sa6anw/hedgedoc-hedgeagent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,934 Commits 1 Branch 0 Tags
c97530fcf0820ddbfb3fdf56dbdfd71a84db6c4f
Commit Graph

81 Commits

Author SHA1 Message Date
David Mehren
b468fb623b Switch to ejs 3 compliant imports 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-02-09 20:27:39 +01:00
Erik Michelson
68c8f2860d Fixed shortcut icon urls pointing to old (nonexistent) files 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
 2020-11-27 11:29:34 +01:00
David Mehren
1a074cd411 Update CDN links and integrity hashes for upgraded libraries 
Signed-off-by: David Mehren <git@herrmehren.de>
 2020-11-10 22:56:00 +01:00
Nick Hahn
043f2c3193 Fix checksums of mermaid 
Signed-off-by: Nick Hahn <nick.hahn@posteo.de>
 2020-05-28 14:06:33 +02:00
Nick Hahn
ae7772a3f3 Update to mermaid 8.5.1 
Signed-off-by: Nick Hahn <nick.hahn@posteo.de>
 2020-05-27 14:06:03 +02:00
Antoine Aflalo
adf37550be Update mermaid in CDN 
Signed-off-by: Antoine Aflalo <antoine@warrantymaster.com>
 2020-02-10 17:12:31 +00:00
Enrico Guiraud
23c7b5b0a6 Fix urlPath support, let CodiMD be served from a subpath correctly 
Webpack now uses relative paths for resources linked from by static
snippets. A templated <base> tag has been introduced in headers
so app.js can set the base URL at runtime.

Signed-off-by: Enrico Guiraud <enrico.guiraud@cern.ch>
 2019-12-20 12:03:16 +01:00
Sheogorath
da4665c759 Respect DNT header 
Do Not Track (DNT) is an old web standard in order to notify pages that
the user doesn't want to be tracked. Even while a lot of pages either
ignore this header or even worse, use it for tracking purposes, the
orignal intention of this header is good and should be adopted.

This patch implements a respect of the DNT header by no longer including
the optional Google Analytics and disqus integrations when sending a DNT
header. This should reduce outside resource usage and help to stay more
private.

This should later-on extended towards other document content (i.e.
iframe based content).

The reason to not change the CDN handling is that CDNs will be
deprecated with next release and removed in long term.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-06-08 23:43:50 +02:00
Sheogorath
9101be92ab Update jQuery to version 3.4.1 2019-05-06 10:42:41 +02:00
Max Wu
1743a97c22 Fix possible MathJax XSS issue [Security Issue] 
see more at: http://docs.mathjax.org/en/latest/safe-mode.html

Signed-off-by: Max Wu <jackymaxj@gmail.com>
 2019-03-03 18:32:58 +08:00
Sheogorath
bcebf1e8d2 Update reveal.js to version 3.7.0 
There is a new reveal.js version out. As we try to keep up with
upstream, time to integreate it.

This patch updates reveal.js in for CDN-using instances as well as the
ones using the libraries.

Checked that speaker view in slide mode still works, so no CSP change
needed.

https://github.com/hakimel/reveal.js/releases/tag/3.7.0
2d241b9300/lib/csp.js (L72-L74)
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-11-19 22:31:05 +01:00
Claudius
44ffc564da removing global site layout vars from individual routers, putting them into app.local 
Signed-off-by: Claudius <opensource@amenthes.de>
 2018-11-03 00:52:48 +01:00
Sheogorath
1d452a6ed4 Remove dead package octicon 
Octicon no longer provides its CSS classes and this way is useless in
CodiMD. Replacing all used classes in the UI and remove it from build
system.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-10-10 23:42:41 +02:00
Sheogorath
5212bbf9c4 Replace font-awesome with fork-awesome 
This patch replaces font-awesome with its fork called fork-awesome.
Besides the fact that the newer versions of font-awesome can't be
shipped with distros like debian due to license issues, fork-awesome
also provides more FOSS related icons and builds on top of version 4.7.x
of font-awesome, which we used until this patch.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-10-05 21:52:08 +02:00
Sheogorath
1812b1aaca Update highlight.js 
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-06-30 16:52:34 +02:00
Sheogorath
b6e1144627 Update to octicon 4.4.0 
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-06-30 16:52:33 +02:00
Sheogorath
04d16e4d6e Add Print icon to slide view 
It redirects the user to the print view of the document. I claim that
people should either be smart enough to use ctrl+P or ask someone who
knows how to print a webpage. I don't want to babysit our users.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-06-24 23:50:38 +02:00
Sheogorath
ed5353d13a Move polyfill to CDN section 
We don't support it on CDN false instances, but it doesn't hurt to keep
it in for CDN-enabled instances

