Commit graph

5739 commits

Author SHA1 Message Date
Timothée Alby
8ec7ebe645 Merge pull request #3713 from overleaf/jpa-login-event-drop-pii
[AuthenticationController] do not include PII as part of login event

GitOrigin-RevId: 274378b3a21945637dc33d2cfb39a53e9aaad9b7
2021-03-30 02:05:09 +00:00
Timothée Alby
b2b9a05e3c Merge pull request #3706 from overleaf/msm-jlm-configurable-text-extensions
New ADDITIONAL_TEXT_EXTENSIONS env to support extra editable files

GitOrigin-RevId: 03bec0a1a9dbd303754f0b90377d1b7d1ec3f528
2021-03-30 02:05:04 +00:00
Timothée Alby
d346172819 Merge pull request #3776 from overleaf/ho-post-clsi-cookie
convert _populateServerIdViaRequest to a post request

GitOrigin-RevId: cbbf926708804527ba3717a66e9f0192ecf70fbd
2021-03-30 02:04:59 +00:00
Jakob Ackermann
deca5f3b0d Merge pull request #3810 from overleaf/jpa-meta-tag-user-sessions
[views] user/sessions: refactor window assignment into meta tag

GitOrigin-RevId: a5b07ccc99021b2c72a5888b9a9d28c1c458e1e9
2021-03-27 03:05:13 +00:00
Jakob Ackermann
f66fa58a7c Merge pull request #3745 from overleaf/jpa-project-restore-handle-deleted-files
[ProjectDeleter] restore project.deletedFiles into own collection

GitOrigin-RevId: cb34e0e22609a49c676ebfe0753e650699b96f5d
2021-03-27 03:05:01 +00:00
Alf Eaton
a5637651b5 Add Content-Security-Policy header (#3783)
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header

GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
Alf Eaton
116f167a6f Merge pull request #3813 from overleaf/ae-user-has-feature-follow-up
Fix React attributes for Add Files modal

GitOrigin-RevId: 8254cdd14accdd8ead710d75a3ad4df75fc05134
2021-03-26 03:04:52 +00:00
Alf Eaton
974fe8fd39 Remove optional hyphens from pug templates (#3788)
GitOrigin-RevId: 2d31719a6aaefb85bba323d65ed66bdb06ec8928
2021-03-25 03:05:05 +00:00
Alf Eaton
54e6053cf9 Fix some aria-hidden attributes (#3790)
GitOrigin-RevId: a48086c01abd937b2e03ced38e8baf6c67753f56
2021-03-25 03:05:01 +00:00
Alf Eaton
ee79728bf9 Only check a user's features for importing from reference provider (#3797)
GitOrigin-RevId: cc5a36be20c673f8941a2694eaeba80eebb4db6a
2021-03-25 03:04:57 +00:00
Paulo Jorge Reis
3f0e897e32 Logs UI variant without popup (#3794)
* Add logs UI without pop-up variant

* Implement frontend for logs UI without pop-up

* Add logs UI variants to admin panel and front user info

* Fix existing UI subvariant window global

GitOrigin-RevId: 075db56032354d782e489b5235925f55b1a67e0b
2021-03-24 03:04:41 +00:00
Jakob Ackermann
535c97e8cf Merge pull request #3774 from overleaf/jpa-meta
[frontend] import meta tag processing from das7pads fork

GitOrigin-RevId: ca74ff9fbbcb51091a626a45468ff3d24d6136ca
2021-03-23 03:05:12 +00:00
Alf Eaton
2e305f36bc Ensure that Features.hasFeature returns a boolean (#3796)
GitOrigin-RevId: f3961f032c6c91c29afaf239c291857798dad3ad
2021-03-20 03:04:41 +00:00
Paulo Jorge Reis
15f49994bd New compile UI autocompile (#3762)
* Animate recompile button when autocompile is waiting

* Add code-check failed notice to the new compile UI

GitOrigin-RevId: 83b62f41438e8e5b94bd893c222bec37745c0f57
2021-03-19 03:04:50 +00:00
Alf Eaton
ba4300d9e1 Merge pull request #3518 from overleaf/ae-react-create-file-modal
Migrate "Add Files" modal to React

GitOrigin-RevId: fc5235108ee65294e3176da9c327791c34aa5b3c
2021-03-19 03:04:46 +00:00
Brian Gough
be95516185 Merge pull request #3761 from overleaf/bg-redis-and-request-cleanups
redis and request cleanups

GitOrigin-RevId: d2bf133ef823c96b06eb09b4ef2c83ba7c54cd12
2021-03-19 03:04:40 +00:00
Jakob Ackermann
83a38a9980 Merge pull request #3764 from overleaf/jpa-drop-alternative-plans-page-logic
[SubscriptionController] drop unused handling of alternative plans page

GitOrigin-RevId: 1a4ec8276ac0ea87567cfbad9f8d82544267320c
2021-03-18 03:05:04 +00:00
Jakob Ackermann
1e2ed05bed Merge pull request #3760 from overleaf/jpa-xss-5
[views] mitigate Angular XSS on new project from template POST gateway

