Commit graph

203 commits

Author SHA1 Message Date
Jakob Ackermann
9d00c351a8 Merge pull request #4327 from overleaf/jpa-pw-reset-captcha
[misc] add captcha on password reset requests

GitOrigin-RevId: 9a23b9c9dee2c56345e9c1846861c05c25126802
2021-07-28 02:06:02 +00:00
Miguel Serrano
37a50e295a [ServerPro] Removed SaaS views in admin panel and user settings (#4263)
* Removed SaaS views from SP admin panel and user settings

* Hiding must reconfirm for server pro and restored site admin

* Removed empty 'security' section

GitOrigin-RevId: 9ad8e2b7510cf957ccf3f968a53fa88d3174a64b
2021-07-01 12:30:21 +00:00
Jessica Lawshe
7989a3c52d Merge pull request #4147 from overleaf/jel-reconfirm-ui
Update button text on reconfirm page

GitOrigin-RevId: 9db6fe7136d6f5abf43b9f0eaabad5fb7c6b116c
2021-06-04 02:08:44 +00:00
Hugh O'Brien
13db97cbfa Merge pull request #4070 from overleaf/jel-email-button-tooltip
Fix check for disabled "Make Primary" button when email needs reconfirmation

GitOrigin-RevId: efbe56e77402cbbc673a41ce24390fb77ede2481
2021-05-26 02:05:35 +00:00
Jakob Ackermann
715fad4883 Merge pull request #4046 from overleaf/jpa-fix-404s
[misc] use ng-href for dynamic link targets

GitOrigin-RevId: 22cccf7a3784cde046d73d88c5929036e3572279
2021-05-18 02:08:01 +00:00
Alf Eaton
79f58598eb Merge pull request #4045 from overleaf/ae-register-spaces
Restore spaces on SP register page

GitOrigin-RevId: 5a8bdb25e4715861957a071bb4bc8f628ee36a41
2021-05-15 02:10:06 +00:00
Eric Mc Sween
5587de9cf5 Merge pull request #3833 from overleaf/em-meta-tags
Pass values to JS through meta tags

GitOrigin-RevId: f663a1b7fef4544b560574d21f59fdabaf617830
2021-04-01 02:05:44 +00:00
Alf Eaton
8227e68aca Improve form "for" and "autocomplete" attributes (#3822)
GitOrigin-RevId: 2ce35d57526fc36b5a974d0f940ef6ba08806864
2021-04-01 02:05:32 +00:00
Miguel Serrano
d65db1acf0 Merge pull request #3824 from overleaf/jpa-password-reset-email-forwarding
[misc] fix passing around of users email as part of password reset

GitOrigin-RevId: 54e8cde9867a2ce735bc7ebe281ead19ef49e6cd
2021-04-01 02:05:04 +00:00
Jakob Ackermann
deca5f3b0d Merge pull request #3810 from overleaf/jpa-meta-tag-user-sessions
[views] user/sessions: refactor window assignment into meta tag

GitOrigin-RevId: a5b07ccc99021b2c72a5888b9a9d28c1c458e1e9
2021-03-27 03:05:13 +00:00
Alf Eaton
a5637651b5 Add Content-Security-Policy header (#3783)
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header

GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
Jakob Ackermann
f353728bda Merge pull request #3755 from overleaf/jpa-xss-2
[views] mitigate Angular XSS via email/new_email

GitOrigin-RevId: 3d127c283ba9f97c5b0e6c53a9d77f7f597058bb
2021-03-18 03:04:50 +00:00
Jakob Ackermann
7609b741fa Merge pull request #3768 from overleaf/jpa-xss-10
[views] mitigate Angular XSS on password reset page

GitOrigin-RevId: 65f423fcb1a3afff0f396bb8e173d1e1bcff056a
2021-03-18 03:04:45 +00:00
Jakob Ackermann
8766c23abb Merge pull request #3767 from overleaf/jpa-xss-9
[views] mitigate Angular XSS in email confirmation post gateway

GitOrigin-RevId: 11cd752d520054e448b3eeea431fe27f3c02fa00
2021-03-18 03:04:41 +00:00
Jakob Ackermann
115fe20184 Merge pull request #3766 from overleaf/jpa-xss-8
[views] mitigate Angular XSS in affiliations section of user settings

GitOrigin-RevId: bad444cea136c51f54546770653f21cec6fa70e3
2021-03-18 03:04:38 +00:00
Thomas
fc4f71a0c0 Merge pull request #3704 from overleaf/jel-reconfirm-disable-btn
Disable "Make Primary" button when reconfirmation needed

GitOrigin-RevId: df821185ce84c64ed1a8f4d413dd35ef18aa9e0c
2021-03-09 03:04:43 +00:00
Thomas
99834f0d7e Merge pull request #3738 from overleaf/jpa-fix-xss-registration
[misc] fix angular xss on user registration page

