yflory
6e3c4077c1
Merge branch 'debowerify' of https://github.com/Pamplemousse/cryptpad into debower
2023-02-01 14:58:07 +01:00
ansuz
5cc9495ae1
fix broken links in checkup page (typo)
...
and check whether customize/pages/index.js has been modified
relative to customize.dist/...
2023-01-11 13:11:18 +05:30
Pamplemousse
9019d92291
removing bower: migrate nthen
...
Signed-off-by: Pamplemousse <git@xaviermaso.com>
2023-01-07 13:50:42 +01:00
Pamplemousse
c8859524ee
removing bower: migrate components-font-awesome
...
Signed-off-by: Pamplemousse <git@xaviermaso.com>
2023-01-07 13:50:40 +01:00
Pamplemousse
325154e956
removing bower: migrate tweetnacl
...
Signed-off-by: Pamplemousse <git@xaviermaso.com>
2023-01-07 08:08:16 +01:00
creme
940d7d3118
relex HSTS header checkup to only require a max age
...
Signed-off-by: creme <creme@envs.net>
2022-12-16 17:44:02 +01:00
ansuz
0231fc684d
fix a typo in the newest checkup test
2022-12-16 15:58:19 +05:30
ansuz
505b42f740
check that hosts provide an HSTS header
2022-12-16 15:52:30 +05:30
ansuz
bdf8762fb6
fix typo that broke checkup page styles
2022-10-14 18:17:19 +05:30
ansuz
5b4b68b31a
[checkup] detect custom pages that might override critical functionality and warn against using CloudFlare
2022-10-05 15:08:49 +05:30
ansuz
174d97c442
test whether registration is open on public instances
2022-09-22 14:11:22 +05:30
ansuz
085791d389
replace all mentions of docs.cryptpad.fr with docs.cryptpad.org
2022-09-09 17:27:09 +05:30
ansuz
556d58cfe2
remove more XXX notes
2022-09-08 15:05:15 +05:30
ansuz
2f81c6f3a0
generate built pages in a directory that is easier to serve
2022-09-06 13:24:44 +05:30
ansuz
0219637502
test opengraph functionality on more pages from checkup
2022-09-05 19:39:03 +05:30
ansuz
5ee8c2e5f4
basic checkup page test for opengraph tags
2022-09-01 14:07:30 +05:30
ansuz
dd5f4a2e7b
link from checkup page directly to instance policy configuration docs
2022-07-26 16:29:08 +05:30
ansuz
0be64ac958
simplify accounts configuration on dev instances
2022-05-11 13:12:12 +05:30
ansuz
c81525ffc4
checkup: complain if public instance don't provide description & location
2022-05-10 13:13:02 +05:30
ansuz
8adeeb21ec
display instance info on the home page
...
* implements /api/instance
* updates recommended NGINX config
* adds a test on /checkup/
2022-05-03 18:20:34 +05:30
ansuz
404b89eb28
update recommended settings for embedding to permit element desktop
2022-04-04 12:31:40 +05:30
ansuz
b4323b2c40
fix incorrect frame-ancestors and update test
2022-04-01 13:15:06 +05:30
ansuz
e6c51e3dff
remove hardcoded translations and invert remote embedding logic
2022-03-24 12:43:16 +05:30
ansuz
9ae4101ea2
test for the presence of x-content-type-options for blob and block
2022-03-23 13:35:17 +05:30
ansuz
f34a60665f
check that the server is running at least NodeJS v16.14.2
2022-03-22 14:27:07 +05:30
ansuz
b83e8600f4
clean up checkup tests and remove XXX
2022-03-15 13:35:49 +05:30
ansuz
a54a0af604
more tests on checkup page
2022-03-14 17:09:22 +05:30
ansuz
e38e08fb6e
Merge branch 'soon' into block-embeds
2022-03-14 12:52:55 +05:30
ansuz
c715334616
stub a test on the checkup page
2022-03-11 13:49:34 +05:30
ansuz
45d2eb0267
Merge branch 'soon' of github.com:xwiki-labs/cryptpad into support-categories
...
and include some tweaks for the checkup page
* sort errors above warnings
* improve messages for new tests
2022-03-10 11:33:41 +05:30
ansuz
c111364024
add two new tests to diagnose unavailability of uploaded blocks and blobs
2022-03-08 18:20:11 +05:30
ansuz
1e2a059074
lint compliance
2022-02-25 16:09:52 +05:30
ansuz
7c3d563453
WIP support for customized and translated legal info
2022-02-24 15:37:05 +05:30
ansuz
aaa00216d4
add a note about what configurations are supported re: third party embedding
2022-02-18 16:13:47 +05:30
ansuz
0917b45035
implement proper support for forbidding remote media-tag inclusion
...
...and test that the basic headers are correctly set on the checkup page
2022-02-18 16:09:02 +05:30
ansuz
b40c81d088
support modifying CSP headers at runtime
2022-02-18 13:54:33 +05:30
ansuz
1a18eafb7f
checkup page improvements
...
* removed a redundant test
* more descriptive error messages
* more useful return values in failed tests
* xhr reuse where possible for faster test completion
* guard against typeerrors caused by undefined CSP
* display server token value in summary if present
2022-02-18 13:26:42 +05:30
ansuz
d781d3bba2
lint compliance
2022-02-15 14:03:56 +05:30
ansuz
6196e81953
WIP checkup tests
2022-02-14 12:38:54 +05:30
ansuz
6a62e28c60
include option upgradeURL CSP in checkup page tests
2022-02-14 12:20:00 +05:30
ansuz
7b6c8b83ef
stricter websocket CSP and tests to match
2022-02-14 11:45:44 +05:30
ansuz
c0686dad99
fix merge conflict
2022-02-11 21:52:54 +05:30
ansuz
19863b8fb0
Merge branch 'soon' into checkup
2022-02-11 21:49:21 +05:30
ansuz
0f46869217
WIP update recommended production CSP values
2022-02-10 17:11:17 +05:30
ansuz
383684d339
add new, very specific tests for CSP to the checkup page
2022-02-10 16:53:14 +05:30
ansuz
cc1137b96b
more WIP checkup
2022-02-10 16:29:48 +05:30
ansuz
ee92ddb813
more WIP checkup
2022-02-10 14:50:15 +05:30
ansuz
2e14e8e930
more WIP checkup
2022-02-10 14:40:58 +05:30
ansuz
f2ead5b588
more WIP checkup
2022-02-10 14:32:14 +05:30
ansuz
d736e22c3b
more WIP checkup
2022-02-10 14:21:26 +05:30
