msb-public/wiki - wiki - 马士兵教育代码仓库

Commit Graph

Author	SHA1	Message	Date
DavidLost	60f5424af7	Added field for id claim and some more minor improvements	10 months ago
DavidLost	cb35303266	Added original configuration fields back for compatibility with providers not having a well-known endpoint	10 months ago
David	b0877ed15f	Merge branch 'requarks:main' into feature/improved-oidc-authentication	1 year ago
Nicolas Giard	403e98dced	feat: add git always namespace option	1 year ago
DavidLost	277ce79ae9	Improved OIDC authentication: Only the well-known-id is required for configuration and added the option to merge claims from the id token	2 years ago
Jacob Beneski	7757de3af7	feat: add elasticsearch 8.x support (#6904 )	2 years ago
Ethan	1238d614e1	Merge pull request from GHSA-xjcj-p2qv-q3rf * Update render.js # Improved handling of mustache expressions and v-pre attribute assignment ## Changes Made: - Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute. - Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION]. ## Why it Works: - When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag. - This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required. ## Test Cases Passed: 1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>` 4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>` 5. `<p><xyz>{{constructor.constructor('alert("Test Case 8")')()}}<xyz>{{constructor.constructor('alert("Test Case 9")')()}}</xyz></p>` This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process. * fix: move template expressions after dom-purify + handle text nodes without parent --------- Co-authored-by: NGPixel <github@ngpixel.com>	2 years ago
CDN	f1161aed59	fix: make comment module "Artalk" work with newer versions (#6901 ) * feat: update comment module "Artalk" * fix: update code.yml --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Jasmine Tai	99e74e8eb2	feat: upgrade markdown-it-emoji to 3.0.0 (#6945 )	3 years ago
aelgasser	38a46e68ea	feat: sync groups with SAML provider (#6299 ) * feat: added implementation for group mapping in SAML strategies --------- Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com> Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Pablo	8932d15c0c	fix: typo in kroki name (#6745 )	3 years ago
Jason Minard	491d63ceee	fix(auth): keycloak authentication post logout redirect for Keycloak 18+ (#5878 )	3 years ago
Jaeseo Park	d75fc76c0c	feat: add markdown-it-pivot-table rendering module (#6574 ) * feat: markdown-it-pivot-table * chore: upgrade dependency version * style: remove semicolon in renderer.js --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Andrew McFadden	db8a09fe8c	feat: add ACR Value option to OIDC Module (#6553 ) --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
matt1097	f02b7ba94e	fix(git): Reduce git concurrency to avoid lock file conflicts. (#6511 )	3 years ago
CDN	4e5e8309a6	feat: add v2 of analytics module umami (#6442 ) * feat: create analytics module umami2 --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
DerekJarvis	fd00272314	feat(auth): allow custom GitLab endpoints for self-managed instances (#6399 ) * Allow custom GitLab endpoints for self-hosting --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
robinho81	8db4be668b	feat: expose skipUserProfile option in passport-oidc (#6190 ) Co-authored-by: Robin Chalmers <robin.chalmers@kairostech.no>	3 years ago
NGPixel	e495e0aaab	fix: update google analytics field help to refer to the new ID format	3 years ago
NGPixel	e954b50a7a	feat: footer text override option	3 years ago
gueldi	bba1d1b574	fix(oidc): use _json prop when setting displayName (#6135 ) * Fixes setting displayName from OIDC Relates to: https://github.com/requarks/wiki/pull/6096 * Update authentication.js --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
NGPixel	ac930fc23e	fix: change simple-git import	4 years ago
Eric Knibbe	2e8585478f	fix(git): handle file renames between folders (#6020 ) * git storage: handle file renames between folders --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Charlotte County Public Schools	8fa771c4ce	feat: set groups based on LDAP groups (#5903 ) * Add mapping ldap groups to wiki groups --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Aurélien Lajoie	1da80eaab8	feat: oauth2 add groups mapping (#6053 ) Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
