Jordi Mallach
9bda8f2180
Allow setting documentMaxLength via CMD_DOCUMENT_MAX_LENGTH
...
Signed-off-by: Jordi Mallach <jordi@igalia.com >
2023-03-09 10:20:42 +01:00
Tilman Vatteroth
e2b84e134a
fix: extend parsing of boolean environment vars
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2023-03-02 21:12:27 +01:00
Tilman Vatteroth
29b3562672
feat: use codemirror precompiled package
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2023-02-28 09:25:43 +01:00
David Mehren
d4f19e4e38
Bump version to 1.9.7
...
Signed-off-by: David Mehren <git@herrmehren.de >
2023-02-19 21:46:50 +01:00
David Mehren
f02702149e
Import translations from POEditor
...
Signed-off-by: David Mehren <git@herrmehren.de >
2023-02-19 21:46:50 +01:00
Erik Michelson
057777f31f
fix(night-mode): migrate cookie solution to store only
...
Signed-off-by: Erik Michelson <michelson@uni-bremen.de >
Signed-off-by: Erik Michelson <github@erik.michelson.eu >
2023-02-19 21:40:01 +01:00
Stéphane Maniaci
488e5f8a0a
Revert "config: Add a flag to control the /metrics and /status endpoints"
...
This reverts commit d10ead4c6c .
Signed-off-by: Stéphane Maniaci <stephane.maniaci@beta.gouv.fr >
2023-02-05 20:39:13 +01:00
Stéphane Maniaci
d10ead4c6c
config: Add a flag to control the /metrics and /status endpoints
...
It can be a security concern in some environments to expose system
capabilities even though they don't expose any PII. Add some
flags (defaulted `true` to maintain existing behaviour) to control
whether the /metrics and /status (and anything in the StatusRouter)
are exposed.
Signed-off-by: Stéphane Maniaci <stephane.maniaci@beta.gouv.fr >
2023-01-31 10:26:41 +01:00
Erik Michelson
9229fb2d90
chore(changelog): add bugfix entry in changelog
...
Signed-off-by: Erik Michelson <github@erik.michelson.eu >
2022-11-27 20:51:37 +01:00
David Mehren
6bad318c35
Bump version to 1.9.6
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-11-06 23:10:59 +01:00
David Mehren
5f988de6a2
docs: update release notes
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-11-06 22:24:48 +01:00
Philip Molares
912bea3e23
docs: add changelog entry about migration fix
...
Signed-off-by: Philip Molares <philip.molares@udo.edu >
2022-11-06 22:24:48 +01:00
David Mehren
bed9835d36
Add contributors and update AUTHORS
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-10-30 22:15:16 +01:00
David Mehren
50cac714ce
Bump version and update release notes
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-10-30 22:15:16 +01:00
David Mehren
e2b0117c3e
Fix missing syntax highlighting in the markdown editor
...
In e17cc644 the Webpack build process for CodeMirror was changed.
For unknown reasons, not all plugins and modes were added.
This adds all plugins currently enabled in
https://github
.com/hedgedoc/CodeMirror/blob/951b3d94bb5ad9ac7b44642adbe595e843390506/release.sh
Signed-off-by: David Mehren <git@herrmehren.de >
2022-10-16 21:05:34 +02:00
David Mehren
3aeb2a619b
Pass through breaks option to published note
...
The markdown for the publish-view is generated
using the `Note.extractMeta` method.
It uses meta-marked to separate the metadata from markdown.
Only the raw markdown is then sent to the client,
so it cannot respect the `breaks` option.
This adds an evil hack to send the `breaks` option with the markdown
if it is contained in the metadata block.
Fixes https://github.com/hedgedoc/hedgedoc/issues/2358
Signed-off-by: David Mehren <git@herrmehren.de >
2022-10-03 20:18:16 +02:00
Tilman Vatteroth
68466f6f09
fix: Change data type of history attribute in user table to long text
...
When using mysql the normal text attribute has a fixed size. When this size is reached then the json will be cut off and becomes invalid.
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2022-09-25 11:09:23 +02:00
Pol Dellaiera
99bab9c309
Update public/docs/yaml-metadata.md
...
Co-authored-by: Yannick Bungers <github@innay.de >
Signed-off-by: Pol Dellaiera <pol.dellaiera@protonmail.com >
2022-09-05 10:11:48 +02:00
Pol Dellaiera
8c56c8d733
Update documentation based on code-review feedback.
...
Signed-off-by: Pol Dellaiera <pol.dellaiera@protonmail.com >
2022-09-05 10:11:48 +02:00
Pol Dellaiera
1b58871c06
Update yaml-metadata.md.
...
Update `slideOptions` documentation and links.
Signed-off-by: Pol Dellaiera <pol.dellaiera@protonmail.com >
2022-09-05 10:11:48 +02:00
Pol Dellaiera
9d93a95d32
docs: Improve consistency in MathJax examples.
...
Signed-off-by: Pol Dellaiera <pol.dellaiera@protonmail.com >
2022-09-04 21:09:01 +02:00
Tilman Vatteroth
164fe21d18
Replace embedding shortcode regexes with more specific ones to safeguard against xss attacks
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2022-08-26 18:59:06 +02:00
David Mehren
9ab8bf3cac
Fix crash in LDAP authentication
...
Since https://github.com/vesse/node-ldapauth-fork/commit
/741a648df98d789856b3301d65103b74872fdeea, ldapauth-fork calls `push` on
the attributes array.
Since we deep-freeze our config object in https://github
.com/hedgedoc/hedgedoc/blob/master/lib/config/index.js#L200, this
causes a crash.
This commit fixes the crash by creating a mutable clone of the LDAP
config and passing that to the LDAP strategy.
