github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-11-27 03:58:02 -05:00
Code Issues Projects Releases Packages Wiki Activity
4143 commits 39 branches 47 tags 112 MiB
Commit graph

681 commits

Author SHA1 Message Date
David Mehren
41f412725f
Merge pull request #1313 from hedgedoc/renovate/develop-ts-loader-9.x 
chore(deps): update dependency ts-loader to v9.2.2 (develop)
 2021-06-01 20:29:36 +02:00
Renovate Bot
c4e368fdfc
chore(deps): update dependency ts-loader to v9.2.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-06-01 18:22:22 +00:00
Renovate Bot
d0b157397d
fix(deps): update nestjs packages to v7.6.17 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-06-01 18:22:08 +00:00
David Mehren
a7b417ec51
Merge pull request #1333 from hedgedoc/renovate/develop-definitelytyped 
chore(deps): update dependency @types/express to v4.17.12 (develop)
 2021-06-01 20:18:03 +02:00
David Mehren
0eb03192eb
Update dependency ts-jest to v27 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-06-01 20:11:13 +02:00
Renovate Bot
b79d8b5e98
chore(deps): update dependency jest to v27 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-06-01 18:07:00 +00:00
Renovate Bot
d72716c80a
chore(deps): update dependency @types/express to v4.17.12 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-06-01 18:05:20 +00:00
Renovate Bot
4b9e95cc13
chore(deps): update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-31 17:49:08 +00:00
David Mehren
112e6d8c5d
Merge pull request #1284 from hedgedoc/publicId 2021-05-17 20:33:11 +02:00
Philip Molares
11b0946f1d chore(dependency): Add base32-encode 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-05-17 20:27:43 +02:00
Renovate Bot
60c18ea1d5
Update linters to v4.24.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-17 17:58:33 +00:00
Yannick Bungers
15e51f1244
Merge pull request #1260 from hedgedoc/renovate/develop-prettier-2.x 2021-05-16 21:42:06 +02:00
Renovate Bot
38982657b0
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-15 19:06:53 +00:00
Renovate Bot
800f5a4dc3
Update dependency prettier to v2.3.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-15 19:06:39 +00:00
Renovate Bot
59343e74a4
Update dependency rxjs to v7.0.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-13 21:31:38 +00:00
Renovate Bot
8b26557f9f
Update dependency @types/node to v13.13.52 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-12 20:40:04 +00:00
Philip Molares
8c562016ab Refactor(note): Remove shortid from note 
This is a 1.x relict and isn't used anymore in 2.x. All 1.x shortids will be converted to aliases on migration of 1.x to 2.x.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-05-11 22:49:44 +02:00
Philip Molares
07a4de77d7 ESLint: Add custom rule 'correct-logger-context' 
This rule ensures, that the correct context is given in any logger statements.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-05-09 22:18:38 +02:00
Renovate Bot
cedbee5a94
Update dependency @types/bcrypt to v5 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-09 19:42:04 +00:00
David Mehren
f0c4fbe371
Disable strict mode for tests 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-05-09 20:59:31 +02:00
David Mehren
0334014f7e
Merge pull request #1248 from hedgedoc/renovate/develop-linters 
Update dependency eslint to v7.26.0 (develop)
 2021-05-09 14:45:42 +02:00
Renovate Bot
89b9160787
Update dependency eslint to v7.26.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-09 12:41:30 +00:00
Renovate Bot
84cb34eef3
Update dependency ts-loader to v9.1.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-09 12:41:15 +00:00
Yannick Bungers
77b7f30eb8
Merge pull request #1224 from hedgedoc/renovate/develop-linters 
Update linters to v4.22.1 (develop)
 2021-05-07 11:48:43 +02:00
Renovate Bot
041574bd07
Update linters to v4.22.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-05 20:27:14 +00:00
Renovate Bot
7d6596b822
Update dependency file-type to v16.4.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-05 20:26:59 +00:00
Renovate Bot
23640dc1ab
Update dependency ts-jest to v26.5.6 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-05-05 16:10:56 +00:00
David Mehren
8dbca54da7
Merge pull request #1206 from hedgedoc/test/seedDB 
[Project] Add seed script
 2021-05-02 17:54:14 +02:00
Yannick Bungers
cc82aae2ef
Merge pull request #1211 from hedgedoc/renovate/develop-pin-dependencies 
Pin dependency @tsconfig/node12 to 1.0.7 (develop)
 2021-05-01 14:20:34 +02:00
Renovate Bot
0af997ada1
Update dependency rxjs to v7 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-30 18:53:59 +00:00
Renovate Bot
1a99cdccab
Pin dependency @tsconfig/node12 to 1.0.7 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-30 18:53:44 +00:00
Yannick Bungers
bb9a6d7028
Merge pull request #1209 from hedgedoc/maintenance/ts_base_config 
Use Node 12 TypeScript base config
 2021-04-30 20:24:01 +02:00
David Mehren
5e61de9bd5
Use node12 TypeScript base config 
TypeScript recommends using a base config from https://github.com/tsconfig/bases.