GitOrigin-RevId: a19de060cad0baf2822d1b6df419bbe1a2361ea4
2021-03-18 03:04:54 +00:00
Jakob Ackermann
f353728bda Merge pull request #3755 from overleaf/jpa-xss-2
[views] mitigate Angular XSS via email/new_email

GitOrigin-RevId: 3d127c283ba9f97c5b0e6c53a9d77f7f597058bb
2021-03-18 03:04:50 +00:00
Jakob Ackermann
7609b741fa Merge pull request #3768 from overleaf/jpa-xss-10
[views] mitigate Angular XSS on password reset page

GitOrigin-RevId: 65f423fcb1a3afff0f396bb8e173d1e1bcff056a
2021-03-18 03:04:45 +00:00
Jakob Ackermann
8766c23abb Merge pull request #3767 from overleaf/jpa-xss-9
[views] mitigate Angular XSS in email confirmation post gateway

GitOrigin-RevId: 11cd752d520054e448b3eeea431fe27f3c02fa00
2021-03-18 03:04:41 +00:00
Jakob Ackermann
115fe20184 Merge pull request #3766 from overleaf/jpa-xss-8
[views] mitigate Angular XSS in affiliations section of user settings

GitOrigin-RevId: bad444cea136c51f54546770653f21cec6fa70e3
2021-03-18 03:04:38 +00:00
Jakob Ackermann
58841ecbe9 Merge pull request #3765 from overleaf/jpa-xss-6
[views] mitigate Angular XSS in subscription dashboard

GitOrigin-RevId: 4ac0c431d520957aabd53436ae29a30c2aef3870
2021-03-18 03:04:34 +00:00
Thomas
001f7f0cc2 Merge pull request #3773 from overleaf/revert-3718-jel-emailHasLicence
Revert "Update emailHasLicence for reconfirmation and SAML"

GitOrigin-RevId: 637b85d10fc0c79e8d55e51b43952e956d73baa6
2021-03-16 03:04:44 +00:00
Thomas
fee245b570 Merge pull request #3732 from overleaf/tm-recurly-create-admin-link
Create link to Recurly in admin panel

GitOrigin-RevId: 214802e9fbe16954d455ac04eb176ff27890769c
2021-03-16 03:04:40 +00:00
Thomas
1c54a15e42 Merge pull request #3718 from overleaf/jel-emailHasLicence
Update emailHasLicence for reconfirmation and SAML

GitOrigin-RevId: 58daf538d9f0a7db46bb3c1e21f8ca04df095446
2021-03-16 03:04:36 +00:00
Jakob Ackermann
18eea6d024 Merge pull request #3763 from overleaf/jpa-xss-7
[views] mitigate XSS on new subscription page

GitOrigin-RevId: 74baa58527aa9b2f9e434c280885b627f73898b6
2021-03-13 03:05:14 +00:00
Alf Eaton
d9576189a3 Merge pull request #3636 from overleaf/ae-share-modal-split
Migrate Share modal to React

GitOrigin-RevId: 96a52df6ffd751cfcca2bbb68eb9e7a6dc31ff28
2021-03-13 03:05:10 +00:00
Miguel Serrano
a555f0d309 [ReactNavToolbar] Project name + pdf and share project buttons (#3709)
* Added project name, pdf toggle and share project buttons to navigation toolbar

* Added PropTypes check to `useChatContext()`

* React context updates for project name/rename, pdf view and share moda

* Hide PDF button when pdfLayout != 'flat'

GitOrigin-RevId: 3f4a1b072259df7148d3417cd22116702bdd79ac
2021-03-11 03:05:33 +00:00
Alexandre Bourdin
b8fc4b58ca Merge pull request #3741 from overleaf/ta-refresh-institution-users
Refresh Institution Users Script Changes

GitOrigin-RevId: 917287450ba30a9f8b605a2d38933a0f6e1979e6
2021-03-11 03:05:21 +00:00
Alexandre Bourdin
9415a1dd8d Merge pull request #3726 from overleaf/ta-ab-analytics-events
Add new analytics events

GitOrigin-RevId: f71a6dc5ccd44bdabb48c601f9f0e005cc765077
2021-03-11 03:05:15 +00:00
Alexandre Bourdin
8001e55b88 Merge pull request #3716 from overleaf/ta-tried-to-confirm-saml
Show Descriptive Error Mesage When Trying To Confirm SAML Email

GitOrigin-RevId: bb816d3774c18f2952851affb1f8d7c174570ba1
2021-03-11 03:05:08 +00:00
Thomas
fc4f71a0c0 Merge pull request #3704 from overleaf/jel-reconfirm-disable-btn
Disable "Make Primary" button when reconfirmation needed