gueldi	43a797d322	feat: adds displayName property to OIDC authentication module (#6096 ) * Adds displayName property to oidc authentication method * fix: update displayName prop * fix: use blank display name in oidc auth --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
NGPixel	5f876ced20	feat: optional oauth2 module nonce toggle	4 years ago
Sleuth56	12233c476d	feat: enable state key on generic oauth2 (#6104 )	4 years ago
Eric Knibbe	41454cfd30	fix(git): disable color.ui in git storage (#6014 )	4 years ago
Boris	54dbf9ad00	feat: add asciidoc editor module (#5954 ) * feat: add asciidoc editor module * fix storage file extension for asciidoc pages * fix: asciidoc editor + rendering improvements * fix: description list css improvements Co-authored-by: NGPixel <github@ngpixel.com>	4 years ago
CDN	73af37b81b	fix: git log should explicitly separate branch from paths (#5911 )	4 years ago
CDN	0a2a32db47	feat: add artalk comment module (#5868 ) Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
CDN	86c9407057	feat: add umami analytics module (#5869 ) Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
cannorin	db2ad81a1f	feat: katex persistent macro support (#5838 ) Co-authored-by: cannorin <cannorin@users.noreply.github.com>	4 years ago
NGPixel	9fbc25adb8	feat: improve table rendering + add markdown-it-decorate module	4 years ago
natsutteatsuiyone	445ad05a3d	fix: incompatibility issues with passport-openidconnect@0.1.1 (#5799 ) * fix: incompatibility issues with passport-openidconnect * fix: remove a trailing semicolon	4 years ago
Simon Lichtinghagen	1893fd499a	fix: login with Keycloak 20 by explicit set OAuth scopes (#5808 ) * Fix login with Keycloak 20 by explicit set OAuth scopes * moved scopes to definition.yml Co-authored-by: Simon Lichtinghagen <sl@bnmsp.de>	4 years ago
Andrei Senchuk	e6bbf9d088	fix: oidc module - map() call on undefined; fix unrelate() usage (#5781 )	4 years ago
adroslice	15206efc57	fix: comment edit not updating original content (#5646 )	4 years ago
NGPixel	ebf4da9bea	fix: oidc auth groups relate / unrelate	4 years ago
NGPixel	4b3005057f	fix: prevent user enumeration using local login timings	4 years ago
Fionera	91221e73eb	feat: set groups based on OIDC claim (#5568 ) Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago
Jared Brogan	31bd327487	fix: correct azure blob storage typo (#5591 )	4 years ago
Pam S	8290e86aaf	feat: add logout for auth0 (#5545 ) Co-authored-by: Pam Selle <pam@thewebivore.com>	4 years ago
Hexaflexagon	933293a997	feat: add elasticsearch ssl options (#5499 )	4 years ago
Mirco T	628c72ea16	feat: CAS authentication module (#5452 ) Co-authored-by: SeaLife <mtries@united-internet.de>	4 years ago
Nicolas Giard	b78026e49f	fix(auth): handle null SAML authnContext context	4 years ago
El Gato da Great	e3d94f7177	fix: don't push files to git if ignored (#5334 ) * fix: don't push files to git if ignored * tweak: change gitPath var to gitFilePath * fix: "update" instead of "create" of updated file Co-authored-by: Jacob Parker <blocckba5her@gmail.com> Co-authored-by: DevBlocky <16978528+DevBlocky@users.noreply.github.com>	4 years ago
Nicolas Giard	a37d733523	fix(auth): update SAML authnContext hint text for multiple values	4 years ago
Maximilian Bosch	b345375477	fix(auth): SAML authnContext parameter should be an array (#5290 ) * saml auth: `authnContext` must be a list now This fixes this.options.authnContext.forEach is not a function when trying to login via SAML on wiki-js 2.5.281. Reason for that is that `authnContext` must be a list now which is apparently a breaking change that was missed while upgrading passport-saml[1]. Resolves #5289 [1] https://github.com/node-saml/passport-saml/pull/615 * fix(auth): split authnContext for SAML authenticaiton module Co-authored-by: Nicolas Giard <github@ngpixel.com>	4 years ago

1 2 3 4 5 ...

352 Commits (60f5424af737e9443fdecfee1fa4ff80289dcdd2)