GitLab

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Add release notes for 1.1.1-ce

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Right now we can only run on node versions below 10.x thanks to scrypt
dependencies.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Upgrade base64url package

There was recently a possible security problem with base64url. Shouldn't
really hit us but it doesn't hurt.

Details: https://snyk.io/vuln/npm:base64url:20180511

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Removing google drive integration

It's sad but it's not working. For multiple releases this should be
already broken which shows how often it's used.

As there is also a security issue related to that, it's better to
remove the feature completely. Whoever wants to rewrite it, feel free to
go.

This commit removes the Google Drive integration from HackMD's Frontend
editor and this way removes the need to provide any API key and Client
ID in the frontend.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Revert "Workaround Google API problems"

Workaround Google API problems

This temporarily removes the Upload from the UI as it's broken right
now.

Needs a refactoring and can be added in again later on by undoing this
commit.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Fix typo of "grouptAttribute" in saml auth module

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Move letter-avatars into own request

To prevent further weakening of our CSP policies, moving the Avatars
into a non-inline version is the way to go.

This implementation probably needs some beautification. But already fixes
the bug.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Fix possible file limit errors

As we currently may need higher nofile limits than usual/default on
various systems this commit should probide a fix for that an allow to
build HackMD without highering these limits and increase security.

Inspiration was found in a copy-webpack-plugin-issue[1] and found by
@thegcat[2]. Thanks for that!
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

[1]:
https://github.com/webpack-contrib/copy-webpack-plugin/issues/59#issuecomment-228563990
[2]: https://github.com/thegcat

This commit extends the find command to also match the example config
file.

This should validate the syntax or this file to prevent syntax errors
for future pull request.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

This commit fixes some json fromat issues in our config example that
causes errors on setup.

This change should fix it.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

As recently discovered we send the clientSecret to the webclient which
is potentionally dangerous. This patch should fix the problem and
replace the clientSecret with the originally intended and correct way to
implement it using the API key.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Add check for noteId length

Fix typos for `allowAnonymousEdits`

Add hint about file descriptor limits and add the new translation
platform.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

As we know the length of an UUID we can check if the base64 string
of the provided UUID is long enough for a legacy base64 encoded nodeId
and stop processing it in legacy mode, if it's not the case.

This should make the ugly warning way less common.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Looks like we lost some variables during the refactoring of the configs
to camel case.

This should fix it.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Fix some spelling and style issues as well as adding the
latest changes.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

As it was requested to be more visable, this commit adds a migration
section about the introduced config style changes.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Add matrix.org / Riot link

As an active part of the community prefers Matrix.org over Gitter, we
should link Matrix.org as a place to meet us.

As the matrix and gitter channels are interconnected. We don't loose any
message if a person decides to go for one or another.

We use an more universal way of translation to make it easier to provide
a link to various platforms.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Fix modal and panel colors in night mode

Fix CSP for disqus and Google Analytics

This provides more eye-friendly code boxes when night mode is active.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Adding some documentation for night mode and upload times. Extend the
contact section for community support.
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

Providing release notes for version 1.1.0-ce
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>