Renovate Bot
936df7e067
chore(deps): lock file maintenance
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-05 00:17:01 +00:00
David Mehren
9c58cd1cfc
Merge pull request #1423 from hedgedoc/renovate/master-test-packages
2021-07-03 18:39:44 +02:00
Renovate Bot
67498905c1
chore(deps): update dependency mocha to v9.0.2
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 16:03:54 +00:00
David Mehren
a4c0121caf
Merge pull request #1424 from hedgedoc/renovate/master-prismjs-1.x
...
chore(deps): update dependency prismjs to v1.24.1 (master)
2021-07-03 18:02:43 +02:00
Renovate Bot
93eb7e19af
chore(deps): update dependency prismjs to v1.24.1
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 11:59:29 +00:00
David Mehren
791f3482b5
Merge pull request #1413 from hedgedoc/renovate/master-lock-file-maintenance
...
chore(deps): lock file maintenance (master)
2021-07-03 10:42:33 +02:00
Renovate Bot
f40ad5b9a8
chore(deps): lock file maintenance
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 08:38:43 +00:00
David Mehren
e9059e43dd
Merge pull request #1405 from hedgedoc/renovate/master-optimize-css-assets-webpack-plugin-6.x
...
chore(deps): update dependency optimize-css-assets-webpack-plugin to v6.0.1 (master)
2021-07-03 10:34:11 +02:00
David Mehren
f5c228d790
Merge pull request #1411 from hedgedoc/renovate/master-mermaid-8.x
...
chore(deps): update dependency mermaid to v8.11.0 (master)
2021-07-03 10:34:02 +02:00
Renovate Bot
7d38462650
chore(deps): update dependency mermaid to v8.11.0
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 08:29:40 +00:00
Renovate Bot
5b0466f45a
chore(deps): update dependency optimize-css-assets-webpack-plugin to v6.0.1
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 08:29:27 +00:00
David Mehren
2bec179272
Merge pull request #1412 from hedgedoc/renovate/master-prismjs-1.x
...
chore(deps): update dependency prismjs to v1.24.0 (master)
2021-07-03 10:28:11 +02:00
David Mehren
9553c7193b
Merge pull request #1422 from hedgedoc/renovate/master-linters
...
chore(deps): update dependency eslint to v7.30.0 (master)
2021-07-03 10:27:24 +02:00
David Mehren
efae24bfff
Merge pull request #1408 from hedgedoc/renovate/master-mini-css-extract-plugin-1.x
...
chore(deps): update dependency mini-css-extract-plugin to v1.6.2 (master)
2021-07-03 10:26:51 +02:00
Renovate Bot
b50005842e
chore(deps): update dependency prismjs to v1.24.0
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 08:16:59 +00:00
Renovate Bot
639a8bedd8
chore(deps): update dependency eslint to v7.30.0
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 08:16:30 +00:00
Renovate Bot
19c0125edf
chore(deps): update dependency mini-css-extract-plugin to v1.6.2
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 08:16:02 +00:00
David Mehren
4263cbf5b0
Merge pull request #1395 from hedgedoc/renovate/master-test-packages
...
chore(deps): update dependency mocha to v9.0.1 (master)
2021-07-03 10:14:38 +02:00
Renovate Bot
cbf3c51edd
chore(deps): update dependency mocha to v9.0.1
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-03 08:03:11 +00:00
David Mehren
53bfb8d149
Merge pull request #1415 from hedgedoc/renovate/master-turndown-7.x
...
chore(deps): update dependency turndown to v7.1.1 (master)
2021-07-03 09:59:22 +02:00
David Mehren
5d66755831
Merge pull request #1406 from hedgedoc/renovate/master-mkdocs-material-7.x
...
chore(deps): update dependency mkdocs-material to v7.1.9 (master)
2021-07-03 09:57:08 +02:00
Renovate Bot
c8472b5823
chore(deps): update dependency turndown to v7.1.1
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-29 16:57:05 +00:00
Renovate Bot
f0110eae23
chore(deps): update dependency mkdocs-material to v7.1.9
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-25 10:53:38 +00:00
David Mehren
3c504f2dc9
Merge pull request #1387 from hedgedoc/renovate/master-lock-file-maintenance
2021-06-21 14:00:13 +02:00
Renovate Bot
bfa2eac7f5
chore(deps): lock file maintenance
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-21 11:35:26 +00:00
David Mehren
bf0c348e74
Merge pull request #1400 from hedgedoc/renovate/master-linters
...
chore(deps): update dependency eslint to v7.29.0 (master)
2021-06-21 13:30:37 +02:00
David Mehren
8ab65869ff
Merge pull request #1384 from hedgedoc/renovate/master-mkdocs-material-7.x
...
chore(deps): update dependency mkdocs-material to v7.1.8 (master)
2021-06-21 13:30:12 +02:00
Renovate Bot
26b8abe2a9
chore(deps): update dependency eslint to v7.29.0
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-18 20:29:58 +00:00
Renovate Bot
2125e9b98d
chore(deps): update dependency mkdocs-material to v7.1.8
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-12 14:17:30 +00:00
David Mehren
66bdbc1f43
Merge pull request #1370 from hedgedoc/feature/lazy_load
2021-06-12 16:16:22 +02:00
David Mehren
7ff685933e
Lazy-load highlight.js
...
