2172 Commits (0af7c9d078b79845df9c81e8dc1500e73f53e706)

 

All Branches   

Search

Author	SHA1	Message	Date
TomDakan	0af7c9d078	Merge 3f123f304f into 07855ab329	4 months ago
Nicolas Giard	07855ab329	docs: Update README.md	4 months ago
Nicolas Giard	d96bbaf42c	docs: Update SECURITY.md	6 months ago
Nadia Santalla	41d3ba4312	chore(helm): render external database URL if it is set (#7036)	8 months ago
Nicolas Giard	9bf9c8af47	ci: Update build.yml	8 months ago
Nicolas Giard	7053819f35	docs: Update README.md	8 months ago
Nicolas Giard	a393f5f9bc	docs: Update README.md	8 months ago
Nicolas Giard	78c41e36e1	fix: use xml-crypto 2.1.6 for passport-saml	9 months ago
Nicolas Giard	85243e5284	docs: Update SECURITY.md	10 months ago
Nicolas Giard	403e98dced	feat: add git always namespace option	10 months ago
Vasily Fedoseyev	abc8dce9cc	fix: Allow HA_ACTIVE: True to enable HA mode (#7493) ... --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	11 months ago
maarous	94d253bf59	chore(helm): add support for securityContext and resources in sideload container (#7350) ... --------- Co-authored-by: Mohamed Amine Arous <“maarous-prestataire@ina.fr”> Co-authored-by: Nicolas Giard <github@ngpixel.com>	1 year ago
Nicolas Giard	c7c20579fd	docs: Update README.md	1 year ago
Nicolas Giard	583ea44a72	docs: Update README	1 year ago
Nicolas Giard	ab5c620d50	chore: update yarn lock	1 year ago
Jacob Beneski	7757de3af7	feat: add elasticsearch 8.x support (#6904)	1 year ago
Nicolas Giard	ad37325773	docs: Update README.md	1 year ago
Nicolas Giard	55a63a3c5a	ci: fix docker manifest typo	1 year ago
Nicolas Giard	34de47cc10	ci: remove armv7 build target	1 year ago
Nicolas Giard	18ebf83f88	ci: update base docker image	1 year ago
Nicolas Giard	ef5ab0ecb8	ci: disable mssql test	1 year ago
Nicolas Giard	b9fb17d4d4	fix: prevent password reset on disabled account	1 year ago
Dominik	d1b4c8c407	chore(helm): add pod annotations (#7222)	1 year ago
Nicolas Giard	2e35ebf1dc	docs: Update README.md	1 year ago
Nicolas Giard	904260fd44	fix: set no-store cache control on jwt renew response	2 years ago
Ethan	1238d614e1	Merge pull request from GHSA-xjcj-p2qv-q3rf ... * Update render.js # Improved handling of mustache expressions and v-pre attribute assignment ## Changes Made: - Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute. - Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION]. ## Why it Works: - When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag. - This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required. ## Test Cases Passed: 1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>` 4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>` 5. `<p>&lt;xyz&gt;{{constructor.constructor('alert("Test Case 8")')()}}&lt;xyz&gt;{{constructor.constructor('alert("Test Case 9")')()}}&lt;/xyz&gt;</p>` This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process. * fix: move template expressions after dom-purify + handle text nodes without parent --------- Co-authored-by: NGPixel <github@ngpixel.com>	2 years ago
Nicolas Giard	98c04fe18e	docs: Update README.md	2 years ago
Nicolas Giard	854ec230dd	ci: Update build.yml	2 years ago
Nicolas Giard	a28b525894	docs: Update SECURITY.md	2 years ago
CDN	f1161aed59	fix: make comment module "Artalk" work with newer versions (#6901) ... * feat: update comment module "Artalk" * fix: update code.yml --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Sukka	3a7ce75a1e	refactor(templates): replace `polyfill.io` (#7032)	2 years ago
Karol Rudnikowski (dxdroni)	f54551ee69	fix: page pagination in tags component (#7061)	2 years ago
Nicolas Giard	abdd2f0d17	fix: remove upper range node.js version check	2 years ago
Nicolas Giard	66ca18c499	docs: Update README.md	2 years ago
craph	d5af4cb068	chore: fix python issue for node18 in dev Dockerfile (#7029) ... * Fix: email toLowerCase * Fix python issue for node18 in Dockerfile	2 years ago
Nicolas Giard	ece5753ebb	docs: Update README.md	2 years ago
Nicolas Giard	b1e1759f25	fix: set securityTrustProxy to false by default	2 years ago
Jasmine Tai	99e74e8eb2	feat: upgrade markdown-it-emoji to 3.0.0 (#6945)	2 years ago
Nicolas Giard	34c037c68b	docs: Update README.md	2 years ago
aelgasser	38a46e68ea	feat: sync groups with SAML provider (#6299) ... * feat: added implementation for group mapping in SAML strategies --------- Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com> Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Nicolas Giard	fd91caff1d	docs: Update README.md	2 years ago
Nicolas Giard	16245caeff	docs: Update README.md	2 years ago
TomDakan	3f123f304f	Deleted server/modules/authentication/discord/package-lock.json	2 years ago
TomDakan	83e961262b	Deleted server/modules/authentication/discord/package.json	2 years ago
TomDakan	a49898a5c9	removed extra curly brace ... Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	f183995325	Removed duplicate call to discord.getGuildMember() ... Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	7c4f4faf38	Update server/modules/authentication/discord/authentication.js ... Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	c4f6976c7a	clean up of module inclusion. ... Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	7e0dfdce31	Fixed spelling in user-facing hint. ... Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	cbc6e50681	Move initialization of DiscordOauth2 outside of passport strategy initialization	2 years ago