NGPixel
34cd445a46
fix: users + groups permissions assign logic + text hints
2026-04-27 04:15:54 -04:00
Kolega.dev and kolega.dev
d14b0a5509
fix: authenticate GraphQL subscription WebSocket connections ( #7922 )
...
The onConnect handler for GraphQL subscriptions was empty, allowing any
client to establish a WebSocket connection and subscribe to loggingLiveTrail
without authentication. Added JWT verification in onConnect using the same
RS256 credentials and permission checks (manage:system) used elsewhere.
Co-authored-by: kolega.dev <faizan@kolega.ai >
2026-02-11 21:40:25 -05:00
Kolega.dev and kolega.dev
7ae6635d16
fix: validate loginRedirect cookie to prevent open redirect ( #7923 )
...
The loginRedirect cookie value was used directly in res.redirect() and
window.location.replace() without validation, allowing redirection to
arbitrary external URLs. Added validation to ensure the redirect target
is a relative path before use.
Co-authored-by: kolega.dev <faizan@kolega.ai >
2026-02-11 21:27:36 -05:00
Felix Eckhofer
3dcf20ab6f
fix: diagram svg styling add !important qualifier for light scheme ( #7905 )
...
This is required, because the <svg> element has an inline style with
`color-scheme: light dark`, which has higher specificity than our css
rule.
2026-01-22 12:27:29 -05:00
Felix Eckhofer and Nicolas Giard
3ba58f754d
fix: apply theme style to embedded diagram svg ( #7903 )
...
* fix: Apply theme style to embedded diagram (#7903 )
When diagrams are created with "adaptive colors" they automatically
change to light-/darkmode depending on the browser preference. This
leads to rendering problems when the settings in the browser differ
from the wiki.js theme setting.
Fixes #7677
* fix: Update color scheme for SVG in diagram class
Refactor SVG color scheme handling in diagram class.
* fix: remove duplicate svg first-child class
Removed unnecessary direction property from first SVG in diagram.
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com >
2026-01-20 16:40:00 -05:00
NGPixel
85c304f583
fix: add cookie secure flag when site is using https (client-side)
2026-01-08 04:49:09 -05:00
NGPixel
857c1720b1
fix: css editor in page properties dialog not loading
2026-01-08 03:04:21 -05:00
NGPixel
19c26e58c9
fix: handle breadcrumb locale prefix correctly
2026-01-08 03:00:47 -05:00
Felix Eckhofer
b950e065e9
fix: stop dompurify from breaking draw.io diagrams ( #7888 )
...
Newer versions of dompurify strip <foreignobject> tags if not explicitly
allowed. See https://github.com/cure53/DOMPurify/issues/1040
Fixes #7744
2026-01-06 16:56:35 -05:00
Nicolas Giard
29c8671ab2
fix: breadcrumb path generation
2026-01-06 00:38:16 -05:00
NGPixel
f68d1f60ca
fix: hide unfinished features
2026-01-03 02:30:55 -05:00
StofnerP
077ac97b2d
fix: add locale to home icon breadcrumb nav ( #7825 )
2025-12-31 21:09:21 -05:00
Wingqvist
326974cdd5
fix(profile): Prevent autofill on header search bar ( #7688 )
...
This commit resolves the recurring issue where password managers
incorrectly autofill the header search bar when viewing the user
profile page.
This is achieved by wrapping the password change fields in a <form>
element, properly scoping them for browser autofill logic, and using
modern, standard `autocomplete` attributes. This addresses the root
cause of the issue, whereas previous attempts tried to mitigate the
symptom in the search bar.
Fixes #2324
Closes #3327
2025-12-31 21:00:06 -05:00
Nicolas Giard
1b6c67ee77
fix: force wrap for code blocks in print view
2025-08-13 03:03:39 -04:00
Karol Rudnikowski (dxdroni)
f54551ee69
fix: page pagination in tags component ( #7061 )
2024-04-24 20:50:53 -04:00
Nicolas Giard
b1e1759f25
fix: set securityTrustProxy to false by default
2024-01-28 20:03:06 -05:00
Jasmine Tai
99e74e8eb2
feat: upgrade markdown-it-emoji to 3.0.0 ( #6945 )
2024-01-22 20:20:01 -05:00
Nicolas Giard
3bf1d9cf28
fix: disable template compilation in source view
2023-06-03 23:15:22 -04:00
José Roberto Sánchez and Nicolas Giard
4de461fe70
fix: make list paragraphs use 100% width ( #6273 )
...
* Adds width 100% for ol paragraph
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com >
2023-03-17 20:12:54 -04:00
NGPixel
b5b1913396
feat: footer override markdown inline parsing
2023-03-17 17:13:32 -04:00
NGPixel
e954b50a7a
feat: footer text override option
2023-02-16 20:45:55 -05:00
Nyxtorm
f972a9c7de
fix: code block styling in blockquotes ( #6108 )
2023-02-16 19:10:19 -05:00
Leangseu Kim and k k
26dcc007e7
fix: sort visualize tree ( #6110 )
...
