Commit Graph
21 Commits
Author SHA1 Message Date
Trinity Pointard fceb9ab0cd Update cookie management a bit
Update to latest rocket_csrf
Make user_id a samesite lax cookie (see https://github.com/Plume-org/Plume/issues/233#issuecomment-422660275)
2018-09-30 11:56:12 +02:00
Trinity Pointard f0fb030c7f Update recommended nginx config
Update recommended nginx config to allow iframes
close #234
2018-09-19 18:18:39 +02:00
Trinity Pointard fab6360100 Be less restrictive on authorized html tags
Allow users to add ids to tags
Allow users to use iframes
2018-09-19 10:51:27 +02:00
Trinity Pointard e9b2a20ad3 Update dependancie to rocket_csrf
fix #117
2018-07-20 17:24:34 +02:00
Trinity Pointard ec4b791727 Update dependancy to rocket_csrf
fix #96
2018-06-30 09:38:44 +02:00
Trinity Pointard 5bbfd9d1e9 Set maximum image width to 100% of parent
fix #87
2018-06-25 16:03:59 +02:00
Trinity Pointard 5133410451 Properly verify password
fix #86
2018-06-25 15:38:39 +02:00
Trinity Pointard 3b9c53bebc Use proper repository for rocket_csrf 2018-06-24 19:02:47 +02:00
Trinity Pointard 30e9620d0a Add csrf protection 2018-06-24 18:58:57 +02:00
Trinity Pointard db248701b9 Disallow blog name which yould result in empty blog name
fix #63
2018-06-19 22:34:59 +02:00
Trinity Pointard 97c652cefd Remove HTML tags from preview
fixes #24
2018-06-18 19:28:26 +02:00
Trinity Pointard d8f32afeb0 allow html on user.summary 2018-06-11 16:05:18 +02:00
Trinity PointardandYour Name 7d9609671c change post.content and comment.content's types from String to SafeString 2018-06-11 12:22:43 +02:00
Trinity PointardandYour Name bb1442db8a create new type SafeString to sanitise and store unsafe html 2018-06-11 11:44:17 +02:00
Trinity PointardandYour Name e7cadbf764 fix double-escaping on login page and disallow html on summary 2018-06-11 11:19:44 +02:00
Trinity PointardandYour Name daf4de07be rename templates from .tera to .html.tera to enable auto-escaping of html 2018-06-11 11:19:39 +02:00
Trinity Pointard 3dcd78f205 fix redirection to login in src/routes/user.rs 2018-06-07 10:39:22 +02:00
Trinity Pointard 8158f19b85 add fallback to url generating 404 2018-06-04 21:57:03 +02:00
Trinity Pointard 2fde47d909 add optional login message and callback 2018-06-04 20:21:43 +02:00
Trinity Pointard c9b231fae1 add trailing / to followers url
Signed-off-by: Trinity Pointard <trinity.pointard@insa-rennes.fr>
2018-05-22 17:52:53 +02:00
Trinity Pointard a8aeb40b95 add trailing slashes to links where they were missing
Signed-off-by: Trinity Pointard <trinity.pointard@insa-rennes.fr>
2018-05-22 17:35:16 +02:00