Commit graph

42 commits

Author SHA1 Message Date
Alexandre Bourdin
9468e5cb4f Merge pull request #4338 from overleaf/ab-session-manager
Extract functions from AuthenticationController to SessionManager

GitOrigin-RevId: 86870ce03a762e1a837dcf493759e8851e759883
2021-07-28 12:36:22 +00:00
Jakob Ackermann
5e773ce950 Merge pull request #4101 from overleaf/ae-settings-module
Migrate from `settings-sharelatex` to `@overleaf/settings`

GitOrigin-RevId: 9a298ba26382180c1351683c5fddc9004418c1e6
2021-07-08 02:08:28 +00:00
Jakob Ackermann
28fafffef3 Merge pull request #4209 from overleaf/jpa-service-worker-24h-cache
[Server] lower the cache duration for the service worker to 24h

GitOrigin-RevId: b67b030722812a30d7c2fc98f9183538307f9a1a
2021-06-17 02:09:19 +00:00
Jakob Ackermann
8faae673b4 Merge pull request #4000 from overleaf/jpa-skip-pug-compile
[Server] optionally skip pre-compiling pug templates in production

GitOrigin-RevId: c50e6007dae3b0ab83a7edbce07a695a17e71404
2021-05-07 02:13:13 +00:00
Alf Eaton
1be43911b4 Merge pull request #3942 from overleaf/prettier-trailing-comma
Set Prettier's "trailingComma" setting to "es5"

GitOrigin-RevId: 9f14150511929a855b27467ad17be6ab262fe5d5
2021-04-28 02:10:01 +00:00
Alf Eaton
1ebc8a79cb Merge pull request #3495 from overleaf/ae-prettier-2
Upgrade Prettier to v2

GitOrigin-RevId: 85aa3fa1acb6332c4f58c46165a43d1a51471f33
2021-04-15 02:05:22 +00:00
Alf Eaton
a5637651b5 Add Content-Security-Policy header (#3783)
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header

GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
Christopher Hoskin
1e8598a8d9 Merge pull request #3331 from overleaf/csh-issue-3661-bump-agents
Update metrics module

GitOrigin-RevId: bdef141035f277ce4863f14f8a6e166d710b1111
2020-10-31 03:05:30 +00:00
Eric Mc Sween
d708f6f0db Merge pull request #3319 from overleaf/em-enabled-services
Use ENABLED_SERVICES variable to choose which routes to set up

GitOrigin-RevId: 6b1f8d593de23d72802c178d2e3cc89757257675
2020-10-28 03:05:16 +00:00
Jakob Ackermann
435af75ef7 Merge pull request #3163 from overleaf/as-jpa-i18n-cleanup
[misc] Translations cleanup

GitOrigin-RevId: 46bf1142bb9415eeebf638c120597996aaa55f8b
2020-09-18 02:04:41 +00:00
Jakob Ackermann
674954f96f Merge pull request #3094 from overleaf/sk-restrict-admin-flag
Check domain of emails on admin users

GitOrigin-RevId: 75de9cff30e3c628249fcd0ea3446a33d51d39b4
2020-08-20 02:06:19 +00:00
Jakob Ackermann
fa594e575b Merge pull request #3113 from overleaf/jpa-translations-mono-repo
[misc] mono repo with translations

GitOrigin-RevId: 1ed86d211f6a2031aafc3e7462687af0e957f9fd
2020-08-19 02:06:08 +00:00
Miguel Serrano
42c917d909 Merge pull request #3046 from overleaf/msm-cleanup-oerror-http
Finish o-error/http cleanup

GitOrigin-RevId: 1f8cf7f1e0503d1071c51b41ac136f7fb7f38872
2020-08-12 02:06:53 +00:00
Jakob Ackermann
1f6499b5ea Merge pull request #3053 from overleaf/jpa-spd-accepts
[misc] reland 3004: unify detection of json requests and skip issuing of redirects

GitOrigin-RevId: fa43b3b4d23deb581496ed70ae8f28b805555d64
2020-07-28 02:06:27 +00:00
Jakob Ackermann
ae068781ca Merge pull request #2978 from overleaf/jpa-expose-hostname
[misc] optionally expose the hostname in the X-Served-By response header

