Commit graph

14130 commits

Author SHA1 Message Date
Pierre de La Morinerie
70fe0b2fd4
Merge pull request #6983 from betagouv/csp-in-tests
Blocage des connexions vers des services externes pendant les tests
2022-02-23 09:03:18 +01:00
Pierre de La Morinerie
3481d27cba config: block browser external connections during system tests
During system tests, we don't want the headless browser to load
external resources:

- It is faster (we don't wait for external resources to be loaded)
- It avoids leaking our test setup to external service

Fixes #6982
2022-02-22 17:24:25 +01:00
Pierre de La Morinerie
6d5f44d489 config: translate the CSP comments from french to english 2022-02-22 17:17:55 +01:00
Pierre de La Morinerie
a5c1800b67
Merge pull request #6979 from betagouv/restore-older-after-party-tasks
Restauration des anciennes tâches after_party supprimée du code
2022-02-22 16:35:29 +01:00
Pierre de La Morinerie
30d7cf634a tasks: restore older after_party tasks
Turns out deleting the tasks after 6 months only may not be enough for instances deploying
only once a year, for instance.

This reverts commit 77b65f3aa0.
2022-02-22 15:39:16 +01:00
Pierre de La Morinerie
e79ea23bf2
Merge pull request #6975 from betagouv/remove-hardcoded-gem-version
Dépendances : suppression des mentions de commits spécifiques pour les gems
2022-02-22 11:37:05 +01:00
Pierre de La Morinerie
4cde3623be gems: remove hardcoded git URL for mina
It is not needed anymore.
2022-02-22 09:27:57 +01:00
Pierre de La Morinerie
e6ad411aae gems: remove hardcoded version for zipline
The fix was eventually released.
2022-02-22 09:27:57 +01:00
Pierre de La Morinerie
d29e02d6c5
Merge pull request #6978 from betagouv/update_to_rails_6_1_4_6
Mise à jour de Rails vers la version 6.1.4.6
2022-02-22 09:23:46 +01:00
simon lehericey
6930ddb433 bump rails 2022-02-22 09:19:08 +01:00
Pierre de La Morinerie
8e5e325ccc
Merge pull request #6816 from kreushed/france-connect-update
Intégration des maquettes AgentConnect
2022-02-22 08:35:44 +01:00
kreushed
1c5b1c0030 Mise a jour du volet gauche de la page session new 2022-02-21 18:21:38 +01:00
kreushed
167cb100b6 Mise a jour du volet droit de la page session new 2022-02-21 18:21:38 +01:00
kreushed
e0bf1ea8cf Mise a jour des images 2022-02-21 17:34:53 +01:00
Paul Chavard
089341d3b6
Merge pull request #6972 from tchak/feat-rebase-attestation-templates
feat(dossier): rebase dossiers en construction and en instruction
2022-02-18 17:52:08 +01:00
Paul Chavard
2d396fcfb7 feat(dossier): rebase dossiers en construction and en instruction 2022-02-18 17:08:38 +01:00
Paul Chavard
59facd26f9
Merge pull request #6973 from tchak/fix-user-spec
test(user): fix unstable spec
2022-02-18 17:06:10 +01:00
Paul Chavard
50f095a5c6 test(user): fix unstable spec 2022-02-17 14:45:53 +01:00
Paul Chavard
4e10c04a1a
Merge pull request #6968 from betagouv/improve-message-notification
Améliorations de l'email de notification "Nouveau commentaire sur un dossier en brouillon"
2022-02-17 14:36:17 +01:00
Pierre de La Morinerie
c9f1a2b8ea mailer: improve notify_new_answer wording
And also insert the reply email address directly in the email body.
2022-02-16 18:35:30 +01:00
Pierre de La Morinerie
0a1214114e mailer: re-order notify_new_answer template
This avoids an `if !…` condition.
2022-02-16 18:26:45 +01:00
Pierre de La Morinerie
3fe2e3b374 mailer: add missing space to notify_new_answer message 2022-02-16 18:26:45 +01:00
Pierre de La Morinerie
17c83b1ce2 mailer: fix notify_new_answer mailer preview 2022-02-16 18:26:45 +01:00
Pierre de La Morinerie
0d67ca11a9
Merge pull request #6966 from betagouv/fix-matomo-csp
Correction des requêtes Matomo bloquées par la Content Security Policy
2022-02-15 16:02:05 +01:00
Pierre de La Morinerie
c2729ab7e2 config: add Matomo to the frame_src Content Security Policy
Solves the Matomo iframe being blocked on `/suivi`. Fix #5868
2022-02-15 15:56:53 +01:00
Pierre de La Morinerie
3276db016f config: add Matomo to the connect_src Content Security Policy
Solves Matomo connections being blocked. Fix #6949
2022-02-15 15:56:53 +01:00
Pierre de La Morinerie
9647e2b55c
Merge pull request #6965 from betagouv/fix-flaky-test
Amélioration de la fiabilité du test automatisé "Remplir un dossier"
2022-02-15 15:55:38 +01:00
Pierre de La Morinerie
8786b60285 specs: fix flaky "dossier brouillon" spec
When filling all the champs of a dossier, we skip the "Address"
champ (because it would attempt to request a blocked URL).