Using this config reduces compile times by ~30%
and the size of the dist folder by ~45%.
It also enables the recommended `esModuleInterop` option,
which necessitated some changes to imports.
See also https://www.typescriptlang.org/docs/handbook/release-notes/typescript-2-7.html#support-for-import-d-from-cjs-from-commonjs-modules-with---esmoduleinterop

Signed-off-by: David Mehren <git@herrmehren.de>
 2021-04-29 22:55:01 +02:00
Philip Molares
55356f36a9 [Project] Add seed script 
This script invokes src/seed.ts to create a sqlite DB. The DB already contains some objects to manual test with. This ensures that devs easily can spin up a test instance of HedgeDoc and don't need to fumble around with the DB file.

See https://github.com/typeorm/typeorm#creating-a-connection-to-the-database

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-04-29 14:31:07 +02:00
Renovate Bot
42a627b464
Update dependency eslint-plugin-jest to v24.3.6 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-27 20:32:19 +00:00
Renovate Bot
5bb0600378
Update definitelyTyped 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-27 14:46:56 +00:00
David Mehren
2e3b5cbaf0
Merge pull request #1175 from hedgedoc/renovate/develop-linters 
Update linters (develop)
 2021-04-25 21:16:51 +02:00
Renovate Bot
fceb413929
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-24 15:33:20 +00:00
Renovate Bot
a164bd889c
Update dependency ts-loader to v9.1.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-24 11:22:22 +00:00
Renovate Bot
1e3b7b2dd8
Update dependency ts-loader to v9.1.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-22 20:22:10 +00:00
Renovate Bot
0bc51d7043
Update dependency ts-loader to v9 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-19 22:32:09 +00:00
Renovate Bot
c94beba669
Pin dependency eslint-plugin-jest to 24.3.5 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-17 13:01:27 +00:00
Philip Molares
2e1cbb3543 Dependency: Add eslint-plugin-jest 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-04-15 22:19:23 +02:00
Renovate Bot
24f4f41121
Update dependency @types/node to v13.13.50 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-15 20:08:26 +00:00
Renovate Bot
2425e8c40e
Update dependency ts-jest to v26.5.5 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-15 17:09:46 +00:00
Renovate Bot
15dcbb4878
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-15 11:08:16 +00:00
Yannick Bungers
caa4b1c927
Merge pull request #1134 from hedgedoc/renovate/develop-definitelytyped 
Update dependency @types/node to v13.13.49 (develop)
 2021-04-15 13:06:32 +02:00
Renovate Bot
00018a005c
Update dependency @types/node to v13.13.49 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-14 21:07:29 +00:00
Renovate Bot
ebb7c4738f
Update dependency typescript to v4.2.4 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-13 20:04:08 +00:00
Renovate Bot
80162b90bc
Update dependency @types/bcrypt to v3.0.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-09 22:42:57 +00:00
Renovate Bot
5e3fb9fad9
Update dependency @types/node-fetch to v2.5.10 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-08 10:57:13 +00:00
Yannick Bungers
ee5a587bcc
Merge pull request #1092 from hedgedoc/fix/e2eTests 2021-04-08 12:06:43 +02:00
Renovate Bot
9145c04242
Update linters to v4.21.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-05 18:36:25 +00:00
Renovate Bot
4b58381727
Update definitelyTyped 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-04-02 18:34:55 +00:00
Philip Molares
19d88e7e8c PackageJson: Add --runInBand to test:e2e scripts 
This ensures the e2e tests run in serially and never concurrently.

