Commit Graph

4159 Commits

Author SHA1 Message Date
Pavel Djundik
33de4840c6
Merge pull request #1984 from thelounge/astorije/vulnerability-disclosure
Add SECURITY guidelines about security vulnerability disclosures, and link them from the CONTRIBUTING guidelines
2018-01-16 10:35:12 +02:00
Jérémie Astori
fda03b8362
Add SECURITY guidelines about security vulnerability disclosures, and link them from the CONTRIBUTING guidelines 2018-01-15 20:26:26 -05:00
Jérémie Astori
33d82287be
Do not statically serve the index template prior to rendering it
Without this, going to `https://thelounge.example.com/index.html` would return the raw file. This now excludes it from the `public` folder so it cannot be rendered as is.
Renaming the file is for good measure, to indicate that this HTML file must be templated. Because it is a straight rename with no modification, rebasing PRs on it should not be to painful, as git re-applies changes on renamed files.
2018-01-14 13:02:27 -05:00
Jérémie Astori
7a691b8e6c
2.7.0-rc.1 2018-01-13 19:23:24 -05:00
Jérémie Astori
aac4025c59
Add changelog entry for v2.7.0-rc.1 2018-01-13 19:23:06 -05:00
Jérémie Astori
42199eda29
Merge pull request #1978 from merlinthp/chpass_callback
Add missing execution of callback in ClientManager.updateUser
2018-01-13 18:47:01 -05:00
Howard Johnson
10d43f27ed Add missing executions of callback in ClientManager.updateUser
Signed-off-by: Howard Johnson <merlin@merlinthp.org>
2018-01-13 23:05:23 +00:00
Pavel Djundik
1aaa9391db
Merge pull request #1970 from thelounge/astorije/fix-themes
Fix local themes not being found in theme selector dropdown, and serve local themes using the themes route instead of the public folder
2018-01-13 23:09:55 +02:00
Jérémie Astori
c49239b4f1
Fix themes not being found in theme selector dropdown 2018-01-13 13:45:30 -05:00
Jérémie Astori
f8c66aa512
Merge pull request #1975 from thelounge/xpaw/fix-1902
Fix enabling push notifications on Firefox
2018-01-13 13:14:33 -05:00
Jérémie Astori
503c1538f5
Merge pull request #1974 from thelounge/astorije/fix-uninstall
Fix `thelounge uninstall` command
2018-01-13 13:13:19 -05:00
Jérémie Astori
45dc52886e
Fix thelounge uninstall command
- Exit with code 1 when package was not installed
- Run a pre-step to check if package is installed before uninstalling. I have tried every possible way I could think of without that first `npm list` step based on output of `npm uninstall`, but different npm versions produce different outputs, so there is nothing reliable. This is a more robust way to do so anyway.
- Consolidate error handlers
2018-01-13 02:00:37 -05:00
Pavel Djundik
8d0bdfc200 Fix #1902 - unable to enable push notifications on Firefox 57 2018-01-12 12:04:04 +02:00
Jérémie Astori
3eb017caf8
Merge pull request #1964 from thelounge/sign-git-tag
Set sign-git-tag to true in .npmrc
2018-01-11 23:50:17 -05:00
Jérémie Astori
d1c7613535
Merge pull request #1963 from thelounge/greenkeeper/commander-2.13.0
Update commander to the latest version 🚀
2018-01-11 23:36:42 -05:00
Jérémie Astori
edaa8119af
Merge pull request #1965 from thelounge/greenkeeper/ldapjs-1.0.2
Update ldapjs to the latest version 🚀
2018-01-11 23:17:50 -05:00
Pavel Djundik
59a1a9cd36 Fix #1958: Remove session token hash conversion 2018-01-11 21:44:00 +02:00
greenkeeper[bot]
fd6f740d36 fix(package): update ldapjs to version 1.0.2 2018-01-11 18:41:53 +00:00
Pavel Djundik
cdd9418bb0
Set sign-git-tag to true in .npmrc 2018-01-11 17:12:04 +02:00
greenkeeper[bot]
c4b5671aef fix(package): update commander to version 2.13.0 2018-01-11 15:08:34 +00:00
Pavel Djundik
98c3108bde
Merge pull request #1940 from thelounge/xpaw/fix-1934
Hash user tokens, increase token entropy
2018-01-11 13:34:14 +02:00
Jérémie Astori
40aadf7c95
Merge pull request #1619 from thelounge/1447-css-plugin
Allow custom css from plugins
2018-01-10 21:44:47 -05:00
Jérémie Astori
6cbc2eeef3
Merge pull request #1956 from thelounge/xpaw/fix-notif-timestamp
Provide correct timestamp to browser notifications
2018-01-10 21:42:23 -05:00
Pavel Djundik
eac092e661 Hash user tokens, increase token entropy
Fixes #1934
2018-01-10 15:54:52 +02:00
