Commit graph

18 commits

Author SHA1 Message Date
Alf Eaton
9e6b1fbb67 Avoid contenthash in development (#7423)
GitOrigin-RevId: 5a52a1af1f6add4dea135639f0ec5a4577dba124
2022-04-07 08:04:16 +00:00
Alf Eaton
69a2283984 Upgrade to webpack v5 (#7249)
GitOrigin-RevId: 69dc5f9aad3e045cc6904e3663e9965094eced76
2022-04-07 08:03:46 +00:00
Jakob Ackermann
29aa7c622a Merge pull request #7105 from overleaf/jpa-static-no-csp
[web] remove CSP header from static assets

GitOrigin-RevId: 2f12974f490ff22796ed74c38a466fe4649877c1
2022-03-18 09:03:07 +00:00
Jakob Ackermann
224edddad4 [web] set a default, strict CSP on ALL endpoints (#6271)
* Remove use of CSP_PERCENTAGE

* Move header calculation earlier

* Set a default policy and add comments

* Apply the CSP header to all responses

* Enable CSP in dev environment

* [web] set a default, strict CSP on ALL endpoints

* [misc] enable CSP in dev-env

* Only build the default policy once

* Update docker-compose.yml

* [web] webpack: set default CSP header on webpack assets

This aligns the webpack dev-server with production in nocdn=true mode.

Co-authored-by: Alf Eaton <alf.eaton@overleaf.com>
GitOrigin-RevId: 088a6082ad21c5b3f229887ba0ab3eca8d0528cd
2022-03-18 09:03:01 +00:00
Alf Eaton
669bec323c Merge pull request #4185 from overleaf/ae-react-devtool-toggle
Fix React DevTools enable/disable toggle

GitOrigin-RevId: 505e948af96b9ecc658b5e809dce98a5e72dca0f
2021-06-12 02:08:40 +00:00
Jakob Ackermann
10e7a919c0 Merge pull request #4172 from overleaf/ae-enable-react-dev-tools
Re-enable React Dev Tools

GitOrigin-RevId: 2757888b03997b9df55f1ef1a8fa0cca71cbcc78
2021-06-11 02:06:14 +00:00
Alf Eaton
1be43911b4 Merge pull request #3942 from overleaf/prettier-trailing-comma
Set Prettier's "trailingComma" setting to "es5"

GitOrigin-RevId: 9f14150511929a855b27467ad17be6ab262fe5d5
2021-04-28 02:10:01 +00:00
Alf Eaton
a5637651b5 Add Content-Security-Policy header (#3783)
* Add Content-Security-Policy header
* Add nonce attribute to script tags
* Use source-map for webpack devtool
* Add ng-csp attribute when CSP is enabled
* Allow overriding CSP settings with environment variables
* Hook into render and allow routes to disable the CSP header

GitOrigin-RevId: a873736a3514198165f1b2f1e18d002b65f20d30
2021-03-26 03:04:55 +00:00
Jessica Lawshe
5338990fb3 Merge pull request #3676 from overleaf/ae-webpack-live-reload
Enable live reload in webpack-dev-server

GitOrigin-RevId: 4e6b3f26513e1b0a119993511125fae4643e7e82
2021-02-23 03:04:27 +00:00
Alf Eaton
5bc4ce09a7 Merge pull request #3523 from overleaf/ae-source-map
Use devtool: 'eval-source-map'

GitOrigin-RevId: c2b5a7b4052754f8654c46580890fbde87f443a5
2021-01-07 03:04:37 +00:00
Alasdair Smith
26190da566 Merge pull request #2349 from overleaf/as-webpack-css
Compile CSS using webpack

GitOrigin-RevId: 489834038667dde572ea5d9b4b9392b362259a09
2019-11-28 10:39:09 +00:00
Hugh O'Brien
bf9473fb41 Merge pull request #2320 from overleaf/as-unify-webpack-output
Unify webpack output

GitOrigin-RevId: 5f5ae88f0698236fdce17cf87b4b524078dba4dd
2019-11-18 11:21:42 +00:00
Alasdair Smith
78c30015f4 Merge pull request #2265 from overleaf/as-move-vendored-deps
Move vendored dependencies out of output directory

GitOrigin-RevId: bad086bdc2a80f9df5d3f934098cb7b05e8f6db5
2019-10-30 11:35:56 +00:00
Alasdair Smith
9cf73f965c Merge pull request #1440 from overleaf/as-amd-webpack
Bundle all frontend code with webpack

GitOrigin-RevId: 1bd93dad516c456fe1649193868e841e20459b0b
2019-10-16 10:36:21 +00:00
Eric Mc Sween
2df7a8eaad Merge pull request #2032 from overleaf/as-upgrade-webpack
Upgrade webpack to v4

GitOrigin-RevId: a92c487fee79c29c5314273bf05439c9dbb0ce4d
2019-08-06 12:34:03 +00:00
Alasdair Smith
984ecae200 Rename directory to es to align with coffee dir 2018-01-15 16:23:10 +00:00
Alasdair Smith
dadd74e730 Move public path to dev config 2018-01-15 16:23:10 +00:00
Alasdair Smith
49c27c4c7a Port webpack config from OL 2018-01-15 16:23:10 +00:00