3754ba7596
Merge pull request #414 from vincentbernat/fix/no-eval
...
jade: avoid using eval once compiled
6 years ago
514c5d42b6
Merge pull request #422 from Lucas-C/master
...
Bugfix to support <a> elements in SVG diagrams - close #421
6 years ago
ad6e868ba5
Merge pull request #416 from vincentbernat/feature/preview
...
js: add a preview button to see a rendered preview
6 years ago
3d648c2d29
fix tests due to non predictive html rendering
6 years ago
501bdc59bf
Bugfix to support <a> elements in SVG diagrams - close #421
6 years ago
b0264bc807
js: add a preview button to see a rendered preview
...
When the button is clicked, the /preview endpoint is used to render a
preview text. The preview is inserted and the preview button is
replaced by an edit button to go back to edit mode. Alternatively, the
use can click on the preview to edit.
Some small CSS modifications are done to accomodate the
modification. Also, the preview is wrapped into `.isso-common
.text-wrapper .text` to not make the CSS more complex.
When in preview mode, the background is stripped/greyish in case it's not easy
to make a difference between preview and not preview (due to
unformatted text). We avoid to modify borders/shadow boxes because it
would make the design "jumpy".
6 years ago
55dac39bdd
Merge pull request #418 from vincentbernat/feature/nofollow-links
...
html: add nofollow/noopener to links
6 years ago
b5c40bedf7
Merge pull request #419 from vincentbernat/feature/atom-feed
...
api: add /feed API to get an Atom feed for an URI
6 years ago
01cf96eeb7
feed: ensure Markdown rendering is applied to feeds
6 years ago
502747cb75
Merge pull request #411 from Rocket1184/hotfix/demo-and-admin-redirect
...
fix: admin and demo view redirect issue
6 years ago
45f6b1eda3
feed: make /feed API call configurable server and client-side
...
On server-side, this can be enabled by providing a base URL to use to
build the full URL. Limit also becomes configurable. On client-side,
we need to add a switch to know whatever or not the additional link
can be displayed.
6 years ago
bceb69518b
js: put a link to Atom feed on top of the main postbox
6 years ago
a89debbc9c
api: add a simple test for /feed endpoint
6 years ago
5c6e78b9c1
api: ensure /feed is easily cacheable by issuing etag/last-modified headers
6 years ago
ebca06059a
api: add /feed API to get an Atom feed for an URI
...
We need absolute URL at some places. We assume the first host
configured is the base of the URI we have.
Fix #81
6 years ago
8d8f9c8c59
html: add nofollow/noopener to links
...
"nofollow" is a deterrent for spammers: they cannot put links and hope
to increase their SEO when all these links have the nofollow
relationship.
"noopener" is a security for links opening a new window. They ensure
the target cannot control us.
Fix #373
6 years ago
fcf576dd08
css: remove CSS code for avatar in postbox
...
It has been removed in 0211322915
6 years ago
36d4ceb2d9
Don't send notification when someone responds to his/her own comment
6 years ago
14195d3711
Used proper open and not check timing
6 years ago
3ee13ab9fc
Removed debug line
6 years ago
be5792cb79
Merged master in
6 years ago
04b6d70b01
Added a generic way to migrate from a json file
6 years ago
9618c0f3a3
jade: avoid using eval once compiled
...
Use of eval is handy when we need to automatically reload a
template. However, in production, this is slow and unsafe. Moreover,
when using CSP, we have to use 'unsafe-eval' which brings shame to
most of us. It appears use of eval() is not needed because the
template has already been translated to Javascript. We just need to
bind "jade" to its local scope.
So, we add an additional wrapper function binding "jade" to the local
scope. Moreover, when compiling the template, we add a flag to the
function to know it has already been compiled. In this case, we
execute it with "jade" in its scope. Otherwise, we keep using eval.
Quickly tested in both situations. Seem to work.
Fix #274 .
6 years ago
22a36bdb7c
Support notifications also for replies
6 years ago
da6bb0cec7
Fix faulty check for parent comment
6 years ago
30fef390f5
fix: admin and demo view redirect issue
6 years ago
4e2d2dfb20
i18n: add space between number and CJK character
6 years ago
73c7933548
A quick dirty fix of #401 ( #406 )
...
