Commit graph

192 commits

Author SHA1 Message Date
ansuz
e38e08fb6e Merge branch 'soon' into block-embeds 2022-03-14 12:52:55 +05:30
ansuz
b65730b853 allow admins to enable configurable disk I/O profiling 2022-03-07 18:42:00 +05:30
ansuz
0917b45035 implement proper support for forbidding remote media-tag inclusion
...and test that the basic headers are correctly set on the checkup page
2022-02-18 16:09:02 +05:30
ansuz
fa8e901f54 drop support for 'config.contentSecurity' 2022-02-18 13:59:00 +05:30
ansuz
b40c81d088 support modifying CSP headers at runtime 2022-02-18 13:54:33 +05:30
ansuz
ef6f98c149 initial serverside components for 'disableEmbedding' functionality 2022-02-18 13:35:20 +05:30
ansuz
cc1137b96b more WIP checkup 2022-02-10 16:29:48 +05:30
ansuz
4e3c0f32cf enable oo presenter mode and embedded chart editor on dev instances 2021-10-20 12:20:09 +05:30
ansuz
0d31deb3fc dev server fixes for export with CSP 2021-10-19 17:25:05 +05:30
ansuz
b8d6af7891 adjust CSP headers for printing from OnlyOffice
* allow outer to load resources from the sandbox (for fonts)
* test whether the expected CSP values are present on the checkup page
* simplify the nodejs server a bit
2021-10-19 14:22:10 +05:30
ansuz
d9b6d94580 use consistent capitalization for CryptPad
run docs/ARCHITECTURE.md:[XWiki-Labs](https://labs.xwiki.com/) has published an open source suite (called [Cryptpad](https://github.com/xwiki-labs/cryptpad)) of collaborative editors  which employ end to end encryption.
docs/ARCHITECTURE.md:Cryptpad is capable of using a variety of data stores.
docs/ARCHITECTURE.md:Cryptpad was initially written to use [websockets](https://en.wikipedia.org/wiki/WebSocket) for transportation of messages.
docs/ARCHITECTURE.md:The encryption scheme employed by Cryptpad is a [symmetric encryption](https://en.wikipedia.org/wiki/Symmetric-key_algorithm) which utilizes a single [pre-shared-key](https://en.wikipedia.org/wiki/Pre-shared_key) known by all participants.
readme.md:See [Cryptpad-Docker](https://github.com/xwiki-labs/cryptpad-docker) repository for details on how to get up-and-running with Cryptpad in Docker. This repository is maintained by the community and not officially supported.
readme.md:If you have any questions or comments, or if you're interested in contributing to Cryptpad, come say hi in our [Matrix channel](https://app.element.io/#/room/#cryptpad:matrix.xwiki.com).
www/common/translations/README.md:To illustrate the process of translating, this guide will make an english-pirate translation of Cryptpad.
www/common/translations/README.md:We'll assume that you have a work locally-installed, properly functioning installation of Cryptpad.
www/common/translations/README.md:If you don't have Cryptpad installed locally, start by following the steps in the main readme.
www/common/translations/README.md:    out.main_title = "Cryptpad: Zero Knowledge, Collaborative Real Time Editing";
www/common/translations/README.md:    out.main_title = "Cryptpad: Knowledge lost at sea while ye scribble with yer mateys";
www/common/translations/README.md:It's advisable to save your translation file frequently, and reload Cryptpad in your browser to check that there are no errors in your translation file.
www/common/translations/README.md:When you're happy with your translation file, you can visit http://localhost:3000/assert/translations/ to view Cryptpad's tests.
