Thomas Citharel
a408b476cf
fix(front): add condition on DraggableList in ResourceFolder.vue
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:29:22 +01:00
Thomas Citharel
45f8757d72
fix(front): create head without old options
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:29:22 +01:00
Thomas Citharel
89641c502e
fix(front): fix dialog from EventParticipationCard.vue without input
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:29:21 +01:00
Thomas Citharel
442d072857
refactor(front): use useCurrentActorClient() instead of making query in EventParticipationCard
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:29:21 +01:00
Thomas Citharel
f4ee116112
fix(front): escape event.title when it's passed to dialog component HTML message
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:29:13 +01:00
Thomas Citharel
83eb5c6a69
fix(front): add announcements link on EventParticipationCard as well as EventView
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:15:08 +01:00
Thomas Citharel
ee6381463d
fix(front): remove broken identity check in EventMinimalistCard
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:15:07 +01:00
Thomas Citharel
00d8bc733d
fix(front): fix ErrorComponent.vue sentry integration
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 11:15:07 +01:00
Thomas Citharel
51d43aa2d1
fix(front): various little CSS fixes
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-14 10:47:41 +01:00
Thomas Citharel
68c40e6bf5
chore(deps): update deps
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-12 11:48:54 +01:00
Thomas Citharel
a47f4f6444
fix(graphql): add missing operation name for RegisterPerson
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-12 11:40:56 +01:00
Thomas Citharel
d4489f691b
fix(front-end): fix issues with expired accessToken refreshment queue
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-12 11:40:33 +01:00
Thomas Citharel
ae466b879c
fix(front-end): fix current actor not being set on first access when relogging
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-12 11:39:27 +01:00
Thomas Citharel
820d4adb69
Merge branch 'docker-webpush' into 'main'
...
refactor(docker): allow webPush configuration to be configured using env variables in Docker
Closes #1383
See merge request framasoft/mobilizon!1503
2023-12-11 15:51:01 +00:00
Thomas Citharel
459f486a90
refactor(docker): allow webPush configuration to be configured using env variables in Docker
...
Closes #1383
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-11 16:31:24 +01:00
778a69cd
744008273d
Merge remote-tracking branch 'origin/main'
2023-12-11 12:17:38 +01:00
Thomas Citharel
f6ff99987f
Merge branch 'html_to_text-nil' into 'main'
...
fix: allow html_to_text/1 to receive nil, e.g. for empty event descriptions
See merge request framasoft/mobilizon!1502
2023-12-11 09:44:06 +00:00
778a69cd
5030b755a0
fix: allow html_to_text to receive nil, e.g. for empty event descriptions
...
Fixes potsda.mn/mobilizon#34
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-11 09:42:06 +01:00
778a69cd
63129b0769
fix: allow html_to_text to receive nil, e.g. for empty event descriptions
...
Fixes potsda.mn/mobilizon#34
2023-12-09 21:48:23 +01:00
summersamara
9c60c6d1ad
make group's address field optional again
...
- reverts some changes in e4607567ce
- issue potsda.mn/mobilizon#27
2023-12-08 19:14:57 +01:00
778a69cd
0e0272fb5a
set version to 4.0.2
2023-12-08 11:26:44 +01:00
summersamara
6b26aaa1ef
Merge remote-tracking branch 'upstream/main'
2023-12-07 15:08:12 +01:00
Thomas Citharel
987c5b59d3
chore(release): 4.0.2
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 14:55:16 +01:00
Thomas Citharel
0427e42f8a
Merge branch 'xss-fixes' into 'main'
...
fix(front-end): add more security fixes for formatted lists and notifier
See merge request framasoft/mobilizon!1501
2023-12-07 13:52:34 +00:00
potsda.mn-Kollektiv
1af8e37e9b
fix(front-end): add more security fixes for formatted lists and notifier
...
