julled
16dfc91f41
Merge 57d80e25b7 into 6f042e97cc
3 months ago
mod242
6ae53bf1bd
feat: map OIDC/OAuth2 avatar claims to user pictureUrl ( #7908 )
6 months ago
NGPixel
7d4627ba0b
fix: rocketchat auth prototype pollution via userProfile function
7 months ago
Felix Eckhofer
b950e065e9
fix: stop dompurify from breaking draw.io diagrams ( #7888 )
...
Newer versions of dompurify strip <foreignobject> tags if not explicitly
allowed. See https://github.com/cure53/DOMPurify/issues/1040
Fixes #7744
7 months ago
NGPixel
028dcd5656
fix: use promisified pipeline from stream
7 months ago
NGPixel
4eb9dabb63
refactor: update docker images to Node 24 and fix promisify calls
7 months ago
Mia Moir
8b358fc264
fix: Update keycloak authentication definition hints ( #7809 )
...
Update keycloak authentication definition to match endpoints recommended by keycloak at https://www.keycloak.org/securing-apps/oidc-layers
7 months ago
ss033
a02e0131c1
fix: enhance logging for Google and GitHub OAuth2 authentication ( #7848 )
...
Co-authored-by: Nicolas Giard <github@ngpixel.com>
7 months ago
scottnursten-22
407aacfa19
fix(search): always ensure pg_trgm extension availability for PostgreSQL search ( #7845 )
...
* fix(search): ensure pg_trgm extension availability for PostgreSQL search
- Move pg_trgm extension creation to initialization phase to ensure availability
- Add error handling for similarity search queries that depend on pg_trgm
- Add proper logging for debugging search-related issues
Fixes issues where PostgreSQL search suggestions fail due to missing or
improperly initialized pg_trgm extension, particularly in containerized
environments where extension creation timing matters.
* fix: Simplify error handling in search suggestion logic
Refactor error handling for search suggestions to simplify code.
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
9 months ago
Benoît des Ligneris
54d21ae538
fix: add tor1 region to DigitalOcean spaces list ( #7832 )
9 months ago
petrosilius
57d80e25b7
Feat: add wireviz-web based wireviz syntax renderer
...
Add a renderer for wireviz syntax.
This renderer requires a wireviz-web server running / reachable via plugin definable url.
The renderer sends then the wireviz code to it and receives html which is inlined in the markdown code.
See README.md for more details.
10 months ago
Ole Christian Tvedt
c093423307
feat: set groups based on Azure groups ( #7736 )
...
Co-authored-by: Ole Christian Tvedt <ole.christian.tvedt@defa.com>
12 months ago
Nicolas Giard
403e98dced
feat: add git always namespace option
2 years ago
Jacob Beneski
7757de3af7
feat: add elasticsearch 8.x support ( #6904 )
2 years ago
Ethan
1238d614e1
Merge pull request from GHSA-xjcj-p2qv-q3rf
...
* Update render.js
# Improved handling of mustache expressions and v-pre attribute assignment
## Changes Made:
- Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute.
- Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION].
## Why it Works:
- When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag.
- This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required.
## Test Cases Passed:
1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>`
2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>`
3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>`
4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>`
5. `<p><xyz>{{constructor.constructor('alert("Test Case 8")')()}}<xyz>{{constructor.constructor('alert("Test Case 9")')()}}</xyz></p>`
This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process.
* fix: move template expressions after dom-purify + handle text nodes without parent
---------
Co-authored-by: NGPixel <github@ngpixel.com>
2 years ago
CDN
f1161aed59
fix: make comment module "Artalk" work with newer versions ( #6901 )
...
* feat: update comment module "Artalk"
* fix: update code.yml
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
2 years ago
Jasmine Tai
99e74e8eb2
feat: upgrade markdown-it-emoji to 3.0.0 ( #6945 )
3 years ago
aelgasser
38a46e68ea
feat: sync groups with SAML provider ( #6299 )
...
* feat: added implementation for group mapping in SAML strategies
---------
Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com>
Co-authored-by: Nicolas Giard <github@ngpixel.com>
3 years ago
Pablo
8932d15c0c
fix: typo in kroki name ( #6745 )
3 years ago
Jason Minard
491d63ceee
fix(auth): keycloak authentication post logout redirect for Keycloak 18+ ( #5878 )
3 years ago
Jaeseo Park
d75fc76c0c
feat: add markdown-it-pivot-table rendering module ( #6574 )
...