www/common/translations/messages.ca.json:    "topbar_whatIsCryptpad": "Què és CryptPad",
www/common/translations/messages.de.json:    "topbar_whatIsCryptpad": "Was ist CryptPad",
www/common/translations/messages.el.json:    "topbar_whatIsCryptpad": "Τι είναι το CryptPad",
www/common/translations/messages.es.json:    "main_title": "Cryptpad: Zero Knowledge, Editor Colaborativo en Tiempo Real",
www/common/translations/messages.es.json:    "tos_title": "Condiciones de servicio Cryptpad",
www/common/translations/messages.es.json:    "tos_e2ee": "Los documentos Cryptpad pueden ser leídos o modificados por cualquiera que pueda adivinar o que pueda tener el enlace. Recomendamos que utilices mensajes cifrados de punto a punto (e2ee) para compartir URLs, no asumimos ninguna responsabilidad en el evento de alguna fuga.",
www/common/translations/messages.es.json:    "topbar_whatIsCryptpad": "Qué es CryptPad",
www/common/translations/messages.es.json:    "settings_autostoreHint": "<b> Automático </b> Todos los pads que visita se almacenan en su CryptDrive. <br> <b> Manual (siempre pregunte) </b> Si aún no ha guardado un pad, se le preguntará si desea para almacenarlos en su CryptDrive. <br> <b> Manual (nunca preguntar) </b> Los Pads no se almacenan automáticamente en su Cryptpad. La opción para almacenarlos estará oculta.",
www/common/translations/messages.fi.json:    "home_host": "Tämä on itsenäinen yhteisön ylläpitämä Cryptpad-instanssi.",
www/common/translations/messages.fi.json:    "topbar_whatIsCryptpad": "Mikä on CryptPad",
www/common/translations/messages.fr.json:    "topbar_whatIsCryptpad": "Qu'est-ce que CryptPad",
www/common/translations/messages.fr.json:    "admin_updateAvailableHint": "Une nouvelle version de Cryptpad est disponible",
www/common/translations/messages.id.json:    "main_title": "Cryptpad: Informasi Aman, Kolaborasi Waktu Nyata"
www/common/translations/messages.it.json:    "topbar_whatIsCryptpad": "Cos'è CryptPad",
www/common/translations/messages.it.json:    "settings_autostoreHint": "<b>Automatico</b> Tutti i pad che visiti sono conservati nel tuo CryptDrive.<br><b>Manuale (chiedi sempre)</b> Se non hai ancora conservato alcun pad ti verrà chiesto se vuoi conservarli nel tuo CryptDrive.<br><b>Manuale (non chiedere mai)</b> I pads non sono conservati automaticamente nel tuo Cryptpad. L'opzione di conservarli sarà nascosta.",
www/common/translations/messages.it.json:    "survey": "Sondaggio Cryptpad",
www/common/translations/messages.it.json:    "crowdfunding_button": "Supporta Cryptpad",
www/common/translations/messages.ja.json:    "topbar_whatIsCryptpad": "CryptPadとは何か",
www/common/translations/messages.json:    "settings_autostoreHint": "<b>Automatic</b> All the pads you visit are stored in your CryptDrive.<br><b>Manual (always ask)</b> If you have not stored a pad yet, you will be asked if you want to store them in your CryptDrive.<br><b>Manual (never ask)</b> Pads are not stored automatically in your Cryptpad. The option to store them will be hidden.",
www/common/translations/messages.json:    "topbar_whatIsCryptpad": "What is CryptPad",
www/common/translations/messages.nb.json:    "topbar_whatIsCryptpad": "Hva er CryptPad",
www/common/translations/messages.nl.json:    "settings_autostoreHint": "<b>Automatisch</b> Alle geopende werkomgevingen worden automatisch opgeslagen in uw CryptDrive.<br><b>Handmatig (altijd vragen)</b> Als u een werkomgeving nog niet hebt opgeslagen, zult u gevraagd worden of u het in uw CryptDrive wilt opslaan.<br><b>Handmatig (nooit vragen)</b> Werkomgevingen worden niet automatisch opgeslagen in uw Cryptpad. The optie om op te slaan wordt verborgen.",
www/common/translations/messages.pl.json:    "main_title": "Cryptpad: Wspólne edytowanie w czasie rzeczywistym, bez wiedzy specjalistycznej",
www/common/translations/messages.pl.json:    "tos_title": "Warunki korzystania z usług Cryptpad",
www/common/translations/messages.pl.json:    "tos_e2ee": "Dokumenty Cryptpad mogą być odczytywane i modyfikowane przez każdego kto może zgadnąć lub w inny sposób uzyskać identyfikator dokumentu. Polecamy korzystania z oprogramowania szyfrującego end-to-end (e2ee) do udostępniania linków URL. Nie będziesz rościł sobie żadnych wierzytelności w wypadku gdy taki URL dostanie się w niepowołane ręce.",
www/common/translations/messages.pt-br.json:    "main_title": "Cryptpad: Zero Knowledge, Edição Colaborativa em Tempo Real",