Co-authored-by: k k <kleangseu@yahoo.com >
2023-02-07 22:02:12 -05:00
Boris and NGPixel
54dbf9ad00
feat: add asciidoc editor module ( #5954 )
...
* feat: add asciidoc editor module
* fix storage file extension for asciidoc pages
* fix: asciidoc editor + rendering improvements
* fix: description list css improvements
Co-authored-by: NGPixel <github@ngpixel.com >
2022-12-23 20:19:16 -05:00
NGPixel
d6d88ed976
fix: edit buttons header alignment when toc sidebar is on the right
2022-12-10 19:38:26 -05:00
NGPixel
c91ff2da7e
feat: add page-ready client boot event
2022-12-10 18:12:04 -05:00
NGPixel
eb99f828b1
fix: edit buttons hidden when toc sidebar is on the right
2022-12-10 18:05:53 -05:00
NGPixel
f3133a72ec
feat: toc sidebar position
2022-12-10 17:03:40 -05:00
NGPixel
ca2f7aaf73
chore: add css classes on page sidebar cards
2022-11-18 19:27:35 -05:00
cannorin and cannorin
db2ad81a1f
feat: katex persistent macro support ( #5838 )
...
Co-authored-by: cannorin <cannorin@users.noreply.github.com >
2022-11-13 01:43:48 -05:00
NGPixel
9fbc25adb8
feat: improve table rendering + add markdown-it-decorate module
2022-11-08 22:40:43 -05:00
九零
1bb9be0e62
fix: admin contribute link address. ( #5791 )
2022-10-27 10:41:20 -04:00
Evandro Arruda
274ecf4b20
fix: America/Sao_Paulo timezone offset ( #5690 )
2022-09-30 16:52:25 -04:00
NGPixel
8715cd69b2
feat: edit shortcuts
2022-09-20 16:55:05 -04:00
Nicolas Giard
fa35f3a254
fix: footer text overflow on smaller desktop screens
2022-09-18 20:24:22 -04:00
Sandhya Veludandi
4e5da41d35
fix: page cursor and pagination ( #5541 )
...
* fix: search results not displaying on first page
* fix: page cursor position stays the same between page selection
2022-08-14 19:07:09 -04:00
Nicolas Giard
e78953d018
fix(admin): update admin groups page rules write:pages label to match actual permissions
2022-07-19 18:20:03 -04:00
NGPixel
48077fc9e5
feat(admin): make page extensions configurable
2022-06-24 22:20:36 -04:00
Nicolas Giard
18f9165945
fix(graphql): add missing admin mail name variable to save mutation
2022-06-11 17:55:16 -04:00
Nicolas Giard
1e577735c4
fix(mail): typo in admin mail save mutation
2022-06-11 17:40:48 -04:00
David Wheatley
97a744556b
feat(mail): allow setting of mailer identifying name ( #5363 )
2022-06-10 23:15:00 -04:00
myml
89cbb19912
fix: site tree not working because of incorrect variable name ( #5304 )
2022-05-18 15:40:37 -04:00
Nicolas Giard
cd33ff0afb
feat(admin): export tool for full migration / backup ( #5294 )
...
* feat: export content utility (wip)
* feat: export navigation + groups + users
* feat: export comments + navigation + pages + pages history + settings
* feat: export assets
2022-05-16 01:13:42 -04:00
myml
8be88cb273
fix(search): search result display as empty after clearing field ( #5283 )
2022-05-14 21:21:23 -04:00
myml
5590507ef3
fix(nav): add locale to current directory link ( #5286 )
2022-05-14 21:18:46 -04:00
Oleksandr Koltsov and Alex Koltsov
24dbc097cb
fix: change spelling of Kiev to Kyiv ( #5285 )
...
Co-authored-by: Alex Koltsov <alex@slinex.com >
2022-05-13 16:18:03 -04:00
NGPixel
63ecb32494
fix: missing aria attributes + controls on tabset component
2022-04-03 16:55:11 -04:00
Tomas McNamer and Nicolas Giard
fc6e4ab9c4
feat: add link to admin area on welcome page ( #4035 )
...
* feat: Add link to admin area on welcome page
See: #1259
* fix: remove trailing slash from welcome admin button
* fix: welcome page admin button link
Co-authored-by: Nicolas Giard <github@ngpixel.com >
2022-02-12 18:14:27 -05:00
NGPixel
afafb4f4e0
fix: md task list - use same config as client
2022-02-12 17:28:34 -05:00
NGPixel
a04f7bd650
fix: force uploads to use auth headers instead of cookie
2022-01-22 19:52:59 -05:00