Fixes https://github.com/hedgedoc/hedgedoc/issues/2561
Signed-off-by: David Mehren <git@herrmehren.de >
2022-08-22 09:01:04 +02:00
David Mehren
58f321ce29
Add dark mode toggle in mobile view
...
Fixes #2534
Signed-off-by: David Mehren <git@herrmehren.de >
2022-08-22 08:52:49 +02:00
David Mehren
d1f2a028b4
1.9.4 release notes
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-07-10 22:02:17 +02:00
Sheogorath
dd539273fb
fix(migrations): Remove unexpected shell call
...
This patch removes the call of `/usr/bin/env` when calling the migration
script in favour of using the processes own nodejs invocation path.
This should drop the requirement for `/usr/bin/env` to exist on a
system/in a container that runs hedgedoc.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com >
2022-05-17 14:04:02 +02:00
David Mehren
d26dcd04a1
Adapt code for eslint-config-standard 17
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-05-01 21:19:44 +02:00
David Mehren
e222225866
Drop support for Node.js 12
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-05-01 21:03:19 +02:00
David Mehren
680e6917af
Add warning about MariaDB charset changes to changelog
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-04-10 21:49:35 +02:00
David Mehren
5154598557
Update changelog for 1.9.3
...
Signed-off-by: David Mehren <git@herrmehren.de >
2022-04-10 21:49:23 +02:00
Erik Michelson
c99d30931d
Remove duplicated jQuery selectors
...
Signed-off-by: Erik Michelson <github@erik.michelson.eu >
2022-04-10 21:24:30 +02:00
Erik Michelson
0093aa4783
Fix GitLab snippet export
...
The snippet export broke due to two reasons.
First of all, the request to GitLab fail in the
default configuration due to the CSP not being
set properly. This commit adds the configured
GitLab base url to the connect-src directives.
The second problem is a change in the GitLab API
spec. Instead of `code` and `file_name` the
GitLab API now requires an `files` array with
`content` and `file_path` entries per snippet.
Signed-off-by: Erik Michelson <github@erik.michelson.eu >
2022-04-10 21:24:30 +02:00
David Mehren
e0021036ae
Fix missing inline authorship colors
...
The hex2rgb function seems to previously have been available globally.
It probably got lost in the great Webpack refactoring and nobody noticed
that.
This copies the function into its own file (to make importing it easy)
and adds an import in index.js.
Fixes https://github.com/hedgedoc/hedgedoc/issues/2248
Signed-off-by: David Mehren <git@herrmehren.de >
2022-04-08 12:13:37 +02:00
Tilman Vatteroth
61e092e8af
Force change of aria-hidden when modal shows or hides
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2022-04-03 22:52:53 +02:00
Tilman Vatteroth
bb4acb02bc
Improve aria tags for view mode labels
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2022-04-03 22:40:07 +02:00
David Mehren
101bedaecd
bin/manage_users: Always treat pass argument as string
...
Fixes #1945
Signed-off-by: David Mehren <git@herrmehren.de >
2022-04-03 22:14:27 +02:00
Moritz Schlarb
e6fc9f01a3
Allow SAML authentication provider to be named
...
Using `CMD_SAML_PROVIDERNAME` and the respective auth provider objects
in the configuration structures.
Signed-off-by: Moritz Schlarb <schlarbm@uni-mainz.de >
2022-03-20 19:59:53 +01:00
Tilman Vatteroth
cc0c469c2d
Add error message to log if database cannot be reached
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2022-02-04 11:49:51 +01:00
Erik Michelson
8705c4abd1
Update tests and changelog
...
Signed-off-by: Erik Michelson <github@erik.michelson.eu >
2022-01-07 18:21:33 +01:00
David Mehren
a72f2455ca
Add release notes for 1.9.2
...
Signed-off-by: David Mehren <git@herrmehren.de >
2021-12-03 20:31:17 +01:00
David Mehren
1baf7db914
Add changelog entry
...
Signed-off-by: David Mehren <git@herrmehren.de >
2021-12-03 10:35:01 +01:00
Yannick Bungers
d676008ff7
Merge pull request #1855 from hedgedoc/release/1.9.1
2021-12-02 22:18:49 +01:00
Tilman Vatteroth
22ecc7bb0d
Add release notes for 1.9.1
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
Signed-off-by: David Mehren <git@herrmehren.de >
2021-12-02 22:14:31 +01:00
David Mehren
381d360d58
Fix mermaid import
...
Signed-off-by: David Mehren <git@herrmehren.de >
2021-12-02 19:11:39 +01:00
David Mehren
489f785992
Set global timeout for Ajax operations
...
`ajaxSetup()` sets the default values for future Ajax operations.
See also
https://api.jquery.com/jQuery.ajaxSetup/
https://api.jquery.com/jquery.ajax/
Signed-off-by: David Mehren <git@herrmehren.de >
2021-11-04 20:49:53 +01:00
Tilman Vatteroth
d7986b1920
Refactor existing code to add the configured domain to connect-src
...
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de >
2021-09-16 19:43:20 +02:00
David Mehren
ebc58a71cf
Add translators to release notes
...
Signed-off-by: David Mehren <git@herrmehren.de >
2021-09-13 22:11:33 +02:00
David Mehren
07d447757a
Update release notes for 1.9.0
...
Signed-off-by: David Mehren <git@herrmehren.de >
2021-09-13 22:11:33 +02:00
David Mehren
30722503c5
Update release notes for 1.9.0-rc1
...
Signed-off-by: David Mehren <git@herrmehren.de >
2021-08-29 17:55:19 +02:00
David Mehren
c2691210af
Update FAQ link in features page
...
Signed-off-by: David Mehren <git@herrmehren.de >
2021-08-26 20:12:09 +02:00