See https://jestjs.io/docs/cli#--runinband

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-04-01 00:18:24 +02:00
Renovate Bot
5c5cb69579
Update dependency typeorm to v0.2.32 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-31 20:47:05 +00:00
Renovate Bot
f2f929b446
Update linters to v4.20.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-29 21:12:20 +00:00
Renovate Bot
4d14fcb631
Update dependency rxjs to v6.6.7 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-29 00:05:10 +00:00
David Mehren
f06563941b
Merge pull request #1076 from hedgedoc/renovate/develop-ts-loader-8.x 
Update dependency ts-loader to v8.1.0 (develop)
 2021-03-28 20:34:27 +02:00
David Mehren
ef6407c767
Merge pull request #1072 from hedgedoc/renovate/develop-definitelytyped 
Update dependency @types/node to v13.13.48 (develop)
 2021-03-28 20:33:55 +02:00
David Mehren
843dfa95f0
Merge pull request #1071 from hedgedoc/renovate/develop-linters 
Update dependency eslint to v7.23.0 (develop)
 2021-03-28 20:33:47 +02:00
Renovate Bot
b053533f10
Update dependency ts-loader to v8.1.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-28 11:20:57 +00:00
Renovate Bot
581d99d418
Update dependency @types/node to v13.13.48 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-27 01:14:20 +00:00
Renovate Bot
deac20d9ce
Update dependency eslint to v7.23.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-26 21:58:11 +00:00
Renovate Bot
4420f50f7f
Update NestJS packages 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-26 11:24:58 +00:00
Renovate Bot
52b0107c89
Update dependency @types/jest to v26.0.22 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-25 19:26:39 +00:00
David Mehren
7cfc372f83
Merge pull request #1055 from hedgedoc/renovate/develop-nestjs-packages 
Update NestJS packages to v7.6.15 (develop)
 2021-03-25 20:24:46 +01:00
Renovate Bot
7114aa3b9b
Update linters to v4.19.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-25 11:21:20 +00:00
Renovate Bot
e65b5f21e8
Update NestJS packages to v7.6.15 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-25 11:21:07 +00:00
Renovate Bot
534af7b059
Update dependency @nestjs/swagger to v4.8.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-19 14:43:34 +00:00
David Mehren
4cea16e454
Merge pull request #1043 from hedgedoc/renovate/develop-definitelytyped 
Update dependency @types/jest to v26.0.21 (develop)
 2021-03-18 21:36:58 +01:00
Renovate Bot
761a0e621f
Update dependency @types/jest to v26.0.21 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-17 16:05:02 +00:00
Renovate Bot
a2a5080348
Update dependency ts-jest to v26.5.4 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-17 13:46:03 +00:00
Renovate Bot
37ff95c8c3
Update dependency @types/node to v13.13.47 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-15 22:49:00 +00:00
Renovate Bot
963e425713
Update linters to v4.18.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-15 19:22:12 +00:00
Renovate Bot
3d56d43c70
Update dependency ts-loader to v8.0.18 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-14 17:52:33 +00:00
Renovate Bot
13badf8108
Update dependency @azure/storage-blob to v12.5.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-14 17:49:35 +00:00
Renovate Bot
14ad803368
Update dependency @types/node to v13.13.46 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-14 17:46:28 +00:00
Renovate Bot
4632fac586
Update NestJS packages 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-14 17:42:57 +00:00
Renovate Bot
5fbfe27973
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-14 16:21:22 +00:00
Renovate Bot
bf919e2309
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-07 21:23:35 +00:00
David Mehren
a94334bf7c
Merge pull request #991 from hedgedoc/renovate/develop-typescript-4.x 
Update dependency typescript to v4.2.3 (develop)
 2021-03-07 22:21:25 +01:00
Renovate Bot
2f0d37404e
Update dependency typescript to v4.2.3 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-07 21:16:23 +00:00
Renovate Bot
fca4920d1f
Update dependency file-type to v16.3.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-07 21:16:11 +00:00
Renovate Bot
dfbe2a2e35
Update dependency ts-jest to v26.5.3 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-03-04 08:30:33 +00:00
Renovate Bot
cc2c5808e9
Pin dependencies 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-27 22:12:19 +00:00
Philip Molares
2d98e2f8b4 S3Backend: Add S3 MediaBackend 
Add minio dependency

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-02-27 22:40:56 +01:00
Philip Molares
dde74f37ff AzureBackend: Add Azure MediaBackend 
Add @azure/storage-blob dependency
This is the relevant part of the official azure sdk.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-02-27 22:18:24 +01:00
Philip Molares
e2b2059bde ImgurBackend: Add Imgur MediaBackend 
Add node-fetch dependency.
This was chosen as other libs we use already use node-fetch.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-02-27 21:29:14 +01:00
David Mehren
b22d641406
ConsoleLoggerService: Fix ESLint errors 
We now use @types/cli-color to provide type information

Signed-off-by: David Mehren <git@herrmehren.de>
 2021-02-27 16:11:27 +01:00
David Mehren
a0ffa3be04
NoteEntity: Fix ESLint errors 
We now use @types/shortid to provide type information

Signed-off-by: David Mehren <git@herrmehren.de>
 2021-02-27 16:11:27 +01:00
David Mehren
d13466a626
Merge pull request #959 from hedgedoc/renovate/develop-bcrypt-5.x 
Update dependency bcrypt to v5.0.1 (develop)
 2021-02-26 12:06:34 +01:00
Renovate Bot
022070107c
Update dependency @nestjs/schematics to v7.2.8 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-26 09:55:26 +00:00
Renovate Bot
b9f2cce548
Update dependency bcrypt to v5.0.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-26 05:34:10 +00:00
David Mehren
25bb00c5ef
Merge pull request #950 from hedgedoc/renovate/develop-typescript-4.x 2021-02-25 21:48:49 +01:00
Renovate Bot
7e5e366c4b
Update dependency eslint-config-prettier to v8.1.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-25 20:02:01 +00:00
David Mehren
8c784beaf8
Merge pull request #938 from hedgedoc/renovate/develop-major-linters 2021-02-25 21:00:56 +01:00
Renovate Bot
4b0298e393
Update linters to v4.15.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-25 19:07:03 +00:00
Renovate Bot
4a33fd9fa2
Update dependency ts-jest to v26.5.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-25 19:03:08 +00:00
Renovate Bot
e021687440
Update dependency rxjs to v6.6.6 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-25 01:19:34 +00:00
Renovate Bot
c166d5bad2
Update NestJS packages 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-24 14:12:26 +00:00
Renovate Bot
39f4a2160a
Update dependency typescript to v4.2.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-23 23:51:55 +00:00
Renovate Bot
169639cf81
Update dependency eslint-config-prettier to v8 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-21 12:01:55 +00:00
Renovate Bot
9f27657da5
Update dependency @types/node to v13.13.45 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-20 10:17:41 +00:00
Renovate Bot
099d9c684c
Update dependency @types/node to v13.13.44 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-19 05:29:49 +00:00
Renovate Bot
c9ae443dda
Update dependency @nestjs/cli to v7.5.5 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-17 09:08:29 +00:00
Renovate Bot
215c47dcf9
Pin dependency nest-router to 1.0.9 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-16 21:07:58 +00:00
David Mehren
77f00d961a
Merge pull request #916 from hedgedoc/feature/prefixPublicApi 
PublicApi: Add correct prefix
 2021-02-16 21:49:54 +01:00
Philip Molares
73113dc361 PublicApi: Add correct prefix 
Using nest-router for this purpose as it is a rather easy addition to our structure. As we don't add the Router to any e2e tests we don't need to change them.

