Alf Eaton
a5637651b5
Add Content-Security-Policy header ( #3783 )
...
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header
GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
Christopher Hoskin
1e8598a8d9
Merge pull request #3331 from overleaf/csh-issue-3661-bump-agents
...
Update metrics module
GitOrigin-RevId: bdef141035f277ce4863f14f8a6e166d710b1111
2020-10-31 03:05:30 +00:00
Eric Mc Sween
d708f6f0db
Merge pull request #3319 from overleaf/em-enabled-services
...
Use ENABLED_SERVICES variable to choose which routes to set up
GitOrigin-RevId: 6b1f8d593de23d72802c178d2e3cc89757257675
2020-10-28 03:05:16 +00:00
Jakob Ackermann
435af75ef7
Merge pull request #3163 from overleaf/as-jpa-i18n-cleanup
...
[misc] Translations cleanup
GitOrigin-RevId: 46bf1142bb9415eeebf638c120597996aaa55f8b
2020-09-18 02:04:41 +00:00
Jakob Ackermann
674954f96f
Merge pull request #3094 from overleaf/sk-restrict-admin-flag
...
Check domain of emails on admin users
GitOrigin-RevId: 75de9cff30e3c628249fcd0ea3446a33d51d39b4
2020-08-20 02:06:19 +00:00
Jakob Ackermann
fa594e575b
Merge pull request #3113 from overleaf/jpa-translations-mono-repo
...
[misc] mono repo with translations
GitOrigin-RevId: 1ed86d211f6a2031aafc3e7462687af0e957f9fd
2020-08-19 02:06:08 +00:00
Miguel Serrano
42c917d909
Merge pull request #3046 from overleaf/msm-cleanup-oerror-http
...
Finish o-error/http cleanup
GitOrigin-RevId: 1f8cf7f1e0503d1071c51b41ac136f7fb7f38872
2020-08-12 02:06:53 +00:00
Jakob Ackermann
1f6499b5ea
Merge pull request #3053 from overleaf/jpa-spd-accepts
...
[misc] reland 3004: unify detection of json requests and skip issuing of redirects
GitOrigin-RevId: fa43b3b4d23deb581496ed70ae8f28b805555d64
2020-07-28 02:06:27 +00:00
Jakob Ackermann
ae068781ca
Merge pull request #2978 from overleaf/jpa-expose-hostname
...
[misc] optionally expose the hostname in the X-Served-By response header
GitOrigin-RevId: f3ac14aeb75cef8c9ed1d8cb1d649dd7f909b99b
2020-07-08 02:04:24 +00:00
Jakob Ackermann
153a9c5790
Merge pull request #2953 from overleaf/jpa-nocache
...
[misc] Server: invoke the nocache middleware explicitly and add test
GitOrigin-RevId: 3238b07ebf5963ae95ef3f353e4745d283795fba
2020-06-27 02:10:30 +00:00
Simon Detheridge
0099032963
Merge pull request #2732 from overleaf/ho-metrics-web-api
...
add metrics route to web api
GitOrigin-RevId: 7a39228d864545e4423d2c0c38ab0f16d495cf86
2020-04-09 03:21:27 +00:00
nate stemen
3b1a5c458e
Merge pull request #2699 from overleaf/jpa-test-perf
...
[perf] enable view caching for acceptance tests
GitOrigin-RevId: 696958a617392d20b594141aa316b5a80755ff38
2020-03-31 03:18:54 +00:00
nate stemen
c301d8bc25
Merge pull request #2666 from overleaf/em-max-json-request-size
...
Separate max_doc_length from max JSON request size
GitOrigin-RevId: 4c725028111966bf04109080d80d4672273dd697
2020-03-19 04:17:05 +00:00
Timothée Alby
fbbb39b0c0
Merge pull request #2620 from overleaf/ta-body-parser-errors
...
Convert Errors with Status Code To HTTP Errors
GitOrigin-RevId: 4c7abf4f9164c1a907fbf38c6e440409a616e047
2020-03-10 04:14:38 +00:00
Brian Gough
ac5d688d8c
Merge pull request #2612 from overleaf/bg-precompile-web-views-only
...
only precompile views for web, not web-api
GitOrigin-RevId: 292f4d5dd6f81b1928ccd543898dfa643f1e5be8
2020-02-27 04:17:55 +00:00
Timothée Alby
b94e1791e0
Merge pull request #2617 from overleaf/ho-open-site-for-admins
...
allow site to be accessible to admins when closed
GitOrigin-RevId: 71bdf329ce2a4e41533b2a65f45190277ea72dbb
2020-02-21 04:21:03 +00:00
Simon Detheridge
37d833db62
Merge pull request #2537 from overleaf/spd-cookie-samesite-setting
...
Re-add missing sameSiteCookie setting
GitOrigin-RevId: be46affcc95b7e4c79f86503da933c6fcc277d4f
2020-01-22 04:23:17 +00:00
Simon Detheridge
a8483fbc89
Merge pull request #2516 from overleaf/spd-oio-samesite-cookies
...
