53f6bf067f
Fix cross-origin integrity ( #1871 )
...
See <https://glitch.social/users/bea/updates/434 >
8 years ago
cbf0e1b1c8
Send initial state in a <script type="application/json"> tag ( #1806 )
8 years ago
c06f09dfe2
Implementing Subresource Integrity ( #1729 )
...
* Add sprockets-rails to Gemfile
* Add sprockets-rails to Gemfile.lock
* Update show.html.haml
* Update index.html.haml
* Update admin.html.haml
* Update auth.html.haml
* Update embedded.html.haml
* Update public.html.haml
8 years ago
9bd2b6be86
Make the streaming API also handle websockets (because trying to get the browser EventSource interface to
...
work flawlessly was a nightmare). WARNING: This commit makes the web UI connect to the streaming API instead
of ActionCable like before. This means that if you are upgrading, you should set that up beforehand.
8 years ago
1a77ccb668
Fix #457 - escape JSON in INITIAL_STATE (this bug only ever allowed a user to xss themselves rather than anyone else)
8 years ago
4293e132d1
Persist UI settings, add missing localizations for German
8 years ago
c1c814e6a1
Improve initialState loading
8 years ago
090e3a245d
Fix #249 - use window.location hack to let people login from sandboxed iOS homescreen
8 years ago
9d4f96f440
Removing external hub completely, fix #333 fixing digit-only hashtags,
...
removing web app capability from non-webapp pages
8 years ago
db6df6ddb3
Only load JS on homepage, no other page uses it
8 years ago
337462aa5e
Re-organizing components to be more modular, adding loading bars
8 years ago
2e7aac793a
Adding sense of self to the UI, cleaning up routing, adding third (detail) column
8 years ago
92afd29650
The frontend will now be an OAuth app, auto-authorized. The frontend will use an access token for API requests
...
Adding better errors for the API controllers, posting a simple status works from the frontend now
8 years ago
49520d6e62
Adding React.js, Redux, revamping dashboard
8 years ago
5764d52b04
Fix Sidekiq pooling issues. Remove API docs from homepage, replace with
...
a basic home timeline
9 years ago
f14f462eaf
Adding Turbolinks, adding status posting form on homepage
9 years ago
1aa477ac2f
Customized more doorkeeper views, only logged in users can create oauth apps
9 years ago
aab9f57e36
Adding config for puma, dashboard layout, fixing some queries
9 years ago
3824c58853
Adding GNU Public license, adding home timeline, reblog/favourite counters
9 years ago
6045b6cb18
Customizing devise views and controllers
9 years ago
709c6685a9
Made some progress
9 years ago
Eugen
Joachim Viide
maxypy