fixes #523

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-02-16 20:19:45 +01:00
Renovate Bot
d3e6a15eb0
Update dependency typeorm to v0.2.31 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-16 19:17:45 +00:00
David Mehren
b09fdd1f93
Merge pull request #913 from hedgedoc/renovate/develop-definitelytyped 
Update dependency @types/node to v13.13.42 (develop)
 2021-02-16 20:17:15 +01:00
Renovate Bot
861a970b8c
Update dependency class-transformer to v0.4.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-16 19:14:45 +00:00
Renovate Bot
b1bc079274
Update dependency @types/node to v13.13.42 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-16 19:14:30 +00:00
David Mehren
ca7c253af1
Merge pull request #918 from hedgedoc/renovate/develop-linters 2021-02-16 20:12:08 +01:00
Renovate Bot
d3790bf5dc
Update linters to v4.15.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-16 19:09:10 +00:00
Renovate Bot
772b2fac1d
Update dependency sqlite3 to v5.0.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-16 19:08:39 +00:00
Philip Molares
2a5f9df6dc Package.json: Switch yarn format and format:check 
Make `yarn format` check the files and `yarn format:fix` do the actually
fixing

fixes #920

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-02-16 10:46:29 +01:00
Renovate Bot
eeb536aca3
Update dependency eslint to v7.20.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-13 00:59:10 +00:00
Renovate Bot
2db97168ea
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-12 22:27:03 +00:00
David Mehren
f304c428a3
Merge pull request #905 from hedgedoc/renovate/develop-typescript-4.x 
Update dependency typescript to v4.1.5 (develop)
 2021-02-12 23:25:52 +01:00
Renovate Bot
1a40440ef1
Update dependency typescript to v4.1.5 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-12 22:21:49 +00:00
Renovate Bot
81285fd7e4
Update dependency ts-jest to v26.5.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-12 22:21:20 +00:00
Renovate Bot
8cb26623f1
Update dependency ts-loader to v8.0.17 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-12 22:17:13 +00:00
Renovate Bot
0c33c6b034
Update dependency joi to v17.4.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-12 22:11:05 +00:00
Renovate Bot
ade0cf3651
Update dependency @types/node to v13.13.41 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-12 22:03:57 +00:00
Renovate Bot
73fdcf8e23
Update NestJS packages 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-02-12 21:55:30 +00:00
Renovate Bot
1f26c992a1
chore(deps): update dependency ts-jest to v26.5.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-29 14:02:05 +00:00
Renovate Bot
df3e389b6f
fix(deps): update nestjs packages to v7.6.7 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-27 17:26:10 +00:00
Renovate Bot
af555d972b
chore(deps): update dependency supertest to v6.1.3 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-25 22:02:40 +00:00
Renovate Bot
999099c94b
fix(deps): pin dependencies 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-25 21:52:35 +00:00
Philip Molares
ee6293f5a3 auth: adds token-auth to public api 
adds auth service
adds auth module
adds token-auth strategy
adds token-auth to all public api calls

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-01-25 21:30:06 +01:00
Philip Molares
0a3247492a auth: Add cron to clean old tokens 
Rename AuthToken.identifier to label

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-01-25 21:30:04 +01:00
Philip Molares
8d89614a4d auth: adds token-auth to public api 
adds auth service
adds auth module
adds token-auth strategy
adds token-auth to all public api calls

