Commit Graph
124 Commits
Author SHA1 Message Date
James Smith 99bcfd01a2 swap flipper checks for SiteSettings checks 2024-08-09 11:26:18 +01:00
James Smith 15df20c581 move feature flags out of flipper and into site config and SiteSettings 2024-08-09 11:23:33 +01:00
James Smith 922f4ae0d5 Fix frozen string problem in locale fallback
resolves #2473
2024-08-05 16:23:10 +01:00
James Smith 8a14d5b9b3 fix federails host/port config 2024-08-02 11:55:48 +01:00
James Smith 4dd260760c remove layout config for federails
don't need it
2024-08-01 16:23:29 +01:00
James Smith 19e0e7d835 handle flipper check for federation before migrate 2024-07-31 11:56:21 +01:00
James Smith dbcc291148 tidy federails config file 2024-07-31 10:45:37 +01:00
James Smith a0a8097f43 add federails config for user methods 2024-07-31 10:45:36 +01:00
James Smith 271ccc7c98 change federails client path 2024-07-31 10:45:36 +01:00
James Smith a270950b6f tidy up config file 2024-07-31 10:45:36 +01:00
James Smith d121a5d21e get federails force SSL configuration from main config 2024-07-31 10:45:36 +01:00
James Smith b330597c54 add flipper flag to enable/disable federation 2024-07-31 10:45:35 +01:00
Matthew a3841b4699 Update config/initializers/federails.rb 2024-07-31 10:45:35 +01:00
Matthew 84318e8f2f Initial federails integration commit 2024-07-31 10:45:35 +01:00
James Smith ba9b45aaca remove devise-security gem
the only thing we were using is replaced with zxcvbn
2024-07-17 15:22:30 +01:00
James Smith 9b87b73490 Simplify asset paths for fonts
this should be more consistent
2024-07-17 11:50:32 +01:00
James Smith 548f9df5aa include RPG-awesome icons in asset builds 2024-07-16 22:59:21 +01:00
James Smith 6b9ffaf903 Merge branch 'main' into fix-rar-type 2024-07-16 16:58:05 +01:00
James Smith da53a7593a add GLTF MIME type 2024-07-16 15:58:23 +01:00
James Smith 8c8576b5e4 Use correct MIME type for .rar files 2024-07-16 15:46:34 +01:00
James Smith c510b18d3c prevent s3 secrets being added to forms automatically 2024-07-08 11:41:59 +01:00
James Smith 9d73e5363d lazily set content security policy so we can include the library domains 2024-07-05 16:03:23 +01:00
James Smith 01d96be9ed add s3 gem and require shrine s3 storage 2024-07-04 13:30:53 +01:00
James Smith dd1c6849d6 move registration of all library storages into Library model 2024-07-01 11:24:16 +01:00
James Smith 3d4da8068e Merge pull request #2310 from manyfold3d/set-redis-pool
Set connection pool size for ActiveJob::Status to same as DB
2024-06-26 15:35:51 +01:00
James Smith cc370e7ff8 set connection pool size for activejob::status to same as DB 2024-06-26 15:26:59 +01:00
James Smith d37befeb9b send file data from Shrine via rack-response 2024-06-25 15:18:03 +01:00
James Smith f18133ee19 enable metadata refresh and mime type analysis in shrine 2024-06-25 14:11:51 +01:00
James Smith 604749b1b8 handle failure during library migration and shrine init 2024-06-25 14:11:51 +01:00
James Smith 05f24650ef add Shrine config and storage per library 2024-06-25 14:11:50 +01:00
James Smith 3cc3263a55 handle new redis connection pool 2024-06-21 10:49:32 +01:00
James Smith 7fa4bf966b CSP allow inline style attributes 2024-06-20 09:23:20 +01:00
James Smith cfcdba1ec3 lint & formatting 2024-06-19 14:29:26 +01:00
James Smith 52ba1752e4 allow image data URLs 2024-06-19 14:27:00 +01:00
James Smith 121fad88b0 enable scout CSP based on SCOUT_DEV_TRACE setting 2024-06-19 14:22:13 +01:00
James Smith d24f0cb3a6 remove CDN from script src CSP 2024-06-19 14:16:06 +01:00
James Smith 796be17a2b add content-security-policy and nonce generator 2024-06-19 14:12:40 +01:00
James Smith 772ec1f527 make remember cookies same-site strict 2024-06-18 14:48:28 +01:00
James Smith 3974cd408c DRY up HTTPS only check 2024-06-18 14:48:10 +01:00
James Smith 1d62126d88 add global 14 day session timeout to rails session cookies 2024-06-18 14:41:48 +01:00
James Smith cf88514c33 set default session timeout to 30 minutes of inactivity
if the user has selected "remember me" they will still stay logged in
2024-06-18 14:16:25 +01:00
James Smith fd308aea19 lint 2024-06-18 13:11:12 +01:00
James Smith e05b56d84c DRY uploadable file types and add explicit extensions
resolves #1584
2024-06-14 17:30:55 +01:00
James Smith 5c57aed83a Merge pull request #2258 from manyfold3d/zip-slip
Set secure flags on libarchive extraction to avoid "Zip Slip" exploits
2024-06-13 18:26:29 +01:00
James Smith d261a6ada6 Set secure flags on libarchive extraction 2024-06-13 14:19:23 +01:00
James Smith c056d80189 Lock login for an hour after 5 failed attempts 2024-06-13 11:04:23 +01:00
James Smith 64b0fb5a09 update tests and move everything into initializer 2024-05-28 15:05:39 +01:00
James Smith 1b988a15ad Get full git sha in dev mode 2024-05-28 11:47:39 +01:00
Matthew 73a06a5aed Merge branch 'main' into feature/app-version-footer 2024-05-21 23:17:33 +09:00
Matthew cf3ed0358f Adding app version as an attribute 2024-05-21 22:44:08 +09:00