GitOrigin-RevId: df821185ce84c64ed1a8f4d413dd35ef18aa9e0c
2021-03-09 03:04:43 +00:00
Thomas
99834f0d7e Merge pull request #3738 from overleaf/jpa-fix-xss-registration
[misc] fix angular xss on user registration page

GitOrigin-RevId: 5dcc2aa0212371f154fba563d21018379292b9fe
2021-03-09 03:04:40 +00:00
Thomas
695561aa01 Merge pull request #3733 from overleaf/tm-mathjax-query-param
Add query parameter to MathJax script path

GitOrigin-RevId: c4f17505a23f8de4f5f5c7e62f74db930a029c22
2021-03-09 03:04:37 +00:00
Alf Eaton
59f6f34083 Merge pull request #3710 from overleaf/ae-refactor-hotkeys-modal
Refactor "HotKeys" modal

GitOrigin-RevId: 1df86322bac229bb04092e872300e5f1ee4cbddc
2021-03-06 03:04:46 +00:00
Alf Eaton
1707a2555b Merge pull request #3705 from overleaf/ae-refactor-clone-modal
Refactor "Copy Project" modal

GitOrigin-RevId: b6039d57c29c04a7cd20dd4a2ab5216d485c05ed
2021-03-06 03:04:39 +00:00
Thomas
2d8167fa0a Merge pull request #3675 from overleaf/tm-main-landmarks-a11y
Add main landmark roles to multiple templates

GitOrigin-RevId: 80ae851fae015b21a3210d71d04287c0c9a3024d
2021-03-05 03:05:00 +00:00
Alasdair Smith
dc9841cb69 Merge pull request #3723 from overleaf/as-fix-team-invite-xss
Prevent stored XSS on team invite page

GitOrigin-RevId: 0f79b96efcb86d121654a95da52da1c40550d3ae
2021-03-05 03:04:42 +00:00
Alf Eaton
869bdf89e0 Merge pull request #3722 from overleaf/as-fix-project-invite-xss
Prevent stored XSS on project invite page

GitOrigin-RevId: ada89c46d62e64d794edacc9be3c08b622ce433c
2021-03-05 03:04:39 +00:00
Alf Eaton
248e860757 Merge pull request #3721 from overleaf/as-fix-register-xss
Prevent XSS on registration page

GitOrigin-RevId: 93e5a345752c3c5c42f488d9c75c70a9036bf53c
2021-03-05 03:04:35 +00:00
Brian Gough
bc4f5a687a Merge pull request #3682 from overleaf/bg-check-maintenance-file
check maintenance file periodically to close site

GitOrigin-RevId: 8e29f40a23df96198c6e4603ede2bab852b98740
2021-02-26 03:04:07 +00:00
Miguel Serrano
d55e46d3c0 Merge pull request #3642 from overleaf/msm-history-track-changes-toggles
[ReactNavToolbar] Track changes and History toggle buttons.

GitOrigin-RevId: a67a9a488c0960dba3f3d374cde4db0080ed2952
2021-02-24 03:04:17 +00:00
Eric Mc Sween
e5c49ea19a Merge pull request #3681 from overleaf/em-group-plans
Configure group plans for additional licenses

GitOrigin-RevId: 57822de9f490505c4b083afa80220e4d5b4c7d23
2021-02-23 03:04:43 +00:00
Eric Mc Sween
2138bd2a80 Merge pull request #3680 from overleaf/as-em-tm-remove-uiconfig
Remove unused uiConfig global variable from frontend and tests

GitOrigin-RevId: 390abdc097cd9904f7a1c1849e58baf70bea5c72
2021-02-23 03:04:39 +00:00
Jessica Lawshe
195785194d Merge pull request #3684 from overleaf/pr-increase-log-level-payment-form-422s
Increase Recurly 422 log level to error

GitOrigin-RevId: 6ce0bca338d81660b62b74584a851a825114c4f2
2021-02-23 03:04:35 +00:00
Jessica Lawshe
0f7b268cdf Merge pull request #3683 from overleaf/bg-admin-open-editor
Allow admin to reopen editor after closing

GitOrigin-RevId: 9bf0c4234a9d510785aa4bddbb9f239d678ba503
2021-02-23 03:04:31 +00:00
Jessica Lawshe
37e3ff4310 Merge pull request #3630 from overleaf/jel-ui-reconfirm-portal
Show reconfirm notification on the portals

GitOrigin-RevId: 3899edce2699ce7206bc264f9b58bc790d80dd3d
2021-02-23 03:04:24 +00:00
Jessica Lawshe
54c471bc1c Merge pull request #3629 from overleaf/jel-ui-reconfirm-dash
Show reconfirm notification on the dash

GitOrigin-RevId: 4640513a299853a63c5f36b3e11b41ee66af61de
2021-02-23 03:04:20 +00:00
Jessica Lawshe
ddb6163b65 Merge pull request #3623 from overleaf/jel-ui-reconfirm-settings
Add reconfirm UI to settings

GitOrigin-RevId: cf9c4648cab07784782e24d752154089dc32196a
2021-02-23 03:04:17 +00:00