GitOrigin-RevId: f3ac14aeb75cef8c9ed1d8cb1d649dd7f909b99b
2020-07-08 02:04:24 +00:00
Jakob Ackermann
153a9c5790 Merge pull request #2953 from overleaf/jpa-nocache
[misc] Server: invoke the nocache middleware explicitly and add test

GitOrigin-RevId: 3238b07ebf5963ae95ef3f353e4745d283795fba
2020-06-27 02:10:30 +00:00
Simon Detheridge
0099032963 Merge pull request #2732 from overleaf/ho-metrics-web-api
add metrics route to web api

GitOrigin-RevId: 7a39228d864545e4423d2c0c38ab0f16d495cf86
2020-04-09 03:21:27 +00:00
nate stemen
3b1a5c458e Merge pull request #2699 from overleaf/jpa-test-perf
[perf] enable view caching for acceptance tests

GitOrigin-RevId: 696958a617392d20b594141aa316b5a80755ff38
2020-03-31 03:18:54 +00:00
nate stemen
c301d8bc25 Merge pull request #2666 from overleaf/em-max-json-request-size
Separate max_doc_length from max JSON request size

GitOrigin-RevId: 4c725028111966bf04109080d80d4672273dd697
2020-03-19 04:17:05 +00:00
Timothée Alby
fbbb39b0c0 Merge pull request #2620 from overleaf/ta-body-parser-errors
Convert Errors with Status Code To HTTP Errors

GitOrigin-RevId: 4c7abf4f9164c1a907fbf38c6e440409a616e047
2020-03-10 04:14:38 +00:00
Brian Gough
ac5d688d8c Merge pull request #2612 from overleaf/bg-precompile-web-views-only
only precompile views for web, not web-api

GitOrigin-RevId: 292f4d5dd6f81b1928ccd543898dfa643f1e5be8
2020-02-27 04:17:55 +00:00
Timothée Alby
b94e1791e0 Merge pull request #2617 from overleaf/ho-open-site-for-admins
allow site to be accessible to admins when closed

GitOrigin-RevId: 71bdf329ce2a4e41533b2a65f45190277ea72dbb
2020-02-21 04:21:03 +00:00
Simon Detheridge
37d833db62 Merge pull request #2537 from overleaf/spd-cookie-samesite-setting
Re-add missing sameSiteCookie setting

GitOrigin-RevId: be46affcc95b7e4c79f86503da933c6fcc277d4f
2020-01-22 04:23:17 +00:00
Simon Detheridge
a8483fbc89 Merge pull request #2516 from overleaf/spd-oio-samesite-cookies
Handle 'samesite=lax' session cookies on POST to open-in-overleaf

GitOrigin-RevId: d856f372e91134be47cc301a515ec08511618631
2020-01-22 04:23:00 +00:00
Brian Gough
e51893ffb1 Merge pull request #2394 from overleaf/bg-precompile-pug-templates
precompile pug templates

GitOrigin-RevId: 71851f97c06b8c3866c56508a84711fa2541d870
2019-11-26 10:20:45 +00:00
Henry Oswald
0aad6f2bc8 Merge pull request #2386 from overleaf/ho-disable-view-precompile
fix eslint issues

GitOrigin-RevId: 90b5a0b81117768ef646c40f55d032426a3f78f8
2019-11-19 17:05:26 +00:00
Henry Oswald
a7567714d1 Merge pull request #2385 from overleaf/ho-disable-view-precompile
disable view precompile

GitOrigin-RevId: 82e1b8da97af1d9be47834f1687e25f55fe95737
2019-11-19 17:05:21 +00:00
Brian Gough
82c2b0e8d4 Merge pull request #2370 from overleaf/bg-precompile-pug-templates
precompile pug templates

GitOrigin-RevId: bf340f52b4d8c413056be2f3006a28a55548d783
2019-11-19 12:20:40 +00:00
Jessica Lawshe
4f637f14b5 Merge pull request #2299 from overleaf/as-cleanup-express-locals
Clean up express locals

