Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | use hpack and clean up modules | stuebinm | 2022-01-15 | 9 | -31/+94 |
| | | | | as annoying as yaml is, cabal's package format is somehow worse, apparently | ||||
* | playing around with types | stuebinm | 2022-01-02 | 1 | -0/+29 |
| | |||||
* | use url package for parsing of urls | jonny | 2022-01-02 | 2 | -12/+30 |
| | |||||
* | fixed url injection by means of starting an url with "." and turning the ↵ | jonathan | 2022-01-02 | 1 | -1/+1 |
| | | | | prefix into a subdomain | ||||
* | script links can't contain @ | stuebinm | 2022-01-02 | 1 | -1/+3 |
| | |||||
* | open BBBs in new Tab so that they work now :/ | tabascoeye | 2022-01-02 | 1 | -2/+2 |
| | | | PLEASE review! I have no idea of haskell | ||||
* | SECURITY: Fix path traversal in script verification | Serge Bazanski | 2022-01-02 | 1 | -2/+3 |
| | | | | | | | | The following used to be allowed: scripts: https://static.rc3.world/scripts/../maps/81c8add623eea2704f20/e65b545e-342f-4be0-b369-c0eacff7b15d/re-blessed.mp3.js This is obviously not good, as it allows scripts from arbitrary maps. | ||||
* | fix bbb urls a second time … | stuebinm | 2022-01-02 | 1 | -5/+1 |
| | |||||
* | warn if main.json does not link back to lobby | stuebinm | 2022-01-02 | 1 | -6/+13 |
| | |||||
* | fix bbb url resolution | stuebinm | 2022-01-02 | 1 | -1/+1 |
| | |||||
* | allow *.streamproxy.rc3.world | stuebinm | 2022-01-02 | 1 | -1/+2 |
| | |||||
* | type systems don't protect against off-by-one | stuebinm | 2022-01-02 | 1 | -1/+1 |
| | |||||
* | urlencode dereferrer links | stuebinm | 2022-01-02 | 1 | -2/+2 |
| | |||||
* | openWebsiteTriggerMessage can also be used for openTab | stuebinm | 2022-01-02 | 1 | -2/+8 |
| | |||||
* | Allow to copy sounds for custom JS with ObjectProperty `loadSound` | Sven G. Brönstrup | 2021-12-26 | 1 | -1/+1 |
| | |||||
* | separate blocking for separate contexts | stuebinm | 2021-12-26 | 4 | -25/+45 |
| | | | | | (audio links now have their own allowlist, which won't put things through the dereferrer) | ||||
* | missing entrypoints can be non-fatal | stuebinm | 2021-12-26 | 1 | -7/+8 |
| | |||||
* | change lint msg for property suggestions | stuebinm | 2021-12-26 | 1 | -1/+1 |
| | |||||
* | add lint if people set tilesetCopyright on tiles | stuebinm | 2021-12-25 | 1 | -0/+2 |
| | |||||
* | whoops, forgot to delete an output field and now it's in the hub | stuebinm | 2021-12-25 | 1 | -1/+0 |
| | |||||
* | apply some hlint hints | stuebinm | 2021-12-25 | 1 | -3/+3 |
| | |||||
* | the lobby is allowed to contain defunct links | stuebinm | 2021-12-25 | 1 | -12/+15 |
| | |||||
* | hint if people set collides on tilesets | stuebinm | 2021-12-25 | 1 | -1/+2 |
| | |||||
* | don't print doubled lints twice | stuebinm | 2021-12-25 | 2 | -11/+11 |
| | |||||
* | better lint message | stuebinm | 2021-12-25 | 1 | -1/+1 |
| | |||||
* | persist, default aren't always booleans | stuebinm | 2021-12-24 | 1 | -1/+0 |
| | |||||
* | smaller changes | stuebinm | 2021-12-24 | 3 | -5/+4 |
| | |||||
* | allow openWebsiteAllowApi if website is on static.rc3.world | stuebinm | 2021-12-24 | 1 | -2/+12 |
| | |||||
* | allow shared (not just shared-) as prefix for shared jitsis | stuebinm | 2021-12-24 | 1 | -1/+1 |
| | | | | this might make things less confusing for some people | ||||
* | extra lint for people confused by badges | stuebinm | 2021-12-23 | 1 | -3/+4 |
| | | | | tbh I'm confused by them as well | ||||
* | some people define tilesets without images??? | stuebinm | 2021-12-23 | 2 | -2/+4 |
| | |||||
* | correct recognision of entrypoints in sublayers | stuebinm | 2021-12-23 | 2 | -16/+23 |
| | | | | | also, the recursive check layer function slowly approaches something like readability! | ||||
* | openTab's semantics are the same as openWebsite's | stuebinm | 2021-12-23 | 1 | -9/+6 |
| | | | | (it's not a modifier for openWebsite, as I had previously though) | ||||
* | add suggestions for misspelled properties | stuebinm | 2021-12-23 | 5 | -43/+84 |
| | | | | | (suggestions are shown only if they have a Damerau-Levenshtein distance <= 4, which seems to yield reasonably good results) | ||||
* | limit output for frequent lints | stuebinm | 2021-12-23 | 2 | -2/+4 |
| | | | | it's now limited to just the first ten contexts, then an ellipsis | ||||
* | disallow properties with different capitalisations | stuebinm | 2021-12-23 | 1 | -10/+7 |
| | | | | | since apparently sometimes workadventure is case-insensitive, and sometimes it's not | ||||
* | Fixed types of extended scripts properties | Sven G. Brönstrup | 2021-12-22 | 1 | -3/+8 |
| | |||||
* | shorten Properties.hs | stuebinm | 2021-12-22 | 1 | -152/+76 |
| | | | | | | | down almost 100 lines of code! (and hopefully denotationally equivalent, except for the bits about where it was wrong before and didn't replace uris correctly) | ||||
* | add zoom function for LintWriter | stuebinm | 2021-12-22 | 1 | -2/+19 |
| | |||||
* | Did some of the desired changes | Sven G. Brönstrup | 2021-12-21 | 1 | -7/+10 |
| | |||||
* | Merge branch 'main' into extended-scripts | Sven G. Brönstrup | 2021-12-21 | 4 | -18/+40 |
|\ | |||||
| * | check that bbbRoom contains a valid assembly_slug | stuebinm | 2021-12-21 | 1 | -7/+12 |
| | | |||||
| * | correct bbb link substitution | stuebinm | 2021-12-21 | 1 | -10/+11 |
| | | | | | | | | | | (unfortunately this one's hardcoded, the config options just aren't general enough) | ||||
| * | need rc3_21 slug in inter-assembly-links | stuebinm | 2021-12-21 | 1 | -1/+1 |
| | | |||||
| * | disallow double courly braces | stuebinm | 2021-12-21 | 2 | -2/+3 |
| | | | | | | | | as per yesterday's discussion about extended scripting variables | ||||
| * | generalise unwrapURI a bit | stuebinm | 2021-12-20 | 1 | -4/+19 |
| | | |||||
| * | something something encoding mismatch | stuebinm | 2021-12-20 | 1 | -1/+1 |
| | | |||||
* | | Resolved merge conflict | Sven G. Brönstrup | 2021-12-20 | 1 | -5/+1 |
| | | |||||
* | | Merge branch 'main' into extended-scripts | Sven G. Brönstrup | 2021-12-20 | 1 | -1/+4 |
|\| | |||||
| * | forbid opening local html files in iframes | stuebinm | 2021-12-20 | 1 | -2/+4 |
| | |