summaryrefslogtreecommitdiff
path: root/lib/Properties.hs (follow)
Commit message (Collapse)AuthorAgeFilesLines
* use url package for parsing of urlsjonny2022-01-021-3/+9
|
* fixed url injection by means of starting an url with "." and turning the ↵jonathan2022-01-021-1/+1
| | | | prefix into a subdomain
* script links can't contain @stuebinm2022-01-021-1/+3
|
* open BBBs in new Tab so that they work now :/ tabascoeye2022-01-021-2/+2
| | | PLEASE review! I have no idea of haskell
* SECURITY: Fix path traversal in script verificationSerge Bazanski2022-01-021-2/+3
| | | | | | | | The following used to be allowed: scripts: https://static.rc3.world/scripts/../maps/81c8add623eea2704f20/e65b545e-342f-4be0-b369-c0eacff7b15d/re-blessed.mp3.js This is obviously not good, as it allows scripts from arbitrary maps.
* fix bbb urls a second time …stuebinm2022-01-021-5/+1
|
* fix bbb url resolutionstuebinm2022-01-021-1/+1
|
* type systems don't protect against off-by-onestuebinm2022-01-021-1/+1
|
* openWebsiteTriggerMessage can also be used for openTabstuebinm2022-01-021-2/+8
|
* Allow to copy sounds for custom JS with ObjectProperty `loadSound`Sven G. Brönstrup2021-12-261-1/+1
|
* separate blocking for separate contextsstuebinm2021-12-261-3/+5
| | | | | (audio links now have their own allowlist, which won't put things through the dereferrer)
* change lint msg for property suggestionsstuebinm2021-12-261-1/+1
|
* add lint if people set tilesetCopyright on tilesstuebinm2021-12-251-0/+2
|
* apply some hlint hintsstuebinm2021-12-251-3/+3
|
* the lobby is allowed to contain defunct linksstuebinm2021-12-251-12/+15
|
* hint if people set collides on tilesetsstuebinm2021-12-251-1/+2
|
* better lint messagestuebinm2021-12-251-1/+1
|
* persist, default aren't always booleansstuebinm2021-12-241-1/+0
|
* smaller changesstuebinm2021-12-241-1/+1
|
* allow openWebsiteAllowApi if website is on static.rc3.worldstuebinm2021-12-241-2/+12
|
* allow shared (not just shared-) as prefix for shared jitsisstuebinm2021-12-241-1/+1
| | | | this might make things less confusing for some people
* extra lint for people confused by badgesstuebinm2021-12-231-3/+4
| | | | tbh I'm confused by them as well
* some people define tilesets without images???stuebinm2021-12-231-1/+3
|
* openTab's semantics are the same as openWebsite'sstuebinm2021-12-231-9/+6
| | | | (it's not a modifier for openWebsite, as I had previously though)
* add suggestions for misspelled propertiesstuebinm2021-12-231-37/+77
| | | | | (suggestions are shown only if they have a Damerau-Levenshtein distance <= 4, which seems to yield reasonably good results)
* disallow properties with different capitalisationsstuebinm2021-12-231-10/+7
| | | | | since apparently sometimes workadventure is case-insensitive, and sometimes it's not
* Fixed types of extended scripts propertiesSven G. Brönstrup2021-12-221-3/+8
|
* shorten Properties.hsstuebinm2021-12-221-152/+76
| | | | | | | down almost 100 lines of code! (and hopefully denotationally equivalent, except for the bits about where it was wrong before and didn't replace uris correctly)
* Did some of the desired changesSven G. Brönstrup2021-12-211-7/+10
|
* Merge branch 'main' into extended-scriptsSven G. Brönstrup2021-12-211-15/+36
|\
| * check that bbbRoom contains a valid assembly_slugstuebinm2021-12-211-7/+12
| |
| * correct bbb link substitutionstuebinm2021-12-211-10/+11
| | | | | | | | | | (unfortunately this one's hardcoded, the config options just aren't general enough)
| * generalise unwrapURI a bitstuebinm2021-12-201-4/+19
| |
| * something something encoding mismatchstuebinm2021-12-201-1/+1
| |
* | Resolved merge conflictSven G. Brönstrup2021-12-201-5/+1
| |
* | Merge branch 'main' into extended-scriptsSven G. Brönstrup2021-12-201-1/+4
|\|
| * forbid opening local html files in iframesstuebinm2021-12-201-2/+4
| |
* | Added extended script action zone propertiesSven G. Brönstrup2021-12-201-0/+11
| |
* | Merge branch 'main' into extended-scriptsSven G. Brönstrup2021-12-201-0/+2
|\|
| * disallow extended API variables in linksstuebinm2021-12-201-0/+2
| |
* | Wrap urls for inline iframesSven G. Brönstrup2021-12-191-0/+3
| |
* | Added bell propertiesSven G. Brönstrup2021-12-191-4/+36
| |
* | Only suggert door properties on variablesSven G. Brönstrup2021-12-191-15/+15
| |
* | Lint door stuffSven G. Brönstrup2021-12-191-1/+87
|/
* fixed parsing of tiled objectsstuebinm2021-12-181-8/+9
| | | | (points behave slightly differntly than I thought)
* quick badge bugfixstuebinm2021-12-181-1/+1
| | | | | obviously, it should remove all objects defining badges, not those NOT defining badges …
* badges are set on objects, not layersstuebinm2021-12-181-41/+44
| | | | (and `url` is, too)
* remove mapImage propertystuebinm2021-12-181-3/+2
|
* fix some weird lintsstuebinm2021-12-181-2/+1
| | | | | (since we're starting to get maps that actually pass linting, we also get to find more bugs! yay!)
* special handling of world:// and assembly namesstuebinm2021-12-161-2/+7
| | | | | these now have their own top-level config attribute which is essentially a shorthand for setting one that's deeper nested.