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-01-25 21:29:59 +01:00
Philip Molares
15ca030b67 auth: add hash function 
the hash function uses bcrypt with 2^16 iterations.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
 2021-01-25 21:29:52 +01:00
Renovate Bot
2f126452ee
chore(deps): update linters to v4.14.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-25 19:38:27 +00:00
Renovate Bot
f37c131894
chore(deps): update dependency supertest to v6.1.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-25 06:43:08 +00:00
Renovate Bot
2f575600af
fix(deps): update nestjs packages 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-22 13:53:55 +00:00
Renovate Bot
519c191b42
fix(deps): update dependency @nestjs/swagger to v4.7.12 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-21 14:57:08 +00:00
Renovate Bot
a949d307d9
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-19 10:06:59 +00:00
Renovate Bot
bc6f591cac
Update dependency supertest to v6.1.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-15 21:45:12 +00:00
Renovate Bot
6eef37bed7
Update dependency @nestjs/swagger to v4.7.11 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-15 21:34:51 +00:00
Renovate Bot
bf3a35a44b
Update dependency @types/node to v13.13.40 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-15 21:28:54 +00:00
Renovate Bot
0a40edf8a7
Update dependency class-transformer to v0.3.2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-15 21:24:49 +00:00
Renovate Bot
6018760779
Update dependency class-validator to v0.13.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-14 05:45:22 +00:00
Renovate Bot
0f2ed457d8
Pin dependencies 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-13 21:29:09 +00:00
David Mehren
c55f7060be
Add proof of concept config system 
Signed-off-by: David Mehren <git@herrmehren.de>
Co-authored-by: Yannick Bungers <git@innay.de>
 2021-01-13 21:45:21 +01:00
Renovate Bot
7b89c94060
Update linters to v4.13.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-13 17:16:35 +00:00
Renovate Bot
3c324ab9c6
Update dependency typeorm to v0.2.30 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-13 17:07:58 +00:00
Renovate Bot
e4f2b25370
Update dependency file-type to v16.2.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-13 16:58:34 +00:00
Renovate Bot
9f38e596d4
Update dependency class-validator to v0.13.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-13 16:46:10 +00:00
Renovate Bot
762e2fda09
Update dependency @nestjs/swagger to v4.7.10 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-13 16:35:13 +00:00
Renovate Bot
b1101c8b0b
Update dependency @types/express to v4.17.11 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-12 22:29:20 +00:00
Renovate Bot
3254d32270
Update dependency sqlite3 to v5.0.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-08 15:41:58 +00:00
Renovate Bot
6918b7a0e5
Update definitelyTyped 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-07 09:15:51 +00:00
Renovate Bot
1f1fadf4f6
Update dependency @types/jest to v26 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 23:00:35 +00:00
Renovate Bot
4f8bb0f348
Update dependency ts-jest to v26.4.4 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 22:57:36 +00:00
Renovate Bot
aabb4e19db
Update dependency file-type to v16 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 22:54:07 +00:00
Renovate Bot
25e74f4ae7
Update dependency prettier to v2 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 22:44:29 +00:00
Renovate Bot
ffe2c8f557
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 22:25:56 +00:00
Renovate Bot
9429e8d6c5
Update dependency typescript to v4 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 22:21:58 +00:00
Renovate Bot
6759f535c4
Update dependency jest to v26.6.3 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 22:16:28 +00:00
Renovate Bot
96fe8a39ce
Update linters 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 22:13:17 +00:00
Renovate Bot
24de4cc477
Update dependency ts-node to v9 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 21:51:21 +00:00
Renovate Bot
90f8dfb77a
Update dependency ts-loader to v8 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 21:46:50 +00:00
Renovate Bot
07273bda1d
Update dependency supertest to v6 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 21:40:56 +00:00
Renovate Bot
7580a7ba13
Update dependency swagger-ui-express to v4.1.6 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 20:25:55 +00:00
Renovate Bot
62be9eb442
Update dependency typeorm to v0.2.29 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 20:14:55 +00:00
Renovate Bot
c41124bb2e
Pin dependency class-transformer to 0.3.1 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 20:03:59 +00:00
David Mehren
a9afd5030f
Add cli-color dependency, that previously was in @nestjs/common 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-01-06 20:56:11 +01:00
Renovate Bot
3f1783dcde
Update NestJS packages 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 19:43:16 +00:00
Renovate Bot
50e7352467
Update dependency class-transformer to ^0.3.0 [SECURITY] 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-06 18:38:14 +00:00
David Mehren
cb44ebda5b
Add coverage analysis to CI workflow 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-01-06 13:05:15 +01:00
David Mehren
c6cdba4844
Add CI workflow 
Signed-off-by: David Mehren <git@herrmehren.de>
 2021-01-06 13:05:15 +01:00
Renovate Bot
86b54a9c5e
Pin dependencies 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2021-01-05 22:12:43 +00:00
David Mehren
560efc71d8
Use useStaticAssets instead of @nestjs/serve-static 
`serve-static` does not work with `createTestingModule` and is not recommended when "just" serving a few images.

See https://github.com/nestjs/serve-static/issues/240

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-10-24 11:32:23 +02:00
David Mehren
9743018591
Use serve-static to serve uploaded files. 
Add `@nestjs/serve-static` to serve uploaded media from the upload directory on the local filesystem.

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-10-17 19:58:22 +02:00
David Mehren
7a6c06d068
Add MediaService 
This service is responsible for operations regarding uploaded media. It should perform save, get and delete operations with the configured backend.
The service also checks, if the mime type of the uploaded media is allowed.