Pavel Djundik
31c33e43d5 Provide correct timestamp to browser notifications 2018-01-09 18:47:13 +02:00
Pavel Djundik
e77de3315a Prevent user contextmenu from opening while selecting text 2018-01-09 18:16:20 +02:00
Jérémie Astori
b3702b0550
Merge pull request #1938 from thelounge/astorije/uninstall-packages
Add a `thelounge uninstall` command to remove themes and packages
2018-01-09 00:51:27 -05:00
Jérémie Astori
b8bd6fccbb
Merge pull request #1949 from thelounge/xpaw/no-history-spam
Only emit "more" history to the client that requested it
2018-01-07 13:37:36 -05:00
Pavel Djundik
fc39a67e10 Only emit "more" history to the client that requested it 2018-01-07 15:06:59 +02:00
Jérémie Astori
011b086760
Merge pull request #1947 from thelounge/greenkeeper/eslint-4.15.0
Update eslint to the latest version 🚀
2018-01-07 01:18:34 -05:00
greenkeeper[bot]
41d872bcaf chore(package): update eslint to version 4.15.0 2018-01-07 02:37:59 +00:00
Jérémie Astori
d2388dc623
Bail when uninstalling if package.json for TL packages does not exist
It is on purpose that the message is the same than when a package was not installed. From a user standpoint, it only matters that this specific package was not installed.
2018-01-06 12:12:10 -05:00
Jérémie Astori
3971ecff63
Customize a bit thelounge install|uninstall
- Hides progress bars that flash when installing/uninstalling as it does not bring real value here, at least for now
- Inform user if package being uninstalled was not actually installed
- Do not display npm outputs, mention which version was installed (this will probably need refining when installing packages with dependencies)
2018-01-06 12:12:10 -05:00
Jérémie Astori
d9cb640c2a
Add a thelounge uninstall command to remove themes and packages 2018-01-06 12:12:09 -05:00
Pavel Djundik
52b3ef18f7
Merge pull request #1941 from thelounge/xpaw/fix-log-from
Fix nicknames in text logs
2018-01-05 20:47:30 +02:00
Al McKinlay
3510094665 Allow custom css from plugins 2018-01-05 17:40:47 +00:00
Pavel Djundik
4307bb0563
Fix nicknames in text logs 2018-01-05 15:41:03 +02:00
Pavel Djundik
628ef7aa66
Merge pull request #1937 from thelounge/greenkeeper/irc-framework-2.10.3
Update irc-framework to the latest version 🚀
2018-01-05 11:32:23 +02:00
Jérémie Astori
ede032a7f4
Merge pull request #1917 from williamboman/fix/css-animation-jitter
fix animation jitter when clicking join channel button
2018-01-04 19:56:55 -05:00
greenkeeper[bot]
37cc576af1 fix(package): update irc-framework to version 2.10.3 2018-01-04 14:52:22 +00:00
William Boman
dfe4b2f6d6 fix animation jitter when clicking join channel button 2018-01-04 10:53:07 +01:00
Jérémie Astori
313a321918
Merge pull request #1916 from williamboman/fix/no-autocomplete-channel-join
views/join_channel: disable autocompletion of form inputs
2018-01-04 00:29:52 -05:00
Pavel Djundik
0854bd359b
Merge pull request #1926 from thelounge/xpaw/image-extension
Store images with correct file extension
2018-01-03 17:47:45 +02:00
Pavel Djundik
6675ced196 Store images with correct file extension 2018-01-03 13:33:52 +02:00
Jérémie Astori
a122ed5b7f
Build template list at Webpack time instead of manually keeping this in sync with the views folders 2018-01-02 01:38:57 -05:00
Jérémie Astori
068b842561
Merge pull request #1914 from thelounge/astorije/changelog-prerelease-wording
Separate and improve wording for `pre` and `rc` pre-release versions
2018-01-01 20:37:29 -05:00
Pavel Djundik
f38fa9b98e Set decoding=async on image previews 2017-12-29 21:57:52 +02:00
Jérémie Astori
50d8bf5191
Merge pull request #1923 from thelounge/astorije/bump-primer-tooltips
Update primer-tooltips to the latest version
2017-12-29 14:13:05 -05:00
Pavel Djundik
e98291dd3f Preload preview images before appending them to DOM 2017-12-29 12:30:15 +02:00
Jérémie Astori
9ca08ae434
Update primer-tooltips to the latest version
Only changes between v1.5.0 and v1.5.1 (according to https://github.com/primer/primer/commits/master/modules/primer-tooltips) are:

- https://github.com/primer/primer/pull/394
- https://github.com/primer/primer/pull/409

So we are not affected.
2017-12-29 02:20:21 -05:00