Commit graph

332 commits

Author SHA1 Message Date
Tom Hughes
f91dd6afc2 Tighten up cookie security
Mark all cookies as Secure, and the cookies which are not
modified client side as HttpOnly.
2021-02-19 18:18:13 +00:00
Tom Hughes
cea93e7244 Fix new rubocop warnings 2021-02-02 18:56:29 +00:00
Andy Allan
78bf2993e4 Refactor richtext fields to use a custom bootstrap_form input.
This allows us to use form_group_builder and get all the label and
help text handling in line with other bootstrap_form inputs.
2021-01-13 14:05:39 +00:00
Tom Hughes
b7d6243aff Restore ruby 2.5 compatibility 2021-01-11 20:04:13 +00:00
Tom Hughes
0654be27f9 Fix new rubocop warnings 2021-01-11 19:17:31 +00:00
Tom Hughes
0ff89c31e4 Remove both Potlatch versions
Fixes #2622
2021-01-05 21:18:45 +00:00
Tom Hughes
3e150205ad Remove unnecessary inflection 2021-01-01 11:54:29 +00:00
Tom Hughes
eada36ff96 Switch to using the zeitwork autoloader 2020-12-30 20:30:21 +00:00
Tom Hughes
e392556444 Revert "Switch to using the zeitwork autoloader"
This reverts commit 127880a73f.
2020-12-29 19:29:36 +00:00
Tom Hughes
127880a73f Switch to using the zeitwork autoloader 2020-12-29 18:42:22 +00:00
Tom Hughes
5d96da3b67 Merge remote-tracking branch 'upstream/pull/2983' into master 2020-11-25 16:59:23 +00:00
Andy Allan
7b0de13c61 Allow smtp settings to be configured through the settings system
This allows easier configuration using the settings.local.yml files

Fixes #2571
2020-11-25 16:12:49 +00:00
Tom Hughes
d516ba5335 Add bootstrap classes to markdown tables 2020-11-19 10:17:21 +00:00
Tom Hughes
70c4a750d7 Fix new rubocop warnings 2020-09-16 08:28:25 +01:00
Tom Hughes
2651db7254 Fix Lint/MissingSuper warnings 2020-08-09 19:06:04 +01:00
Tom Hughes
9be62ca4bb Allow image loading from tileserver.memomaps.de 2020-07-08 19:07:49 +01:00
Tom Hughes
9f993fe8c8 Fix new rubocop warnings 2020-07-07 10:44:52 +01:00
Tom Hughes
1739bf6832 Merge remote-tracking branch 'upstream/pull/2639' 2020-06-03 17:19:03 +01:00
Tom Hughes
b10e0c46de Merge remote-tracking branch 'upstream/pull/2638' 2020-06-03 17:13:49 +01:00
Andy Allan
f33f1f297e Use rails 6.0 framework defaults
Keep the old autoloader and utf-8 forms as they were, for now.
2020-06-03 13:45:07 +02:00
Andy Allan
b52aa72aa6 Remove the framework defaults initializer for 5.2
We're already using these defaults, as per 6a25ee9ec9
so we don't need to keep this file
2020-06-03 11:47:33 +02:00
Andy Allan
cc3ea94e2f Remove ineffective query cache disable initializer
This doesn't have any effect, since there is no middleware by that name.
2020-06-03 11:19:09 +02:00
Andy Allan
32e46ad4e3 Remove tempfile patch for trace data
Effectively reverts c0d2ad40c3

This patch is no longer required, since we only use send_data in
combination with Tempfile.read and that all works fine.
2020-04-22 15:16:46 +02:00
Tom Hughes
62247da244 Remove last traces of konacha 2020-04-20 19:14:58 +01:00
Tom Hughes
da80a7bd08 Add tile.openstreetmap.org to security policy 2020-04-14 00:03:55 +01:00
Andreas Geyer-Schulz
f6f23ed0ee
Fix typo: change 'noreferer' to 'noreferrer'
as the correct rel attribute in external links.
2020-01-25 20:10:23 +01:00
Tom Hughes
4ee60c0f8f Make all translation lookup errors throw exceptions in test mode 2019-12-16 21:54:11 +00:00
Tom Hughes
57f5b7840e Fix rubocop warnings 2019-12-04 19:31:53 +00:00
Tom Hughes
22cd2314e5 Update to rails 6.0.1 2019-11-24 11:05:02 +00:00
Tom Hughes
30accae458 Update to sprockets 4.x 2019-10-22 20:20:43 +01:00
Tom Hughes
d96a5c9c87 Switch to use v4.0 of the Facebook API for authentication 2019-10-08 18:36:27 +01:00
Tom Hughes
754e566f45 Exclude phantomjs from generic webkit as it's ancient
Fixes #2339
2019-08-05 20:41:22 +01:00
Tom Hughes
5a54cb52f8 Drop paperclip 2019-07-17 19:12:30 +01:00
Tom Hughes
f597780822 Increase expiry for Active Storage URLs 2019-07-16 08:25:17 +01:00
Tom Hughes
e3f37bb30c Allow BMP images to be transformed
https://github.com/rails/rails/issues/35953
https://github.com/rails/rails/pull/36051
2019-07-16 00:24:37 +01:00
Tom Hughes
c5fc9f0e7e Run any Active Storage jobs in the storage queue 2019-07-15 22:20:48 +01:00
Tom Hughes
75e60acf66 Allow configuration of storage server URL for security policy 2019-07-09 19:43:03 +01:00
Tom Hughes
77ee8c1a53 Monkey patch Active Storage to set content type when uploading to S3 2019-07-09 19:17:56 +01:00
Tom Hughes
ba627420a3 Add support for Active Storage attachments 2019-07-09 19:17:29 +01:00
Andy Allan
3e414a5025 Use strong_migrations to help developers avoid problems in production database schema changes 2019-05-30 10:11:17 +02:00
Tom Hughes
9f57f60b87 Fix new rubocop warnings 2019-04-23 09:33:34 +01:00
Tom Hughes
9256397e46 Exclude generated i18n files from eslint checks 2019-04-06 17:16:59 +01:00
Tom Hughes
e7ab3de654 Move application.yml check to config initializer 2019-03-17 11:15:34 +00:00
Tom Hughes
141df02e67 Move status into the settings object
Only the very early boot code needs to look at the value
from the environment directly.
2019-03-17 11:15:34 +00:00
Andy Allan
7d57fb8c28 Add some settings validations 2019-03-13 18:06:23 +01:00
Andy Allan
d102c9aaf4 Move all settings to settings.yml
We leave the STATUS setting alone, since it's required before rails
boots. The test-specific settings now live in config/settings/test.yml
2019-03-13 18:06:23 +01:00
Andy Allan
7b08270526 Install config gem for settings management 2019-03-13 18:06:23 +01:00
Tom Hughes
89a4a9d59c Allow loading of our manifest 2019-02-24 22:40:01 +00:00
Tom Hughes
d74dd80540 Improve detection of browsers needing ES6 shims 2019-02-22 15:41:33 +00:00
Tom Hughes
fa0a933c24 Replace augment.js with conditional polyfills for ES5 and ES6 2019-01-30 12:11:57 +00:00