Fix URL in moderation mails if isso runs in a sub-URL (closes #401 )
6 years ago
361c596bf2
Adding support for ISSO_CORS_ORIGIN env variable to allow defining wildcard CORS origins
6 years ago
c9045f5b1f
Implement opt-out for email notifications
6 years ago
bc4bc55025
Include link to comment in email notifications
6 years ago
2e85ec653f
Make SMTP connections thread safe
6 years ago
107b9be003
Add notification column to database if needed
6 years ago
c30873e8a2
Merge remote-tracking branch 'tsileo/reply_notification' into reply_notification
...
Conflicts:
isso/css/isso.scss
isso/db/comments.py
isso/ext/notifications.py
isso/js/app/i18n/fr.js
isso/js/app/isso.js
isso/js/app/text/postbox.html
isso/views/comments.py
6 years ago
7f55c81e08
autopep8 the code and then flake8
6 years ago
2cc564eeca
Merge pull request #380 from cclauss/drop-support-for-python-2.6-and-3.3
...
Drop support for python 2.6 and 3.3
6 years ago
6ccebce041
Improved German translation
6 years ago
b569b19a7f
compat.py passes pyflakes test
...
Drop support for Python 2.6 and 3.3
6 years ago
2b56963f31
fix pyflakes error, make travis happy
6 years ago
d2b573a4d5
Merge pull request #256 from blatinier/issue-10/admin-interface
...
Add a basic admin interface (Fix issue #10 )
There are more to add in the interface but it's a good start.
7 years ago
ea3507910f
Merge pull request #354 from mpchadwick/feature/comment-placeholder-color
...
Darken placeholder text
7 years ago
3efe0c86d9
Put hu into correct alphabetical order
7 years ago
be26948fff
Use <label>s rather than placeholders
7 years ago
9ab23c0908
Fix hungarian translation
7 years ago
21983a61b6
Darken placeholder text
...
Previously color contrast was insufficient per WCAG AA
7 years ago
02eaffea21
Added hungarian translation
7 years ago
650c6cf126
Merge pull request #341 from macedigital/fix-identicon-hash-size
...
Fix: Truncate key-length when generating identicons
7 years ago
6a60f831b0
remove unused variable
7 years ago
9b0e3d29fe
revert incorrect removal of the internal server startup CLI
7 years ago
43623f349b
Fix: Truncate key-length when generating identicons
...
Hex-digits with character count above 17 cannot be safely converted to an Integer, see [MAX_SAFE_INTEGER](https://medium.com/the-node-js-collection/javascripts-number-type-8d59199db1b6#53cd ).
Therefore, when long keys (e.g. 32 characters) are passed into `generateIdenticon()`, and the modulus of 2^18 is performed, the result is 0 all the time. This means, the identicon will render as an empty svg image.
Here is a proof-of-concept (run in any modern browser):
```js
const key = '841b625dcf75413ff3ed5137a81ff1c3';
const int = parseInt(key, 16);
const hash = int % Math.pow(2, 18);
// throws, due to floating point conversion / integer overflow
console.assert(258499 === hash, "Modulus for 'hash' should be != 0");
const int2 = parseInt(key.substr(-16), 16);
const hash2 = int2 % Math.pow(2, 18);
// works as expected
console.assert(258048 === hash2, "Modulus 'hash2' should be != 0");
```
Truncating the passed in argument to a maximum of 16 characters solves the issue.
As a sidenote, the same code in Python will work correctly:
```python
key = '841b625dcf75413ff3ed5137a81ff1c3'
int = int(key, 16)
hash = int % pow(2, 18)
assert 258499 == hash
```
7 years ago
c72946dc14
Run travis tests with python 3.5 & python 3.6
7 years ago
e3a8d0b93d
fix db test with incorrect SQL id, that happened work with pre-3.6 dicts before
7 years ago
39debdb011
Fix flakes errors.
7 years ago
8c33a84dd3
Merge pull request #253 from jGleitz/apidoc
...
