Commit graph

81 commits

Author SHA1 Message Date
Tom Hughes
afa5d420d3 Allow iD to fetch gpx files from arbitrary locations 2017-11-24 08:38:51 +00:00
Tom Hughes
527ec293c2 Fix security policy for mapillary in iD 2017-11-24 01:09:27 +00:00
Tom Hughes
4950ae3c1f Allow iD to connect to nominatim 2017-11-24 00:10:38 +00:00
Tom Hughes
7ce94ad0ec Add openstreetcam.org to security policy for iD 2017-11-16 10:17:22 +00:00
Andy Allan
6f89da05d1 Use current_user to represent the currently logged in user.
This is already used by the oauth plugin, and is a general rails convention.
2017-07-12 16:10:50 +01:00
Tom Hughes
18c8946556 Use explicit to_unsafe_h method when converting parameters to a hash 2017-06-05 22:44:15 +01:00
Tom Hughes
2357118c46 Avoid using format as a URL parameter name
This prevents rails confusing it with the builtin format
parameter derived from the URL extension.
2017-06-03 12:08:35 +01:00
Tom Hughes
ff97501ed0 Remove all use of the :text option to render
It doesn't actually do what it says, as it sets the content type
to text/html not text/plain so is just confusing and as a result
has been deprecated in newer rails versions.
2017-06-02 19:12:05 +01:00
Tom Hughes
5b33f3f8e3 Fix rubocop warnings 2017-06-02 00:08:30 +01:00
Tom Hughes
c5ef6404f5 Improve the content security policy 2017-03-01 22:38:24 +00:00
Tom Hughes
40a8e5caf5 Add support for Content-Security-Policy
Currently this is report only, and disabled unless a report URL has
been set in the application configuration.
2017-02-26 19:48:13 +00:00
Tom Hughes
96c91757fc Don't try and look up traces until the user is logged in
Fixes #1411
2017-01-11 21:11:37 +00:00
Tom Hughes
777b19c775 Make export action send TOTP cookie 2017-01-02 22:51:18 +00:00
Tom Hughes
9a82ae069a Remove dot prefix from cookie domain 2017-01-02 21:33:58 +00:00
Tom Hughes
d83cc0f15b Reduce TOTP cookie expiry to one hour 2017-01-02 21:17:37 +00:00
Tom Hughes
17135cad03 Add support for generating TOTP cookies
This allows other sites in the openstreetmap.org domain to validate
that requests are coming from a www.openstreetmap.org user.
2017-01-02 19:01:01 +00:00
Tom Hughes
c8f26592a7 Fix rubocop warnings 2016-12-02 22:01:40 +00:00
Tom Hughes
dbe165bbb3 Fix some rubocop rails style issues 2015-02-26 00:12:54 +00:00
Tom Hughes
dc2a2c8ebd Standardise on double quoted strings 2015-02-20 19:47:26 +00:00
Tom Hughes
5cbd4038ed Fix rubocop style issues 2015-02-20 08:56:16 +00:00
Tom Hughes
ef7f3d800c Fix most auto-correctable rubocop issues 2015-02-20 08:56:16 +00:00
Tom Hughes
96e1665c01 Update to rails 4.1.6 2014-10-02 19:54:21 +01:00
Tom Hughes
c9e9ef1a89 Rewrite layer parameters in shortlinks correctly
Fixes #762
2014-06-17 21:15:36 +01:00
Tom Hughes
5a830b2845 Don't force a login to use a remote editor
Fixes #754
2014-06-15 11:00:49 +01:00
Tom Hughes
47841829d8 Improve redirection of shortlinks
If a shortlink includes an object reference then redirect to a new
style browse URL for that object.

Fixes #702
2014-02-15 12:42:52 +00:00
Tom Hughes
04ad0f6251 Do basic testing of all site controller methods 2013-12-07 17:21:17 +00:00
Tom Hughes
a51b4c869e Use the map layout when rendering index for a remote edit 2013-12-05 10:40:07 +00:00
Tom Hughes
50fafa14f8 Improve zoom level selection when invoking Potlatch on an object
When invoking Potlatch on a node/way/relation object we should
normally have valid location information in the map parameters, so
use any zoom which is there if possible, otherwise fall back to an
object type specific default value.

Fixes #605.
2013-12-03 15:06:34 +00:00
Tom Hughes
315d1dab54 Redirect /?query= to /search?query= 2013-11-30 12:38:44 +00:00
John Firebaugh
2b4f8e92c9 Merge branch 'master' into redesign
Conflicts:
	app/controllers/browse_controller.rb
	app/views/layouts/_head.html.erb
	config/environments/production.rb
	config/routes.rb
2013-11-15 16:47:49 -08:00
Tom Hughes
559a822f59 Setup OAuth when rendering site#index from site#edit 2013-10-31 20:52:43 +00:00
John Firebaugh
3d4a137959 Don't rely on body classes so much
Doesn't work well with pushState-based navigation.
2013-10-13 14:46:08 -07:00
John Firebaugh
a56d1036d5 pushState based navigation between map-based layouts 2013-10-13 14:46:08 -07:00
John Firebaugh
4557654ba6 Simplify layouting 2013-10-13 14:46:07 -07:00
John Firebaugh
2f076d8f34 Fix "Edit" button when browsing features 2013-10-13 14:46:07 -07:00
John Firebaugh
3ebad9ec2f Add about page 2013-10-13 14:46:05 -07:00
John Firebaugh
e838dddf12 Redirect ?node=n and similar to browse pages 2013-10-13 14:45:58 -07:00
John Firebaugh
33a6b79bd7 Add help page 2013-10-13 14:45:57 -07:00
Tom Hughes
6494747882 Centre editors correctly when note=N is specified 2013-09-09 15:44:53 +01:00
Tom Hughes
ae0177fbe6 Merge remote-tracking branch 'osmlab/id-default' 2013-08-23 17:41:09 +01:00
John Firebaugh
8dc16bd8db Make iD default editor
Make iD the default editor for all users that have not specified
a preferred editor, except fall back to P2 on IE.
2013-08-15 16:36:18 -07:00
John Firebaugh
3ca642271a Redirect /edit and /export with old-style edit params 2013-08-12 13:34:46 -07:00
John Firebaugh
24422a3baf Move pre-sign up content to sign up page 2013-08-12 13:34:42 -07:00
John Firebaugh
e3aaa6dd4b Add welcome page based on http://osmlab.github.io/welcome-osm/ 2013-08-12 13:34:40 -07:00
John Firebaugh
452eabc941 Use full page width when editing with iD 2013-08-10 00:38:46 +01:00
Tom Hughes
99c48285df Redirect short links properly 2013-08-06 10:58:54 +01:00
John Firebaugh
6618cb9019 Include layers in hash 2013-07-30 15:41:41 -07:00
John Firebaugh
c8d4e4eee3 Redirect lat/lon/zoom query params to hash 2013-07-30 15:41:41 -07:00
Tom Hughes
6659fb9b33 Rename the ugly "id_iframe" to just plain "id" 2013-05-07 14:50:31 +01:00
Tom MacWright
7a98913d0c Add iD editor
iD sources live in vendor/assets/iD, and are managed with
vendorer, using the "rewrite" functionality to replace relative
paths in the CSS with <%= asset_path(…) %> directives.

To avoid needing to namespace all of its CSS classes, iD
is embedded via an iframe.

To setup, edit application.yml to include an `id_key` key.
(It can use the same consumer key as P2 if you like.)
2013-05-03 10:52:41 -07:00