Nicolas Giard
dd48f28827
docs: update README
2025-10-09 00:19:29 -04:00
dhulripos
b49c00226c
fix: Add missing status code on unauthorized access ( #7785 )
...
* fix status code on unauthorized
* Remove unnecessary line breaks
2025-09-24 00:06:37 -04:00
Lyz and jmp
9f481221ab
ci(helm): add custom environment variables to the deployment ( #7784 )
...
Co-authored-by: jmp <jmp@icij.org >
2025-09-11 12:58:59 -04:00
Craig Reyenga
cd77f36120
fix: requests without user-agent causing error 500 ( #7749 )
2025-08-18 21:38:20 -04:00
Nicolas Giard
1b6c67ee77
fix: force wrap for code blocks in print view
2025-08-13 03:03:39 -04:00
Ole Christian Tvedt and Ole Christian Tvedt
c093423307
feat: set groups based on Azure groups ( #7736 )
...
Co-authored-by: Ole Christian Tvedt <ole.christian.tvedt@defa.com >
2025-08-13 02:53:19 -04:00
Nicolas Giard
86abfea7f6
fix: update dompurify dependency + add cross-env
2025-08-13 02:52:46 -04:00
Nicolas Giard
07855ab329
docs: Update README.md
2025-07-28 13:11:47 -04:00
Nicolas Giard
d96bbaf42c
docs: Update SECURITY.md
2025-06-10 14:45:46 -04:00
Nadia Santalla
41d3ba4312
chore(helm): render external database URL if it is set ( #7036 )
2025-04-07 09:19:29 -04:00
Nicolas Giard
9bf9c8af47
ci: Update build.yml
2025-03-31 03:55:18 -04:00
Nicolas Giard
7053819f35
docs: Update README.md
2025-03-31 03:52:26 -04:00
Nicolas Giard
a393f5f9bc
docs: Update README.md
2025-03-31 03:50:08 -04:00
Nicolas Giard
78c41e36e1
fix: use xml-crypto 2.1.6 for passport-saml
2025-03-23 21:31:22 -04:00
Nicolas Giard
85243e5284
docs: Update SECURITY.md
2025-02-11 20:46:07 -05:00
Nicolas Giard
403e98dced
feat: add git always namespace option
2025-02-02 16:16:52 -05:00
Vasily Fedoseyev and Nicolas Giard
abc8dce9cc
fix: Allow HA_ACTIVE: True to enable HA mode ( #7493 )
...
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com >
2025-01-01 00:18:42 -05:00
94d253bf59
chore(helm): add support for securityContext and resources in sideload container ( #7350 )
...
---------
Co-authored-by: Mohamed Amine Arous <“maarous-prestataire@ina.fr ”>
Co-authored-by: Nicolas Giard <github@ngpixel.com >
2024-11-22 14:31:07 -05:00
Nicolas Giard
c7c20579fd
docs: Update README.md
2024-11-18 17:18:28 -05:00
Nicolas Giard
583ea44a72
docs: Update README
2024-11-18 17:13:52 -05:00
Nicolas Giard
ab5c620d50
chore: update yarn lock
2024-10-12 04:51:48 -04:00
Jacob Beneski
7757de3af7
feat: add elasticsearch 8.x support ( #6904 )
2024-10-12 04:38:43 -04:00
Nicolas Giard
ad37325773
docs: Update README.md
2024-10-04 16:07:10 -04:00
Nicolas Giard
55a63a3c5a
ci: fix docker manifest typo
2024-09-17 21:13:51 -04:00
Nicolas Giard
34de47cc10
ci: remove armv7 build target
2024-09-17 20:37:55 -04:00
Nicolas Giard
18ebf83f88
ci: update base docker image
2024-09-16 01:31:04 -04:00
Nicolas Giard
ef5ab0ecb8
ci: disable mssql test
2024-08-31 23:31:19 -04:00
Nicolas Giard
b9fb17d4d4
fix: prevent password reset on disabled account
2024-08-29 03:06:06 -04:00
Dominik
d1b4c8c407
chore(helm): add pod annotations ( #7222 )
2024-06-26 00:51:45 -04:00
Nicolas Giard
2e35ebf1dc
docs: Update README.md
2024-06-14 04:42:48 -04:00
Nicolas Giard
904260fd44
fix: set no-store cache control on jwt renew response
2024-05-23 23:01:38 -04:00
Ethan and NGPixel
1238d614e1
Merge pull request from GHSA-xjcj-p2qv-q3rf
...