Update API documentation.
7 years ago
2f7d6aa09b
Merge branch 'master' into patch-1
7 years ago
71bda25568
Merge pull request #312 from pellenilsson/fix-require-email
...
Fix require-email setting
7 years ago
c8e4e74514
Merge pull request #335 from philipcmonk/time
...
Display only complete units of time
7 years ago
afbcb6413e
Add da entry to i18n.js.
7 years ago
6006cd9e82
Merge Danish translation from https://github.com/MadsRC/isso
7 years ago
26f0e06e78
display only complete units of time
...
fixes #283
7 years ago
616c61ea88
Merge pull request #291 from ivegotasthma/ivegotasthma-patch-1
...
fix: add missing i18n entry
7 years ago
b14b1b51a9
validate->activate
7 years ago
84381f4f48
add: link to the thread
7 years ago
2adb779fef
add: edit author/email/website/message
7 years ago
e3fddf4ae8
add: orders in administration
7 years ago
3212bf762f
fix 500 error on pagination
7 years ago
0b6a0e4d5f
add: group by thread
7 years ago
1516f56cbd
fix: cursor pointer on links delete/validate
7 years ago
7a79746f73
add: show author email
7 years ago
0a93c866ff
Add a basic admin interface (Fix issue #10 )
...
Add a basic admin interface (Fix issue #10 )
wip again
still wip
fix login page
7 years ago
e9eebf58e3
Refactored comments unittest to work with optional gravatar feature
7 years ago
cbd4d90cb7
Added optional gravatar support
7 years ago
a9500e29dd
Add language "zh" as alias of "zh_CN"
7 years ago
4b7a32afac
Make the Chinese translations actually work
...
Before this change, the user must configure `lang="zh"` to use the CN version (neither `lang="zh_CN"` nor `lang="zh_TW"` works).
7 years ago
45a481daeb
Fix require-email setting, #308
7 years ago
f33ca31320
Highlight links by underline in comments
...
Signed-off-by: Morris Jobke <hey@morrisjobke.de>
7 years ago
cd460ef152
Danish translation
7 years ago
09b69feae9
fix: add missing i18n entry
...
Fixes an indexing error a user gets when he tries to make the language of isso to `bg`
8 years ago
5e7f010241
add persian to i18n
8 years ago
5bd7de084f
Adding Persian translation.
8 years ago
eeb091974d
add bulgarian translation to i18n.js, #272
8 years ago
2542acfca8
remove duplicated werkzeug compat middleware
...
A typo that always chained the legacy middleware although not necessary.
This causes errors with certain configurations (gevent + ???).
8 years ago
4fc6d5ac33
Merge pull request #263 from gumblex/master
...
fix "optional" in zh translations
8 years ago
a52a0862a8
Merge pull request #260 from panta82/vote-levels
...
Vote levels
8 years ago
12d85242dc
correct offset localtime for comments ago
8 years ago
c83346834e
fix "optional" in zh translations
8 years ago
689f3b906c
Merge remote-tracking branch 'tska/finnish'
8 years ago
75371bdd43
Ordered fi after en.
8 years ago
4972433406
Vote levels features (custom classes based on the comment votes)
8 years ago
b0f8606b0f
Hiding zero votes is now done through CSS instead of javascript.
8 years ago
b620f2c0b0
Bug when content is number 0.
8 years ago
14962ad51f
Added fi to i18.n.js.
8 years ago
cf20bc5687
Finnish translation. i18n/fi.js added.
8 years ago
46b2874b3d
Merge pull request #252 from blatinier/issue-27/data-attr-overide
...
Fix issue #27 on override thread discovery with custom data-attributes
8 years ago
bbff002bd6
Merge pull request #254 from jGleitz/preview
...
