Richard Hansen
db0bcb524e
SecurityManager: Use constants for returned rejections
...
This reduces the chances of a typo-induced bug.
2020-09-08 14:53:28 +01:00
Richard Hansen
da459888dc
plugins: Move plugin definitions to avoid monkey patching
...
Also document the plugin data structures.
2020-09-08 00:50:24 +01:00
Richard Hansen
c3b2e68dad
Revert "Delete redundant token2author DB save"
...
Something's weird here; this change shouldn't have any effect. I'll
have to squint at the code some more.
This reverts commit 2bf076043f
.
Fixes #4262
2020-09-08 00:46:01 +01:00
webzwo0i
49a6b1dac2
GroupManager: typo during session deletion
2020-09-08 00:45:39 +01:00
Richard Hansen
68be78ace0
SecurityManager: Simplify checkAccess
2020-09-07 08:34:15 +01:00
Richard Hansen
17096919e0
PadMessageHandler: Delete redundant check
...
This check is already made very early in `handleMessage`.
2020-09-05 22:49:07 +01:00
Richard Hansen
d4162341e7
webaccess: Always sleep for 1s before returning HTTP 401
...
Not all authentication plugins require the Authorization header, so it
might not be present in subsequent attempts. (In particular, a reverse
proxy might strip it.)
2020-09-05 22:45:46 +01:00
Richard Hansen
2bf076043f
Delete redundant token2author DB save
...
See:
https://github.com/ether/etherpad-lite/pull/4012#issuecomment-686005563
https://github.com/ether/etherpad-lite/issues/4006
2020-09-05 12:40:16 +01:00
Richard Hansen
e0d6d17bf0
webaccess: Restructure for readability and future changes
...
* Improve the comment describing how the access check works.
* Move the `authenticate` logic to where it is used so that people
don't have to keep jumping back and forth to understand how the
access check works.
* Break up the three steps to reduce the number of indentation
levels and improve readability. This should also make it easier to
implement and review planned future changes.
2020-09-05 12:37:23 +01:00
Richard Hansen
b044351f0a
webaccess: Rename basicAuth
to checkAccess
...
Thanks to hooks, the function can do much more than just basic
authentication.
2020-09-05 12:37:23 +01:00
Richard Hansen
2830aaebf1
webaccess: Use ===
instead of ==
for comparison
2020-09-05 12:37:23 +01:00
Richard Hansen
f0e5bff84f
webaccess: Simplify object construction
2020-09-05 12:37:23 +01:00
Richard Hansen
0a8569d0ad
webaccess: Use const
or let
instead of var
2020-09-05 12:37:23 +01:00
Richard Hansen
a7be5278a3
webaccess: Use arrow functions instead of function
keyword
2020-09-05 12:37:23 +01:00
Richard Hansen
726101d6a8
webaccess: Use single quotes everywhere
2020-09-05 12:37:23 +01:00
Richard Hansen
9011207a37
webaccess: Add semicolons after statements
2020-09-05 12:37:23 +01:00
Richard Hansen
e82a3055e6
webaccess: Whitespace fixes
2020-09-05 12:37:23 +01:00
Richard Hansen
f0b7dc7c53
pluginfw: PadMessageHandler: Pass socket.io Socket object to clientVars hook ( #4245 )
...
Also revise the clientVars hook documentation.
2020-09-05 10:51:39 +01:00
John McLear
12c05c20b2
bugfix/import: doc import bugfix ( #4235 )
2020-08-30 14:11:12 +01:00
webzwo0i
d25cd891ae
remove json2, all supported browsers have JSON now ( #4198 )
...
cf. https://developer.mozilla.org/de/docs/Web/JavaScript/Reference/Global_Objects/JSON
2020-07-28 00:52:25 +01:00
John McLear
40014d8230
Rate limit Socket IO communication - WIP ( #4036 )
...
Includes settings
Includes i18n
Includes a nice notification
Disconnects on rate limit
Includes feeding into metrics/stats
Include console warn to server console.
2020-07-19 22:44:24 +01:00
John McLear
4f5cf2dc63
tests and bugfix: test coverage and fix for 4165 - bad HTML export of list items ( #4180 )
...
Also fix for test max value for ratelimiter
2020-07-19 16:31:13 +01:00
webzwo0i
b3680058ff
getChangesetInfo: print error message ( #4172 )
2020-07-16 23:54:15 +01:00
John McLear
78c97d811c
Script to create session and store token <> author more throughly (dont create ghosts) ( #4012 )
2020-07-16 10:51:02 +01:00
John McLear
e24ef6969e
Bugfix / tests: Specs list type ( #4169 )
...
