766 Commits

Author SHA1 Message Date
b866221353 rename route 2022-09-24 21:08:18 +02:00
16c00ec136 Add support for signed URLs used by the render_file function 2022-09-23 21:35:22 +02:00
ac3dc8d30f Allow platform admins and internal users to switch their current study group 2022-09-22 19:24:26 +02:00
2e3480a068 Display study_groups in the show view of internal and external users 2022-09-22 19:24:26 +02:00
4d2fe22daf Allow assignment of study groups for internal users 2022-09-22 19:24:26 +02:00
998a12e6bc Adjust filter for platform_admin user search and update views 2022-09-22 19:24:26 +02:00
f5758ecb5e Capitalize app names in locales 2022-09-21 09:56:07 +02:00
d02a1eae81 Validate password strength for internal users 2022-09-14 12:19:25 +02:00
f1aa004284 Use controller method for 404 responses 2022-09-14 01:01:14 +02:00
dba3aac800 Merge branch 'master' into refactor_proforma_import_export 2022-09-13 22:47:50 +02:00
80419db868 [CSP] Prevent use of unsafe-inline for links
* Also update all <a> tags in locals
2022-09-07 21:42:07 +02:00
0d40cdd03a [CSP] Allow 'self' as base-uri 2022-09-07 21:41:09 +02:00
d1ab0a6d86 [CSP] Add documentation about connect_src for WebSocket 2022-09-06 13:57:29 +02:00
2028e636a3 Use SameSite=Lax for LTI login 2022-09-06 13:28:12 +02:00
fe0ad7a79d Add Feature-Policy header
The header has been renamed to Permissions-Policy, but Rails has no support so far.
2022-09-06 11:21:38 +02:00
7f0d8b63f9 Use Cookie Prefix in Production and Staging 2022-09-06 11:21:38 +02:00
9e08f3a6a8 Enable Subresource Integrity 2022-09-06 11:21:37 +02:00
51e9daf930 Enable HSTS preload in app 2022-09-06 11:21:37 +02:00
a2bb2844b4 Add a Content Security Policy 2022-09-06 11:20:57 +02:00
fe41d44548 Use SameSite strict for cookies 2022-09-06 11:20:56 +02:00
0a16f589e9 Use X-Sendfile to transmit native files and handle file uploads 2022-09-06 01:21:40 +02:00
1e47f62472 Remove web_console setting from staging.rb 2022-08-24 13:18:09 +02:00
ebf00eb475 Update staging environment 2022-08-24 13:06:33 +02:00
3effdbe600 merge master 2022-08-20 22:20:52 +02:00
145c4aa8d5 Refactor various ruby files
* Insights based on brakeman report
2022-08-18 15:25:04 +02:00
cb0f30768f Change HTTP links to HTTPS 2022-08-17 01:29:27 +02:00
a56b61d4bc Migrate sorttable to NPM package 2022-08-13 00:38:53 +02:00
bea4201f18 Add options to minify Webpack output and rearrange webpack.config.js 2022-08-12 20:21:48 +02:00
6cff95a64b Reduce webpack outpout 2022-08-12 14:29:12 +02:00
447c06f091 Remove outdated comment for Popper in webpack.config.js
Popper is still required and we cannot remove it yet.
2022-08-12 14:12:13 +02:00
4096abf89f Update visjs to new fork, reduce bundle size 2022-08-12 14:11:18 +02:00
eb175b3b40 Fix Webpack-imported modules 2022-08-12 10:22:55 +02:00
a5f59e139a Update from shakapacker v6.0.0.rc13 to v6.5.0
Using a two-step process is recommended:
332e25186a/docs/v6_upgrade.md
2022-08-12 10:22:55 +02:00
d223abfb5e Update from webpacker v5 to shakapacker v6.0.0.rc13
Using a two-step process is recommended:
332e25186a/docs/v6_upgrade.md
2022-08-12 10:22:55 +02:00
727f85841d Bump i18n-js from 3.9.2 to 4.0.0
Bumps [i18n-js](https://github.com/fnando/i18n-js) from 3.9.2 to 4.0.0.
- [Release notes](https://github.com/fnando/i18n-js/releases)
- [Changelog](https://github.com/fnando/i18n-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fnando/i18n-js/compare/v3.9.2...v4.0.0)

---
updated-dependencies:
- dependency-name: i18n-js
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-09 10:11:36 +02:00
146eee673f changed send_thank_you_note and got_new_comment_for_subscription methods to use tokens properly, as well as new test scenarios for both cases 2022-08-05 08:05:07 +02:00
c638df12e7 updated locales/de.yml mail body texts 2022-08-05 08:05:07 +02:00
2141fdb1ac Refactor external_user_statistics to own controller action 2022-07-22 13:19:22 +02:00
6ca5982a45 Use letter_opener for dev environment 2022-07-20 17:39:36 +02:00
f17f987b89 added toggle autosave translation to the config yml files 2022-07-20 17:18:36 +02:00
5707e4c914 Use secure cookies for production and staging 2022-07-15 00:35:09 +02:00
ddd2de5b66 Clarify usage of external URLs for Docker and Runner Management 2022-07-08 10:13:24 +02:00
b613267add Remove legacy DockerClient 2022-06-08 13:18:37 +02:00
b364918cb6 Add link to Ralfs diss regarding interventions 2022-06-08 12:58:38 +02:00
aa647bef6a Fix wrong key for English intervention explanation 2022-05-18 00:56:27 -04:00
d9a2470a89 Allow tables for Markdown rendering 2022-05-06 15:36:03 +02:00
2ce9c4258a Remove New Relic 2022-04-29 22:53:36 +02:00
9a0f26a84f Allow admins and teachers to remove explicit RfC text 2022-04-28 15:31:58 +02:00
038864e4b4 Fix Rubocop offenses 2022-04-24 18:18:16 +02:00
19bd742bc9 Show a localized message if the program was killed.
* This will most likely happen by the OOM killer, thus we inform the user about the memory restriction.
2022-04-15 21:29:55 +02:00