Tom Hughes
3c4774a5f7
Allow images to be loaded from piwik
2017-11-23 22:22:01 +00:00
Drew Dara-Abrams
96a00910d5
When no cache store is set use cookie storage for sessions
...
A change in the default configuration of development environments
in rails 5.1 means that caching is now disabled by default so in
that case fall back to using cookies instead.
Closes #1666
2017-11-02 19:19:03 +00:00
Tom Hughes
18d3392ede
Relax cookie security policy
2017-11-01 17:48:35 +00:00
Tom Hughes
f773f67958
Update to rails 5.1.4
2017-10-17 18:49:55 +01:00
Tom Hughes
f02c753cc4
Use send_data for GPX traces intead of monkey patching send_file
2017-10-09 20:38:08 +01:00
Tom Hughes
8dae890a76
Fix rubocop warnings
2017-10-05 19:18:38 +01:00
Tom Hughes
e7e85db0c8
Update secure_headers configuration for upstream changes
2017-09-08 16:49:28 +01:00
Tom Hughes
2d80cd12ff
Monkey patch oauth-plugin to avoid using deprecated methods
2017-06-27 08:26:44 +01:00
Tom Hughes
81deb35331
Update to rails 5.0.4
2017-06-27 08:26:44 +01:00
Bryan Housel
71d19cebf3
No need to precompile traffico anymore, as it's been removed
2017-06-12 18:36:50 -04:00
Tom Hughes
f8f7054fc2
Move monkey patch modules to the OpenStreetMap namespace
...
Having them in the OSM namespace risks blocking autoloading
of the lib/osm.rb code by defining the OSM constant.
2017-06-02 16:33:27 +01:00
Tom Hughes
5b33f3f8e3
Fix rubocop warnings
2017-06-02 00:08:30 +01:00
Tom Hughes
f940a154f3
Replace alias_method_chain with Module#prepend
2017-06-01 22:45:28 +01:00
Tom Hughes
f412c80d3f
Drop monkey patches that are no longer required
2017-06-01 22:42:02 +01:00
Tom Hughes
cdeb95092b
Drop hack used for rails 4 upgrade
2017-06-01 22:41:55 +01:00
Tom Hughes
6ee54aff10
Set canonical port based on protocol
2017-03-22 19:28:57 +00:00
Tom Hughes
bf8959cdc2
Add server_protocol configuration option
2017-03-22 18:22:24 +00:00
Tom Hughes
24271b75bd
Use canonical-rails gem to generate canonical URLs
2017-03-22 18:16:53 +00:00
Tom Hughes
e35748567c
Update HSTS to publish a max-age=0 to disable it
2017-03-03 11:34:39 +00:00
Tom Hughes
ee12eba234
Don't try and modify policy if we don't have one
2017-03-02 10:39:18 +00:00
Tom Hughes
c5ef6404f5
Improve the content security policy
2017-03-01 22:38:24 +00:00
Tom Hughes
8c3d16ecc4
Remove inline javascript from potlatch view
2017-02-28 20:41:22 +00:00
Tom Hughes
40a8e5caf5
Add support for Content-Security-Policy
...
Currently this is report only, and disabled unless a report URL has
been set in the application configuration.
2017-02-26 19:48:13 +00:00
Tom Hughes
c8671c137a
Update rubocop
2017-02-05 11:12:37 +00:00
Tom Hughes
7b3aba29ff
Use meta.wikimedia.org for wikimedia authentication
2016-12-21 20:50:15 +00:00
Tom Hughes
69b967c9ff
Add support for Wikimedia authentication
...
Closes #1146
2016-12-20 22:32:25 +00:00
Tom Hughes
c129a8eec5
Simplify monkey patch
...
The log method has grown new arguments which we weren't passing
on, but fortunately the exception translation is now delegated to
another method so we can patch that instead.
2016-12-02 09:42:05 +00:00
Tom Hughes
282ff4936c
Fix rubocop warnings
2016-10-31 21:24:10 +00:00
Tom Hughes
5f4dcd34ff
Fix some rubocop warnings
2016-09-15 22:41:07 +01:00
Tom Hughes
0674fc58b8
Rework R2 support for changes in sprockets
2016-09-15 19:07:09 +01:00
Tom Hughes
c70a1fe933
Add support for GitHub authentication
2016-07-14 09:40:45 +01:00
Tom Hughes
dd8ebf9b09
Fix rubocop warnings
2016-07-13 09:50:23 +01:00
Bryan Housel
2ada0591b8
Pacify rubocop
2016-06-22 14:05:13 -04:00
Bryan Housel
9e3dc420f3
Load banner config from config/banners.yml
2016-06-22 13:37:57 -04:00
Tom Hughes
0cbc6833ed
Compile traffico font assets
2016-03-04 16:47:36 +00:00
Tom Hughes
397b68af32
Only compile those iD assets that we actually need
2016-03-04 10:29:58 +00:00
Bryan Housel
47881add28
Add traffico icons to vendor/assets/iD and asset pipeline precompile list
2016-03-03 16:27:40 -05:00
Tom Hughes
5d3ecffa28
Fix new rubocop warnings
2016-02-05 13:35:26 +00:00
Tom Hughes
e4acc41d28
Update to tails 4.2.5.1
2016-01-25 21:26:54 +00:00
Tom Hughes
8fe1899596
Fix rubocop warnings
2016-01-19 09:51:24 +00:00
Tom Hughes
409e99c6fc
Precompile login.js
...
Fixes #1128
2016-01-10 10:14:58 +00:00
Tom Hughes
4028f4cdb9
Rework locale selection
...
Implement our own matching algorithm rather than trying to
patch the http_accept_language one and make sure everything is
using it in a consistent way.
Fixes #1125
2016-01-06 18:43:25 +00:00
Tom Hughes
e20bb507f1
Fix issues with bogus % encoded sequences in URLs
...
Add a URI sanitizer to the rack stack avoid rack throwing
exceptions on the server side, and ignore errors decoding
components on the client side.
Fixes #1101
2015-12-07 13:52:20 +00:00
Tom Hughes
d1d784bcca
Ensure assets are recompiled when configuration changes
2015-09-30 19:34:14 +01:00
Tom Hughes
4dceacdeba
Make switch to compact and small modes dynamic
...
The point where we need to switch between normal mode, compact mode
and small mode varies due to different string lengths in different
languages, but that can't be expressed by a media query, so use some
javascript to update as the window size changes.
Fixes #1014
2015-07-22 22:48:22 +01:00
Tom Hughes
84170254e4
Use a fixed name for the asset manifest
...
Because we deploy by updating an existing environment the default
sprockets strategy gives us multiple randomly named manifest files
and it will then pick one arbitrarily when starting up.
2015-06-28 10:35:44 +01:00
Tom Hughes
c4cb8286ba
Update to rails 4.2.3
2015-06-26 22:57:27 +01:00
Tom Hughes
445e608bae
Update to latest upstream i18n-js
...
The issues we had before seem to be fixed now, so drop our
custom version and go back to the upstream one with some minor
monkey patching tweaks.
This also fixes the sprockets dependencies to correctly rebuild
the javascript when the translations change.
2015-06-16 19:17:37 +01:00
Tom Hughes
2b2264ddab
Add support for Windows Live authentication
2015-05-19 14:04:09 +01:00
Tom Hughes
c9893e186b
Add support for Facebook authentication
2015-05-19 14:04:08 +01:00
