tommy/mobilizon
1
0
Fork 0
forked from potsda.mn/mobilizon
Code Pull requests Activity
6043 commits 15 branches 0 tags 128 MiB
Commit graph

6043 commits

This branch
This branch
All branches
Author SHA1 Message Date
Thomas Citharel f4ee116112
fix(front): escape event.title when it's passed to dialog component HTML message 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-14 11:29:13 +01:00
Thomas Citharel 83eb5c6a69
fix(front): add announcements link on EventParticipationCard as well as EventView 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-14 11:15:08 +01:00
Thomas Citharel ee6381463d
fix(front): remove broken identity check in EventMinimalistCard 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-14 11:15:07 +01:00
Thomas Citharel 00d8bc733d
fix(front): fix ErrorComponent.vue sentry integration 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-14 11:15:07 +01:00
Thomas Citharel 51d43aa2d1
fix(front): various little CSS fixes 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-14 10:47:41 +01:00
Thomas Citharel 68c40e6bf5
chore(deps): update deps 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-12 11:48:54 +01:00
Thomas Citharel a47f4f6444
fix(graphql): add missing operation name for RegisterPerson 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-12 11:40:56 +01:00
Thomas Citharel d4489f691b
fix(front-end): fix issues with expired accessToken refreshment queue 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-12 11:40:33 +01:00
Thomas Citharel ae466b879c
fix(front-end): fix current actor not being set on first access when relogging 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-12 11:39:27 +01:00
Thomas Citharel 820d4adb69 Merge branch 'docker-webpush' into 'main' 
refactor(docker): allow webPush configuration to be configured using env variables in Docker

Closes #1383

See merge request framasoft/mobilizon!1503
 2023-12-11 15:51:01 +00:00
Thomas Citharel 459f486a90
refactor(docker): allow webPush configuration to be configured using env variables in Docker 
Closes #1383

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-11 16:31:24 +01:00
Thomas Citharel f6ff99987f Merge branch 'html_to_text-nil' into 'main' 
fix: allow html_to_text/1 to receive nil, e.g. for empty event descriptions

See merge request framasoft/mobilizon!1502
 2023-12-11 09:44:06 +00:00
778a69cd 5030b755a0
fix: allow html_to_text to receive nil, e.g. for empty event descriptions 
Fixes potsda.mn/mobilizon#34

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-11 09:42:06 +01:00
Thomas Citharel 987c5b59d3
chore(release): 4.0.2 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 14:55:16 +01:00
Thomas Citharel 0427e42f8a Merge branch 'xss-fixes' into 'main' 
fix(front-end): add more security fixes for formatted lists and notifier

See merge request framasoft/mobilizon!1501
 2023-12-07 13:52:34 +00:00
potsda.mn-Kollektiv 1af8e37e9b
fix(front-end): add more security fixes for formatted lists and notifier 
- introduce html escape function
- escape message content in notifier plugin
- escape user name in ConversationListItem
- escape user name in the Event EditView contacts section
- display user summary as plain text in ActorCard

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 14:29:20 +01:00
Thomas Citharel 5e3d8a861f
chore(release): 4.0.1 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 12:36:11 +01:00
Thomas Citharel 0caaf2bf2e
build(packages): remove alpine packages as there's no demand for it 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 12:30:49 +01:00
Thomas Citharel 795ef2463f
build(packages): add back Debian Buster as it seems people are still using it 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 12:30:27 +01:00
Thomas Citharel 38f2443d7b Merge branch 'weblate-mobilizon-frontend' into 'main' 
Translations update from Framasoft Weblate

See merge request framasoft/mobilizon!1499
 2023-12-07 11:19:20 +00:00
josé m 97c53bb8d3 Translated using Weblate (Galician) 
Currently translated at 100.0% (91 of 91 strings)

Translation: Mobilizon/Activity
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/activity/gl/
 2023-12-07 12:14:44 +01:00
josé m e08b057e06 Translated using Weblate (Galician) 
Currently translated at 71.2% (1169 of 1640 strings)

Translation: Mobilizon/Frontend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/frontend/gl/
 2023-12-07 12:14:43 +01:00
josé m ec5e4366e5 Translated using Weblate (Galician) 
Currently translated at 6.5% (6 of 91 strings)

Translation: Mobilizon/Activity
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/activity/gl/
 2023-12-07 12:14:43 +01:00
Thomas Citharel 211d07b68e Merge branch 'xss-fixes' into 'main' 
Security and docker fixes