Preview endpoint
8 years ago
459611c0e7
Add an option for mandatory author (Fix issue #124 )
8 years ago
3c9bbda252
preview endpoint
8 years ago
2a11c000d4
convert bad tabs to spaces
8 years ago
8a9fe29bce
apidoc for count
8 years ago
afd4107ac3
apidoc for like & dislike
8 years ago
ded4927ae4
apidoc for moderate
8 years ago
c3439e5c79
apidoc for "delete comment"
8 years ago
9b79a98851
apidoc for "edit comment"
8 years ago
1f804bcf8e
apidoc for "view comment"
8 years ago
b2d9c80b5f
apidoc for "new comment"
8 years ago
5ca5d680fa
apidoc for fetch
8 years ago
f1325ccaca
Fix issue #27 on override thread discovery with custom data-attributes
8 years ago
0377c8bb20
fix reponse for OPTIONS response on Python 3, #242
8 years ago
2612fbc0f5
fix missing wrapper attribute
8 years ago
2a6aa1203b
Fix pluralisation issues and inexact translation
...
Noticed inexact translation for comment-hidden and no-comments.
Pluralisation had bugs, now it works correctly.
8 years ago
3cd475ec31
follow redirects, fix #193
8 years ago
a3a1d8cb86
fix getAttribute return value
8 years ago
3e309e0850
fix input field value access
8 years ago
b48ac000b1
config.js error.
8 years ago
57f902acd4
actually include isso/defaults.ini
8 years ago
622b59f8a4
move default config expansion to function body (`default` already exists)
8 years ago
93e783ed60
symlink share/isso.conf to isso/defaults.ini and include it properly
8 years ago
8579cbd6f8
fix undefined variable usage and enumeration logic
8 years ago
00ed48a1d3
fix incorrect define header
8 years ago
1f86fa897e
add vi (vietnamese) translation, #222
8 years ago
dd9ebdc46b
Merge remote-tracking branch 'origin/pr/222'
8 years ago
815c7f54b5
add hr (croatian) translation
8 years ago
dc1d83b74b
add cs (czech) translation
8 years ago
2e41c4728a
don't extend native objects, #191
8 years ago
5ce7084f59
Fix typo: s/trướ/trước
9 years ago
f1a8aed320
Completed Vietnamese translation.
9 years ago
17747368e1
Created new branch for translation: vietnamese.
...
Added Vietnamese translation.
9 years ago
33c02b45b4
Merge remote-tracking branch 'origin/pr/202'
9 years ago
54952e67ad
Merge remote-tracking branch 'origin/pr/199'
9 years ago
45c4e43ba2
Update ru.js
9 years ago
11dff33450
Update ru.js
9 years ago
ed0f680e97
Update Russian translation
...
Pluralization will work just fine now with Russian. Also I corrected several typos and added translation for missed "comment-hidden". I installed Isso via pip and have this part of code in other files.
9 years ago
b9ce411f85
write unit tests for require-email
9 years ago
cb21af4cc5
Add config for requiring emails
9 years ago
2af17b6204
corrected punctuation
9 years ago
19179b1764
modify to a better translation
9 years ago
b98133836d
Added zh_TW translation
9 years ago
8018a7e23d
update russian translation
9 years ago
6e4d9ba446
add: zh_CN Translation
9 years ago
6973128eac
Correct auth without password or username.
...
If no username is set, returns an empty string. So the test `username is
not None` is always True. Idem for password. This can lead to
authentication problems. This commit fixes the test to `if username and
password` as it was in the previous version.
9 years ago
630e76f66c
Merge branch 'legacy/0.9'
...
Conflicts:
CHANGES.rst
isso/ext/notifications.py
isso/utils/http.py
setup.py
9 years ago
f5566c1325
encode username/password in SMTP auth only for Python 2, fix #146
9 years ago
596acb7f79
request with User-Agent 'Isso/...', #151
9 years ago
56c81c2d06
Update ru.js
9 years ago
45053f9c0c
catch errors in http response
9 years ago
8e4db5a7a2
typo
9 years ago
f681002e7e
add support for html5lib below 0.95, #168
9 years ago
c3c519ad0e
add compatibility middleware for werkzeug 0.8, #170
9 years ago
e5219157a7
Merge pull request #172 from xuhdev/fix-159-2
...
Save the session-key as a unicode string in the db
9 years ago
21e91efbf9
Save the session-key as a unicode string in the db
...
The session-key should be saved as a string, not a byte string.
9 years ago
Benoît Latinier