2175 Commits (ce27d5d2e130e7693272dd78d566cd18247e93e9)

 

All Branches   

Search

Author	SHA1	Message	Date
Gary Stringham	ce27d5d2e1	Delete .github/issuecomplete.yml	1 month ago
Gary Stringham	ba5c4a7e63	Delete .github/auto_assign.yml	1 month ago
Gary Stringham	d5512e8362	Delete .github/PULL_REQUEST_TEMPLATE.md	1 month ago
Gary Stringham	0b9616345d	Delete .github/FUNDING.yml	1 month ago
Gary Stringham	d0fad2cfce	Delete .github/workflows/helm.yml	1 month ago
Gary Stringham	e2f70265a1	Delete .github/ISSUE_TEMPLATE/config.yml	1 month ago
Gary Stringham	7a41be7c1e	Delete .github/CONTRIBUTING.md	1 month ago
Gary Stringham	5ad0885c1c	Delete .github/workflows/packer.yml	1 month ago
Benoît des Ligneris	54d21ae538	fix: add tor1 region to DigitalOcean spaces list (#7832)	1 month ago
Nicolas Giard	dd48f28827	docs: update README	2 months ago
dhulripos	b49c00226c	fix: Add missing status code on unauthorized access (#7785) ... * fix status code on unauthorized * Remove unnecessary line breaks	2 months ago
Lyz	9f481221ab	ci(helm): add custom environment variables to the deployment (#7784) ... Co-authored-by: jmp <jmp@icij.org>	3 months ago
Craig Reyenga	cd77f36120	fix: requests without user-agent causing error 500 (#7749)	4 months ago
Nicolas Giard	1b6c67ee77	fix: force wrap for code blocks in print view	4 months ago
Ole Christian Tvedt	c093423307	feat: set groups based on Azure groups (#7736) ... Co-authored-by: Ole Christian Tvedt <ole.christian.tvedt@defa.com>	4 months ago
Nicolas Giard	86abfea7f6	fix: update dompurify dependency + add cross-env	4 months ago
Nicolas Giard	07855ab329	docs: Update README.md	4 months ago
Nicolas Giard	d96bbaf42c	docs: Update SECURITY.md	6 months ago
Nadia Santalla	41d3ba4312	chore(helm): render external database URL if it is set (#7036)	8 months ago
Nicolas Giard	9bf9c8af47	ci: Update build.yml	8 months ago
Nicolas Giard	7053819f35	docs: Update README.md	8 months ago
Nicolas Giard	a393f5f9bc	docs: Update README.md	8 months ago
Nicolas Giard	78c41e36e1	fix: use xml-crypto 2.1.6 for passport-saml	9 months ago
Nicolas Giard	85243e5284	docs: Update SECURITY.md	10 months ago
Nicolas Giard	403e98dced	feat: add git always namespace option	10 months ago
Vasily Fedoseyev	abc8dce9cc	fix: Allow HA_ACTIVE: True to enable HA mode (#7493) ... --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	11 months ago
maarous	94d253bf59	chore(helm): add support for securityContext and resources in sideload container (#7350) ... --------- Co-authored-by: Mohamed Amine Arous <“maarous-prestataire@ina.fr”> Co-authored-by: Nicolas Giard <github@ngpixel.com>	1 year ago
Nicolas Giard	c7c20579fd	docs: Update README.md	1 year ago
Nicolas Giard	583ea44a72	docs: Update README	1 year ago
Nicolas Giard	ab5c620d50	chore: update yarn lock	1 year ago
Jacob Beneski	7757de3af7	feat: add elasticsearch 8.x support (#6904)	1 year ago
Nicolas Giard	ad37325773	docs: Update README.md	1 year ago
Nicolas Giard	55a63a3c5a	ci: fix docker manifest typo	1 year ago
Nicolas Giard	34de47cc10	ci: remove armv7 build target	1 year ago
Nicolas Giard	18ebf83f88	ci: update base docker image	1 year ago
Nicolas Giard	ef5ab0ecb8	ci: disable mssql test	1 year ago
Nicolas Giard	b9fb17d4d4	fix: prevent password reset on disabled account	1 year ago
Dominik	d1b4c8c407	chore(helm): add pod annotations (#7222)	1 year ago
Nicolas Giard	2e35ebf1dc	docs: Update README.md	1 year ago
Nicolas Giard	904260fd44	fix: set no-store cache control on jwt renew response	2 years ago
Ethan	1238d614e1	Merge pull request from GHSA-xjcj-p2qv-q3rf ... * Update render.js # Improved handling of mustache expressions and v-pre attribute assignment ## Changes Made: - Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute. - Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION]. ## Why it Works: - When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag. - This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required. ## Test Cases Passed: 1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>` 4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>` 5. `<p>&lt;xyz&gt;{{constructor.constructor('alert("Test Case 8")')()}}&lt;xyz&gt;{{constructor.constructor('alert("Test Case 9")')()}}&lt;/xyz&gt;</p>` This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process. * fix: move template expressions after dom-purify + handle text nodes without parent --------- Co-authored-by: NGPixel <github@ngpixel.com>	2 years ago
Nicolas Giard	98c04fe18e	docs: Update README.md	2 years ago
Nicolas Giard	854ec230dd	ci: Update build.yml	2 years ago
Nicolas Giard	a28b525894	docs: Update SECURITY.md	2 years ago
CDN	f1161aed59	fix: make comment module "Artalk" work with newer versions (#6901) ... * feat: update comment module "Artalk" * fix: update code.yml --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Sukka	3a7ce75a1e	refactor(templates): replace `polyfill.io` (#7032)	2 years ago
Karol Rudnikowski (dxdroni)	f54551ee69	fix: page pagination in tags component (#7061)	2 years ago
Nicolas Giard	abdd2f0d17	fix: remove upper range node.js version check	2 years ago
Nicolas Giard	66ca18c499	docs: Update README.md	2 years ago
craph	d5af4cb068	chore: fix python issue for node18 in dev Dockerfile (#7029) ... * Fix: email toLowerCase * Fix python issue for node18 in Dockerfile	2 years ago