* Update render.js
# Improved handling of mustache expressions and v-pre attribute assignment
## Changes Made:
- Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute.
- Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION].
## Why it Works:
- When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag.
- This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required.
## Test Cases Passed:
1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>`
2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>`
3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>`
4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>`
5. `<p><xyz>{{constructor.constructor('alert("Test Case 8")')()}}<xyz>{{constructor.constructor('alert("Test Case 9")')()}}</xyz></p>`
This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process.
* fix: move template expressions after dom-purify + handle text nodes without parent
---------
Co-authored-by: NGPixel <github@ngpixel.com >
2024-05-13 14:57:17 -04:00
Nicolas Giard
98c04fe18e
docs: Update README.md
2024-04-29 17:12:17 -04:00
Nicolas Giard
854ec230dd
ci: Update build.yml
2024-04-29 15:12:22 -04:00
Nicolas Giard
a28b525894
docs: Update SECURITY.md
2024-04-29 14:24:28 -04:00
CDN and Nicolas Giard
f1161aed59
fix: make comment module "Artalk" work with newer versions ( #6901 )
...
* feat: update comment module "Artalk"
* fix: update code.yml
---------
Co-authored-by: Nicolas Giard <github@ngpixel.com >
2024-04-24 20:58:53 -04:00
Sukka
3a7ce75a1e
refactor(templates): replace polyfill.io ( #7032 )
2024-04-24 20:53:45 -04:00
Karol Rudnikowski (dxdroni)
f54551ee69
fix: page pagination in tags component ( #7061 )
2024-04-24 20:50:53 -04:00
Nicolas Giard
abdd2f0d17
fix: remove upper range node.js version check
2024-04-24 20:46:11 -04:00
Nicolas Giard
66ca18c499
docs: Update README.md
2024-03-16 01:15:24 -04:00
craph
d5af4cb068
chore: fix python issue for node18 in dev Dockerfile ( #7029 )
...
* Fix: email toLowerCase
* Fix python issue for node18 in Dockerfile
2024-02-28 16:07:19 -05:00
Nicolas Giard
ece5753ebb
docs: Update README.md
2024-02-07 15:31:49 -05:00
Nicolas Giard
b1e1759f25
fix: set securityTrustProxy to false by default
2024-01-28 20:03:06 -05:00
Jasmine Tai
99e74e8eb2
feat: upgrade markdown-it-emoji to 3.0.0 ( #6945 )
2024-01-22 20:20:01 -05:00
Nicolas Giard
34c037c68b
docs: Update README.md
2024-01-21 00:32:01 -05:00
38a46e68ea
feat: sync groups with SAML provider ( #6299 )
...
* feat: added implementation for group mapping in SAML strategies
---------
Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com >
Co-authored-by: Nicolas Giard <github@ngpixel.com >
2023-11-20 16:59:33 -05:00
Nicolas Giard
fd91caff1d
docs: Update README.md
2023-10-27 17:15:21 -04:00
Nicolas Giard
16245caeff
docs: Update README.md
2023-10-18 21:35:12 -04:00
Pablo
8932d15c0c
fix: typo in kroki name ( #6745 )
2023-09-24 23:30:28 -04:00
Nicolas Giard
b19c4e4f23
docs: Update README.md
2023-09-20 16:42:49 -04:00
Nicolas Giard
dhulripos
Lyzandjmp
Craig Reyenga
Ole Christian TvedtandOle Christian Tvedt
Nadia Santalla
Vasily FedoseyevandNicolas Giard
Jacob Beneski
Dominik
EthanandNGPixel
CDNandNicolas Giard
Sukka
Karol Rudnikowski (dxdroni)
craph
Jasmine Tai
Pablo