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-10-17 19:58:22 +02:00
David Mehren
98e2bf106e
Collect coverage information for E2E tests 
As proposed in https://github.com/nestjs/nest/issues/3169#issuecomment-588287478

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-10-03 18:00:12 +02:00
David Mehren
b4b91acddb
NotesController: Use custom logic to access raw markdown 
NestJS does not support content-types other than application/json.
Therefore we need to directly access the request object to get the raw body content.

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-09-25 21:35:47 +02:00
David Mehren
81126bb864
Do not automatically fix linting problems 
Signed-off-by: David Mehren <git@herrmehren.de>
 2020-08-21 21:45:53 +02:00
David Mehren
db026d6a57
Add Session entity 
This entity implements the Session interface from connect-typeorm, which we will later use to store session data from express-session.

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-08-20 19:43:12 +02:00
David Mehren
f3d1644f95
Enable automatic OpenAPI spec generation. 
NestJS can automatically generate an OpenAPI spec by analyzing controllers and used DTOs.
This commit enables this feature. The API docs are served under /apidoc.

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-08-20 19:43:08 +02:00
David Mehren
56d5a2e1b1
Add NoteModule 
This contains the module, a model which was adapted from the old code and two DTOs.

Signed-off-by: David Mehren <git@herrmehren.de>
 2020-08-20 19:43:07 +02:00
David Mehren
4135b7e6e4
Add TypeORM support 
Signed-off-by: David Mehren <git@herrmehren.de>
 2020-08-20 19:43:06 +02:00
David Mehren
f4caee2ac7
Add empty NestJS application 
Signed-off-by: David Mehren <git@herrmehren.de>
 2020-08-20 19:43:06 +02:00
Sheogorath
6c1ca5bd8d
Run database migrations automatically on startup 
Instead of using sequelize-cli and ensure migrations by shellscript,
this patch automates database migrations properly to the umzug library.
The sequelize CLI becomes a dev dependencies as it's still useful for
generating migrations.

This should eliminate the need for crude generating of database config
files and alike. Instead we utilize the pre-configured sequelize
connection that CodiMD will use anyway.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-07-11 20:33:35 +02:00
David Mehren
4df1ea6a5c
Upgrade pg package to fix node version 14 compatibility 
This is a forward-port of d6ce60c.

The old pg version doesn't work with node version 14 due to
an undocumented API change in the `readyState` in the socket API.
This patch updates the required dependency and this way resolves the
issue.

Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-07-10 18:52:15 +02:00
Dexter Chua
c112a15171 Fully dedicate our soul to yarn 
Signed-off-by: Dexter Chua <dalcde@yahoo.com.hk>
 2020-06-18 16:18:37 +08:00
Sheogorath
5ced1f3cdd
Split frontend and backend build 
It should be possible to run a backend build without the need to start
the application and without the need to fiddle around with PATH or
fiddling with `node_modules`. Therefore this patch splits the build
command into `build-frontend` and `build-backend`, which will allow
those builds to be done independent and have a separate command `build`
which will provide the combination of both of them.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-06-03 11:59:03 +02:00
David Mehren
591096ce8b
Add @types/codemirror 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-05-25 23:33:47 +02:00
David Mehren
a148e4d799
Add @types for sinon 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-05-22 21:48:15 +02:00
David Mehren
ac030760ba
Fix mocha tests in TypeScript 
`mock-require` does not work with TypeScript, as the compiled JS expects a sub-object: `import { config } from Config` compiles to `const config_1 = require("./config")`, but the config object is now in `config_1.config`, *not* in `config_1` directly.

Therefore `mock-require` was replaced with `ts-mock-imports`, which also simplifies the code a bit.

Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-05-22 21:48:15 +02:00
David Mehren
3b8c85cc9b
Migrate tests to TypeScript 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-05-22 21:48:11 +02:00
David Mehren
acdd627027
Lint .ts files too 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-05-22 21:11:37 +02:00
David Mehren
aaff73036b
Fix remaining paths after moving everything to src 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-05-22 14:19:12 +02:00
David Mehren
ba6055a03d
Downgrade jQuery to 3.4.1 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:19 +02:00
David Mehren
73d4023155
note/actions.ts: Formatting fixes and lint exceptions 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:17 +02:00
Philip Molares
3c216795e7
added all @types for passport-strategies as devDependencies 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:15 +02:00
Philip Molares
ef6632cac9
added userRouter.ts 
- added @types/passport
- added @types/archiver
- types all req and res arguments
- renamed unused argument next to _

Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:12 +02:00
Philip Molares
ab5a654068
added @types/minio to devDependencies 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:09 +02:00
Philip Molares
7125072fc5
moved @types to devDependencies 
Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:09 +02:00
Yannick Bungers
6d256dd5b6
Added Types for csp.ts 
Signed-off-by: Yannick Bungers <git@innay.de>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:09 +02:00
David Mehren
b6ad2b2625
Add @types/lodash 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:05 +02:00
Philip Molares
f9193822a7
created letter-avatars.ts 
added @types/randomcolor

