b4323b2c40
fix incorrect frame-ancestors and update test
2022-04-01 13:15:06 +05:30
dae6d7fc1e
add hints for translation linting and remove notes
2022-03-25 16:53:10 +05:30
e6c51e3dff
remove hardcoded translations and invert remote embedding logic
2022-03-24 12:43:16 +05:30
386827d825
handle 500 errors
2022-03-22 16:41:42 +05:30
af10547dca
warn if node is not launched with 'NODE_ENV=production'
2022-03-22 15:40:43 +05:30
f34a60665f
check that the server is running at least NodeJS v16.14.2
2022-03-22 14:27:07 +05:30
d405a5f086
disable remote embedding by default
2022-03-15 15:29:18 +05:30
1051fc4da7
fix undefined safe origin
2022-03-14 17:43:51 +05:30
a54a0af604
more tests on checkup page
2022-03-14 17:09:22 +05:30
e38e08fb6e
Merge branch 'soon' into block-embeds
2022-03-14 12:52:55 +05:30
45d2eb0267
Merge branch 'soon' of github.com:xwiki-labs/cryptpad into support-categories
...
and include some tweaks for the checkup page
* sort errors above warnings
* improve messages for new tests
2022-03-10 11:33:41 +05:30
c111364024
add two new tests to diagnose unavailability of uploaded blocks and blobs
2022-03-08 18:20:11 +05:30
ef398de4a1
disable measurement
2022-03-08 11:03:32 +05:30
8398c05f1a
Merge branch 'justification' into mar7
2022-03-07 19:03:06 +05:30
b65730b853
allow admins to enable configurable disk I/O profiling
2022-03-07 18:42:00 +05:30
1202b7a691
WIP configure instance name, jurisdiction, and description on admin panel
2022-02-24 15:28:24 +05:30
f1fc2d2ad9
WIP provide a reason when archiving or resoring a file through the admin panel
2022-02-18 18:45:52 +05:30
0917b45035
implement proper support for forbidding remote media-tag inclusion
...
...and test that the basic headers are correctly set on the checkup page
2022-02-18 16:09:02 +05:30
b40c81d088
support modifying CSP headers at runtime
2022-02-18 13:54:33 +05:30
ef6f98c149
initial serverside components for 'disableEmbedding' functionality
2022-02-18 13:35:20 +05:30
7b6c8b83ef
stricter websocket CSP and tests to match
2022-02-14 11:45:44 +05:30
383684d339
add new, very specific tests for CSP to the checkup page
2022-02-10 16:53:14 +05:30
ebcb6b2ab0
log child process ids in the event of an RPC timeout
2022-02-03 15:11:26 +05:30
d2852fdba4
perform extra validation for private message rpc
2022-01-26 03:58:29 +05:30
29fe4b7223
restrict unnecessarily permissive CSP
2022-01-21 18:01:55 +05:30
b8d6af7891
adjust CSP headers for printing from OnlyOffice
...
* allow outer to load resources from the sandbox (for fonts)
* test whether the expected CSP values are present on the checkup page
* simplify the nodejs server a bit
2021-10-19 14:22:10 +05:30
c1f9d11333
delay working on some flagged issues till next release
2021-08-16 18:32:34 +05:30
1c08a27f60
fix a newly introduced reference error
2021-08-10 18:48:34 +05:30
a33774aa6f
properly abort from channel archival if no metadata is returned
...
and add some logging when trimming history
2021-08-10 15:24:23 +05:30
854a635c5f
remove hardcoded translations and defer non-blocking issues till the next release
2021-07-27 03:40:03 +05:30
9bb884cac6
fix a type error caused by (my) invalid API use
2021-07-06 18:21:55 +05:30
f13b82bdf6
disable integrated eviction by default
...
we'll implement an admin panel checkbox to enable it later
2021-07-06 16:14:40 +05:30
7bdabb5cbc
archive blocks before overwriting them
2021-07-06 15:42:37 +05:30
1c1dc421a3
fix broken block archival
2021-07-01 16:44:40 +05:30
f7f2146fa5
miscellaneous cleanup and notes
2021-06-30 19:09:53 +05:30
d27cbb69dc
filter email and instance purpose from telemetry unless we have consent
2021-06-30 19:05:37 +05:30
76b90d3c8a
correct a few more places where the client expected hashes in pin responses
...
or where the server incorrectly provided them
2021-06-30 18:15:55 +05:30
8e725f3d7c
stop returning the hash of all user pins after pinning
...
the client doesn't use it and it's CPU-intensive
2021-06-30 17:20:03 +05:30
7c7acbeae6
delegate block validation to workers
2021-06-28 15:07:48 +05:30
ba1a7b37e1
separate validation and storage methods for blocks
2021-06-28 14:39:26 +05:30
9806d718d5
implement block archival
2021-06-25 20:53:09 +05:30
caece0123e
archive pin logs instead of removing them outright
2021-06-25 20:22:16 +05:30
3cbf4c9d6f
save instancePurpose choice to server from admin panel
2021-06-25 13:04:29 +05:30
9027409ce5
serverside components of instancePurpose flag
2021-06-25 12:29:13 +05:30
f5e91ef3ef
provide installMethod detail in server telemetry
2021-06-22 16:32:33 +05:30
bb7c40237b
detect new versions in server telemetry responses
2021-06-10 20:56:12 +05:30
2fd812ff36
WIP admin translations and update available button
2021-06-09 18:45:02 +05:30
98c8d7086f
include instance version in Env
2021-06-09 18:43:31 +05:30
41db88a360
WIP admin 'network' panel
2021-06-08 20:24:30 +05:30
eea0688879
log messages which fail signature validation
2021-05-31 15:53:55 +05:30
ansuz