829 Commits
Author SHA1 Message Date
NGPixel 34cd445a46 fix: users + groups permissions assign logic + text hints 2026-04-27 04:15:54 -04:00
Kolega.devandkolega.dev d14b0a5509 fix: authenticate GraphQL subscription WebSocket connections (#7922)
The onConnect handler for GraphQL subscriptions was empty, allowing any
client to establish a WebSocket connection and subscribe to loggingLiveTrail
without authentication. Added JWT verification in onConnect using the same
RS256 credentials and permission checks (manage:system) used elsewhere.

Co-authored-by: kolega.dev <faizan@kolega.ai>
2026-02-11 21:40:25 -05:00
Kolega.devandkolega.dev 7ae6635d16 fix: validate loginRedirect cookie to prevent open redirect (#7923)
The loginRedirect cookie value was used directly in res.redirect() and
window.location.replace() without validation, allowing redirection to
arbitrary external URLs. Added validation to ensure the redirect target
is a relative path before use.

Co-authored-by: kolega.dev <faizan@kolega.ai>
2026-02-11 21:27:36 -05:00
Felix Eckhofer 3dcf20ab6f fix: diagram svg styling add !important qualifier for light scheme (#7905)
This is required, because the <svg> element has an inline style with
`color-scheme: light dark`, which has higher specificity than our css
rule.
2026-01-22 12:27:29 -05:00
Felix EckhoferandNicolas Giard 3ba58f754d fix: apply theme style to embedded diagram svg (#7903)
* fix: Apply theme style to embedded diagram (#7903)

When diagrams are created with "adaptive colors" they automatically
change to light-/darkmode depending on the browser preference. This
leads to rendering problems when the settings in the browser differ
from the wiki.js theme setting.

Fixes #7677

* fix: Update color scheme for SVG in diagram class

Refactor SVG color scheme handling in diagram class.

* fix: remove duplicate svg first-child class

Removed unnecessary direction property from first SVG in diagram.

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2026-01-20 16:40:00 -05:00
NGPixel 85c304f583 fix: add cookie secure flag when site is using https (client-side) 2026-01-08 04:49:09 -05:00
NGPixel 857c1720b1 fix: css editor in page properties dialog not loading 2026-01-08 03:04:21 -05:00
NGPixel 19c26e58c9 fix: handle breadcrumb locale prefix correctly 2026-01-08 03:00:47 -05:00
Felix Eckhofer b950e065e9 fix: stop dompurify from breaking draw.io diagrams (#7888)
Newer versions of dompurify strip <foreignobject> tags if not explicitly
allowed. See https://github.com/cure53/DOMPurify/issues/1040

Fixes #7744
2026-01-06 16:56:35 -05:00
Nicolas Giard 29c8671ab2 fix: breadcrumb path generation 2026-01-06 00:38:16 -05:00
NGPixel f68d1f60ca fix: hide unfinished features 2026-01-03 02:30:55 -05:00
StofnerP 077ac97b2d fix: add locale to home icon breadcrumb nav (#7825) 2025-12-31 21:09:21 -05:00
Wingqvist 326974cdd5 fix(profile): Prevent autofill on header search bar (#7688)
This commit resolves the recurring issue where password managers
incorrectly autofill the header search bar when viewing the user
profile page.

This is achieved by wrapping the password change fields in a <form>
element, properly scoping them for browser autofill logic, and using
modern, standard `autocomplete` attributes. This addresses the root
cause of the issue, whereas previous attempts tried to mitigate the
symptom in the search bar.

Fixes #2324
Closes #3327
2025-12-31 21:00:06 -05:00
Nicolas Giard 1b6c67ee77 fix: force wrap for code blocks in print view 2025-08-13 03:03:39 -04:00
Karol Rudnikowski (dxdroni) f54551ee69 fix: page pagination in tags component (#7061) 2024-04-24 20:50:53 -04:00
Nicolas Giard b1e1759f25 fix: set securityTrustProxy to false by default 2024-01-28 20:03:06 -05:00
Jasmine Tai 99e74e8eb2 feat: upgrade markdown-it-emoji to 3.0.0 (#6945) 2024-01-22 20:20:01 -05:00
Nicolas Giard 3bf1d9cf28 fix: disable template compilation in source view 2023-06-03 23:15:22 -04:00
José Roberto SánchezandNicolas Giard 4de461fe70 fix: make list paragraphs use 100% width (#6273)
* Adds width 100% for ol paragraph

