Edward Betts
196ac7c0d5
Wrap the permission label with a <label> tag
...
Gives the user a larger target to toggle a permission.
2018-05-24 15:41:32 +01:00
Andy Allan
6b2dcfd3d8
Merge pull request #1871 from hikemaniac/browse-icon-typo
...
Fix a browse icon typo
2018-05-24 11:39:22 +08:00
Tom Hughes
fb94bb6c58
Don't override non-existent policy
2018-05-23 12:50:10 +01:00
Tom Hughes
ff86bf136a
Use an empty array for ruby 2.3 compatibility
...
Apparently `false.dup` throws in ruby 2.3 and not in 2.5...
2018-05-23 12:21:24 +01:00
Tom Hughes
5deba2782a
Completely remove form-action restrictions for OAuth callbacks
...
The CSP3 draft only allows a * rule match network schemes and
mobile devices often use callbacks to custom URL schemes.
2018-05-23 12:09:21 +01:00
Tom Hughes
4634c6bc42
Quote translations to stop them looking like numbers
2018-05-22 08:53:53 +01:00
Tom Hughes
d82cc08734
Allow CSP to be put in enforcing mode
2018-05-22 08:51:21 +01:00
Tom Hughes
b47c27b5af
Update swfobject to use uncompressed source
2018-05-22 08:51:21 +01:00
translatewiki.net
624e59b1e5
Localisation updates from https://translatewiki.net .
2018-05-21 16:16:17 +02:00
Tom Hughes
6f4f4b4d71
Add missing dependencies
2018-05-19 11:15:56 +01:00
Tom Hughes
c5d3335a6c
Allow inline styles in iD
2018-05-18 20:28:09 +01:00
hikemaniac
908f9b5276
Rebase to current master
...
Merge openstreetmap/openstreetmap-website into hikemaniac/openstreetmap-website
2018-05-18 13:59:59 +02:00
Peter Karich
1cea6b363a
Use XHR instead of jsonp for GraphHopper
...
Closes #1872
2018-05-17 20:47:58 +01:00
Tom Hughes
cb3c4ec09b
Update for rubocop 0.54.0
2018-05-17 19:39:25 +01:00
Tom Hughes
b126f02df9
Update bundle
2018-05-17 19:25:58 +01:00
Tom Hughes
584ac67c10
Configure manifest-src and worker-src in security policy
2018-05-17 19:10:39 +01:00
Tom Hughes
5cd4aeb1aa
Preserve schemes in security policy
2018-05-17 19:10:23 +01:00
Tom Hughes
a6feffca9b
Quote translations to stop them looking like numbers
2018-05-17 18:37:52 +01:00
Tom Hughes
fcff8b94c5
Quote translations to stop them looking like numbers
2018-05-17 11:44:49 +01:00
Tom Hughes
99492de1d3
Convert note view to use server side conditions
...
Fixes #1869
2018-05-17 11:33:50 +01:00
Tom Hughes
68f7df96d6
Add piwik to allowed URIs in connect-src
2018-05-17 11:33:50 +01:00
translatewiki.net
288207c736
Localisation updates from https://translatewiki.net .
2018-05-17 08:36:19 +02:00
Tom Hughes
1f1029cf1a
Remove unsafe-inline form default style policy
2018-05-16 20:40:55 +01:00
Tom Hughes
fdd4361d5b
Remove some inline styles
2018-05-16 20:27:35 +01:00
Tom Hughes
9c04912f1d
Merge remote-tracking branch 'upstream/pull/1866'
2018-05-16 18:57:34 +01:00
Tom Hughes
9227f6aecd
Allow iD to access wikidata
2018-05-16 11:36:46 +01:00
Tom Hughes
4eb6267f45
Revert "Remove unused POST method for message replies"
...
This reverts commit 40cab845fb
.
2018-05-16 10:43:26 +01:00
Tom Hughes
8d41015673
Allow iD to access wikipedia
2018-05-16 08:48:38 +01:00
Andy Allan
e1c62f1bf2
Remove if_user and similar methods
...
Rather than hiding features based on CSS, just avoid including them
in the output. Fixes #1862
2018-05-16 13:05:20 +08:00
Andy Allan
5da01b92c5
Fix test which was accidentally testing as the entry user twice
2018-05-16 12:59:16 +08:00
hikemaniac
d799f4e750
Fix a browse icon typo.
2018-05-15 20:05:40 +02:00
Tom Hughes
9e50c3851c
Merge remote-tracking branch 'upstream/pull/1863'
2018-05-15 18:36:55 +01:00
Tom Hughes
6835e8842f
Tell jshint about bowser
2018-05-15 14:42:05 +01:00
Tom Hughes
50f85248db
Use https to launch the remote editor except for modern browsers
...
Currently only Chrome 53+ and Firefox 55+ are known to support loading
of http resources from localhost for an https page.
2018-05-15 14:21:09 +01:00
Tom Hughes
c77c7d015f
Default frame-src to self
2018-05-15 14:08:44 +01:00
Tom Hughes
79284a0fcd
Add frame-src to allow http://127.0.0.1:8111
2018-05-15 12:43:37 +01:00
Andy Allan
84fa437d50
Ensure database is writable before destroying a message
2018-05-15 18:28:33 +08:00
Andy Allan
4ec70f7994
Rename messages#read to #show
...
Also rename the named path, to align with resourceful routing
2018-05-15 18:25:54 +08:00
Andy Allan
73df8447e3
Rename messages#delete to destroy
...
This is a better fit for rails controller method conventions, paving
the way to resourceful routing. Keep user-facing strings as 'delete'
since that's more commonly used.
2018-05-15 18:15:01 +08:00
Andy Allan
40cab845fb
Remove unused POST method for message replies
...
This action just shows the pre-filled form, with the target for
the form being the same as for new messages.
2018-05-15 17:33:40 +08:00
Bryan Housel
2fd0d2304f
Upgrade community index to 0.4.3 to fix issue with tirana polygon
2018-05-14 20:35:29 -04:00
Bryan Housel
b204b9dc64
Update to iD v2.8.2
2018-05-14 17:55:32 -04:00
Tom Hughes
d14cf519fd
Merge remote-tracking branch 'upstream/pull/1858'
2018-05-14 20:14:56 +01:00
Tom Hughes
33ea119c8f
Merge remote-tracking branch 'upstream/pull/1857'
2018-05-14 20:13:41 +01:00
Tom Hughes
e1050a2d1d
Quote translations to stop them looking like numbers
2018-05-14 20:09:14 +01:00
translatewiki.net
f38824856d
Localisation updates from https://translatewiki.net .
2018-05-14 08:24:58 +02:00
Tom Hughes
0e810db927
Make CSP rule for the remote control explicitly allow http
2018-05-13 16:01:39 +01:00
Tom Hughes
d7063ab0a9
Merge remote-tracking branch 'upstream/pull/1851'
2018-05-13 15:24:44 +01:00
Tom Hughes
bc39159a68
Merge remote-tracking branch 'upstream/pull/1850'
2018-05-13 15:23:54 +01:00
Tom Hughes
71cd409f61
Quote translations to stop them looking like numbers
2018-05-13 15:17:08 +01:00