arno/isso
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
688 Commits 14 Branches 38 Tags 5.8 MiB
b45f39e662
Commit Graph

688 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Srijan Choudhary
5525184243 Docs update: forward url protocol in sample nginx configs 2014-02-11 04:38:51 +05:30
Martin Zimmermann
079e5d19da add note about insecure connections, #65 2014-02-04 18:10:03 +01:00
Martin Zimmermann
16d085c9d1 improve tests for comment field validation 2014-02-04 15:34:02 +01:00
Martin Zimmermann
5efa81b57e replace assert foo == bar with appropriate self.assert$Foo calls 
except for test_migration because there are improved tests available
in the feature/cli branch
 2014-02-04 15:05:32 +01:00
Martin Zimmermann
b100517e4b update developer's guide 2014-02-03 11:19:21 +01:00
Martin Zimmermann
6aa122bc58 fix typo 2014-02-03 11:03:29 +01:00
Martin Zimmermann
3d9665b523 remove now obsolete Makefile 2014-02-03 11:00:11 +01:00
Martin Zimmermann
1c3c826ada replace requirejs-domready with a (self-made) HTML5 idiom, #51 
This commit removes yet another dependency. The provided domready
function is compatible with IE9, Firefox and Safari/Chrome.

Inspired by:

* http://stackoverflow.com/a/15580098
* https://github.com/requirejs/domReady/blob/master/domReady.js
 2014-02-03 10:54:54 +01:00
Martin Zimmermann
cfbf595605 mention mailing list and fix CSS typo 2014-02-01 20:26:08 +01:00
Martin Zimmermann
a92471ca9a allow failures for TOX_ENV=backport 2014-01-30 21:51:16 +01:00
Martin Zimmermann
4681a391ee pin versions to current Debian Wheezy/Unstable 2014-01-30 20:57:43 +01:00
Martin Zimmermann
f3e5d8dc1c add support for html5lib==0.95, fixes #60 
The python-html5lib package in Debian Wheezy does not support
`etree` as tree builder (called `simpletree` back then).
 2014-01-30 20:49:11 +01:00
Martin Zimmermann
417bd4614c Back to development: 0.8 2014-01-29 11:45:47 +01:00
Martin Zimmermann
45e838fab1 Preparing release 0.7 2014-01-29 11:45:34 +01:00
Martin Zimmermann
d65c984220 update changelog 2014-01-29 11:41:48 +01:00
Martin Zimmermann
518820a4af fix typo in reply-to-self conf, #59 2014-01-27 11:53:18 +01:00
Martin Zimmermann
14a2f82134 s/tls/starttls/ 2014-01-26 18:35:52 +01:00
Martin Zimmermann
335caa4887 Merge pull request #58 from JocelynDelalande/default-to-587-starttls 
default smtp to port=587 and security=starttls
 2014-01-26 09:26:32 -08:00
Jocelyn Delande
cbf63f5a4e default smtp to port=587 and security=starttls 2014-01-26 17:17:09 +01:00
Martin Zimmermann
aae07a3c24 Merge branch 'pr/57' 2014-01-25 22:57:04 +01:00
Martin Zimmermann
b94329fc66 also mention count.min.js 2014-01-25 22:56:55 +01:00
Jocelyn Delande
5cdab92a4b Documentation on comment counter. 2014-01-25 22:22:11 +01:00
Martin Zimmermann
baff120800 fix french pluralform 2014-01-25 22:19:59 +01:00
Martin Zimmermann
442cca5030 Merge pull request #56 from JocelynDelalande/patch-1 
Update api.rst
 2014-01-25 12:24:37 -08:00
JocelynDelalande
2e60fc7f68 Update api.rst 
Added doc on count feature
 2014-01-25 20:48:09 +01:00
Martin Zimmermann
cbd449dcd0 Merge branch 'transifex' 2014-01-16 12:01:04 +01:00
Martin Zimmermann
5f990e3697 link example cfg, fix markup errors and show content table, closes #52 
and also reword a few paragraphs as suggested via mail.
 2014-01-13 19:12:50 +01:00
Martin Zimmermann
3a1f92b8bd use html5lib's sanitizer, supersedes 3713d5e 
Python's HTMLParser is smart enough to filter malicious tags but fails
to repair invalid, user-inputted HTML. Instead of re-inventing the
wheel, Isso now uses html5lib's HTMLSanitizer with a whitelist of all
tags generated by Sundown.

