lucaci32u4
ed9ac9ac5d
Fix page rule evaluation
...
Squashed commit of the following, omitting all environment-related
setups:
commit e0c04f8d47db8b7589cef9acfc5633835624ea24
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Sat May 16 02:36:04 2026 +0300
Fix forking release again
commit 4b21b8229c58bc59263f074b72326f297dd6e115
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Sat May 16 02:19:46 2026 +0300
Fix forking release
commit cac209b0afe897a83d3c8f8094d5085d28d27335
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Sat May 16 01:57:19 2026 +0300
Remove windows build
commit b3e6b37d077ec1ca0895a6f3e8ae278049092035
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Sat May 16 01:42:21 2026 +0300
Fix page tree responding to all permissions rules
commit 7606393de6f074fedd1b36acb7f085307304e8e1
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Tue May 12 05:12:42 2026 +0300
Fix build process and improve permission handling
commit 1b6dbed46b6eaa9f34e22b1b222fd3bd7a021575
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Tue May 12 05:00:51 2026 +0300
Add explanation of fork reason to README
commit a7a7460f8b7a7053e2e8145ea2852989a3ead99f
Merge: 3d63b55d 67d69fe9
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Tue May 12 04:54:13 2026 +0300
Merge branch 'feat-permissions'
commit 67d69fe90453c2d3998bf4d204eed3a4fe801157
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Tue May 12 04:53:39 2026 +0300
Update inline hint about permission evaluation
commit 64d20cb58c713df517d4f92b79cbceb900ae90e9
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Tue May 12 04:04:40 2026 +0300
Rework permissions path matching to better support tags
commit 3d63b55d257309b97ef2ba787c5d62980a065b33
Author: lucaci32u4 <lucaci32u4@gmail.com>
Date: Tue May 12 04:03:17 2026 +0300
Publish to form repo
2 weeks ago
NGPixel
34cd445a46
fix: users + groups permissions assign logic + text hints
1 month ago
Kolega.dev
7ae6635d16
fix: validate loginRedirect cookie to prevent open redirect ( #7923 )
...
The loginRedirect cookie value was used directly in res.redirect() and
window.location.replace() without validation, allowing redirection to
arbitrary external URLs. Added validation to ensure the redirect target
is a relative path before use.
Co-authored-by: kolega.dev <faizan@kolega.ai>
4 months ago
NGPixel
85c304f583
fix: add cookie secure flag when site is using https (client-side)
5 months ago
NGPixel
857c1720b1
fix: css editor in page properties dialog not loading
5 months ago
NGPixel
19c26e58c9
fix: handle breadcrumb locale prefix correctly
5 months ago
Felix Eckhofer
b950e065e9
fix: stop dompurify from breaking draw.io diagrams ( #7888 )
...
Newer versions of dompurify strip <foreignobject> tags if not explicitly
allowed. See https://github.com/cure53/DOMPurify/issues/1040
Fixes #7744
5 months ago
NGPixel
f68d1f60ca
fix: hide unfinished features
5 months ago
Wingqvist
326974cdd5
fix(profile): Prevent autofill on header search bar ( #7688 )
...
This commit resolves the recurring issue where password managers
incorrectly autofill the header search bar when viewing the user
profile page.
This is achieved by wrapping the password change fields in a <form>
element, properly scoping them for browser autofill logic, and using
modern, standard `autocomplete` attributes. This addresses the root
cause of the issue, whereas previous attempts tried to mitigate the
symptom in the search bar.
Fixes #2324
Closes #3327
5 months ago
Karol Rudnikowski (dxdroni)
f54551ee69
fix: page pagination in tags component ( #7061 )
2 years ago
Nicolas Giard
b1e1759f25
fix: set securityTrustProxy to false by default
2 years ago
Jasmine Tai
99e74e8eb2
feat: upgrade markdown-it-emoji to 3.0.0 ( #6945 )
2 years ago
Nicolas Giard
3bf1d9cf28
fix: disable template compilation in source view
3 years ago
NGPixel
b5b1913396
feat: footer override markdown inline parsing
3 years ago
NGPixel
e954b50a7a
feat: footer text override option
3 years ago
Leangseu Kim
26dcc007e7
fix: sort visualize tree ( #6110 )
...
Co-authored-by: k k <kleangseu@yahoo.com>
3 years ago
Boris
54dbf9ad00
feat: add asciidoc editor module ( #5954 )
...
* feat: add asciidoc editor module
* fix storage file extension for asciidoc pages
* fix: asciidoc editor + rendering improvements
* fix: description list css improvements
Co-authored-by: NGPixel <github@ngpixel.com>
3 years ago
NGPixel
f3133a72ec
feat: toc sidebar position
4 years ago
cannorin
db2ad81a1f
feat: katex persistent macro support ( #5838 )
...
