36 Commits (53ad9605624e4f43016ebef076eb86385e8e4650)

Author SHA1 Message Date
Eugen Rochko 79f71206de Add subresource integrity for JS and CSS assets (#15096)
4 years ago
Eugen Rochko a8d983934e Fix blurhash and autoplay not working on public pages (#11585)
5 years ago
Yamagishi Kazutoshi e0e72c90b6 Bump webpacker from 3.5.5 to 4.0.2 (#10277)
6 years ago
Eugen Rochko 7635a136c9 Change documentation URL (#8898)
6 years ago
Yamagishi Kazutoshi 7a8c526709 Replace preload link tag to Rails helper (#7192)
7 years ago
Nolan Lawson ba22580c06 Add ServiceWorker caching for static assets (#5524)
7 years ago
Nolan Lawson 3b6e5360c3 Only preload JS in /web pages (#5325)
7 years ago
m4sk1n 186416830e Add link to 'noscript' message (#4561)
7 years ago
Eugen Rochko cdaf19daeb Improve noscript message and style (#4315)
7 years ago
Yamagishi Kazutoshi 2e766841f3 Change logo.png to logo.svg for web UI (#4307)
7 years ago
Sorin Davidoi ecab38fd66 Web Push Notifications (#3243)
7 years ago
Eugen Rochko 0d54e620d9 Replace OEmbed and initial state Rabl templates with serializers (#4110)
7 years ago
Sorin Davidoi 4ce6597e3a fix: Warn if JavaScript is disabled (#3634)
8 years ago
yhirano cf1f65bf58 Added haml-lint and fix warnings (#2773)
8 years ago
Eugen Rochko ef2af79a48 Replace sprockets/browserify with Webpack (#2617)
8 years ago
Eugen 53f6bf067f Fix cross-origin integrity (#1871)
8 years ago
Joachim Viide cbf0e1b1c8 Send initial state in a <script type="application/json"> tag (#1806)
8 years ago
maxypy c06f09dfe2 Implementing Subresource Integrity (#1729)
8 years ago
Eugen Rochko 9bd2b6be86 Make the streaming API also handle websockets (because trying to get the browser EventSource interface to
8 years ago
Eugen Rochko 1a77ccb668 Fix #457 - escape JSON in INITIAL_STATE (this bug only ever allowed a user to xss themselves rather than anyone else)
8 years ago
Eugen Rochko 4293e132d1 Persist UI settings, add missing localizations for German
8 years ago
Eugen Rochko c1c814e6a1 Improve initialState loading
8 years ago
Eugen Rochko 090e3a245d Fix #249 - use window.location hack to let people login from sandboxed iOS homescreen
8 years ago
Eugen Rochko 9d4f96f440 Removing external hub completely, fix #333 fixing digit-only hashtags,
8 years ago
Eugen Rochko db6df6ddb3 Only load JS on homepage, no other page uses it
8 years ago
Eugen Rochko 337462aa5e Re-organizing components to be more modular, adding loading bars
8 years ago
Eugen Rochko 2e7aac793a Adding sense of self to the UI, cleaning up routing, adding third (detail) column
8 years ago
Eugen Rochko 92afd29650 The frontend will now be an OAuth app, auto-authorized. The frontend will use an access token for API requests
8 years ago
Eugen Rochko 49520d6e62 Adding React.js, Redux, revamping dashboard
8 years ago
Eugen Rochko 5764d52b04 Fix Sidekiq pooling issues. Remove API docs from homepage, replace with
9 years ago
Eugen Rochko f14f462eaf Adding Turbolinks, adding status posting form on homepage
9 years ago
Eugen Rochko 1aa477ac2f Customized more doorkeeper views, only logged in users can create oauth apps
9 years ago
Eugen Rochko aab9f57e36 Adding config for puma, dashboard layout, fixing some queries
9 years ago
Eugen Rochko 3824c58853 Adding GNU Public license, adding home timeline, reblog/favourite counters
9 years ago
Eugen Rochko 6045b6cb18 Customizing devise views and controllers
9 years ago
Eugen Rochko 709c6685a9 Made some progress
9 years ago