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-06-18 01:26:11 +02:00
Wu Cheng-Han
3c473e60a6 Upgrade reveal.js to 3.6.0 and useCDN option for CSS include 2018-01-29 13:09:52 +08:00
Christoph (Sheogorath) Kern
7de6e3211f Merge pull request #598 from xxyy/feature/csp 
Implement basic CSP support
 2018-01-22 20:43:46 +01:00
Peter Dave Hello
f896432250 Upgrade mermaid to v7.1.0, fix #600 2017-10-30 00:18:53 +08:00
Literallie
af935e46fc Externalise trivial inline styles from slide.ejs 
Dynamic background images need some further work
 2017-10-23 23:39:18 +02:00
Literallie
4238b9b3ef Fix MathJax CSP issues 2017-10-22 00:03:45 +02:00
Literallie
080436aebb CSP: Add nonce to slide view inline JS 2017-10-22 00:03:45 +02:00
butlerx
e5834c077f add the ability to set slide theme in slide options 2017-05-31 23:28:43 +01:00
Max Wu
450159a462 Merge pull request #427 from PeterDaveHello/fix-indent 
Fix indent in views, shouldn't mix tabs with spaces
 2017-04-18 10:41:58 +08:00
Peter Dave Hello
5f3fe5c62c Fix indent in views, shouldn't mix tabs with spaces 2017-04-18 05:24:04 +08:00
Peter Dave Hello
08c0a0392c Use abcjs on cdnjs, cc @jackycute 2017-04-18 05:19:19 +08:00
Wu Cheng-Han
10a7a9b37e Update to use CDN css for emojify.js when applicable 2017-03-21 00:27:58 +08:00
Wu Cheng-Han
6c87262bd9 Fix to use minified CDN file source in mermaid 2017-02-02 23:40:55 +08:00
Wu Cheng-Han
d5008b7aeb Update viz.js and mermaid CDN links 2017-02-02 23:37:20 +08:00
Wu Cheng-Han
a669c201be Fix template partial path 2017-01-21 14:04:54 +08:00
Wu Cheng-Han
09a7bcbdef Refactor templates and rearrange its path 2017-01-21 13:08:29 +08:00
Wu Cheng-Han
276d500406 Upgrade dependencies 2016-12-19 16:20:27 +08:00
Wu Cheng-Han
c59b4cb883 Update webpack and slide resource loading to reduce pack size 2016-11-29 00:44:29 +08:00
Wu Cheng-Han
47d5efb29e Fix slide resource path and style load orders to avoid conflicts 2016-11-29 00:44:15 +08:00
Wu Cheng-Han
efd62bd1ca Optimize slide page resource packing and load orders, fix possible wrong chunks orders and font awesome version 2016-11-26 23:24:59 +08:00
Wu Cheng-Han
9d4ede4cff Fix possible XSS in yaml-metadata and turn using ejs escape syntax than external lib [Security Issue] 2016-11-26 22:55:31 +08:00
Wu Cheng-Han
f86a9e0c4b Fix slide might trigger script when processing markdown which cause XSS [Security Issue] 2016-11-26 22:46:08 +08:00
Wu Cheng-Han
1ba46c95fb Update to separate polypill for IE to a template 2016-11-26 22:38:18 +08:00
Wu Cheng-Han
793aef0e2e Fix syntax highlighting not apply correctly in slides 2016-11-07 21:27:58 +08:00
Max Wu
8c5a5a0712 Merge pull request #243 from Yukaii/google-font-optional-cdn 
Google font optional cdn
 2016-11-04 13:08:59 +08:00
Wu Cheng-Han
2167570c11 Fix slide highlighting styles not apply properly and add missing styles dependency of prism in html export 2016-11-04 13:04:00 +08:00
Yukai Huang
0b45312834 Add font css to templates 2016-11-03 14:51:28 +08:00
Yukai Huang
3e23009663 Require slide mode stylesheets 2016-11-02 11:59:45 +08:00
Wu Cheng-Han
70d2fa388e Fix slide export pdf styles not applied issue and add shiv and shim for IE 2016-10-29 23:35:10 +08:00
Wu Cheng-Han
b6ce7a6ab1 Update mathjax cdn path and source path 2016-10-25 01:57:51 +08:00
Wu Cheng-Han
e6dfc749f6 Fix config.js use cdn option not parse properly and add missing cdn resources 2016-10-23 22:42:47 +08:00
Wu Cheng-Han
0aa306685d Fix some typo of PR #230 2016-10-23 21:58:53 +08:00
Peter Dave Hello
58b2cff4ec Use CDNJS by default with https and SRI support 2016-10-23 13:31:25 +08:00