This commit moves the import of highlight.js into a `require.ensure`
block, that is only executed when a code-block is actually present
in a note. Webpack automatically splits the library into a separate
chunk and loads that on demand.
The call to `hljs.listLanguages()` in `index.js` is also replaced
by a static list. This is important, as `index.js` would otherwise
need to import highlight.js, which would cause the quite big
library to be included into nearly every entrypoint, needlessly
increasing the transferred code size.
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-11 09:29:27 +02:00
David Mehren
5b8b76135b
Lazy-load viz.js
...
This commit moves the import of viz.js into a `require.ensure` block,
that is only executed when a graphviz diagram is actually present
in a note. Webpack automatically splits the library into a separate
chunk and loads that on demand.
To ensure that graphviz code-blocks are not treated as normal
code-blocks while the chunk is loading, a corresponding check is added
to `finishView`.
The library is also removed from the Webpack config file, as it only
is used at one place in extra.js, which is handled by Webpack
without any extra config.
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-11 09:29:26 +02:00
David Mehren
1c023e7881
Lazy-load abcjs
...
This commit moves the import of abcjs into a `require.ensure` block,
that is only executed when a abc diagram is actually present
in a note. Webpack automatically splits the library into a separate
chunk and loads that on demand.
To ensure that abc code-blocks are not treated as normal
code-blocks while the chunk is loading, a corresponding check is added
to `finishView`.
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-11 09:29:26 +02:00
David Mehren
938afbddc3
Replace handlebars with string.replace
...
The html.hbs template does not contain any logic,
so we can replace the lib with good old string.replace calls.
This significantly reduces the bundle size, as we don't have to ship
a full template engine to the client.
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-11 09:29:26 +02:00
David Mehren
b45b8b9c0d
Lazy-load mermaid
...
This commit moves the import of mermaid into a `require.ensure` block,
that is only executed when a mermaid diagram is actually present
in a note. Webpack automatically splits the library into a separate
chunk and loads that on demand.
To ensure that mermaid code-blocks are not treated as normal
code-blocks while the chunk is loading, a corresponding check is added
to `finishView`.
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-11 09:26:03 +02:00
David Mehren
3f5755ed80
Merge pull request #1362 from hedgedoc/renovate/master-lock-file-maintenance
...
chore(deps): lock file maintenance (master)
2021-06-10 21:55:57 +02:00
Renovate Bot
33c1ce00e4
chore(deps): lock file maintenance
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-10 19:30:50 +00:00
David Mehren
3125217e17
Merge pull request #1381 from hedgedoc/renovate/master-mkdocs-1.x
...
chore(deps): update dependency mkdocs to v1.2.1 (master)
2021-06-10 21:27:35 +02:00
Renovate Bot
7dd0efa688
chore(deps): update dependency mkdocs to v1.2.1
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-09 17:35:54 +00:00
David Mehren
37605447e2
Merge pull request #1366 from hedgedoc/renovate/master-mkdocs-1.x
...
chore(deps): update dependency mkdocs to v1.2 (master)
2021-06-08 23:10:01 +02:00
Renovate Bot
0a7d0a74fa
chore(deps): update dependency mkdocs to v1.2
...
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-06-08 20:35:36 +00:00
Yannick Bungers
1d082ae827
Merge pull request #1369 from hedgedoc/feature/remove_unsafe_eval
2021-06-08 22:16:07 +02:00
David Mehren
e7e1313691
Merge pull request #1371 from hedgedoc/feature/optimize_webpack
2021-06-08 21:09:44 +02:00
David Mehren
960f5c1b22
Merge pull request #1375 from hedgedoc/feature/yeet_google_analytics
2021-06-08 14:54:03 +02:00
David Mehren
f86fae3bd7
Don't use eval-based source maps
...
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-07 23:04:45 +02:00
David Mehren
3cd169a650
Remove unsafe-eval from default CSP
...
As script-loader was removed in the previous commits,
we can finally tighten up security.
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-07 23:04:45 +02:00
David Mehren
2cecb9184b
Merge pull request #1368 from hedgedoc/feature/remove_script_loader
2021-06-07 22:58:35 +02:00
David Mehren
5e771c2f65
Update Content Security Policy docs
...
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-07 22:57:12 +02:00
David Mehren
7283ccd5e8
Allow configuring Disqus & GA CSP with env vars
...
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-07 22:57:12 +02:00
David Mehren
0c6482abc5
Add release notes for CSP changes
...
Signed-off-by: David Mehren <git@herrmehren.de>
2021-06-07 22:57:12 +02:00