Bryan Housel
71d19cebf3
No need to precompile traffico anymore, as it's been removed
2017-06-12 18:36:50 -04:00
Tom Hughes
f8f7054fc2
Move monkey patch modules to the OpenStreetMap namespace
...
Having them in the OSM namespace risks blocking autoloading
of the lib/osm.rb code by defining the OSM constant.
2017-06-02 16:33:27 +01:00
Tom Hughes
5b33f3f8e3
Fix rubocop warnings
2017-06-02 00:08:30 +01:00
Tom Hughes
f940a154f3
Replace alias_method_chain with Module#prepend
2017-06-01 22:45:28 +01:00
Tom Hughes
f412c80d3f
Drop monkey patches that are no longer required
2017-06-01 22:42:02 +01:00
Tom Hughes
cdeb95092b
Drop hack used for rails 4 upgrade
2017-06-01 22:41:55 +01:00
Tom Hughes
6ee54aff10
Set canonical port based on protocol
2017-03-22 19:28:57 +00:00
Tom Hughes
bf8959cdc2
Add server_protocol configuration option
2017-03-22 18:22:24 +00:00
Tom Hughes
24271b75bd
Use canonical-rails gem to generate canonical URLs
2017-03-22 18:16:53 +00:00
Tom Hughes
e35748567c
Update HSTS to publish a max-age=0 to disable it
2017-03-03 11:34:39 +00:00
Tom Hughes
ee12eba234
Don't try and modify policy if we don't have one
2017-03-02 10:39:18 +00:00
Tom Hughes
c5ef6404f5
Improve the content security policy
2017-03-01 22:38:24 +00:00
Tom Hughes
8c3d16ecc4
Remove inline javascript from potlatch view
2017-02-28 20:41:22 +00:00
Tom Hughes
40a8e5caf5
Add support for Content-Security-Policy
...
Currently this is report only, and disabled unless a report URL has
been set in the application configuration.
2017-02-26 19:48:13 +00:00
Tom Hughes
c8671c137a
Update rubocop
2017-02-05 11:12:37 +00:00
Tom Hughes
7b3aba29ff
Use meta.wikimedia.org for wikimedia authentication
2016-12-21 20:50:15 +00:00
Tom Hughes
69b967c9ff
Add support for Wikimedia authentication
...
Closes #1146
2016-12-20 22:32:25 +00:00
Tom Hughes
c129a8eec5
Simplify monkey patch
...
The log method has grown new arguments which we weren't passing
on, but fortunately the exception translation is now delegated to
another method so we can patch that instead.
2016-12-02 09:42:05 +00:00
Tom Hughes
282ff4936c
Fix rubocop warnings
2016-10-31 21:24:10 +00:00
Tom Hughes
5f4dcd34ff
Fix some rubocop warnings
2016-09-15 22:41:07 +01:00
Tom Hughes
0674fc58b8
Rework R2 support for changes in sprockets
2016-09-15 19:07:09 +01:00
Tom Hughes
c70a1fe933
Add support for GitHub authentication
2016-07-14 09:40:45 +01:00
Tom Hughes
dd8ebf9b09
Fix rubocop warnings
2016-07-13 09:50:23 +01:00
Bryan Housel
2ada0591b8
Pacify rubocop
2016-06-22 14:05:13 -04:00
Bryan Housel
9e3dc420f3
Load banner config from config/banners.yml
2016-06-22 13:37:57 -04:00
Tom Hughes
0cbc6833ed
Compile traffico font assets
2016-03-04 16:47:36 +00:00
Tom Hughes
397b68af32
Only compile those iD assets that we actually need
2016-03-04 10:29:58 +00:00
Bryan Housel
47881add28
Add traffico icons to vendor/assets/iD and asset pipeline precompile list
2016-03-03 16:27:40 -05:00
Tom Hughes
5d3ecffa28
Fix new rubocop warnings
2016-02-05 13:35:26 +00:00
Tom Hughes
e4acc41d28
Update to tails 4.2.5.1
2016-01-25 21:26:54 +00:00
Tom Hughes
8fe1899596
Fix rubocop warnings
2016-01-19 09:51:24 +00:00
Tom Hughes
409e99c6fc
Precompile login.js
...