Co-authored-by: cannorin <cannorin@users.noreply.github.com>
4 years ago
NGPixel
9fbc25adb8
feat: improve table rendering + add markdown-it-decorate module
4 years ago
九零
1bb9be0e62
fix: admin contribute link address. ( #5791 )
4 years ago
Evandro Arruda
274ecf4b20
fix: America/Sao_Paulo timezone offset ( #5690 )
4 years ago
NGPixel
8715cd69b2
feat: edit shortcuts
4 years ago
Sandhya Veludandi
4e5da41d35
fix: page cursor and pagination ( #5541 )
...
* fix: search results not displaying on first page
* fix: page cursor position stays the same between page selection
4 years ago
Nicolas Giard
e78953d018
fix(admin): update admin groups page rules write:pages label to match actual permissions
4 years ago
NGPixel
48077fc9e5
feat(admin): make page extensions configurable
4 years ago
Nicolas Giard
1e577735c4
fix(mail): typo in admin mail save mutation
4 years ago
David Wheatley
97a744556b
feat(mail): allow setting of mailer identifying name ( #5363 )
4 years ago
Nicolas Giard
cd33ff0afb
feat(admin): export tool for full migration / backup ( #5294 )
...
* feat: export content utility (wip)
* feat: export navigation + groups + users
* feat: export comments + navigation + pages + pages history + settings
* feat: export assets
4 years ago
myml
8be88cb273
fix(search): search result display as empty after clearing field ( #5283 )
4 years ago
Oleksandr Koltsov
24dbc097cb
fix: change spelling of Kiev to Kyiv ( #5285 )
...
Co-authored-by: Alex Koltsov <alex@slinex.com>
4 years ago
Tomas McNamer
fc6e4ab9c4
feat: add link to admin area on welcome page ( #4035 )
...
* feat: Add link to admin area on welcome page
See: #1259
* fix: remove trailing slash from welcome admin button
* fix: welcome page admin button link
Co-authored-by: Nicolas Giard <github@ngpixel.com>
4 years ago
NGPixel
afafb4f4e0
fix: md task list - use same config as client
4 years ago
NGPixel
a04f7bd650
fix: force uploads to use auth headers instead of cookie
4 years ago
NGPixel
92fe9d3e31
fix: view source of page version crash ( #3297 )
4 years ago
NGPixel
79bdd44093
fix: force download of unsafe extensions
4 years ago
NGPixel
5d3e81496f
fix: sanitize SVG uploads
5 years ago
NGPixel
0d7d95d2ac
fix: markdown checkbox rendering with links
5 years ago
anatawa12
29f173c24c
fix: query parameter on tags page ( #4668 )
5 years ago
broxen
813df21020
fix: prevent malformed paths for pages ( #4533 )
...
* First take on removing erroneous path characters
Paths should not accept trailing slashes or hashtags. This is a first attempt at nullifying those.
* Use rules to verify path before acceptance
Use Regex and rules to verify paths before acceptance
* Rules to prevent any leading or trailing slashes
* Complex slug for regex on path, but it elminates special chars
* Added yarn.lock to .gitignore
* Maybe we do want yarn.lock afterall
* Adding yarn.lock
* Move Regex pattern outside of export
5 years ago
François Karman
cc4c2bfcd5
fix: update social-sharing.vue to have proper icons ( #4556 )
...
facebook and linkedin icons were invalid
5 years ago
tsh96
7e997aada5
fix: resolve admin pages pagination bug ( #4280 )
5 years ago
NGPixel
84b927915e
fix: convert page - task list + UI fixes
5 years ago
NGPixel
26f1c0f372
feat: convert page
5 years ago
scienceasdf
cfbd3dca00
Fix: in group edit rules, write scripts permission and write styles permission can be configured. ( #2829 )
...
At present, the user that are not in the administrator group have no access to edit scripts and styles in page editor panel. This commit add configuration in group rule manage webpage so that users' permission on writing styles and writing scripts can be modified.
5 years ago
Guillaume Hanotel
e3fd967ad7
feat: ability to open search result in new tab with middle-click ( #2919 )
5 years ago
Marwane Kalam-Alami
b5af931f88
fix: support tags containing special characters ( #2743 ) ( #2748 )
6 years ago
Edoardo Morassutto
a37a73dede
fix: inline math interpreted as attributes ( #2645 )
...
When using inline math ($e^{-x^2}$) the curly braces are interpreted as
attributes by markdown-it-attrs. Since most of the times they are not
valid attributes they simply get removed.
This patch escapes the curly braces (the default attribute delimiter),
fixing the KaTeX rendering errors.
It would be nice to simply skip that rule for `katex_inline` block types
but as far as I know markdown-it-attrs doesn't have such an option.
Fixes #1581
6 years ago
Nicolas Giard
a57d9af34c
Merge pull request from GHSA-pgjv-84m7-62q7
6 years ago
Kaito Minatoya
0a1f0ac9e3
fix: incorrect cancel button i18n key ( #2543 )
6 years ago