Signed-off-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:04 +02:00
David Mehren
7cdcf627db
note.ts: ESLint fixes, add types for diff-match-patch 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:04 +02:00
David Mehren
0228d00c56
Use ESLint and 'typescript-eslint' plugin. 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:03 +02:00
David Mehren
1d4107fe90
Migrate models to TypeScript 
Co-authored-by: David Mehren <dmehren1@gmail.com>
Co-authored-by: Yannick Bungers <git@innay.de>
Co-authored-by: Philipp Hochkamp <me@phochkamp.de>
Co-authored-by: nzbr <mail@nzbr.de>

Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:01 +02:00
David Mehren
54cd556f2f
Add sequelize-typescript 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 12:36:39 +02:00
Bennet Bleßmann
d2b963f652
add resolution to resolve sub-package dependency ldapauth-fork to at least 4.3.0 
Signed-off-by: Bennet Bleßmann <bb-github@t-online.de>
 2020-04-21 16:07:25 +02:00
Sheogorath
a2522888b2
Remove PDF export 
As we already decleared in earlier versions, this patch removes PDF
export entirely. It's a not acceptable security risk for every CodiMD
instance.

The current implementation allowed to extract arbitary files from the
CodiMD host and therefore leaking secrets from a `/etc/passwd` to
CodiMD's own config files and all secrets contained in it.

Thanks to Joona for finding this vulnerability in August last year,
which lead to an emergency disabling of PDF exports in 1.5.0.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-26 15:05:54 +01:00
Erik Michelson
c976217c12
Remove mattermost integration 
Signed-off-by: Erik Michelson <erik@liltv.de>
 2020-02-25 14:33:30 +01:00
David Mehren
0d788e0aec
Add typescript dependency & tsconfig.json 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-02-24 15:08:20 +01:00
Sheogorath
8ce7b28563
Release version 1.6.0 
Thanks for all contributions, this community is awesome.
 2020-02-18 00:17:48 +01:00
Antoine Aflalo
85e1eb4b90 Update mermaid 
Signed-off-by: Antoine Aflalo <antoine@warrantymaster.com>
 2020-02-10 17:12:31 +00:00
Sheogorath
b3d4cdbceb
Update RevealJS to version 3.9.2 
This update of revealJS helps us to get rid of the headjs depedency
integration using webpack. It updates reveal.js to 3.9.2 and updates the
csp hash accordingly for using the slide mode.

Background for this update is the critical security vulnerability
described by snyk in their disclosure:
https://snyk.io/vuln/SNYK-JS-REVEALJS-543841

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-01 12:53:15 +01:00
David Mehren
3e218e2983
Upgrade webpack & plugins 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2019-11-23 18:11:17 +01:00
snyk-bot
5dbfb82b7f fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478
 2019-11-16 05:35:27 +00:00
Sheogorath
01bff246b0
Merge pull request #210 from davidmehren/mathjax_fix 
Fix compatibility with MathJax 2.7.6
 2019-10-29 14:18:38 +01:00
Sheogorath
68ee654c16
Merge pull request #212 from davidmehren/webpack_cleanup 
Remove unused webpack plugins from package.json
 2019-10-29 14:17:41 +01:00
Sheogorath
402dc7095e
Upgrade all ORM/database related packages 
This patch provides some major upgrades to all database backend library.
It also fixes an issues that appears since the change from sequelize v3
to v5 where mariadb was originally handled by mysql2 and is now handled
by an own mariadb library.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-10-28 01:43:22 +01:00
David Mehren
17f2a11310
Remove unused webpack plugins from package.json 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2019-10-25 21:54:09 +02:00
David Mehren
88b855beb2
Fix compatibility with MathJax 2.7.6 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2019-10-25 21:50:48 +02:00
snyk-bot
72f74b1b23 fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MARKDOWNIT-459438
 2019-10-10 05:32:44 +00:00
snyk-bot
511873e58a fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HELMETCSP-469436
 2019-09-30 05:32:48 +00:00
snyk-bot
0185add27f fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063
 2019-09-26 05:32:43 +00:00
Tobias Kremer
ea3c824978 Move sequelize-cli from devDependencies to dependencies, because it is needed to run migrations at run-time 
Signed-off-by: Tobias Kremer <tobias.kremer@gmail.com>
 2019-09-06 10:42:30 +02:00
snyk-test
47d2b99582 fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AUTOLINKER-73494
- https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751
 2019-08-20 05:32:45 +00:00
Sheogorath
9c1665ae5b
Release version 1.5.0 2019-08-15 23:30:37 +02:00
Sheogorath
e574ae7588
Switch mysql library to mysql2 
The recent sequelize upgrade introduced some other dependencies, this is
one of them. This patch replaces the old `mysql` library with `mysql2`.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-08-15 23:14:53 +02:00
Sheogorath
c4053ea7ce
Update meta-marked to latest version 
Meta-marked 0.4.4 which we used from our git repository contains a
RegexDOS attack in the marked dependency. The dependency was already
updated in our meta-marked repository, but not updated in yarn.