www/common/translations/messages.pt-br.json:    "tos_title": "Termos de serviço doCryptpad",
www/common/translations/messages.pt-br.json:    "topbar_whatIsCryptpad": "O que é CryptPad",
www/common/translations/messages.ro.json:    "settings_autostoreHint": "<b>Automat</b> Toate documentele accesate sunt stocate în CryptDrive-ul dumneavoastră.<br><b>Manual (întreabă întotdeauna)</b> Dacă nu ai stocat încă un document, vei fi întrebat dacă dorești să îl stochezi în Cryptdrive-ul tău.<br><b>Manual (nu mai întreba)</b> Documentele nu sunt stocate automat în Cryptpad-ul tău. Opțiunea de a le stoca ulterior va fi ascunsă.",
www/common/translations/messages.ru.json:    "topbar_whatIsCryptpad": "Что такое CryptPad",
www/common/translations/messages.zh.json:    "footer_aboutUs": "關於 Cryptpad", for many more examples
2021-08-04 14:18:07 +05:30
ansuz
3b44c09bc4 check COOP headers for multiple endpoints
and improve some error reporting in the checkup RPC
2021-07-01 16:42:09 +05:30
ansuz
942a136886 somewhat stricter httpUnsafeOrigin validation 2021-06-15 03:52:12 +05:30
ansuz
98c8d7086f include instance version in Env 2021-06-09 18:43:31 +05:30
ansuz
87a52b67f5 re-add an incorrectly removed curly brace 2021-06-09 14:23:58 +05:30
ansuz
41db88a360 WIP admin 'network' panel 2021-06-08 20:24:30 +05:30
ansuz
b88963cec2 conditionally log some information about the checkup page when launching the server 2021-06-01 17:53:57 +05:30
ansuz
32494fca0c let NGINX handle its own headers 2021-05-12 14:29:29 +05:30
ansuz
eb32651c67 leave some notes about a minor race condition 2021-05-05 12:07:45 +05:30
ansuz
30fc2a5edf Merge branch 'staging' into restricted-registration 2021-05-01 02:04:22 +05:30
ansuz
bd37e45eb4 disable some seemingly problematic server code 2021-04-30 10:38:03 +05:30
ansuz
15a8284a30 add some logging and avoid some errors 2021-04-29 07:09:16 +05:30
ansuz
50045c08d0 WIP restrict registration 2021-04-26 18:31:33 +05:30
ansuz
e90031b8d1 refined header fix for standalone instances 2021-04-15 19:43:08 +05:30
ansuz
3a0fe6968d refine the header fixes for chrome to avoid breaking standalone instances 2021-04-15 18:03:13 +05:30
ansuz
ae173d31cb fix a chrome header issue 2021-04-15 15:17:08 +05:30
ansuz
34e02a23e7 deduplicate server code for caching rendered API endpoints 2021-04-12 13:19:11 +05:30
ansuz
4e3a7fef24 add notes from our review 2021-04-02 17:14:15 +05:30
yflory
8f679c141c Broadcast update 2021-03-30 17:41:12 +02:00
yflory
96892bff48 Merge branch 'staging' into broadcast 2021-03-30 13:53:49 +02:00
yflory
b108960d67 Rename ooslide and oodoc 2021-03-24 15:01:52 +01:00
ansuz
3141d7add1 remove trailing slashes from configured origins
in both the server and the example config file
2021-03-22 14:12:14 +05:30
yflory
7971a6d267 Major broadcast refactoring 2021-03-16 17:00:23 +01:00
yflory
d15c0461cc Add /api/broadcast and improve message deletion 2021-03-12 12:46:11 +01:00
ansuz
1ef6a96cd1 avoid duplicating CSP headers in production environments 2021-03-03 11:11:06 +05:30
ansuz
3c4b2ffad0 avoid setting headers for /api/config that will be duplicated by nginx 2021-03-03 09:59:04 +05:30
ansuz
929159a0f4 implement server offline mode (no ws) 2021-01-08 14:49:04 +05:30
yflory
396eb4d263 Stop autodownloading big mediatags 2020-11-24 16:38:31 +01:00
ansuz
ebc394c4b3 expose defaultStorageLimit via /api/config 2020-11-17 18:09:34 +05:30
ansuz
aa547a7b76 align nodejs http headers with example nginx 2020-11-03 16:48:31 +05:30
ansuz
804443e5f7 send basic team info along with support tickets
...and fix a server bug that had broken /api/config.supportMailbox
2020-10-15 15:12:12 +05:30
ansuz
369c92c01d initialize Env from server and deduplicate several attributes 2020-10-12 17:39:53 +05:30
ansuz
c99de4ffc2 expose the canonical representation of adminKeys via /api/config 2020-10-12 14:56:09 +05:30
ansuz
b5d3a10dc2 guard against possible typeErrors from unvalidated config input 2020-10-09 13:28:13 +05:30
ansuz
6519f8242e Merge branch 'signing-key-format' into staging 2020-06-30 14:52:57 -04:00
ansuz
ebcc9a069b add server-side support for the new format of public signing keys 2020-06-25 13:14:26 -04:00
yflory
b94a596751 remove unsafe-inline requirement in pad 2020-06-22 18:45:16 +02:00
ansuz
5196440e65 guard against a typeError when httpSafeOrigin is not defined 2020-04-06 10:16:02 -04:00
ansuz
9fa93172cf tolerate trailing slashes in httpSafeDomain 2020-04-03 10:37:23 -04:00
ansuz
3b05d24f10 wip csp issue 2020-04-02 17:46:29 -04:00