only deploy once https://git.cccv.de/hub/hub/-/merge_requests/492 is also deployed)
* SECURITY: Fix path traversal in script verificationSerge Bazanski2021-12-271-2/+3
| | | | | | | | The following used to be allowed: scripts: https://static.rc3.world/scripts/../maps/81c8add623eea2704f20/e65b545e-342f-4be0-b369-c0eacff7b15d/re-blessed.mp3.js This is obviously not good, as it allows scripts from arbitrary maps.
* fix bbb urls a second time …stuebinm2021-12-271-5/+1
|
* warn if main.json does not link back to lobbystuebinm2021-12-271-6/+13
|
* allow live.dort.c3voc.de for audiostuebinm2021-12-271-1/+1
|
* Merge branch 'tabascoeye-main-patch-20036' into 'main'stuebinm2021-12-271-1/+1
|\ | | | | | | | | I would like to show the fahrplan in an iframe. Please allow See merge request hub/walint!4
| * I would like to show the fahrplan in an iframe. Please allowtabascoeye2021-12-271-1/+1
|/
* fix bbb url resolutionstuebinm2021-12-271-1/+1
|
* allow *.streamproxy.rc3.worldstuebinm2021-12-271-1/+2
|
* type systems don't protect against off-by-onestuebinm2021-12-271-1/+1
|
* urlencode dereferrer linksstuebinm2021-12-272-3/+4
|
* openWebsiteTriggerMessage can also be used for openTabstuebinm2021-12-261-2/+8
|
* Merge branch 'main' into 'main'stuebinm2021-12-261-1/+1
|\ | | | | | | | | Allow to copy sounds for custom JS with ObjectProperty `loadSound` See merge request hub/walint!3
| * Allow to copy sounds for custom JS with ObjectProperty `loadSound`Sven G. Brönstrup2021-12-261-1/+1
|/
* separate blocking for separate contextsstuebinm2021-12-265-32/+56
| | | | | (audio links now have their own allowlist, which won't put things through the dereferrer)
* missing entrypoints can be non-fatalstuebinm2021-12-261-7/+8
|\
| * index on main: ee61cc5 change lint msg for property suggestionsstuebinm2021-12-260-0/+0
|/
* change lint msg for property suggestionsstuebinm2021-12-261-1/+1
|
* allow cdn.c3voc.de for audio streamsstuebinm2021-12-251-2/+2
| | | | | (this is a temporary solution, since it would invoke the dereferrer for things that aren't allowed, which is silly)
* add lint if people set tilesetCopyright on tilesstuebinm2021-12-251-0/+2
|
* whoops, forgot to delete an output field and now it's in the hubstuebinm2021-12-251-1/+0
|
* attempt to fix curl pipelinestuebinm2021-12-251-2/+1
|
* apply some hlint hintsstuebinm2021-12-251-3/+3
|
* correct dereferrer linkstuebinm2021-12-251-1/+1
|
* the lobby is allowed to contain defunct linksstuebinm2021-12-251-12/+15
|
* hint if people set collides on tilesetsstuebinm2021-12-251-1/+2
|
* add some allowed domains to default configstuebinm2021-12-251-1/+1
|
* don't print doubled lints twicestuebinm2021-12-252-11/+11
|
* better lint messagestuebinm2021-12-251-1/+1
|
* persist, default aren't always booleansstuebinm2021-12-241-1/+0
|
* smaller changesstuebinm2021-12-243-5/+4
|
* allow openWebsiteAllowApi if website is on static.rc3.worldstuebinm2021-12-241-2/+12
|
* allow shared (not just shared-) as prefix for shared jitsisstuebinm2021-12-241-1/+1
| | | | this might make things less confusing for some people
* extra lint for people confused by badgesstuebinm2021-12-231-3/+4
| | | | tbh I'm confused by them as well
* some people define tilesets without images???stuebinm2021-12-232-2/+4
|
* correct recognision of entrypoints in sublayersstuebinm2021-12-232-16/+23
| | | | | also, the recursive check layer function slowly approaches something like readability!
* chore: curl imageRehlein2021-12-231-2/+1
|
* Merge branch 'chore/mapservice_pipeline_trigger' into 'main'stuebinm2021-12-231-0/+11
|\ | | | | | | | | chore: add trigger for pipeline on main See merge request hub/walint!2
| * chore: add trigger for pipeline on mainRehlein2021-12-231-0/+11
|/
* openTab's semantics are the same as openWebsite'sstuebinm2021-12-231-9/+6
| | | | (it's not a modifier for openWebsite, as I had previously though)
* add suggestions for misspelled propertiesstuebinm2021-12-236-44/+86
| | | | | (suggestions are shown only if they have a Damerau-Levenshtein distance <= 4, which seems to yield reasonably good results)
* limit output for frequent lintsstuebinm2021-12-232-2/+4
| | | | it's now limited to just the first ten contexts, then an ellipsis
* disallow properties with different capitalisationsstuebinm2021-12-231-10/+7
| | | | | since apparently sometimes workadventure is case-insensitive, and sometimes it's not
* Merge branch 'extended-scripts' into 'main'stuebinm2021-12-232-35/+113
|\ | | | | | | | | Extended scripts support See merge request hub/walint!1
| * Fixed types of extended scripts propertiesSven G. Brönstrup2021-12-221-3/+8
| |
| * shorten Properties.hsstuebinm2021-12-221-152/+76
| | | | | | | | | | | | | | down almost 100 lines of code! (and hopefully denotationally equivalent, except for the bits about where it was wrong before and didn't replace uris correctly)