This made us still vulnerable to this ReDOS which was able to cause a
DOS attack on the server when updating a note.

For Details:

https://github.com/markedjs/marked/releases/tag/v0.7.0
https://github.com/markedjs/marked/pull/1515

What is a ReDOS?

A ReDOS attack is a DOS attack where an attacker targets a
not-well-written Regular Expression. Regular expressions try to build a
tree of all possibilities it can match in order to figure out if the
given statement is valid or not. A ReDOS attack abuses this concept by
providing a statement that doesn't match but causes extremly huge trees
that simply lead to exhausting CPU usage.

For more details see: https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS

Credit:

Huge thanks to @bitinerant for finding this and handling it with a
responsible disclosure.

Also thanks to the `marked`-team for fixing things already.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-08-15 23:14:48 +02:00
snyk-test
6f588826e0 fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MERMAID-174698
 2019-07-24 05:32:45 +00:00
Sheogorath
0d5923d61c
Update sequelize to latest version 
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-06-22 16:29:09 +02:00
BoHong Li
63c96e7359
fix: upgrade sequelize to latest version to fix CVE 
Signed-off-by: BoHong Li <a60814billy@gmail.com>
 2019-06-11 00:41:50 +02:00
Sheogorath
6462968e84
Merge pull request #97 from SISheogorath/fix/linting 
Fix eslint warnings
 2019-06-04 16:09:46 +02:00
Sheogorath
51d69d993c
Release version 1.4.0 
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-05-31 01:08:45 +02:00
Sheogorath
4da68597f7
Fix eslint warnings 
Since we are about to release it's time to finally fix our linting. This
patch basically runs eslint --fix and does some further manual fixes.
Also it sets up eslint to fail on every warning on order to make
warnings visable in the CI process.

There should no functional change be introduced.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-05-31 00:30:29 +02:00
Claudius
806ebe6e1a drop node 6 support 
We will no longer test on node6 and instead focus on 8+. This won't
break node6 immediately, but we will no longer go out of our way
supporting a version that does not receive security updates.

Signed-off-by: Claudius <opensource@amenthes.de>
 2019-05-13 19:37:21 +02:00
Claudius
4833f300c5 polyfilling scrypt for node 8.5+ 
Signed-off-by: Claudius <opensource@amenthes.de>
 2019-05-13 19:37:21 +02:00
Claudius
1d403e183d asyncified setting and verifying the password 
Signed-off-by: Claudius <opensource@amenthes.de>
 2019-05-13 19:37:21 +02:00
Claudius
4b579be93e Adding the first few lines of user model test 
Signed-off-by: Claudius <opensource@amenthes.de>
 2019-05-13 14:37:08 +02:00
Sheogorath
9101be92ab
Update jQuery to version 3.4.1 2019-05-06 10:42:41 +02:00
Christoph (Sheogorath) Kern
81904b6717
Merge pull request #51 from SISheogorath/fix/wurl 
Replace js-url with wurl
 2019-04-19 21:46:08 +02:00
snyk-bot
54fd5ee0a2 fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-174183
 2019-04-16 19:16:26 +00:00
Sheogorath
c0e75b8606
Replace js-url with wurl 
js-url is outdated and wurl is it's successor. This will fix some
vulnerabilities in the dependencies and also optimize the build process
by removing the external library toward internal tooling.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-04-16 19:28:23 +02:00
Max Wu
fb399ebe73
Fix stored XSS in the graphviz error message rendering [Security Issue] 
Signed-off-by: Max Wu <jackymaxj@gmail.com>

Co-Authored-By: Sheogorath <sheogorath@shivering-isles.com>
 2019-04-16 14:05:26 +02:00
Sheogorath
e014a73393
Update meta-marked to fix possible vulnerabilities 
Snyk informed us about possible vulnerabilities in meta-marked. It seems
like at least some of them were already address by HackMD around a year
ago but never pushed upstream to CodiMD.

This patch provides a fix by using an up-to-date dependency from our own
repository with CI integration.

Details: https://app.snyk.io/vuln/SNYK-JS-JSYAML-174129

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-04-10 13:11:57 +02:00
Christoph (Sheogorath) Kern
ef348fc49b
Merge pull request #33 from codimd/lutim-support 
Add support for image hosting with lutim
 2019-04-10 11:39:11 +02:00
Dylan Dervaux
208070d2e7
Add lutim support 
Signed-off-by: Dylan Dervaux <dylanderv05@gmail.com>
 2019-04-10 01:37:12 +02:00
Sheogorath
1f55150441
Fix broken dependency js-sequence-diagrams 
A few days ago the dependency was removed from npm. this causes various
setups to fail and blocks deployments and development.

This patch should fix the dependency and allow CodiMD to move forward.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-04-10 00:18:24 +02:00
snyk-bot
502c70008e fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-JSYAML-174129
 2019-04-07 19:49:25 +00:00