msb-public/wiki - wiki - 马士兵教育代码仓库

Commit Graph

Author	SHA1	Message	Date
TomDakan	0af7c9d078	Merge `3f123f304f` into `07855ab329`	4 months ago
Nicolas Giard	403e98dced	feat: add git always namespace option	10 months ago
Vasily Fedoseyev	abc8dce9cc	fix: Allow HA_ACTIVE: True to enable HA mode (#7493 ) --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	11 months ago
Jacob Beneski	7757de3af7	feat: add elasticsearch 8.x support (#6904 )	1 year ago
Nicolas Giard	b9fb17d4d4	fix: prevent password reset on disabled account	1 year ago
Nicolas Giard	904260fd44	fix: set no-store cache control on jwt renew response	2 years ago
Ethan	1238d614e1	Merge pull request from GHSA-xjcj-p2qv-q3rf * Update render.js # Improved handling of mustache expressions and v-pre attribute assignment ## Changes Made: - Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute. - Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION]. ## Why it Works: - When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag. - This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required. ## Test Cases Passed: 1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>` 4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>` 5. `<p><xyz>{{constructor.constructor('alert("Test Case 8")')()}}<xyz>{{constructor.constructor('alert("Test Case 9")')()}}</xyz></p>` This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process. * fix: move template expressions after dom-purify + handle text nodes without parent --------- Co-authored-by: NGPixel <github@ngpixel.com>	2 years ago
CDN	f1161aed59	fix: make comment module "Artalk" work with newer versions (#6901 ) * feat: update comment module "Artalk" * fix: update code.yml --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Nicolas Giard	abdd2f0d17	fix: remove upper range node.js version check	2 years ago
Nicolas Giard	b1e1759f25	fix: set securityTrustProxy to false by default	2 years ago
Jasmine Tai	99e74e8eb2	feat: upgrade markdown-it-emoji to 3.0.0 (#6945 )	2 years ago
aelgasser	38a46e68ea	feat: sync groups with SAML provider (#6299 ) * feat: added implementation for group mapping in SAML strategies --------- Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com> Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
TomDakan	3f123f304f	Deleted server/modules/authentication/discord/package-lock.json	2 years ago
TomDakan	83e961262b	Deleted server/modules/authentication/discord/package.json	2 years ago
TomDakan	a49898a5c9	removed extra curly brace Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	f183995325	Removed duplicate call to discord.getGuildMember() Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	7c4f4faf38	Update server/modules/authentication/discord/authentication.js Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	c4f6976c7a	clean up of module inclusion. Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	7e0dfdce31	Fixed spelling in user-facing hint. Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	cbc6e50681	Move initialization of DiscordOauth2 outside of passport strategy initialization	2 years ago
TomDakan	b7189fbf73	Update server/modules/authentication/discord/authentication.js cleaner refactoring of authentication logic. Co-authored-by: Tymoteusz Boba <Tymoteusz.Boba@gmail.com>	2 years ago
TomDakan	e76d518041	Added package.json. Fixed bug in authentication.js	2 years ago
Pablo	8932d15c0c	fix: typo in kroki name (#6745 )	2 years ago
Jason Minard	491d63ceee	fix(auth): keycloak authentication post logout redirect for Keycloak 18+ (#5878 )	2 years ago
NGPixel	3855d2c853	fix: add node 18 + 20 compatibility	2 years ago
Jaeseo Park	d75fc76c0c	feat: add markdown-it-pivot-table rendering module (#6574 ) * feat: markdown-it-pivot-table * chore: upgrade dependency version * style: remove semicolon in renderer.js --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Andrew McFadden	db8a09fe8c	feat: add ACR Value option to OIDC Module (#6553 ) --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
matt1097	f02b7ba94e	fix(git): Reduce git concurrency to avoid lock file conflicts. (#6511 )	3 years ago
CDN	4e5e8309a6	feat: add v2 of analytics module umami (#6442 ) * feat: create analytics module umami2 --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Kyle Gehmlich	545ba4ec95	fix: remove duplicate query parameters on HTTPS redirect (#6460 ) HTTPS redirection rebuilds the full URL using req.originalUrl, which includes query parameters (see https://expressjs.com/en/api.html#req.originalUrl). Prior to this patch, appending the stringified query params to req.originalUrl resulted in duplicate parameters, e.g. wiki.js/callback?session=123&code=abc?session=123&code=abc which caused errors when being redirected from an insecure (http://) callback URL to a secure version when using OIDC (e.g. with keycloak). This issue is probably rare, but in cases where HTTPS redirection is enabled and a user tries to hit an insecure URL with query parameters, it could cause problems.	3 years ago
Nicolas Giard	3bf1d9cf28	fix: disable template compilation in source view	3 years ago
Nicolas Giard	e1d282ad11	feat: warn and exit on unsupported node version	3 years ago
DerekJarvis	fd00272314	feat(auth): allow custom GitLab endpoints for self-managed instances (#6399 ) * Allow custom GitLab endpoints for self-hosting --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
TomDakan	1b66420689	Updated Discord Authentication Module to allow optionally filtering based on Server Roles. Updated Discord Authentication Module to allow optionally filtering based on Server Roles. Added custom authentication error message. Added Discord-Oauth2 to package. Discord-Oauth2 is used to fetch role data from the specified server.	3 years ago
robinho81	8db4be668b	feat: expose skipUserProfile option in passport-oidc (#6190 ) Co-authored-by: Robin Chalmers <robin.chalmers@kairostech.no>	3 years ago
Charlotte County Public Schools	5acc7e752e	fix: add new props to existing auth strategies (#6250 )	3 years ago
NGPixel	490fab1173	fix: handle empty ToC position value	3 years ago
NGPixel	e495e0aaab	fix: update google analytics field help to refer to the new ID format	3 years ago
NGPixel	e954b50a7a	feat: footer text override option	3 years ago
Dan Nicholson	78a35c377c	feat: include query parameters in locale redirect (#6132 ) * feat: include query parameters in locale redirect * refactor: code cleanup --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
gueldi	bba1d1b574	fix(oidc): use _json prop when setting displayName (#6135 ) * Fixes setting displayName from OIDC Relates to: https://github.com/requarks/wiki/pull/6096 * Update authentication.js --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
NGPixel	ac930fc23e	fix: change simple-git import	3 years ago
Eric Knibbe	2e8585478f	fix(git): handle file renames between folders (#6020 ) * git storage: handle file renames between folders --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Charlotte County Public Schools	8fa771c4ce	feat: set groups based on LDAP groups (#5903 ) * Add mapping ldap groups to wiki groups --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Leangseu Kim	0d914b061e	feat: add singleByPath GraphQL resolver (#6011 ) Co-authored-by: k k <kleangseu@yahoo.com>	3 years ago
Aurélien Lajoie	1da80eaab8	feat: oauth2 add groups mapping (#6053 ) Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
gueldi	43a797d322	feat: adds displayName property to OIDC authentication module (#6096 ) * Adds displayName property to oidc authentication method * fix: update displayName prop * fix: use blank display name in oidc auth --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
NGPixel	5f876ced20	feat: optional oauth2 module nonce toggle	3 years ago
Sleuth56	12233c476d	feat: enable state key on generic oauth2 (#6104 )	3 years ago
Eric Knibbe	41454cfd30	fix(git): disable color.ui in git storage (#6014 )	3 years ago

1 2 3 4 5 ...

949 Commits (0af7c9d078b79845df9c81e8dc1500e73f53e706)