sa6anw/hedgedoc-hedgeagent
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
4,653 Commits 2 Branches 0 Tags
c66f4c2ec2f3c1715dd6775eeb9ee740d469a4ea
Commit Graph

4653 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Erik Michelson
814271dc0b feat(editor): add external link warning page 
A malicious user could modify a valid looking link (for example of the editor UI)
to point to a malicous site, by using overlays and CSS. Since CSS should stay
enabled, we need to make the user aware of possible risks when leaving the
HedgeDoc instance, in order to protect them from credential-theft.

This commit adds a new interstitial page for external links, that shows the
target URL and asks the user, whether they really want to continue.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-06-10 20:15:09 +02:00
renovate[bot]
fa00e34635 chore(deps): update dependency abcjs to v6.6.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-09 19:30:55 +02:00
renovate[bot]
c145549af4 fix(deps): update dependency mysql2 to v3.22.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-09 11:41:01 +02:00
지지 ᚠד (Jiji Freya Daniel) Maslowski
193446daed docs(setup): note that the FreeBSD port is unmaintained 
Signed-off-by: 지지 ᚠד (Jiji Freya Daniel) Maslowski <info@orangecms.org>
 2026-05-30 11:10:30 +02:00
renovate[bot]
cc9194bfca fix(deps): update dependency dompurify to v3.4.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-05 14:15:41 +02:00
renovate[bot]
2abfdb9628 chore(deps): update actions/setup-node action to v6.4.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-29 19:12:50 +02:00
Mathias Kende
03775f0f80 docs(auth): update authelia configuration guide (#6465) 2026-04-16 10:24:58 +02:00
Erik Michelson
f0f0b3a3b4 docs(release): update checklist with minor fixes 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-04-16 10:21:45 +02:00
Erik Michelson
b09975a3ba chore(build): success message + executable bit for ot build script 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-04-15 21:35:05 +02:00
Erik Michelson
8b00b6419c chore(release): update AUTHORS and release notes 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-04-15 21:35:05 +02:00
Erik Michelson
20de73bb65 chore(release): bump version to 1.10.8 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-04-15 21:35:05 +02:00
renovate[bot]
bb32d61a7e chore(deps): lock file maintenance 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:32:54 +02:00
renovate[bot]
325c659e4b chore(deps): update actions/cache action to v5.0.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:23:40 +02:00
renovate[bot]
0b27277612 chore(deps): update dependency turndown to v7.2.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:23:29 +02:00
renovate[bot]
5123f3b57d fix(deps): update dependency connect-session-sequelize to v8.0.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:22:01 +02:00
renovate[bot]
ba91457a51 chore(deps): update dependency esbuild-loader to v4.4.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:20:42 +02:00
renovate[bot]
31933a9f7d fix(deps): update dependency file-type to v21.3.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:20:09 +02:00
renovate[bot]
fbd2cdbc2f chore(deps): update dependency pymdown-extensions to v10.21.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:19:39 +02:00
renovate[bot]
0432642231 chore(deps): update dependency less to v4.6.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:17:03 +02:00
renovate[bot]
451ae33f0d fix(deps): update dependency validator to v13.15.35 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:14:09 +02:00
renovate[bot]
8d10830dc4 fix(deps): update dependency sanitize-filename to v1.6.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:12:44 +02:00
renovate[bot]
954d84129d fix(deps): update dependency lodash to v4.18.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:12:20 +02:00
renovate[bot]
779682d35f chore(deps): update yarn to v4.13.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:09:03 +02:00
renovate[bot]
254c1227d2 fix(deps): update dependency dompurify to v3.4.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 20:08:45 +02:00
renovate[bot]
e1c28c46e6 fix(deps): update dependency mysql2 to v3.22.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 19:56:47 +02:00
renovate[bot]
7ca140d9a7 fix(deps): update dependency express-rate-limit to v8.3.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 19:55:53 +02:00
renovate[bot]
78ff6fc49f chore(deps): update dependency mkdocs-redirects to v1.2.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-15 19:53:21 +02:00
Erik Michelson
ca31580db5 fix(ot): add minified updated OT library and build:ot script 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-03-24 21:12:41 +01:00
Erik Michelson
5a5e12a693 fix(ot): keep pendingOps in StaleWithBuffer during applyClient 
Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-03-24 21:12:41 +01:00
Erik Michelson
c4841575c9 fix(ot): use default color constant for hex2rgb fallback 
Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-03-24 21:12:41 +01:00
bxff
65bf11554a fix: buffer operations in Stale/StaleWithBuffer instead of throwing (#6342) 
When 5+ users edit concurrently, revision gaps trigger the Stale state
which throws 'Ignored server-side change.' on incoming operations. This
causes document divergence, silent data corruption, and eventually
force-resets that discard local edits.

Changes:
- Stale/StaleWithBuffer.applyServer: buffer incoming operations instead
  of throwing, apply them sequentially after missing ops arrive
- Stale.applyClient: carry pendingOps to StaleWithBuffer on transition
- editor-socketio-server: retry-based force-reset (3 failures) instead
  of immediate nuclear reset on any OT error
- hex2rgb: defensive null checks for old non-hex color records

Signed-off-by: bxff <51504045+bxff@users.noreply.github.com>
 2026-03-24 21:12:41 +01:00
renovate[bot]
f51f8dcc19 chore(deps): update linters 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:09:58 +01:00
renovate[bot]
ee1435748f chore(deps): update actions/upload-artifact action to v7 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:07:52 +01:00
renovate[bot]
cbed25c170 chore(deps): update dependency mkdocs-material to v9.7.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:04:30 +01:00
renovate[bot]
90febd954e fix(deps): update dependency mysql2 to v3.20.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:03:35 +01:00
renovate[bot]
f7642f37f9 fix(deps): update dependency pg to v8.20.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 13:02:46 +01:00
renovate[bot]
32f119f7ac fix(deps): update dependency rimraf to v6.1.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:59:41 +01:00
renovate[bot]
f5fceed8e2 fix(deps): update dependency minio to v8.0.7 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:58:16 +01:00
renovate[bot]
c75b02bc66 fix(deps): update dependency file-type to v21.3.2 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:56:44 +01:00
renovate[bot]
8ffea9963a fix(deps): update dependency dompurify to v3.3.2 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-24 12:56:17 +01:00
renovate[bot]
11b299d186 chore(deps): update actions/setup-node action to v6.3.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-04 12:24:05 +01:00
renovate[bot]
2adc315f13 chore(deps): update dependency abcjs to v6.6.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-02 14:55:43 +01:00
renovate[bot]
6c91a8728e chore(deps): update dependency abcjs to v6.6.1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-02 14:52:00 +01:00
Philip Molares
cdedc8df33 chore(dependency): fix pymdown-extensions version 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2026-02-24 20:41:39 +01:00
Philip Molares
f0c0200eb9 docs(release-notes): add section about 1.10.7 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2026-02-24 20:24:44 +01:00
Erik Michelson
5cefc3cfe1 fix(cli): do not silently drop errors in manage_users CLI 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2026-02-24 20:24:44 +01:00
Philip Molares
5d00de9892 chore(release): bump version to 1.10.7 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2026-02-24 20:24:44 +01:00
Philip Molares
5603af245c docs: add changelog entry 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2026-02-21 23:47:53 +01:00
Philip Molares
7e2a783161 fix(realtime): aboard finishConnection if user is missing 
This can happen if the user disconnects during connection creation.

See #6101

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2026-02-21 23:47:53 +01:00
renovate[bot]
edf1f62b2e chore(deps): update dependency pymdown-extensions to v10.21.1 2026-02-21 20:48:08 +01:00