GitOrigin-RevId: f57e7c57913cbf894a365c5ae9dd2810245a01ae
2019-10-29 15:58:53 +00:00
Eric Mc Sween
ecab52d108 Merge pull request #2292 from overleaf/as-remove-crawler-logger
Remove unused crawler logger and profile/heapdump routes

GitOrigin-RevId: e731f9a0cf969481b26c8074beca86431187449b
2019-10-28 14:29:09 +00:00
Brian Gough
8ffaa5b0ca Merge pull request #2271 from overleaf/bg-reject-invalid-sessions
reject invalid sessions with middleware

GitOrigin-RevId: 07ab8829cbed92bbcb90b2c5f2c9d049e05b77cd
2019-10-22 07:46:41 +00:00
Simon Detheridge
68c16dcb73 Merge pull request #2263 from overleaf/spd-revert-revert
Revert "Revert "Merge pull request #2249"

GitOrigin-RevId: 70b0da473e923a072aeca1cc146c82e460757747
2019-10-18 16:41:37 +00:00
Brian Gough
e502b80116 Merge pull request #2259 from overleaf/bg-revert-session-merge
Revert "Merge pull request #2249 from overleaf/bg-create-session-vali…

GitOrigin-RevId: d2114ecea0708dc109d5c9256e9dccb011a1b62c
2019-10-18 16:41:12 +00:00
Brian Gough
bc8ccf26c7 Merge pull request #2249 from overleaf/bg-create-session-validation-token-for-all-sessions
move session validation into SessionStoreManager

GitOrigin-RevId: 438ec738f0ccaf9f072629d6203a334cb8439b83
2019-10-18 08:42:35 +00:00
Brian Gough
7db9e73ecf Merge pull request #2234 from overleaf/bg-avoid-event-loop-metrics-during-startup
start event loop monitoring when the process is ready

GitOrigin-RevId: 0a7759311b737e99579f61cc4cf90b775c26b76d
2019-10-14 09:43:03 +00:00
Eric Mc Sween
45e5808a35 Merge pull request #2202 from overleaf/em-collab-set-permissions
Endpoint for setting a collaborator's permissions

GitOrigin-RevId: eb4d4dcc476908f5a42fefd7b81ef6fcc000be5b
2019-10-07 12:29:00 +00:00
Simon Detheridge
2031115f48 Merge pull request #2156 from overleaf/hb-secure-headers
Use helmet to set nosniff and sameorigin

GitOrigin-RevId: e5d684d772523ca740be75ebe9d248db74209f25
2019-09-18 10:41:51 +00:00
Brian Gough
837599d89c Merge pull request #2146 from overleaf/bg-fix-redis-user-session-expiry
fix expiry of user sessions in redis

GitOrigin-RevId: e53aa93bba99fe0cd632ac8bce36c0228e20d04a
2019-09-12 08:18:43 +00:00
Brian Gough
5c32523b53 Merge pull request #2050 from overleaf/bg-fix-session-logging-error
fix error in session logging

GitOrigin-RevId: e31ac3585f4c502a04602e9a49445319502c5d52
2019-08-07 08:58:24 +00:00
Eric Mc Sween
e0c3a971bb Merge pull request #2044 from overleaf/em-forwarded-for
Get client IP behind proxies

GitOrigin-RevId: aed5e0bdcefb22b45db1b8745c5cd7522a32c21f
2019-08-06 12:34:26 +00:00
Timothée Alby
e38a86d9f4 Merge pull request #1934 from overleaf/ta-error-type-handler
Implement ErrorType Handler

GitOrigin-RevId: 7cd735bb248c74815182e10fd54d687dd35914b8
2019-07-19 09:51:05 +00:00
Alasdair Smith
0ca81de78c Merge pull request #1717 from overleaf/as-decaffeinate-backend
Decaffeinate backend

GitOrigin-RevId: 4ca9f94fc809cab6f47cec8254cacaf1bb3806fa
2019-05-29 09:32:21 +00:00