Commit graph

4305 commits

Author SHA1 Message Date
David Mehren
380587b7fd Ensure case-sensitive DB queries on MySQL/MariaDB
MySQLs string comparisons are case-insensitive by default.
This allows to hide notes by creating a new note with an alias that
equals the lower-cased alias of another note.
The new note is returned first by MySQL, so the original one is not
accessible anymore.

This fixes the problem by using an explicit binary comparison in the
affected queries.

See https://dev.mysql.com/doc/refman/8.0/en/case-sensitivity.html

Signed-off-by: David Mehren <git@herrmehren.de>
2024-09-01 13:54:18 +02:00
David Mehren
c543dc1f23 fix: anchor links
Signed-off-by: David Mehren <git@herrmehren.de>
2024-09-01 11:09:57 +02:00
David Mehren
1b91232909 fix: anchor links
Signed-off-by: David Mehren <git@herrmehren.de>
2024-09-01 11:09:57 +02:00
David Mehren
1f8f09c539 fix(deps): use meta-marked from NPM
Signed-off-by: David Mehren <git@herrmehren.de>
2024-08-31 18:44:35 +02:00
renovate[bot]
4bcc5de223 fix(deps): update dependency aws-sdk to v2.1687.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-31 17:21:05 +02:00
David Mehren
9baba11abb fix(deps): update webpack to 4.47.0
Signed-off-by: David Mehren <git@herrmehren.de>
2024-08-31 17:17:02 +02:00
David Mehren
3dfe9722c9 chore(ci): add Node 22
Signed-off-by: David Mehren <git@herrmehren.de>
2024-08-31 17:17:02 +02:00
David Mehren
4a0025d5bf fix(deps): update yarn.lock
Signed-off-by: David Mehren <git@herrmehren.de>
2024-08-31 17:17:02 +02:00
David Mehren
6f5ba6a04e fix(deps): update meta-marked
Signed-off-by: David Mehren <git@herrmehren.de>
2024-08-31 17:17:02 +02:00
David Mehren
ef7373f744 fix(auth): exclude returnTo from passport reset
We patch passport with the code from https://github
.com/jaredhanson/passport/pull/941,
which excludes session.returnTo from reset on login.

Fixes https://github.com/hedgedoc/hedgedoc/issues/4466

Co-authored-by: Graham White <graham_alton@hotmail.com>
Signed-off-by: David Mehren <git@herrmehren.de>
2024-08-31 17:17:02 +02:00
David Mehren
c5fa3bcfc4 fix(deps): update yarn to 4.4.1
Signed-off-by: David Mehren <git@herrmehren.de>
2024-08-31 17:17:02 +02:00
renovate[bot]
27581051f8 chore(deps): update dependency mkdocs to v1.6.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-30 15:31:40 +00:00
renovate[bot]
6d6c833d5a fix(deps): update dependency aws-sdk to v2.1686.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-30 17:26:05 +02:00
renovate[bot]
735c359b21 chore(deps): lock file maintenance
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2024-08-29 09:56:29 +00:00
Erik Michelson
88524a04db
fix(deps): remove duplicate package.json entry
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2024-08-28 23:56:55 +02:00
renovate[bot]
bc6cf9f52c fix(deps): update dependency passport-oauth2 to v1.8.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:28:50 +02:00
renovate[bot]
df961fe856 chore(deps): update dependency mocha to v10.7.3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:15:36 +02:00
renovate[bot]
5e5d3039f0 chore(deps): update dependency pymdown-extensions to v10.9
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:13:42 +02:00
renovate[bot]
7e1dde35ba chore(deps): update dependency mkdocs to v1.6.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:13:06 +02:00
renovate[bot]
aacc788ac9 fix(deps): update dependency validator to v13.12.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:11:03 +02:00
renovate[bot]
25f526692e fix(deps): update dependency pdfobject to v2.3.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:03:53 +02:00
renovate[bot]
05c4928766 fix(deps): update dependency winston to v3.14.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:01:10 +02:00
renovate[bot]
58c8871a47 fix(deps): update dependency mariadb to v3.3.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 23:00:23 +02:00
renovate[bot]
271289da7a fix(deps): update dependency mysql2 to v3.11.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:59:42 +02:00
renovate[bot]
16bc9f42d8 fix(deps): update dependency pg to v8.12.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:58:40 +02:00
renovate[bot]
dc87e98f49 fix(deps): update dependency aws-sdk to v2.1685.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:57:58 +02:00
renovate[bot]
cba54d1c3a chore(deps): update linters
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:57:20 +02:00
renovate[bot]
01d097bcea chore(deps): update dependency jquery-ui to v1.14.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:55:49 +02:00
renovate[bot]
b0cfe68726 chore(deps): update dependency abcjs to v6.4.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:49:26 +02:00
renovate[bot]
7a63ef2bf7 chore(deps): update dependency turndown to v7.2.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:48:45 +02:00
renovate[bot]
2481c6ee84 fix(deps): update dependency socket.io to v2.5.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:44:04 +00:00
renovate[bot]
93557626db fix(deps): update dependency rimraf to v5.0.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:43:52 +00:00
renovate[bot]
873750a852 fix(deps): update dependency prom-client to v15.1.3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:43:38 +00:00
renovate[bot]
12dc5f46d6 fix(deps): update dependency pg to v8.11.6
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:43:25 +00:00
renovate[bot]
bbe6ab0a03 chore(deps): update yarn to v3.8.5
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:42:57 +00:00
renovate[bot]
8258c60109 fix(deps): update dependency async to v3.2.6
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:37:05 +00:00
renovate[bot]
1094af8126 fix(deps): update dependency ejs to v3.1.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:34:58 +00:00
renovate[bot]
6ea14e035d fix(deps): update dependency chance to v1.1.12
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:34:18 +00:00
renovate[bot]
d7e38b7ec8 chore(deps): update dependency remark-cli to v12.0.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:33:42 +00:00
renovate[bot]
0a346a15d2 chore(deps): update dependency utf-8-validate to v6.0.4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:33:24 +00:00
renovate[bot]
7bbfccf53f chore(deps): update dependency spin.js to v4.1.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:33:18 +00:00
renovate[bot]
71be55fbd0 chore(deps): update dependency mkdocs-material to v9.5.33
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:33:05 +00:00
renovate[bot]
c100533400 fix(deps): update dependency aws-sdk to v2.1672.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:32:04 +02:00
renovate[bot]
7d8442829f chore(deps): update dependency jquery-ui to v1.13.3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:24:46 +00:00
renovate[bot]
1cf77b6d57 chore(deps): update actions/setup-node action to v4.0.3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:24:18 +00:00
renovate[bot]
6ac49ec66d chore(deps): update actions/checkout action to v4.1.7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 20:18:36 +00:00
renovate[bot]
19bc719b6c chore(deps): update dependency esbuild-loader to v4.2.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:18:13 +02:00
renovate[bot]
985cc04766 chore(deps): update dependency flowchart.js to v1.18.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:13:17 +02:00
renovate[bot]
4c75abd2e7 fix(deps): update dependency express to v4.19.2 [security]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-28 22:08:50 +02:00
Frank
ef91652515
docs: add google cloud storage bucket guide (#5557) 2024-08-28 21:41:26 +02:00