J Guthrie
30756f72ca
Change language immediately after updating settings
...
Closes #1883
2018-05-27 15:12:34 +01:00
Tom Hughes
fb94bb6c58
Don't override non-existent policy
2018-05-23 12:50:10 +01:00
Tom Hughes
ff86bf136a
Use an empty array for ruby 2.3 compatibility
...
Apparently `false.dup` throws in ruby 2.3 and not in 2.5...
2018-05-23 12:21:24 +01:00
Tom Hughes
5deba2782a
Completely remove form-action restrictions for OAuth callbacks
...
The CSP3 draft only allows a * rule match network schemes and
mobile devices often use callbacks to custom URL schemes.
2018-05-23 12:09:21 +01:00
Tom Hughes
c5d3335a6c
Allow inline styles in iD
2018-05-18 20:28:09 +01:00
Peter Karich
1cea6b363a
Use XHR instead of jsonp for GraphHopper
...
Closes #1872
2018-05-17 20:47:58 +01:00
Tom Hughes
9227f6aecd
Allow iD to access wikidata
2018-05-16 11:36:46 +01:00
Tom Hughes
8d41015673
Allow iD to access wikipedia
2018-05-16 08:48:38 +01:00
Tom Hughes
9e50c3851c
Merge remote-tracking branch 'upstream/pull/1863'
2018-05-15 18:36:55 +01:00
Tom Hughes
50f85248db
Use https to launch the remote editor except for modern browsers
...
Currently only Chrome 53+ and Firefox 55+ are known to support loading
of http resources from localhost for an https page.
2018-05-15 14:21:09 +01:00
Tom Hughes
79284a0fcd
Add frame-src to allow http://127.0.0.1:8111
2018-05-15 12:43:37 +01:00
Andy Allan
84fa437d50
Ensure database is writable before destroying a message
2018-05-15 18:28:33 +08:00
Andy Allan
4ec70f7994
Rename messages#read to #show
...
Also rename the named path, to align with resourceful routing
2018-05-15 18:25:54 +08:00
Andy Allan
73df8447e3
Rename messages#delete to destroy
...
This is a better fit for rails controller method conventions, paving
the way to resourceful routing. Keep user-facing strings as 'delete'
since that's more commonly used.
2018-05-15 18:15:01 +08:00
Tom Hughes
d14cf519fd
Merge remote-tracking branch 'upstream/pull/1858'
2018-05-14 20:14:56 +01:00
Tom Hughes
33ea119c8f
Merge remote-tracking branch 'upstream/pull/1857'
2018-05-14 20:13:41 +01:00
Tom Hughes
0e810db927
Make CSP rule for the remote control explicitly allow http
2018-05-13 16:01:39 +01:00
Andy Allan
00bd64c7fb
Rename message_controller to messages_controller
2018-05-09 16:38:37 +08:00
Andy Allan
ec13ef77bc
Lazy lookups for translations in message_controller.rb
2018-05-09 16:25:42 +08:00
Andy Allan
b446138aef
Rename trace_controller to traces_controller
2018-05-09 12:38:09 +08:00
Andy Allan
a1853204fa
More lazy translation lookups for traces
2018-05-09 12:08:39 +08:00
Tom Hughes
f349aeb061
Update translation keys for renaming of note to notes
2018-04-29 01:09:38 +01:00
Tom Hughes
d7b43c5f17
Fix syntax error with ruby 2.5
2018-04-28 17:12:27 +01:00
Rajdeep Mandrekar
3def2f839f
Use rails helpers to construct URLs
...
Fixes #1817
Closes #1840
2018-04-25 22:22:51 +01:00
Tom Hughes
00425c8fca
Merge remote-tracking branch 'upstream/pull/1838'
2018-04-25 17:38:35 +01:00
Tom Hughes
0d7c9a187e
Merge remote-tracking branch 'upstream/pull/1836'
2018-04-25 17:37:55 +01:00
Andy Allan
8445561fcc
Use lazy translation lookups for the oauth controller.
2018-04-25 15:42:34 +08:00
Andy Allan
2c7bc36493
Use lazy translation lookups for redactions
...
Requires renaming the translation keys
2018-04-25 14:39:37 +08:00
Andy Allan
a0de9b780d
Use lazy lookups for user_blocks translations
2018-04-25 12:03:58 +08:00
Andy Allan
9408ed6946
Pluralise user_preferences_controller
...
This is the rails convention for controllers and can make route
generation easier.
http://guides.rubyonrails.org/action_controller_overview.html#controller-naming-convention
2018-04-18 11:26:00 +08:00
Andy Allan
7b2af50f4a
Refactor @this_user to @user
...
Historically we used @user for the currently logged in user, but
this was changed to `current_user` in 2017.
2018-04-11 11:42:33 +08:00
Andy Allan
3b75e92415
Be more consistent with 'my' vs 'your' for objects that belong to
...
the user
2018-03-28 17:07:50 +08:00
Tom Hughes
1f2ac59d1d
Fix new rubocop warnings
2018-03-26 19:00:03 +01:00
Andy Allan
9f84c6f46e
Use user_path links. Fixes #1785
2018-03-21 11:33:45 +08:00
Andy Allan
b2ff9f3aad
Simplify redirect.
2018-03-09 15:56:56 +08:00
biswesh456
674589ce2c
Change test case
2018-03-03 20:20:52 +05:30
biswesh456
646dcb62fc
Allow admins and moderators to delete traces
...
Fixes #1625
2018-02-24 20:36:12 +05:30
Andy Allan
549acfa918
Merge pull request #1732 from tomhughes/npemap
...
Remove npemap as a source for UK postcodes
2018-02-23 10:23:22 +08:00
Tom Hughes
96cc9abd23
Use https when redirecting to the render server
2018-02-09 22:31:45 +00:00
Tom Hughes
2515c77276
Use configured protocol for URLs in diary feeds
2018-02-05 22:31:27 +00:00
Tom Hughes
5925039729
Remove npemap as a source for UK postcodes
2018-02-04 15:14:41 +00:00
Tom Hughes
673b58f96f
Merge remote-tracking branch 'upstream/pull/1704'
2018-02-04 15:09:40 +00:00
Tom Hughes
a83030dab7
Fix new rubocop warnings
2018-01-22 18:55:45 +00:00
Tom Hughes
9cf698322c
Merge remote-tracking branch 'upstream/pull/1707'
2018-01-13 10:35:42 +00:00
Tom Hughes
be86e4824f
Convert various URLs to https
2018-01-08 20:18:21 +00:00
Tom Hughes
af1397436f
Use https for nominatim
2018-01-08 10:50:44 +00:00
Tom Hughes
9340c46173
Remove dependencies on mapzen services
2018-01-02 18:45:20 +00:00
mmd-osm
e21c967fdd
Revoking administrator role on current user should fail
...
Fixes #1697
Closes #1701
2017-12-19 17:31:34 +00:00
Guillaume RISCHARD
ca36cf2826
Remove support for soon discontinued josm remote https endpoint
2017-12-16 16:15:52 +01:00
mmd-osm
b2a3955d93
Allow (un)subscribing discussions also when changeset still open
...
Fixes #1627
2017-12-16 13:32:04 +01:00