GitOrigin-RevId: 5dcc2aa0212371f154fba563d21018379292b9fe
2021-03-09 03:04:40 +00:00
Thomas
2d8167fa0a Merge pull request #3675 from overleaf/tm-main-landmarks-a11y
Add main landmark roles to multiple templates

GitOrigin-RevId: 80ae851fae015b21a3210d71d04287c0c9a3024d
2021-03-05 03:05:00 +00:00
Alf Eaton
248e860757 Merge pull request #3721 from overleaf/as-fix-register-xss
Prevent XSS on registration page

GitOrigin-RevId: 93e5a345752c3c5c42f488d9c75c70a9036bf53c
2021-03-05 03:04:35 +00:00
Jessica Lawshe
ddb6163b65 Merge pull request #3623 from overleaf/jel-ui-reconfirm-settings
Add reconfirm UI to settings

GitOrigin-RevId: cf9c4648cab07784782e24d752154089dc32196a
2021-02-23 03:04:17 +00:00
Timothée Alby
6e8a4e70dd Merge pull request #3641 from overleaf/ta-saml-integration
SAML Misc Changes

GitOrigin-RevId: 89fe8704d8effb6299d841be00efc653f6800fab
2021-02-19 03:04:18 +00:00
Jessica Lawshe
2bef6cd2e5 Merge pull request #3605 from overleaf/jel-disabled-delete-primary
Add disabled delete button for the primary email

GitOrigin-RevId: 8cb3285bdfce0909796ae60c13d8e8ebb1236d00
2021-02-03 03:05:00 +00:00
Shane Kilkelly
e9f7a17093 Merge pull request #3234 from overleaf/sk-fix-password-validation-email
Overhaul password validation

GitOrigin-RevId: a591c4e192e30a0ac053eab6f80627543a8a92fe
2020-10-23 02:04:39 +00:00
Jessica Lawshe
552fb56b74 Merge pull request #3078 from overleaf/jel-log-password-reset-by-token
Update audit log when password reset by token

GitOrigin-RevId: 2ae7f59c5cdf2723e541a99c58c36564cc82adbf
2020-08-13 15:46:10 +00:00
Jakob Ackermann
53927bca95 [misc] move /user/activate into a module (#2962)
* [misc] move /user/activate into a module

Co-Authored-By: Nate Stemen <nate.stemen@overleaf.com>

* [misc] setup copybara for the new user-activate module

* [misc] move the /user/activate route behind a feature flag

...which is by default enabled.

Co-authored-by: Nate Stemen <nate.stemen@overleaf.com>
GitOrigin-RevId: 87fc5ae869a7e282ffdbeea0ff7b7c55b8b9b31b
2020-07-16 02:06:51 +00:00
nate stemen
8ba78bd559 Merge pull request #2848 from overleaf/ns-account-deletion-v1-references
remove references to v1 projects on account deletion

GitOrigin-RevId: 1e886d6b693f98ee81efc704d2a3688de43981ef
2020-05-22 03:24:48 +00:00
Eric Mc Sween
1dc325d1c7 Merge pull request #2750 from overleaf/ta-activate-finish-login
Don't Bypass FinishLogin on Password Reset

GitOrigin-RevId: 92567c893afb4aa64fa045151678d33c877d8f71
2020-04-24 03:30:45 +00:00
Miguel Serrano
533b395210 Merge pull request #2753 from overleaf/ta-password-reset-inflight
Add Inflight UI To Password Reset Form

GitOrigin-RevId: 414e00d30e23d6964c8a6782d2bac52a239f868d
2020-04-23 03:29:07 +00:00
Miguel Serrano
e2bf647b81 Merge pull request #2763 from overleaf/ta-dot-dot-dot
Replace Triple-Dots with Ellipsis in Pug Files

GitOrigin-RevId: 408cea0772d8751acd8939e199e49e2cf9685b8f
2020-04-23 03:29:02 +00:00
Simon Detheridge
0d442af07d Merge pull request #2733 from overleaf/ta-affiliations-space
Add Missing Space in Affiliation UI

GitOrigin-RevId: 8a9db0b410836ebd67dc3a48cdb06ba4924824b1
2020-04-09 03:21:15 +00:00
Jessica Lawshe
30763043d1 Merge pull request #2663 from overleaf/jel-sso-missing-email-error
Institution SSO error handling when missing session data

GitOrigin-RevId: c455ef97eb17b98ffbd03eb5f623ceb27678deed
2020-03-12 04:18:52 +00:00
Eric Mc Sween
e80870f453 Merge pull request #2629 from overleaf/cmg-updateon-typo
Fix typo in user settings

GitOrigin-RevId: 066ee8047d807e9ac077eb687a93f12d9db6bf55
2020-02-28 04:18:21 +00:00
Timothée Alby
98f031e9aa Merge pull request #2619 from overleaf/ta-licence-attribute-fix
Read Licence Attribute from Affiliation Instead of Institution

