638 Commits (1697a6b118a9829e2de90b5108124e34c0c7a5fe)

Author	SHA1	Message	Date
Oliver Günther	e3903a70e6	Disable unsafe-eval now that we're on AOT	6 years ago
Oliver Günther	68e184f41f	Add resize helper for resizing images	6 years ago
Oliver Günther	2ab1a51d7a	Link legacy frontends in the same fashion	6 years ago
Oliver Günther	614f6d2400	Bundle into legacy application	6 years ago
Jens Ulferts	7da9bde5c8	fix angular cli handling in test ... Proxy href can be configured via OPENPROJECT_CLI_PROXY='[PROXY HREF]'. 'http://localhost:4200' is configured to be the default. Also fixes accessing the server via port 3000 in dev mode.	7 years ago
Oliver Günther	1ae35c8bd5	Merge from legacy-app	7 years ago
Oliver Günther	e1e6b7a959	Extract frontend asset helper building ... In DEV and TEST mode, it should be possible to use the running CLI to get up-to-date assets without recompiling.	7 years ago
Jens Ulferts	f709fe0cb2	remove timelines menu item	7 years ago
Wieland Lindenthal	a439716eae	[Mobile] Unhide my menu entries that used to be hidden.	7 years ago
Oliver Günther	02d44331af	Add ws/http connect_src to dev mode only	7 years ago
Roman Roelofsen	ec3728ac14	working dev mode	7 years ago
Wieland Lindenthal	27c73d90a4	First batch of changes required by review.	7 years ago
Oliver Günther	e208a1e437	Run stage on activation as well	7 years ago
Oliver Günther	3c0690b710	Ensure authentication stage is registered during reload ... And just for good measure, ensure stages cannot register the same name twice (does not happen while reloading, but still...)	7 years ago
Markus Kahl	2ac652efcd	user consent WIP	7 years ago
Oliver Günther	e7b43349a8	Append correct toolbar depending on markdown/wysiwyg/textile	7 years ago
Oliver Günther	0bc22be618	Ensure session cookie receives secure flag in https ... When users enable https in their instance, the session cookie should be `secure` by default. It currently is only when the configuration `rails_force_ssl` is set. https://community.openproject.com/wp/268331 [ci skip]	7 years ago
Oliver Günther	450b0fc13d	[27763] Ensure session cookie receives secure flag in https ... When users enable https in their instance, the session cookie should be `secure` by default. It currently is only when the configuration `rails_force_ssl` is set. https://community.openproject.com/wp/268331	7 years ago
Oliver Günther	e77aae007b	Rename PlanningElementTypeColors => Colors and add autocomplete	7 years ago
Wieland Lindenthal	36644257cc	Web custom menu items together with tree menu	7 years ago
Wieland Lindenthal	6293836582	WIP: ... - Tree menu component. - Static Wiki main menu start page - Main menu items of type `partial` - Wiki tree menu partial in main menu	7 years ago
Wieland Lindenthal	03a039e9c2	Main menu with submodule navigation	7 years ago
ulferts	f46b7bc42c	remove members restriction from view_members (#6268) ... That way, an admin can decide to allow users having the non members or anonymous role to see members in a project. [ci skip]	7 years ago
Oliver Günther	579f8bc233	Create new beta build	7 years ago
Oliver Günther	5da004491c	Remove https from default-src ... [ci skip]	7 years ago
Wieland Lindenthal	e5fca5fa65	Limit where crowdin can communicate to. ... Works in Chrome but not in FF.	7 years ago
Oliver Günther	dd5d9e1a19	Move crowdin CSP into separate helper to override CSP at runtime ... This avoids having cdn.crowdin.com allowed in the script-src even if the user doesnt use in-context translations.	7 years ago
Wieland Lindenthal	a6f88f552f	Add vimeo as allowed frame-src for introductional video (#6227) ... [ci skip]	7 years ago
Oliver Günther	e2d7c7b070	Allow crowdin in-context with CSP, but add opt-out ... Since the crowdin iframe adds all sorts of assets, we will want to disabled that.	7 years ago
Jens Ulferts	9b2fec0e24	bump rails to 5.1	7 years ago
Oliver Günther	33eeb8c0df	Allow sameorigin iframe for help modal ... We may want to remove that	7 years ago
Oliver Günther	8c477e5860	Fix more project settings related specs	7 years ago
Oliver Günther	ab4f9b7ed5	Replace settings and boards remotes with actual responses	7 years ago
Oliver Günther	6762b85d0b	Add vendored ckeditor builds for easy building an linking	7 years ago
Oliver Günther	07f92b911a	Allow unsafe-eval for Angular JIT	7 years ago
Oliver Günther	06472450c6	Implement CSP with secure_headers gem	7 years ago
Wieland Lindenthal	503502fa12	rubocop stuff and cleaning up code	7 years ago
Wieland Lindenthal	90ba46d406	Gem name changed from ‚text_extractor‘ to ‚plaintext‘	7 years ago
Wieland Lindenthal	a5808c5b45	- Use initializer to load text-extractor config. ... - Support OCR for image attachments.	7 years ago
Wieland Lindenthal	f2ebad3915	WIP: attachment search	7 years ago
Oliver Günther	88a5e787ce	CKEditor5 config and bundle for OP	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Jens Ulferts	b0fed3768d	turn into enterprise feature	7 years ago
Jens Ulferts	a86b711b94	add custom actions to admin menu	7 years ago
ulferts	c88b0b85c4	return proper WWW Authenticate header on missing credentials (#6150) ... An anonymous_fallback is introduced and registered to be the last strategy for warden. That strategy will always apply and it will always return the anonymous user. The better way would be to only apply the strategy if login is not required. That way we would still be able to return a 403 when credentials are missing but would no longer need to have 401 handlers outside of warden. That duplicity caused the missing header in the first place. It would however require us to handle the realm in the strategy and by that increase the coupling between the strategy and the application. [ci skip]	7 years ago
Oliver Günther	78fe1ca1bf	[26921] Reload query on clicking on menu item (#6136) ... * reload query on clicking on menu item * Implement menu factory in typescript * Fix specs and add new spec for refreshing current query * Fix specs * Use transition, not $stateChangeStart * Remove stateChangeStart listener * Remove $statChangeSuccess and vendored code * Fix typescript references * Actually remove ui-router deprecated module * Only clear notifications when notify is false This flag is deprecated, but we're still depending on it * Send keys to body instead * Replace label spec with values around today line Otherwise, labels may be invisible for the browser * Updated shrinkwrap * Fix specs for FF 58 [ci skip]	7 years ago
ulferts	8c732b9a42	Fix/parent depth first sorting (#6133) ... * maintain hierarchy path for performant sorting * by default - only sort by parent Parent sorting is exclusive as the sorting used is depth first. Because of that, the id of the work package is always part of the parent order criteria. By that, all other properties of the work package become irrelevant. [ci skip]	7 years ago
Oliver Günther	177f4e8963	Remove APIV2 and project associations / reportings ... [ci skip]	7 years ago
Oliver Günther	a0150fffa0	Remove timelines	7 years ago
Oliver Günther	7edb849859	[26862] Ensure AWS provider key is uppercase (#6119) ... * Bump carrierwave * Ensure AWS provider is set as uppercase [ci skip]	7 years ago