See merge request framasoft/mobilizon!1500
 2023-12-07 11:14:36 +00:00
Thomas Citharel db385501aa
fix(emails): use tls_certificate_check to add tls config for mailer 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 11:42:19 +01:00
Thomas Citharel 7210f86889
feat(cli): add command to test emails send correctly 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 09:17:33 +01:00
Thomas Citharel 4855af8f87
feat(docker): allow to configure loglevel at runtime through env variable 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-07 09:17:33 +01:00
Thomas Citharel 9907f887c9
fix(docker): use separate env for tzdata dir path 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 16:07:42 +01:00
Thomas Citharel 126727bf58
fix(docker): fix getting default value for MOBILIZON_SMTP_SSL env 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 16:07:03 +01:00
Thomas Citharel 7d725bd942
fix(config): fix setting path for Mobilizon.Service.SiteMap 
System.get_env/2 makes no sense at compile time

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 16:06:20 +01:00
Thomas Citharel 28063bd1d9
fix(docker): fix getting configuration value from env MOBILIZON_SMTP_TLS 
Closes #1381

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 16:05:33 +01:00
Thomas Citharel 09f41328ab
fix(graphql): set default value for resource type parameter 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 14:43:51 +01:00
Thomas Citharel 94bf2e53bf
fix(front): put correct value for CONVERSATION_LIST enum value 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 11:51:45 +01:00
Thomas Citharel dc6647f5dc
fix: sanitize descriptions from resources 
Currently resources descriptions are not used anywhere but they are
prefilled from source URL preview. Still, doesn't hurt to sanitize
these.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 11:47:28 +01:00
Thomas Citharel 58e50e3c9f
test: add new tests for XSS in actors summary 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 11:19:19 +01:00
Thomas Citharel 41227d994c
style: linting front-end 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 11:18:36 +01:00
Thomas Citharel 2c12fbfd09
fix(front): anonymous participant text is plain text, avoid using v-html 
It was using v-html when opening to "view more"

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 11:18:05 +01:00
Thomas Citharel 77518deb54 Merge branch 'weblate-mobilizon-frontend' into 'main' 
Translations update from Framasoft Weblate

See merge request framasoft/mobilizon!1498
 2023-12-06 10:07:48 +00:00
Thomas Citharel ffff379d47
fix: always consider report content as text 
Report content was used as HTML in front-end and e-mails but wasn't sanitized as such.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 11:05:56 +01:00
FoW 1a1ad5295b Translated using Weblate (Korean) 
Currently translated at 0.5% (2 of 355 strings)

Translation: Mobilizon/Backend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/backend/ko/
 2023-12-06 10:49:28 +01:00
FoW 7b4c31d66a Translated using Weblate (Korean) 
Currently translated at 1.1% (19 of 1640 strings)

Translation: Mobilizon/Frontend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/frontend/ko/
 2023-12-06 10:49:27 +01:00
Thomas Citharel ded59bec27
fix(front): fix XSS because of bad operations when setting the group's summary 
Group summary (HTML) is properly sanitized by the backend, but for groups we did a special operation
before setting the HTML in the Vue app. This is now removed

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 08:47:44 +01:00
Thomas Citharel 935799f123
fix(front): fix editing group 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 08:37:48 +01:00
Thomas Citharel 5b337f952a
refactor(activitypub): handle failure finding public key in actor keys 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-06 08:25:02 +01:00
Thomas Citharel 114e850682 Merge branch 'weblate-mobilizon-frontend' into 'main' 
Translations update from Framasoft Weblate

See merge request framasoft/mobilizon!1497
 2023-12-06 06:38:24 +00:00
Milo Ivir 9c88faeafb Translated using Weblate (Croatian) 
Currently translated at 88.9% (1458 of 1640 strings)

Translation: Mobilizon/Frontend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/frontend/hr/
 2023-12-05 22:34:12 +01:00
Milo Ivir 623f4ee556 Translated using Weblate (Croatian) 
Currently translated at 87.1% (1430 of 1640 strings)

Translation: Mobilizon/Frontend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/frontend/hr/
 2023-12-05 17:34:13 +01:00
Milo Ivir 1162dd0f7d Translated using Weblate (Croatian) 
Currently translated at 81.6% (290 of 355 strings)

Translation: Mobilizon/Backend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/backend/hr/
 2023-12-05 17:34:13 +01:00
Thomas Citharel 3a55baeffd
chore(release): release 4.0.0 
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
 2023-12-05 09:07:11 +01:00
Thomas Citharel f93457131a Merge branch 'fixes' into 'main' 
Little fixes

See merge request framasoft/mobilizon!1496
 2023-12-05 08:06:10 +00:00