GitOrigin-RevId: 2294222e2bd0da473a303d3ffdc5ddb7d856f7f7
2020-02-21 04:20:59 +00:00
Jessica Lawshe
827fb7119c Merge pull request #2444 from overleaf/jel-beta-test-saml
Refactor account setttings SSO UI checks and allow beta testing

GitOrigin-RevId: 882c6aed107a2facfb0941bc49ef6cbd86473efb
2019-12-09 15:24:15 +00:00
Eric Mc Sween
b5d7887dfb Merge pull request #2337 from overleaf/jel-saml-already-linked
Institution linking and unlinking

GitOrigin-RevId: 1c3665fc66513c3e88a62ed477800c17759459ff
2019-11-12 14:18:13 +00:00
Eric Mc Sween
bf5df0f235 Merge pull request #2285 from overleaf/jel-institution-information-link
Add institution information link

GitOrigin-RevId: 72116311dfaddae145b4cbdbadbf039b30857890
2019-10-28 14:29:23 +00:00
Eric Mc Sween
44ba0895fe Merge pull request #2286 from overleaf/jel-institution-email-primary-tooltip
Tooltip for "Make Primary" for SSO emails

GitOrigin-RevId: 443cd032d4275ba486a632e92104299997c71bbc
2019-10-28 14:28:59 +00:00
Timothée Alby
61243338be Merge pull request #2284 from overleaf/jel-user-settings
Add type="button" to prevent form submission

GitOrigin-RevId: 747d389ea52f5f32762f98bab3e647b14572c50d
2019-10-25 08:38:50 +00:00
Jessica Lawshe
28a4be296f Merge pull request #2251 from overleaf/jel-dashboard-institution-notifications
Institution SSO dashboard notifications

GitOrigin-RevId: c80117c2732fafdc9d09eed69db06a26ad28a663
2019-10-21 16:23:19 +00:00
Jessica Lawshe
34c04660a6 Merge pull request #2250 from overleaf/jel-saml-session-email
Non canonical institution email in session

GitOrigin-RevId: b70971f6f42391391a42ba6ff214c14a275461d3
2019-10-17 16:29:13 +00:00
Alasdair Smith
9cf73f965c Merge pull request #1440 from overleaf/as-amd-webpack
Bundle all frontend code with webpack

GitOrigin-RevId: 1bd93dad516c456fe1649193868e841e20459b0b
2019-10-16 10:36:21 +00:00
Jessica Lawshe
625b4c9339 Merge pull request #2216 from overleaf/jel-saml-beta-account-settings
Allow SAML beta testing on Account Settings

GitOrigin-RevId: 6a2c60a3cbab3d9d0cdcc72e23f5d75f7702f89c
2019-10-09 13:13:40 +00:00
Jessica Lawshe
5c918bed94 Adding an institution email that must be linked
GitOrigin-RevId: 9ba42a07fb386275cf6d81a7d4b91a7f974faf15
2019-10-08 13:29:17 +00:00
Jessica Lawshe
ae423b5800 SAML feature by special link
Allows for testing SAML linking before release

GitOrigin-RevId: 8a8c01aa15f04ba1749e93f4feadb7bf1643c783
2019-10-08 10:52:30 +00:00
Jessica Lawshe
86d844baf2 Merge pull request #2193 from overleaf/jel-account-settings-processing
Add processing message to affiliation UI

GitOrigin-RevId: 2ceb9c7815da778f832715cac5c00bac3a32c127
2019-10-02 14:22:20 +00:00
Jessica Lawshe
962c5cc273 Merge pull request #2192 from overleaf/jel-account-settings-ui
Remove processing message in account settings UI

GitOrigin-RevId: 6938e386819ca0d2923f56c8a1ea50e2faa20121
2019-09-30 16:48:39 +00:00
Eric Mc Sween
039b5eaba0 Merge pull request #2167 from overleaf/jel-saml-account-settings-layout
Account settings layout for institution SSO

GitOrigin-RevId: d9c9e5eeb3b4a215456b0f5294139c1b8d4968c3
2019-09-30 13:36:41 +00:00
Eric Mc Sween
869fcf7952 Merge pull request #2089 from overleaf/em-mailchimp-unsubscribe
Handle error on Mailchimp unsubscribe when deleting users

GitOrigin-RevId: 8923480e6d50de45003fd7741610f995753a412b
2019-09-03 15:25:01 +00:00
Timothée Alby
ef9b487a60 Merge pull request #2019 from overleaf/jel-remove-oauth-migration
Remove unused OAuth link/unlink migration

GitOrigin-RevId: 20fce5a714f5897a1b5a93a65156f5368f2d1c65
2019-07-31 08:33:37 +00:00
Jessica Lawshe
0a2a32120f Use v2 data for OAuth providers
GitOrigin-RevId: 09df3253c283b3196bc48a0440e9ea5f1eb20c9c
2019-07-23 10:59:53 +00:00