* feat: markdown-it-pivot-table
* chore: upgrade dependency version
* style: remove semicolon in renderer.js
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
3 years ago
Andrew McFadden
db8a09fe8c
feat: add ACR Value option to OIDC Module ( #6553 )
...
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
3 years ago
matt1097
f02b7ba94e
fix(git): Reduce git concurrency to avoid lock file conflicts. ( #6511 )
3 years ago
CDN
4e5e8309a6
feat: add v2 of analytics module umami ( #6442 )
...
* feat: create analytics module umami2
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
3 years ago
DerekJarvis
fd00272314
feat(auth): allow custom GitLab endpoints for self-managed instances ( #6399 )
...
* Allow custom GitLab endpoints for self-hosting
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
3 years ago
robinho81
8db4be668b
feat: expose skipUserProfile option in passport-oidc ( #6190 )
...
Co-authored-by: Robin Chalmers <robin.chalmers@kairostech.no>
3 years ago
NGPixel
e495e0aaab
fix: update google analytics field help to refer to the new ID format
4 years ago
NGPixel
e954b50a7a
feat: footer text override option
4 years ago
gueldi
bba1d1b574
fix(oidc): use _json prop when setting displayName ( #6135 )
...
* Fixes setting displayName from OIDC
Relates to: https://github.com/requarks/wiki/pull/6096
* Update authentication.js
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
NGPixel
ac930fc23e
fix: change simple-git import
4 years ago
Eric Knibbe
2e8585478f
fix(git): handle file renames between folders ( #6020 )
...
* git storage: handle file renames between folders
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
Charlotte County Public Schools
8fa771c4ce
feat: set groups based on LDAP groups ( #5903 )
...
* Add mapping ldap groups to wiki groups
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
Aurélien Lajoie
1da80eaab8
feat: oauth2 add groups mapping ( #6053 )
...
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
gueldi
43a797d322
feat: adds displayName property to OIDC authentication module ( #6096 )
...
* Adds displayName property to oidc authentication method
* fix: update displayName prop
* fix: use blank display name in oidc auth
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
NGPixel
5f876ced20
feat: optional oauth2 module nonce toggle
4 years ago
Sleuth56
12233c476d
feat: enable state key on generic oauth2 ( #6104 )
4 years ago
Eric Knibbe
41454cfd30
fix(git): disable color.ui in git storage ( #6014 )
4 years ago
Boris
54dbf9ad00
feat: add asciidoc editor module ( #5954 )
...
* feat: add asciidoc editor module
* fix storage file extension for asciidoc pages
* fix: asciidoc editor + rendering improvements
* fix: description list css improvements
Co-authored-by: NGPixel <github@ngpixel.com>
4 years ago
CDN
73af37b81b
fix: git log should explicitly separate branch from paths ( #5911 )
4 years ago
CDN
0a2a32db47
feat: add artalk comment module ( #5868 )
...
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
CDN
86c9407057
feat: add umami analytics module ( #5869 )
...
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
cannorin
db2ad81a1f
feat: katex persistent macro support ( #5838 )
...
Co-authored-by: cannorin <cannorin@users.noreply.github.com>
4 years ago
NGPixel
9fbc25adb8
feat: improve table rendering + add markdown-it-decorate module
4 years ago
natsutteatsuiyone
445ad05a3d
fix: incompatibility issues with passport-openidconnect@0.1.1 ( #5799 )
...
* fix: incompatibility issues with passport-openidconnect
* fix: remove a trailing semicolon
4 years ago
Simon Lichtinghagen
1893fd499a
fix: login with Keycloak 20 by explicit set OAuth scopes ( #5808 )
...
* Fix login with Keycloak 20 by explicit set OAuth scopes
* moved scopes to definition.yml
Co-authored-by: Simon Lichtinghagen <sl@bnmsp.de>
4 years ago
Andrei Senchuk
e6bbf9d088
fix: oidc module - map() call on undefined; fix unrelate() usage ( #5781 )
4 years ago
adroslice
15206efc57
fix: comment edit not updating original content ( #5646 )
4 years ago
NGPixel
ebf4da9bea
fix: oidc auth groups relate / unrelate
4 years ago
NGPixel
4b3005057f
fix: prevent user enumeration using local login timings
4 years ago
Fionera
91221e73eb
feat: set groups based on OIDC claim ( #5568 )
...
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago