2166 Commits (ee97e248bcce96b4b40d86f89a6a3cea075c9855)

 

All Branches   

Search

Author	SHA1	Message	Date
Greg Darke	ee97e248bc	fix: Make git sync untracked work with sqlite. ... The previous implementation of the sync untracked feature would attempt to run multiple queries in parallel. The `knex` framework appears to use a separate connection for each query by default (unless the queries are tied together by a transaction). When using sqlite, there is only a single connection available in the knex database pool, causing this feature to deadlock (when the initial query can not return all results immediatly). In this change, we switch to doing all of these queries in a transaction, which causes all quries to occur on a single connection.	7 months ago
dhulripos	b49c00226c	fix: Add missing status code on unauthorized access (#7785) ... * fix status code on unauthorized * Remove unnecessary line breaks	8 months ago
Lyz	9f481221ab	ci(helm): add custom environment variables to the deployment (#7784) ... Co-authored-by: jmp <jmp@icij.org>	9 months ago
Craig Reyenga	cd77f36120	fix: requests without user-agent causing error 500 (#7749)	9 months ago
Nicolas Giard	1b6c67ee77	fix: force wrap for code blocks in print view	10 months ago
Ole Christian Tvedt	c093423307	feat: set groups based on Azure groups (#7736) ... Co-authored-by: Ole Christian Tvedt <ole.christian.tvedt@defa.com>	10 months ago
Nicolas Giard	86abfea7f6	fix: update dompurify dependency + add cross-env	10 months ago
Nicolas Giard	07855ab329	docs: Update README.md	10 months ago
Nicolas Giard	d96bbaf42c	docs: Update SECURITY.md	12 months ago
Nadia Santalla	41d3ba4312	chore(helm): render external database URL if it is set (#7036)	1 year ago
Nicolas Giard	9bf9c8af47	ci: Update build.yml	1 year ago
Nicolas Giard	7053819f35	docs: Update README.md	1 year ago
Nicolas Giard	a393f5f9bc	docs: Update README.md	1 year ago
Nicolas Giard	78c41e36e1	fix: use xml-crypto 2.1.6 for passport-saml	1 year ago
Nicolas Giard	85243e5284	docs: Update SECURITY.md	1 year ago
Nicolas Giard	403e98dced	feat: add git always namespace option	1 year ago
Vasily Fedoseyev	abc8dce9cc	fix: Allow HA_ACTIVE: True to enable HA mode (#7493) ... --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	1 year ago
maarous	94d253bf59	chore(helm): add support for securityContext and resources in sideload container (#7350) ... --------- Co-authored-by: Mohamed Amine Arous <“maarous-prestataire@ina.fr”> Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Nicolas Giard	c7c20579fd	docs: Update README.md	2 years ago
Nicolas Giard	583ea44a72	docs: Update README	2 years ago
Nicolas Giard	ab5c620d50	chore: update yarn lock	2 years ago
Jacob Beneski	7757de3af7	feat: add elasticsearch 8.x support (#6904)	2 years ago
Nicolas Giard	ad37325773	docs: Update README.md	2 years ago
Nicolas Giard	55a63a3c5a	ci: fix docker manifest typo	2 years ago
Nicolas Giard	34de47cc10	ci: remove armv7 build target	2 years ago
Nicolas Giard	18ebf83f88	ci: update base docker image	2 years ago
Nicolas Giard	ef5ab0ecb8	ci: disable mssql test	2 years ago
Nicolas Giard	b9fb17d4d4	fix: prevent password reset on disabled account	2 years ago
Dominik	d1b4c8c407	chore(helm): add pod annotations (#7222)	2 years ago
Nicolas Giard	2e35ebf1dc	docs: Update README.md	2 years ago
Nicolas Giard	904260fd44	fix: set no-store cache control on jwt renew response	2 years ago
Ethan	1238d614e1	Merge pull request from GHSA-xjcj-p2qv-q3rf ... * Update render.js # Improved handling of mustache expressions and v-pre attribute assignment ## Changes Made: - Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute. - Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION]. ## Why it Works: - When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag. - This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required. ## Test Cases Passed: 1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>` 4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>` 5. `<p>&lt;xyz&gt;{{constructor.constructor('alert("Test Case 8")')()}}&lt;xyz&gt;{{constructor.constructor('alert("Test Case 9")')()}}&lt;/xyz&gt;</p>` This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process. * fix: move template expressions after dom-purify + handle text nodes without parent --------- Co-authored-by: NGPixel <github@ngpixel.com>	2 years ago
Nicolas Giard	98c04fe18e	docs: Update README.md	2 years ago
Nicolas Giard	854ec230dd	ci: Update build.yml	2 years ago
Nicolas Giard	a28b525894	docs: Update SECURITY.md	2 years ago
CDN	f1161aed59	fix: make comment module "Artalk" work with newer versions (#6901) ... * feat: update comment module "Artalk" * fix: update code.yml --------- Co-authored-by: Nicolas Giard <github@ngpixel.com>	2 years ago
Sukka	3a7ce75a1e	refactor(templates): replace `polyfill.io` (#7032)	2 years ago
Karol Rudnikowski (dxdroni)	f54551ee69	fix: page pagination in tags component (#7061)	2 years ago
Nicolas Giard	abdd2f0d17	fix: remove upper range node.js version check	2 years ago
Nicolas Giard	66ca18c499	docs: Update README.md	2 years ago
craph	d5af4cb068	chore: fix python issue for node18 in dev Dockerfile (#7029) ... * Fix: email toLowerCase * Fix python issue for node18 in Dockerfile	2 years ago
Nicolas Giard	ece5753ebb	docs: Update README.md	2 years ago
Nicolas Giard	b1e1759f25	fix: set securityTrustProxy to false by default	2 years ago
Jasmine Tai	99e74e8eb2	feat: upgrade markdown-it-emoji to 3.0.0 (#6945)	2 years ago
Nicolas Giard	34c037c68b	docs: Update README.md	2 years ago
aelgasser	38a46e68ea	feat: sync groups with SAML provider (#6299) ... * feat: added implementation for group mapping in SAML strategies --------- Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com> Co-authored-by: Nicolas Giard <github@ngpixel.com>	3 years ago
Nicolas Giard	fd91caff1d	docs: Update README.md	3 years ago
Nicolas Giard	16245caeff	docs: Update README.md	3 years ago
Pablo	8932d15c0c	fix: typo in kroki name (#6745)	3 years ago
Nicolas Giard	b19c4e4f23	docs: Update README.md	3 years ago