- introduce html escape function
- escape message content in notifier plugin
- escape user name in ConversationListItem
- escape user name in the Event EditView contacts section
- display user summary as plain text in ActorCard
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 14:29:20 +01:00
778a69cd
b91b5f8133
Merge remote-tracking branch 'origin/main'
2023-12-07 13:43:16 +01:00
Thomas Citharel
5e3d8a861f
chore(release): 4.0.1
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 12:36:11 +01:00
Thomas Citharel
0caaf2bf2e
build(packages): remove alpine packages as there's no demand for it
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 12:30:49 +01:00
Thomas Citharel
795ef2463f
build(packages): add back Debian Buster as it seems people are still using it
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 12:30:27 +01:00
Thomas Citharel
38f2443d7b
Merge branch 'weblate-mobilizon-frontend' into 'main'
...
Translations update from Framasoft Weblate
See merge request framasoft/mobilizon!1499
2023-12-07 11:19:20 +00:00
josé m
97c53bb8d3
Translated using Weblate (Galician)
...
Currently translated at 100.0% (91 of 91 strings)
Translation: Mobilizon/Activity
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/activity/gl/
2023-12-07 12:14:44 +01:00
josé m
e08b057e06
Translated using Weblate (Galician)
...
Currently translated at 71.2% (1169 of 1640 strings)
Translation: Mobilizon/Frontend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/frontend/gl/
2023-12-07 12:14:43 +01:00
josé m
ec5e4366e5
Translated using Weblate (Galician)
...
Currently translated at 6.5% (6 of 91 strings)
Translation: Mobilizon/Activity
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/activity/gl/
2023-12-07 12:14:43 +01:00
Thomas Citharel
211d07b68e
Merge branch 'xss-fixes' into 'main'
...
Security and docker fixes
See merge request framasoft/mobilizon!1500
2023-12-07 11:14:36 +00:00
Thomas Citharel
db385501aa
fix(emails): use tls_certificate_check to add tls config for mailer
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 11:42:19 +01:00
Thomas Citharel
7210f86889
feat(cli): add command to test emails send correctly
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 09:17:33 +01:00
Thomas Citharel
4855af8f87
feat(docker): allow to configure loglevel at runtime through env variable
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 09:17:33 +01:00
Thomas Citharel
9907f887c9
fix(docker): use separate env for tzdata dir path
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:07:42 +01:00
Thomas Citharel
126727bf58
fix(docker): fix getting default value for MOBILIZON_SMTP_SSL env
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:07:03 +01:00
Thomas Citharel
7d725bd942
fix(config): fix setting path for Mobilizon.Service.SiteMap
...
System.get_env/2 makes no sense at compile time
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:06:20 +01:00
Thomas Citharel
28063bd1d9
fix(docker): fix getting configuration value from env MOBILIZON_SMTP_TLS
...
Closes #1381
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:05:33 +01:00
Thomas Citharel
09f41328ab
fix(graphql): set default value for resource type parameter
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 14:43:51 +01:00
778a69cd
3dc3e7e972
Merge remote-tracking branch 'origin/main'
2023-12-06 13:29:23 +01:00
Thomas Citharel
94bf2e53bf
fix(front): put correct value for CONVERSATION_LIST enum value
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:51:45 +01:00
Thomas Citharel
dc6647f5dc
fix: sanitize descriptions from resources
...
Currently resources descriptions are not used anywhere but they are
prefilled from source URL preview. Still, doesn't hurt to sanitize
these.
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:47:28 +01:00
Thomas Citharel
58e50e3c9f
test: add new tests for XSS in actors summary
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:19:19 +01:00
Thomas Citharel
41227d994c
style: linting front-end
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:18:36 +01:00
Thomas Citharel
2c12fbfd09
fix(front): anonymous participant text is plain text, avoid using v-html
...
It was using v-html when opening to "view more"
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:18:05 +01:00
Thomas Citharel
77518deb54
Merge branch 'weblate-mobilizon-frontend' into 'main'
...
Translations update from Framasoft Weblate
See merge request framasoft/mobilizon!1498
2023-12-06 10:07:48 +00:00
Thomas Citharel
ffff379d47
fix: always consider report content as text
...
Report content was used as HTML in front-end and e-mails but wasn't sanitized as such.
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:05:56 +01:00