Disallowed tags are discarded from the output to match the previous
unittests. This feature is only available for html5lib 0.99(9) and
later. Earlier releases just escape disallowed tags.
 2014-01-13 19:11:59 +01:00
Martin Zimmermann
3713d5e8ee allow raw HTML markup for a few (whitelisted) tags 
To be compatible with comments from Disqus (and users unfamiliar with
Markdown), Misaka no longer disables user-inputted HTML, but the
generated HTML is now post-processed and all "unsafe" tags (not
possible with Markdown) are discarded.

Whitelist: p, a, pre, blockquote, h1-h6, em, sub, sup, del, ins, math,
           dl, ol, ul, li

This commit also removes an unnecessary newline generated by
Misaka/Sundown.
 2014-01-12 14:44:39 +01:00
Martin Zimmermann
36d702c7bc proper use of Misaka's HTML render flags (fix malicious HTML injection) 
This commit now sanitizes *all* HTML tags written by the user (also
prevents auto-link to "unsafe" web protocols and images) as intended.

Fortunately because of Sundown's typography support, it did not affect
JS injection, but custom style tags and iframes.

PS: thanks to the anonymous submitter of a comment including a style tag
for 24pt, red font ;-)
 2014-01-12 12:58:24 +01:00
Martin Zimmermann
241b278863 whitelist external ipaddr package in tox configuration 2014-01-07 15:52:35 +01:00
Martin Zimmermann
dcd473967b Merge branch 'remove-q-lib' 2014-01-07 14:36:06 +01:00
Martin Zimmermann
6006a12778 fix wrong logic when vote counter stays at zero (e.g. self-vote) 2014-01-07 14:29:51 +01:00
Martin Zimmermann
306d2d9f9e log 5xx errors 
Also, fix console.log usage.
 2014-01-07 14:28:12 +01:00
Martin Zimmermann
a29393ee3f replace kriskowal/q with 50 LoC homebrew implementation, part of #51 
As a result, it is no longer possible to chain promises
(then().then().then(etc.)), but that is actually not an issue for Isso.

The deferred/promise implementation is roughly based on
http://stackoverflow.com/a/17722683 and stackp/promisejs.
 2014-01-07 14:28:10 +01:00
Martin Zimmermann
ebf6ca7a85 add Transifex translation to contributing guide 2014-01-06 18:38:16 +01:00
Martin Zimmermann
bfae158bde update translations from Transifex (initial pull) 2014-01-06 18:21:30 +01:00
Martin Zimmermann
4d530fb2f1 add Transifex project configuration file 2014-01-06 18:21:30 +01:00
Martin Zimmermann
055a20606a add tx-pull and tx-push FILE helper scripts 
tx-pull fetches translations from Transifex to .tx/<ressource>/<lang>
and converts the JSON into an AMD module. Requires `transifex-client`
from PyPi.

tx-push FILE submits a AMD translation module to Transifex using `curl`
and credentials from ~/.transifexrc.
 2014-01-06 18:21:27 +01:00
Martin Zimmermann
9dd066c6a6 reflect security = ... in docs and print warning if used 2014-01-01 22:20:00 +01:00
Martin Zimmermann
c50fe22eb1 fix port -> listen snippet 2014-01-01 22:07:16 +01:00
Martin Zimmermann
ab27ce5450 Merge pull request #48 from chimo/starttls 
Adds STARTTLS support to SMTP notifications
 2013-12-23 04:43:49 -08:00
Chimo
658e065f23 Adds STARTTLS support to SMTP notifications 2013-12-19 23:36:06 -05:00
Martin Zimmermann
85e637d017 simplify JSON response 2013-12-19 08:56:14 +01:00
Martin Zimmermann
905bd63eee CORS middleware must return bytes 2013-12-19 08:55:53 +01:00
Martin Zimmermann
82da63a81b check if hash is a base-16 string 2013-12-19 08:55:06 +01:00
Martin Zimmermann
e244227f41 convert proxy object to string before passing to urllib 2013-12-19 08:09:09 +01:00
Martin Zimmermann
d4f836fd65 add test for /check-ip 2013-12-18 19:27:36 +01:00
Martin Zimmermann
cbee3f7b2e clarify copyright headers 2013-12-18 16:21:35 +01:00
Martin Zimmermann
ecfaf9828e add faq.rst 2013-12-18 16:20:52 +01:00