Handle 'samesite=lax' session cookies on POST to open-in-overleaf
GitOrigin-RevId: d856f372e91134be47cc301a515ec08511618631
2020-01-22 04:23:00 +00:00
Brian Gough
e51893ffb1
Merge pull request #2394 from overleaf/bg-precompile-pug-templates
...
precompile pug templates
GitOrigin-RevId: 71851f97c06b8c3866c56508a84711fa2541d870
2019-11-26 10:20:45 +00:00
Henry Oswald
0aad6f2bc8
Merge pull request #2386 from overleaf/ho-disable-view-precompile
...
fix eslint issues
GitOrigin-RevId: 90b5a0b81117768ef646c40f55d032426a3f78f8
2019-11-19 17:05:26 +00:00
Henry Oswald
a7567714d1
Merge pull request #2385 from overleaf/ho-disable-view-precompile
...
disable view precompile
GitOrigin-RevId: 82e1b8da97af1d9be47834f1687e25f55fe95737
2019-11-19 17:05:21 +00:00
Brian Gough
82c2b0e8d4
Merge pull request #2370 from overleaf/bg-precompile-pug-templates
...
precompile pug templates
GitOrigin-RevId: bf340f52b4d8c413056be2f3006a28a55548d783
2019-11-19 12:20:40 +00:00
Jessica Lawshe
4f637f14b5
Merge pull request #2299 from overleaf/as-cleanup-express-locals
...
Clean up express locals
GitOrigin-RevId: f57e7c57913cbf894a365c5ae9dd2810245a01ae
2019-10-29 15:58:53 +00:00
Eric Mc Sween
ecab52d108
Merge pull request #2292 from overleaf/as-remove-crawler-logger
...
Remove unused crawler logger and profile/heapdump routes
GitOrigin-RevId: e731f9a0cf969481b26c8074beca86431187449b
2019-10-28 14:29:09 +00:00
Brian Gough
8ffaa5b0ca
Merge pull request #2271 from overleaf/bg-reject-invalid-sessions
...
reject invalid sessions with middleware
GitOrigin-RevId: 07ab8829cbed92bbcb90b2c5f2c9d049e05b77cd
2019-10-22 07:46:41 +00:00
Simon Detheridge
68c16dcb73
Merge pull request #2263 from overleaf/spd-revert-revert
...
Revert "Revert "Merge pull request #2249 "
GitOrigin-RevId: 70b0da473e923a072aeca1cc146c82e460757747
2019-10-18 16:41:37 +00:00
Brian Gough
e502b80116
Merge pull request #2259 from overleaf/bg-revert-session-merge
...
Revert "Merge pull request #2249 from overleaf/bg-create-session-vali…
GitOrigin-RevId: d2114ecea0708dc109d5c9256e9dccb011a1b62c
2019-10-18 16:41:12 +00:00
Brian Gough
bc8ccf26c7
Merge pull request #2249 from overleaf/bg-create-session-validation-token-for-all-sessions
...
move session validation into SessionStoreManager
GitOrigin-RevId: 438ec738f0ccaf9f072629d6203a334cb8439b83
2019-10-18 08:42:35 +00:00
Brian Gough
7db9e73ecf
Merge pull request #2234 from overleaf/bg-avoid-event-loop-metrics-during-startup
...
start event loop monitoring when the process is ready
GitOrigin-RevId: 0a7759311b737e99579f61cc4cf90b775c26b76d
2019-10-14 09:43:03 +00:00
Eric Mc Sween
45e5808a35
Merge pull request #2202 from overleaf/em-collab-set-permissions
...
Endpoint for setting a collaborator's permissions
GitOrigin-RevId: eb4d4dcc476908f5a42fefd7b81ef6fcc000be5b
2019-10-07 12:29:00 +00:00
Simon Detheridge
2031115f48
Merge pull request #2156 from overleaf/hb-secure-headers
...
Use helmet to set nosniff and sameorigin
GitOrigin-RevId: e5d684d772523ca740be75ebe9d248db74209f25
2019-09-18 10:41:51 +00:00
Brian Gough
837599d89c
Merge pull request #2146 from overleaf/bg-fix-redis-user-session-expiry
...
fix expiry of user sessions in redis
GitOrigin-RevId: e53aa93bba99fe0cd632ac8bce36c0228e20d04a
2019-09-12 08:18:43 +00:00
Brian Gough
5c32523b53
Merge pull request #2050 from overleaf/bg-fix-session-logging-error
...
fix error in session logging
GitOrigin-RevId: e31ac3585f4c502a04602e9a49445319502c5d52
2019-08-07 08:58:24 +00:00
Eric Mc Sween
e0c3a971bb
Merge pull request #2044 from overleaf/em-forwarded-for
...
Get client IP behind proxies
GitOrigin-RevId: aed5e0bdcefb22b45db1b8745c5cd7522a32c21f
2019-08-06 12:34:26 +00:00
Timothée Alby
e38a86d9f4
Merge pull request #1934 from overleaf/ta-error-type-handler
...
Implement ErrorType Handler
GitOrigin-RevId: 7cd735bb248c74815182e10fd54d687dd35914b8
2019-07-19 09:51:05 +00:00
Alasdair Smith
0ca81de78c
Merge pull request #1717 from overleaf/as-decaffeinate-backend
...
Decaffeinate backend
GitOrigin-RevId: 4ca9f94fc809cab6f47cec8254cacaf1bb3806fa
2019-05-29 09:32:21 +00:00