But that means the "Yes/No" radio buttons may be under the sticky
bottom bar, and thus not register the click – which makes the test fail.

Fix the issue by manually scrolling to the radio buttons.
2022-02-15 15:04:49 +01:00
Pierre de La Morinerie
c5418e1c52
Merge pull request #6956 from betagouv/dependabot/bundler/puma-5.6.2
Dépendances : mise à jour de `puma` de la v5.5.1 à la v5.6.2
2022-02-15 14:49:59 +01:00
dependabot[bot]
6e11c3445d
chore(deps): bump puma from 5.5.1 to 5.6.2
Bumps [puma](https://github.com/puma/puma) from 5.5.1 to 5.6.2.
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](https://github.com/puma/puma/compare/v5.5.1...v5.6.2)

---
updated-dependencies:
- dependency-name: puma
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-15 13:44:10 +00:00
Pierre de La Morinerie
e9cc87f4b3
Merge pull request #6946 from betagouv/rework-csp
Utilisation des variables d'environnement lors de la déclaration des Content Security Policies (à nouveau)
2022-02-15 12:55:48 +01:00
Pierre de La Morinerie
6fa52e8a5a config: report CSP violations to report-uri 2022-02-15 12:49:52 +01:00
Pierre de La Morinerie
0b2775a1a6 config: add back DS_PROXY_URL to CSP
Otherwise a bunch of "static.demarches-simplifiees.fr" domains would
be missing.
2022-02-15 12:49:52 +01:00
François Vantomme
d5f207d98c refactor(url): use env variables in content security policies 2022-02-15 12:49:52 +01:00
Pierre de La Morinerie
886efd7f26
Merge pull request #6963 from betagouv/fix-operation-queue-error-handling
Javascript : correction de la gestion d'erreur dans OperationQueue.js
2022-02-15 12:34:32 +01:00
Pierre de La Morinerie
50cafc033f js: fix OperationQueue error handling
When an exception is raised, `response.json()` may have been called
already. In that case, when accessing `response.text()` in the error
handler, a "Response.text: Body has already been
consumed." error will be raised.
2022-02-15 12:23:18 +01:00
Paul Chavard
c848fc6d00
Merge pull request #6960 from betagouv/fix-matomo-cookie-domain
Correction du réglage "cookieDomain" de Matomo
2022-02-15 12:03:24 +01:00
Pierre de La Morinerie
90b5e938e3 stats: fix Matomo cookie domains setting
It was exported to the GON as `cookie_domain`, but imported
by the tracking code as `cookieDomain`.
2022-02-15 11:55:24 +01:00
Pierre de La Morinerie
86871bd8ca
Merge pull request #6929 from adullact/feature/6887-openstack-stockage-type
Ajout d'un réglage pour configurer le type de stockage ActiveStorage
2022-02-15 10:38:55 +01:00
François Vantomme
7425a08e74 refactor(openstack): rename STORAGE_TYPE to ACTIVE_STORAGE_SERVICE 2022-02-15 10:34:42 +01:00
François Vantomme
a2c04a80aa refactor(storage): harmonize environment variables
Use STORAGE_TYPE everywhere rather than FOG_ENABLED.
STORAGE_TYPE is more flexible and is the reference variable for
production environment.
2022-02-15 09:40:32 +01:00
Pierre de La Morinerie
cec9aea93e
Merge pull request #6914 from adullact/feature/6871-enable-mailcatcher
Support de MailCatcher dans l'environnement de production
2022-02-15 09:40:02 +01:00
Jon
31996c7d09 chore(smtp): add mailcatcher configuration 2022-02-15 09:34:07 +01:00
Pierre de La Morinerie
cf1f92409c
Merge pull request #6915 from adullact/feature/6872-matomo-domain-config
Configuration du domaine de Matomo
2022-02-15 09:31:06 +01:00
François Vantomme
cc6cb2ea30 feat(matomo): use env variables to set the domain 2022-02-15 09:25:23 +01:00
Pierre de La Morinerie
e7aa29b9b0
Merge pull request #6927 from adullact/feature/6885-deactivate-clamav
Ajout d'un réglage pour pouvoir désactiver ClamAV
2022-02-15 09:21:52 +01:00
Jon
97feca6305 feat(ClamAV): add config to disable clamav usage 2022-02-15 09:15:47 +01:00
Pierre de La Morinerie
628625366b
Merge pull request #6957 from betagouv/dependabot/npm_and_yarn/follow-redirects-1.14.8
chore(deps): bump follow-redirects from 1.14.7 to 1.14.8
2022-02-15 09:13:45 +01:00
dependabot[bot]
b87154027e
chore(deps): bump follow-redirects from 1.14.7 to 1.14.8
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.14.8.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.7...v1.14.8)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-15 08:02:40 +00:00
Pierre de La Morinerie
2746c2dedf
Merge pull request #6902 from adullact/feature/6860-custom-app-host
Rend l'environnement de développement accessible depuis un hôte autre que localhost:3000
2022-02-15 09:01:59 +01:00