Fixes #1128
2016-01-10 10:14:58 +00:00
Tom Hughes
4028f4cdb9
Rework locale selection
...
Implement our own matching algorithm rather than trying to
patch the http_accept_language one and make sure everything is
using it in a consistent way.
Fixes #1125
2016-01-06 18:43:25 +00:00
Tom Hughes
e20bb507f1
Fix issues with bogus % encoded sequences in URLs
...
Add a URI sanitizer to the rack stack avoid rack throwing
exceptions on the server side, and ignore errors decoding
components on the client side.
Fixes #1101
2015-12-07 13:52:20 +00:00
Tom Hughes
d1d784bcca
Ensure assets are recompiled when configuration changes
2015-09-30 19:34:14 +01:00
Tom Hughes
4dceacdeba
Make switch to compact and small modes dynamic
...
The point where we need to switch between normal mode, compact mode
and small mode varies due to different string lengths in different
languages, but that can't be expressed by a media query, so use some
javascript to update as the window size changes.
Fixes #1014
2015-07-22 22:48:22 +01:00
Tom Hughes
84170254e4
Use a fixed name for the asset manifest
...
Because we deploy by updating an existing environment the default
sprockets strategy gives us multiple randomly named manifest files
and it will then pick one arbitrarily when starting up.
2015-06-28 10:35:44 +01:00
Tom Hughes
c4cb8286ba
Update to rails 4.2.3
2015-06-26 22:57:27 +01:00
Tom Hughes
445e608bae
Update to latest upstream i18n-js
...
The issues we had before seem to be fixed now, so drop our
custom version and go back to the upstream one with some minor
monkey patching tweaks.
This also fixes the sprockets dependencies to correctly rebuild
the javascript when the translations change.
2015-06-16 19:17:37 +01:00
Tom Hughes
2b2264ddab
Add support for Windows Live authentication
2015-05-19 14:04:09 +01:00
Tom Hughes
c9893e186b
Add support for Facebook authentication
2015-05-19 14:04:08 +01:00
Tom Hughes
eeb9866d50
Add support for Google OAuth2 authentication
...
This replaces OpenID authentication, which is going away soon, but
provides an upgrade path where we can migrate users that already have
a Google OpenID setup to the new system transparently.
2015-04-14 10:08:07 +01:00
Tom Hughes
2af0840ff3
Fix style issues found by new rubocop version
2015-04-14 09:38:24 +01:00
Tom Hughes
8ad2f4b5c8
Send OpenID logging to rails log
2015-03-31 14:31:51 +01:00
Tom Hughes
fc57778d61
Configure CA path for OpenID
2015-03-31 14:03:10 +01:00
Tom Hughes
a31591bdc3
Drop memory limit support
...
The soft limit won't work with passenger 5 and causes spurious
errors to be reported back to browsers, and in any case it doesn't
actually seem to be necessary anymore.
2015-03-30 21:32:36 +01:00
Tom Hughes
b78241de68
Remove workaround for fixed bug in passenger
2015-03-30 21:28:29 +01:00
Tom Hughes
88f8544d8c
Monkey patch the port number in the rack request
...
https://github.com/phusion/passenger/issues/1421
2015-03-10 12:10:12 +00:00
Tom Hughes
9fb8f5a84b
Drop the old output_compression plugin
...
The production servers all have mod_deflate enabled anyway, which
almost certainly does a better job of compression than this.
2015-03-01 10:52:28 +00:00
Tom Hughes
eaf4b32a7f
Rework OpenID tests for new flows using OmniAuth mocking
2015-02-25 01:07:23 +00:00
