2158 Commits

Author SHA1 Message Date
Nicolas Giard
d96bbaf42c
docs: Update SECURITY.md 2025-06-10 14:45:46 -04:00
Nadia Santalla
41d3ba4312
chore(helm): render external database URL if it is set (#7036) 2025-04-07 09:19:29 -04:00
Nicolas Giard
9bf9c8af47
ci: Update build.yml 2025-03-31 03:55:18 -04:00
Nicolas Giard
7053819f35
docs: Update README.md 2025-03-31 03:52:26 -04:00
Nicolas Giard
a393f5f9bc
docs: Update README.md 2025-03-31 03:50:08 -04:00
Nicolas Giard
78c41e36e1
fix: use xml-crypto 2.1.6 for passport-saml v2.5.307 2025-03-23 21:31:22 -04:00
Nicolas Giard
85243e5284
docs: Update SECURITY.md 2025-02-11 20:46:07 -05:00
Nicolas Giard
403e98dced
feat: add git always namespace option v2.5.306 2025-02-02 16:16:52 -05:00
Vasily Fedoseyev
abc8dce9cc
fix: Allow HA_ACTIVE: True to enable HA mode (#7493)
---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
2025-01-01 00:18:42 -05:00
maarous
94d253bf59
chore(helm): add support for securityContext and resources in sideload container (#7350)
---------

Co-authored-by: Mohamed Amine Arous <“maarous-prestataire@ina.fr”>
Co-authored-by: Nicolas Giard <github@ngpixel.com>
2024-11-22 14:31:07 -05:00
Nicolas Giard
c7c20579fd
docs: Update README.md 2024-11-18 17:18:28 -05:00
Nicolas Giard
583ea44a72
docs: Update README 2024-11-18 17:13:52 -05:00
Nicolas Giard
ab5c620d50
chore: update yarn lock v2.5.305 2024-10-12 04:51:48 -04:00
Jacob Beneski
7757de3af7
feat: add elasticsearch 8.x support (#6904) 2024-10-12 04:38:43 -04:00
Nicolas Giard
ad37325773
docs: Update README.md 2024-10-04 16:07:10 -04:00
Nicolas Giard
55a63a3c5a
ci: fix docker manifest typo v2.5.304 2024-09-17 21:13:51 -04:00
Nicolas Giard
34de47cc10
ci: remove armv7 build target 2024-09-17 20:37:55 -04:00
Nicolas Giard
18ebf83f88
ci: update base docker image 2024-09-16 01:31:04 -04:00
Nicolas Giard
ef5ab0ecb8
ci: disable mssql test 2024-08-31 23:31:19 -04:00
Nicolas Giard
b9fb17d4d4
fix: prevent password reset on disabled account 2024-08-29 03:06:06 -04:00
Dominik
d1b4c8c407
chore(helm): add pod annotations (#7222) 2024-06-26 00:51:45 -04:00
Nicolas Giard
2e35ebf1dc
docs: Update README.md 2024-06-14 04:42:48 -04:00
Nicolas Giard
904260fd44
fix: set no-store cache control on jwt renew response 2024-05-23 23:01:38 -04:00
Ethan
1238d614e1
Merge pull request from GHSA-xjcj-p2qv-q3rf
* Update render.js

# Improved handling of mustache expressions and v-pre attribute assignment

## Changes Made:
- Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute.
- Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION].

## Why it Works:
- When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag.
- This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required.

## Test Cases Passed:
1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>`
2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>`
3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>`
4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>`
5. `<p>&lt;xyz&gt;{{constructor.constructor('alert("Test Case 8")')()}}&lt;xyz&gt;{{constructor.constructor('alert("Test Case 9")')()}}&lt;/xyz&gt;</p>`

This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process.

* fix: move template expressions after dom-purify + handle text nodes without parent

---------

Co-authored-by: NGPixel <github@ngpixel.com>
v2.5.303
2024-05-13 14:57:17 -04:00
Nicolas Giard
98c04fe18e
docs: Update README.md 2024-04-29 17:12:17 -04:00
Nicolas Giard
854ec230dd
ci: Update build.yml 2024-04-29 15:12:22 -04:00
Nicolas Giard
a28b525894
docs: Update SECURITY.md 2024-04-29 14:24:28 -04:00
CDN
f1161aed59
fix: make comment module "Artalk" work with newer versions (#6901)
* feat: update comment module "Artalk"
* fix: update code.yml

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
v2.5.302
2024-04-24 20:58:53 -04:00
Sukka
3a7ce75a1e
refactor(templates): replace polyfill.io (#7032) 2024-04-24 20:53:45 -04:00
Karol Rudnikowski (dxdroni)
f54551ee69
fix: page pagination in tags component (#7061) 2024-04-24 20:50:53 -04:00
Nicolas Giard
abdd2f0d17
fix: remove upper range node.js version check 2024-04-24 20:46:11 -04:00
Nicolas Giard
66ca18c499
docs: Update README.md 2024-03-16 01:15:24 -04:00
craph
d5af4cb068
chore: fix python issue for node18 in dev Dockerfile (#7029)
* Fix: email toLowerCase

* Fix python issue for node18 in Dockerfile
2024-02-28 16:07:19 -05:00
Nicolas Giard
ece5753ebb
docs: Update README.md 2024-02-07 15:31:49 -05:00
Nicolas Giard
b1e1759f25
fix: set securityTrustProxy to false by default v2.5.301 2024-01-28 20:03:06 -05:00
Jasmine Tai
99e74e8eb2
feat: upgrade markdown-it-emoji to 3.0.0 (#6945) 2024-01-22 20:20:01 -05:00
Nicolas Giard
34c037c68b
docs: Update README.md 2024-01-21 00:32:01 -05:00
aelgasser
38a46e68ea
feat: sync groups with SAML provider (#6299)
* feat: added implementation for group mapping in SAML strategies

---------

Co-authored-by: Abderraouf El Gasser <abderraouf.elgasser@iktos.com>
Co-authored-by: Nicolas Giard <github@ngpixel.com>
2023-11-20 16:59:33 -05:00
Nicolas Giard
fd91caff1d
docs: Update README.md 2023-10-27 17:15:21 -04:00
Nicolas Giard
16245caeff
docs: Update README.md 2023-10-18 21:35:12 -04:00
Pablo
8932d15c0c
fix: typo in kroki name (#6745) 2023-09-24 23:30:28 -04:00
Nicolas Giard
b19c4e4f23
docs: Update README.md 2023-09-20 16:42:49 -04:00
Nicolas Giard
4ce301d37c
docs: Update README.md 2023-09-19 20:48:55 -04:00
Jaeseo Park
c4c41be81a
chore: upgrade markdown-it-pivot-table version (#6707) 2023-09-07 19:30:34 -04:00
Nicolas Giard
ef174143ae
docs: Update README.md 2023-09-04 00:14:56 -04:00
Nicolas Giard
2180592ade
ci: fix build.yml 2023-09-01 19:09:16 -04:00
Nicolas Giard
7312de7332
ci: fix build.yml 2023-09-01 18:43:10 -04:00
Nicolas Giard
c66bc1c7c1
ci: fix build.yml 2023-09-01 18:26:28 -04:00
Nicolas Giard
c18a832a3a
docs: Update README.md 2023-08-23 19:18:22 -04:00
Nicolas Giard
cd390ec544
docs: update README.md 2023-08-22 15:53:27 -04:00