Dalibor Marković
681a9f6355
fix: correct Objection 3 migration issues and fetch port errors
...
- Remove lingering JSON.stringify calls on 4 auto-serialized JSON columns
(group create/import, page create/update) — Objection 3 handles this automatically
- Add response.ok checks and AbortSignal.timeout to all 4 fetch call sites
(contribute, performUpgrade, azure autocomplete, html-image-prefetch)
- html-image-prefetch renderer now skips images without content-type header
instead of encoding HTML error body as base64 PNG
5 days ago
Dalibor Marković
6ca41db157
fix: knex 3.x + objection 3.x compatibility
...
- Replace jsonAttributes() with jsonSchema properties (12 models)
- Fix connect-session-knex v5 API (master.js)
- Fix ajv strict type errors (users.js, settings.js)
- Remove JSON.stringify for JSON columns (objection 3 auto-serializes)
- Add allowUnionTypes for settings value column
6 days ago
Dalibor Marković
4b0456f545
upgrade: dependency updates across phases 1-3
...
Phase 1 - Security:
- lodash 4.17.21 -> 4.18.1 (CVE fix)
- dompurify 3.3.1 -> 3.4.10 (XSS fixes)
- passport 0.4.1 -> 0.7.0 (security fixes)
- remove deprecated request/request-promise, use native fetch instead
- update semver, simple-git, winston, nodemailer
Phase 2 - Light upgrades:
- sass 1.27.0 -> 1.101.0
- chokidar 3.5.3 -> 4.0.3
- mysql2 3.16.0 -> 3.22.5
- pg 8.16.3 -> 8.21.0
- cors, cross-env updates
Phase 3 - Medium risk:
- js-yaml 3.14.0 -> 4.2.0 (safeLoad -> load across 11 files)
- markdown-it 11.0.1 -> 14.2.0 (+7 plugin updates)
- luxon 1.25.0 -> 3.7.2
- fs-extra 9.0.1 -> 11.3.5
- cheerio 1.0.0-rc.5 -> 1.2.0
- highlight.js 10.3.1 -> 11.11.1
18 files changed, 67 insertions, 79 deletions
6 days ago
NGPixel
34cd445a46
fix: users + groups permissions assign logic + text hints
2 months ago
NGPixel
188d36e6bb
fix: prevent user assignment to elevated groups
2 months ago
NGPixel
4eb9dabb63
refactor: update docker images to Node 24 and fix promisify calls
6 months ago
NGPixel
e954b50a7a
feat: footer text override option
3 years ago
Leangseu Kim
0d914b061e
feat: add singleByPath GraphQL resolver ( #6011 )
...
Co-authored-by: k k <kleangseu@yahoo.com>
3 years ago
NGPixel
f3133a72ec
feat: toc sidebar position
4 years ago
NGPixel
d10f2a1966
feat: send UPGRADE_COMPANION_REF in automated upgrade call
4 years ago
natsutteatsuiyone
2cb304100c
fix: Page Rules based on Tag Matches do not work for comment permissions ( #5819 )
4 years ago
Rodrigo Ribeiro Gomes
db0255cb7c
fix: add missing scriptJs and scriptCss to single page resolver ( #5689 )
4 years ago
NGPixel
8715cd69b2
feat: edit shortcuts
4 years ago
NGPixel
48077fc9e5
feat(admin): make page extensions configurable
4 years ago
Nicolas Giard
046e4b98cb
fix(graphql): remove required flag on MailConfig schema
4 years ago
David Wheatley
97a744556b
feat(mail): allow setting of mailer identifying name ( #5363 )
4 years ago
Nicolas Giard
cd33ff0afb
feat(admin): export tool for full migration / backup ( #5294 )
...
* feat: export content utility (wip)
* feat: export navigation + groups + users
* feat: export comments + navigation + pages + pages history + settings
* feat: export assets
4 years ago
NGPixel
78d02dc8e5
fix: prevent manage system assignment from manage groups permission
4 years ago
rajatchauhanyti
44b3fd1794
fix: admin - general settings not saving with empty value ( #5165 )
4 years ago
NGPixel
79bdd44093
fix: force download of unsafe extensions
5 years ago
NGPixel
5d3e81496f
fix: sanitize SVG uploads
5 years ago
NGPixel
26f1c0f372
feat: convert page
5 years ago
Paul
806e4e8f11
fix: get syncInterval from model instead of module data ( #3003 )
5 years ago
Jafar Akhondali
5ba36ee421
refactor: server code ( #2545 )
...
+ Remove duplicated await
+ Replace some legacy codes with ES6
+ Fix some of eslint problems
6 years ago
Riccardo Re
660b78d9e2
fix: support permissions by tags for basic db search engine ( #2416 )
...
This code will allow the "search" component to correctly filter pages by usergroup permissions based on tags instead of paths
Co-authored-by: Riccardo Re <riccardo.re@clevermind.cloud>
6 years ago
NGPixel
7c0d6e2883
fix: prevent write:groups from self-promoting
6 years ago
NGPixel
ef739de970
feat: purge history utility
6 years ago
NGPixel
8490fc1267
feat: handle disabled auth strategies
6 years ago
NGPixel
ae733392f3
feat: password reset
6 years ago
NGPixel
e319355017
feat: enable/disable TFA per user
6 years ago
NGPixel
32d67adee1
feat: social login providers with dynamic instances
6 years ago
NGPixel
f72530bf84
refactor: deps update + 2FA setup + verify
6 years ago
Marks Polakovs
95b6a7ad82
fix: resolve tags on pages in GraphQL ( #2247 )
6 years ago
NGPixel
26af63a80b
fix: login input hints
6 years ago
NGPixel
4f16dd0c81
fix: admin permissions + restrict nav settings
6 years ago
NGPixel
10f17c5712
feat: redirect on login based on group
6 years ago
NGPixel
be499e5795
fix: auth strategy dependent username label
6 years ago
NGPixel
1ced9649c7
feat: enforce 2fa admin setting + hide local on login screen
6 years ago
NGPixel
b475795595
feat: login bg + bypass + hide local option
6 years ago
Nicolas Giard
c009cc1392
feat: new login experience ( #2139 )
...
* feat: multiple auth instances
* fix: auth setup + strategy initialization
* feat: admin auth - add strategy
* feat: redirect on login - group setting
* feat: oauth2 generic - props definitions
* feat: new login UI (wip)
* feat: new login UI (wip)
* feat: admin security login settings
* feat: tabset editor indicators + print view improvements
* fix: code styling
6 years ago
Regev Brody
1c4829f70f
fix: tags filtered by access ( #2100 )
6 years ago
NGPixel
a690e5597f
fix: revocation token list for users + groups
6 years ago
Regev Brody
33a9d5774c
fix: GraphQL error with MySQL and FULL OUTER JOIN ( #2104 )
...
* fix: GraphQL error with MySQL and FULL OUTER JOIN #2071
6 years ago
NGPixel
53ddb50b51
feat: save page scripts + styles
6 years ago
Regev Brody
a508a27475
fix: validate permissions when listing assets ( #1928 )
...
* fix: assets permission issues #1926
6 years ago
NGPixel
c2a0773633
fix: site config host slice
6 years ago
NGPixel
7a946ec0f5
feat: edit comment
6 years ago
NGPixel
e74605501f
feat: comments post min delay
6 years ago
NGPixel
8a74904731
feat: comments delete + refresh on post + formatting
6 years ago
NGPixel
1f9e5b3fd0
feat: delete user with replace target
6 years ago