2170 Commits (005512e67814a33031bbc41e2e353c8916e39281)

 

All Branches   

Search

Author	SHA1	Message	Date
Jørn Gustav Larsen	005512e678	Merge abab623240 into 407aacfa19	3 weeks ago
scottnursten-22	407aacfa19	fix(search): always ensure pg_trgm extension availability for PostgreSQL search (#7845) ... * fix(search): ensure pg_trgm extension availability for PostgreSQL search - Move pg_trgm extension creation to initialization phase to ensure availability - Add error handling for similarity search queries that depend on pg_trgm - Add proper logging for debugging search-related issues Fixes issues where PostgreSQL search suggestions fail due to missing or improperly initialized pg_trgm extension, particularly in containerized environments where extension creation timing matters. * fix: Simplify error handling in search suggestion logic Refactor error handling for search suggestions to simplify code. --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 weeks ago
Jørn Gustav Larsen	abab623240	The sanitising functionality for both html and SVG has been unified into a single file on both the client and server side. Second, a problem with the SVG output from the drawio has also been fixed. Last, it is possible to add a customised path for the drawio web application, which can be used for local hosting the application.	3 weeks ago
Benoît des Ligneris	54d21ae538	fix: add tor1 region to DigitalOcean spaces list (#7832)	1 month ago
Nicolas Giard	dd48f28827	docs: update README	2 months ago
dhulripos	b49c00226c	fix: Add missing status code on unauthorized access (#7785) ... * fix status code on unauthorized * Remove unnecessary line breaks	2 months ago
Lyz	9f481221ab	ci(helm): add custom environment variables to the deployment (#7784) ... Co-authored-by: jmp <jmp@icij.org>	3 months ago
Craig Reyenga	cd77f36120	fix: requests without user-agent causing error 500 (#7749)	4 months ago
Nicolas Giard	1b6c67ee77	fix: force wrap for code blocks in print view	4 months ago
Ole Christian Tvedt	c093423307	feat: set groups based on Azure groups (#7736) ... Co-authored-by: Ole Christian Tvedt <ole.christian.tvedt@defa.com>	4 months ago
Nicolas Giard	86abfea7f6	fix: update dompurify dependency + add cross-env	4 months ago
Nicolas Giard	07855ab329	docs: Update README.md	4 months ago
Nicolas Giard	d96bbaf42c	docs: Update SECURITY.md	6 months ago
Nadia Santalla	41d3ba4312	chore(helm): render external database URL if it is set (#7036)	8 months ago
Nicolas Giard	9bf9c8af47	ci: Update build.yml	8 months ago
Nicolas Giard	7053819f35	docs: Update README.md	8 months ago
Nicolas Giard	a393f5f9bc	docs: Update README.md	8 months ago
Nicolas Giard	78c41e36e1	fix: use xml-crypto 2.1.6 for passport-saml	8 months ago
Nicolas Giard	85243e5284	docs: Update SECURITY.md	10 months ago
Nicolas Giard	403e98dced	feat: add git always namespace option	10 months ago
Vasily Fedoseyev	abc8dce9cc	fix: Allow HA_ACTIVE: True to enable HA mode (#7493) ... --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	11 months ago
maarous	94d253bf59	chore(helm): add support for securityContext and resources in sideload container (#7350) ... --------- Co-authored-by: Mohamed Amine Arous <“maarous-prestataire@ina.fr”> Co-authored-by: Nicolas Giard <github@ngpixel.com>	1 year ago
Nicolas Giard	c7c20579fd	docs: Update README.md	1 year ago
Nicolas Giard	583ea44a72	docs: Update README	1 year ago
Nicolas Giard	ab5c620d50	chore: update yarn lock	1 year ago
Jacob Beneski	7757de3af7	feat: add elasticsearch 8.x support (#6904)	1 year ago
Nicolas Giard	ad37325773	docs: Update README.md	1 year ago
Nicolas Giard	55a63a3c5a	ci: fix docker manifest typo	1 year ago
Nicolas Giard	34de47cc10	ci: remove armv7 build target	1 year ago
Nicolas Giard	18ebf83f88	ci: update base docker image	1 year ago
Nicolas Giard	ef5ab0ecb8	ci: disable mssql test	1 year ago
Nicolas Giard	b9fb17d4d4	fix: prevent password reset on disabled account	1 year ago
Dominik	d1b4c8c407	chore(helm): add pod annotations (#7222)	1 year ago
Nicolas Giard	2e35ebf1dc	docs: Update README.md	1 year ago
Nicolas Giard	904260fd44	fix: set no-store cache control on jwt renew response	2 years ago
Ethan	1238d614e1	Merge pull request from GHSA-xjcj-p2qv-q3rf ... * Update render.js # Improved handling of mustache expressions and v-pre attribute assignment ## Changes Made: - Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute. - Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION]. ## Why it Works: - When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag. - This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required. ## Test Cases Passed: 1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>` 4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>` 5. `<p>&lt;xyz&gt;{{constructor.constructor('alert("Test Case 8")')()}}&lt;xyz&gt;{{constructor.constructor('alert("Test Case 9")')()}}&lt;/xyz&gt;</p>` This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process. * fix: move template expressions after dom-purify + handle text nodes without parent --------- Co-authored-by: NGPixel <github@ngpixel.com>	2 years ago
Nicolas Giard	98c04fe18e	docs: Update README.md	2 years ago
Nicolas Giard	854ec230dd	ci: Update build.yml	2 years ago
Nicolas Giard	a28b525894	docs: Update SECURITY.md	2 years ago
CDN	f1161aed59	fix: make comment module "Artalk" work with newer versions (#6901) ... * feat: update comment module "Artalk" * fix: update code.yml --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Sukka	3a7ce75a1e	refactor(templates): replace `polyfill.io` (#7032)	2 years ago
Karol Rudnikowski (dxdroni)	f54551ee69	fix: page pagination in tags component (#7061)	2 years ago
Nicolas Giard	abdd2f0d17	fix: remove upper range node.js version check	2 years ago
Nicolas Giard	66ca18c499	docs: Update README.md	2 years ago
craph	d5af4cb068	chore: fix python issue for node18 in dev Dockerfile (#7029) ... * Fix: email toLowerCase * Fix python issue for node18 in Dockerfile	2 years ago
Nicolas Giard	ece5753ebb	docs: Update README.md	2 years ago
Nicolas Giard	b1e1759f25	fix: set securityTrustProxy to false by default	2 years ago
Jasmine Tai	99e74e8eb2	feat: upgrade markdown-it-emoji to 3.0.0 (#6945)	2 years ago
Nicolas Giard	34c037c68b	docs: Update README.md	2 years ago
aelgasser	38a46e68ea	feat: sync groups with SAML provider (#6299) ... * feat: added implementation for group mapping in SAML strategies --------- Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com> Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago