b4323b2c40
fix incorrect frame-ancestors and update test
3 years ago
dae6d7fc1e
add hints for translation linting and remove notes
3 years ago
e6c51e3dff
remove hardcoded translations and invert remote embedding logic
3 years ago
386827d825
handle 500 errors
3 years ago
af10547dca
warn if node is not launched with 'NODE_ENV=production'
3 years ago
f34a60665f
check that the server is running at least NodeJS v16.14.2
3 years ago
d405a5f086
disable remote embedding by default
3 years ago
1051fc4da7
fix undefined safe origin
3 years ago
a54a0af604
more tests on checkup page
3 years ago
e38e08fb6e
Merge branch 'soon' into block-embeds
3 years ago
45d2eb0267
Merge branch 'soon' of github.com:xwiki-labs/cryptpad into support-categories
...
and include some tweaks for the checkup page
* sort errors above warnings
* improve messages for new tests
3 years ago
c111364024
add two new tests to diagnose unavailability of uploaded blocks and blobs
3 years ago
ef398de4a1
disable measurement
3 years ago
8398c05f1a
Merge branch 'justification' into mar7
3 years ago
b65730b853
allow admins to enable configurable disk I/O profiling
3 years ago
1202b7a691
WIP configure instance name, jurisdiction, and description on admin panel
3 years ago
f1fc2d2ad9
WIP provide a reason when archiving or resoring a file through the admin panel
3 years ago
0917b45035
implement proper support for forbidding remote media-tag inclusion
...
...and test that the basic headers are correctly set on the checkup page
3 years ago
b40c81d088
support modifying CSP headers at runtime
3 years ago
ef6f98c149
initial serverside components for 'disableEmbedding' functionality
3 years ago
7b6c8b83ef
stricter websocket CSP and tests to match
3 years ago
383684d339
add new, very specific tests for CSP to the checkup page
3 years ago
ebcb6b2ab0
log child process ids in the event of an RPC timeout
3 years ago
d2852fdba4
perform extra validation for private message rpc
3 years ago
29fe4b7223
restrict unnecessarily permissive CSP
3 years ago
b8d6af7891
adjust CSP headers for printing from OnlyOffice
...
* allow outer to load resources from the sandbox (for fonts)
* test whether the expected CSP values are present on the checkup page
* simplify the nodejs server a bit
3 years ago
c1f9d11333
delay working on some flagged issues till next release
3 years ago
1c08a27f60
fix a newly introduced reference error
3 years ago
a33774aa6f
properly abort from channel archival if no metadata is returned
...
and add some logging when trimming history
3 years ago
854a635c5f
remove hardcoded translations and defer non-blocking issues till the next release
3 years ago
9bb884cac6
fix a type error caused by (my) invalid API use
3 years ago
f13b82bdf6
disable integrated eviction by default
...
we'll implement an admin panel checkbox to enable it later
3 years ago
7bdabb5cbc
archive blocks before overwriting them
3 years ago
1c1dc421a3
fix broken block archival
3 years ago
f7f2146fa5
miscellaneous cleanup and notes
3 years ago
d27cbb69dc
filter email and instance purpose from telemetry unless we have consent
3 years ago
76b90d3c8a
correct a few more places where the client expected hashes in pin responses
...
or where the server incorrectly provided them
3 years ago
8e725f3d7c
stop returning the hash of all user pins after pinning
...
the client doesn't use it and it's CPU-intensive
3 years ago
7c7acbeae6
delegate block validation to workers
3 years ago
ba1a7b37e1
separate validation and storage methods for blocks
3 years ago
9806d718d5
implement block archival
3 years ago
caece0123e
archive pin logs instead of removing them outright
3 years ago
3cbf4c9d6f
save instancePurpose choice to server from admin panel
3 years ago
9027409ce5
serverside components of instancePurpose flag
3 years ago
f5e91ef3ef
provide installMethod detail in server telemetry
3 years ago
bb7c40237b
detect new versions in server telemetry responses
4 years ago
2fd812ff36
WIP admin translations and update available button
4 years ago
98c8d7086f
include instance version in Env
4 years ago
41db88a360
WIP admin 'network' panel
4 years ago
eea0688879
log messages which fail signature validation
4 years ago
ansuz