* remove cruft.. ugh
* housekeeping: close stale issues
* fix issue #3945
2020-07-15 17:37:03 +01:00
John McLear
ab8320d15b
WIP - Test Coverage: Import & Export include LibreOffice Test Coverage ( #4163 )
...
Runs on Travis
Will only run locally is ``allowAnyoneToImport`` and ``soffice`` or ``abiword`` is set.
2020-07-14 18:44:53 +01:00
John McLear
b15154cc23
Same site cookie fix - Ready for testing / merge ( #3990 )
...
* initial fix for httpprefs
* token
* express_sid fix
2020-07-10 08:43:20 +01:00
b_b
3ea8d571e7
Fix PDF import with libreoffice ( #4156 )
...
Fix #4151
2020-07-09 23:50:45 +01:00
b_b
358af5fea1
Fix typo in comment ( #4154 )
2020-07-09 12:32:54 +01:00
John McLear
a3386e3e55
Dont use jquery in import handler ( #4153 )
...
I think jQ3 update broke imports a bit, so this removes jQuery and also ensures only .etherpad does reload of page.
2020-07-08 14:50:48 +01:00
John McLear
8a13bde535
bugfix: #4067 openapi incorrect syntax ( #4138 )
...
https://github.com/ether/etherpad-lite/issues/4067#issuecomment-650423412
Thanks to @tom-chase
2020-06-27 09:47:16 +01:00
John McLear
beccf677a4
bugfix: Fix #4120 where an author might not be populated on restart - if this is the case don't push the author to the array.
2020-06-17 10:54:10 +01:00
John McLear
93829b9e33
pluginfw/performance: Dont cache if max age is 0 ( #4098 )
2020-06-08 17:21:55 +01:00
John McLear
f1e3aff72f
stale code: use terser instead of uglify
2020-06-07 20:09:10 +00:00
John McLear
512a51149d
Revert "Merge branch 'develop' of github.com:ether/etherpad-lite into develop"
...
This reverts commit 6fad0210f8
, reversing
changes made to 128f3e15eb
.
2020-06-07 18:46:41 +00:00
John McLear
564e8fee07
forcing back to last known stable before parent merge
2020-06-07 18:44:01 +00:00
John McLear
009e1d01f7
staleCode: Async update
2020-06-07 14:56:45 +01:00
John McLear
ea9a9cd883
Revert "Revert "stale: Terser instead of uglify ( #4075 )""
...
This reverts commit 423be7f081
.
2020-06-07 10:08:11 +00:00
John McLear
aff93d24dd
export: txt import include correct OL prefix ( #4086 )
...
Includes test coverage
Final part of solving https://github.com/ether/etherpad-lite/issues/3447
2020-06-06 14:30:13 +01:00
John McLear
423be7f081
Revert "stale: Terser instead of uglify ( #4075 )"
...
This reverts commit 552b6d7adb
.
2020-06-05 23:55:14 +00:00
John McLear
552b6d7adb
stale: Terser instead of uglify ( #4075 )
2020-06-05 23:10:24 +01:00
John McLear
d4fcc23fb3
backups: include the pool every 100 revs stored ( #3991 )
2020-06-05 22:46:12 +01:00
John McLear
a4bdcc3392
tests/editor/ul/li/ol/import/export: Introduce contentcollector.js tests & various OL/UL/LI related bugfixes
...
1. Introduce contentcollector.js backend tests
1. Fix issue with OL LI items not being properly numbered after import
1. Fix issue with nested OL LI items being improperly numbered on export
1. Fix issue with new lines not being introduced after lists in on import #3961
1. Sanitize HTML on the way in (import)
1. Fix ExportHTML CSS because it needs to support OL > LI > OL not OL > OL [The latter being the correct format]
1. Fix backend tests.
2020-06-05 20:54:16 +01:00
Chocobozzz
c854cced65
performance: Use worker threads to minify JS/CSS files ( #3823 )
2020-06-04 14:00:50 +01:00
John McLear
0d51e71578
ux: Better ux for if cookies are disabled or not available.
2020-06-01 20:17:48 +01:00
Richard Hansen
07c73d4f2d
webaccess: Log authentication attempts ( #4022 )
...
Addresses issue #4016 .
2020-06-01 20:11:57 +01:00
John McLear
addb9b957a
import: Resolve error handling import causes instance crash
2020-06-01 20:09:10 +01:00
John McLear
2c944eba34
minification: use mime lookup for mime types ( #3979 )
2020-06-01 19:37:54 +01:00
John McLear
bfca481b0b
import: setting for allowing import without author existing
2020-06-01 18:19:06 +01:00
Stefan
cffd04446e
admin: Add etherpad update check
...
This update check notifies admin on startup (via console) or in /admin UI that they need to update Etherpad.
2020-06-01 17:57:53 +01:00