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2023-03-17 20:12:54 -04:00
NGPixel b5b1913396 feat: footer override markdown inline parsing 2023-03-17 17:13:32 -04:00
NGPixel e954b50a7a feat: footer text override option 2023-02-16 20:45:55 -05:00
Nyxtorm f972a9c7de fix: code block styling in blockquotes (#6108) 2023-02-16 19:10:19 -05:00
Leangseu Kimandk k 26dcc007e7 fix: sort visualize tree (#6110)
Co-authored-by: k k <kleangseu@yahoo.com>
2023-02-07 22:02:12 -05:00
BorisandNGPixel 54dbf9ad00 feat: add asciidoc editor module (#5954)
* feat: add asciidoc editor module

* fix storage file extension for asciidoc pages

* fix: asciidoc editor + rendering improvements

* fix: description list css improvements

Co-authored-by: NGPixel <github@ngpixel.com>
2022-12-23 20:19:16 -05:00
NGPixel d6d88ed976 fix: edit buttons header alignment when toc sidebar is on the right 2022-12-10 19:38:26 -05:00
NGPixel c91ff2da7e feat: add page-ready client boot event 2022-12-10 18:12:04 -05:00
NGPixel eb99f828b1 fix: edit buttons hidden when toc sidebar is on the right 2022-12-10 18:05:53 -05:00
NGPixel f3133a72ec feat: toc sidebar position 2022-12-10 17:03:40 -05:00
NGPixel ca2f7aaf73 chore: add css classes on page sidebar cards 2022-11-18 19:27:35 -05:00
cannorinandcannorin db2ad81a1f feat: katex persistent macro support (#5838)
Co-authored-by: cannorin <cannorin@users.noreply.github.com>
2022-11-13 01:43:48 -05:00
NGPixel 9fbc25adb8 feat: improve table rendering + add markdown-it-decorate module 2022-11-08 22:40:43 -05:00
九零 1bb9be0e62 fix: admin contribute link address. (#5791) 2022-10-27 10:41:20 -04:00
Evandro Arruda 274ecf4b20 fix: America/Sao_Paulo timezone offset (#5690) 2022-09-30 16:52:25 -04:00
NGPixel 8715cd69b2 feat: edit shortcuts 2022-09-20 16:55:05 -04:00
Nicolas Giard fa35f3a254 fix: footer text overflow on smaller desktop screens 2022-09-18 20:24:22 -04:00
Sandhya Veludandi 4e5da41d35 fix: page cursor and pagination (#5541)
* fix: search results not displaying on first page
* fix: page cursor position stays the same between page selection
2022-08-14 19:07:09 -04:00
Nicolas Giard e78953d018 fix(admin): update admin groups page rules write:pages label to match actual permissions 2022-07-19 18:20:03 -04:00
NGPixel 48077fc9e5 feat(admin): make page extensions configurable 2022-06-24 22:20:36 -04:00
Nicolas Giard 18f9165945 fix(graphql): add missing admin mail name variable to save mutation 2022-06-11 17:55:16 -04:00
Nicolas Giard 1e577735c4 fix(mail): typo in admin mail save mutation 2022-06-11 17:40:48 -04:00
David Wheatley 97a744556b feat(mail): allow setting of mailer identifying name (#5363) 2022-06-10 23:15:00 -04:00
myml 89cbb19912 fix: site tree not working because of incorrect variable name (#5304) 2022-05-18 15:40:37 -04:00
Nicolas Giard cd33ff0afb feat(admin): export tool for full migration / backup (#5294)
* feat: export content utility (wip)

* feat: export navigation + groups + users

* feat: export comments + navigation + pages + pages history + settings

* feat: export assets
2022-05-16 01:13:42 -04:00
myml 8be88cb273 fix(search): search result display as empty after clearing field (#5283) 2022-05-14 21:21:23 -04:00
myml 5590507ef3 fix(nav): add locale to current directory link (#5286) 2022-05-14 21:18:46 -04:00
Oleksandr KoltsovandAlex Koltsov 24dbc097cb fix: change spelling of Kiev to Kyiv (#5285)
Co-authored-by: Alex Koltsov <alex@slinex.com>
2022-05-13 16:18:03 -04:00
NGPixel 63ecb32494 fix: missing aria attributes + controls on tabset component 2022-04-03 16:55:11 -04:00
Tomas McNamerandNicolas Giard fc6e4ab9c4 feat: add link to admin area on welcome page (#4035)
* feat: Add link to admin area on welcome page

See: #1259

* fix: remove trailing slash from welcome admin button

* fix: welcome page admin button link

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2022-02-12 18:14:27 -05:00
NGPixel afafb4f4e0 fix: md task list - use same config as client 2022-02-12 17:28:34 -05:00
NGPixel a04f7bd650 fix: force uploads to use auth headers instead of cookie 2022-01-22 19:52:59 -05:00