aitzol/Plume
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
712 Commits 25 Branches 10 Tags
62c94ed463dd01f9df5c1fdb0eea9f991acb3996
Commit Graph
25 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Trinity Pointard 62c94ed463 Refactor and verify http signature on personnal inbox 
Verify signature on personnal inbox
Reduce code duplication
Put Headers in plume-models
 2018-10-03 20:48:25 +02:00
Trinity Pointard 0a5d435249 Verify http signatures 2018-10-03 09:31:38 +02:00
Trinity Pointard d610ed1641 Add verify() to the Signer trait 
And implement it for Blog and User
 2018-09-30 12:08:04 +02:00
Trinity Pointard eafe1ed490 Add content digest to signed http headers 
Sign the Digest HTTP header
 2018-09-30 12:08:04 +02:00
Trinity Pointard fceb9ab0cd Update cookie management a bit 
Update to latest rocket_csrf
Make user_id a samesite lax cookie (see https://github.com/Plume-org/Plume/issues/233#issuecomment-422660275)
 2018-09-30 11:56:12 +02:00
Trinity Pointard f0fb030c7f Update recommended nginx config 
Update recommended nginx config to allow iframes
close #234
 2018-09-19 18:18:39 +02:00
Trinity Pointard fab6360100 Be less restrictive on authorized html tags 
Allow users to add ids to tags
Allow users to use iframes
 2018-09-19 10:51:27 +02:00
Trinity Pointard e9b2a20ad3 Update dependancie to rocket_csrf 
fix #117
 2018-07-20 17:24:34 +02:00
Trinity Pointard ec4b791727 Update dependancy to rocket_csrf 
fix #96
 2018-06-30 09:38:44 +02:00
Trinity Pointard 5bbfd9d1e9 Set maximum image width to 100% of parent 
fix #87
 2018-06-25 16:03:59 +02:00
Trinity Pointard 5133410451 Properly verify password 
fix #86
 2018-06-25 15:38:39 +02:00
Trinity Pointard 3b9c53bebc Use proper repository for rocket_csrf 2018-06-24 19:02:47 +02:00
Trinity Pointard 30e9620d0a Add csrf protection 2018-06-24 18:58:57 +02:00
Trinity Pointard db248701b9 Disallow blog name which yould result in empty blog name 
fix #63
 2018-06-19 22:34:59 +02:00
Trinity Pointard 97c652cefd Remove HTML tags from preview 
fixes #24
 2018-06-18 19:28:26 +02:00
Trinity Pointard d8f32afeb0 allow html on user.summary 2018-06-11 16:05:18 +02:00
Trinity PointardandYour Name 7d9609671c change post.content and comment.content's types from String to SafeString 2018-06-11 12:22:43 +02:00
Trinity PointardandYour Name bb1442db8a create new type SafeString to sanitise and store unsafe html 2018-06-11 11:44:17 +02:00
Trinity PointardandYour Name e7cadbf764 fix double-escaping on login page and disallow html on summary 2018-06-11 11:19:44 +02:00
Trinity PointardandYour Name daf4de07be rename templates from .tera to .html.tera to enable auto-escaping of html 2018-06-11 11:19:39 +02:00
Trinity Pointard 3dcd78f205 fix redirection to login in src/routes/user.rs 2018-06-07 10:39:22 +02:00
Trinity Pointard 8158f19b85 add fallback to url generating 404 2018-06-04 21:57:03 +02:00
Trinity Pointard 2fde47d909 add optional login message and callback 2018-06-04 20:21:43 +02:00
Trinity Pointard c9b231fae1 add trailing / to followers url 
Signed-off-by: Trinity Pointard <trinity.pointard@insa-rennes.fr>
 2018-05-22 17:52:53 +02:00
Trinity Pointard a8aeb40b95 add trailing slashes to links where they were missing 
Signed-off-by: Trinity Pointard <trinity.pointard@insa-rennes.fr>
 2018-05-22 17:35:16 +02:00