623 Commits (1ad53449a211f472407214f48c2ff98132d43ac7)

Author	SHA1	Message	Date
Oliver Günther	546eadcfb8	Add rails-angular-xss protection ... Them gem patches Rails XSS protection methods with a replacement of `{{` strings with `{{ DOUBLE_LEFT_CURLY_BRACE }} `. `DOUBLE_LEFT_CURLY_BRACE` is defined by Angular to return `{{`, so we actually do execute the interpolation, but only to return the original string. More information: https://github.com/opf/rails-angular-xss angular/angular.js#5601	9 years ago
Oliver Günther	3a010a52e4	Bump nokogiri to 1.6.8 ... https://groups.google.com/forum/#!topic/ruby-security-ann/RCHyF5K9Lbc	9 years ago
Oliver Günther	cd71519803	Use fuubar formatter for non-parallel, non-ci spec runs (#4373) ... fuubar is an instafailing formatter for rspec that prints errors as they come. Also updates capybara-screenshot for compatibility with fuubar.	9 years ago
Oliver Günther	a19977fbb1	Revert cucumber and gon bump ... gon changed its syntax and I can't seem to properly adapt the TimelinesHelper.	9 years ago
Oliver Günther	90e7b9bf30	Comment about carrierwave/fog-aws specifics	9 years ago
Oliver Günther	fa8c6bdd7a	Bump carrierwave	9 years ago
Oliver Günther	67b8616329	Rubocop	9 years ago
Oliver Günther	593798504b	Use correct loading mechanism for fog-aws ... To avoid loading all sorts of fog dependencies, use the fog-aws specific gem and avoid loading `:fog` providers when not configured.	9 years ago
Oliver Günther	d3610b2dd0	Replace fog with fog-aws	9 years ago
Oliver Günther	5fd73d63b2	Bump pg	9 years ago
Oliver Günther	96b37ab001	Bump mysql2 ... We're depending on rails 4.2.5 now, so this restriction no longer applies.	9 years ago
Oliver Günther	bf17674346	Bump rubocop	9 years ago
Oliver Günther	6111ed1af9	Bump net-ldap	9 years ago
Oliver Günther	94e4821dda	Bump equivalent-xml	9 years ago
Oliver Günther	b95c9bfb7a	Bump shoulda-matchers	9 years ago
Oliver Günther	497c6ec075	Bump simplecov	9 years ago
Oliver Günther	f72bc6c9a4	Bump webmock	9 years ago
Oliver Günther	eb724310fc	Bump timecop	9 years ago
Oliver Günther	1f4dc0697e	Bump capybara et al.	9 years ago
Oliver Günther	d88b63c058	Bump rspec et al.	9 years ago
Oliver Günther	3a3bb7b4ef	Bump database_cleaner	9 years ago
Oliver Günther	0938c41fae	Bump factory_girl_rails	9 years ago
Oliver Günther	2810592460	Bump launchy	9 years ago
Oliver Günther	b650fba05a	Bump execjs ... Also, remove explicit dependency as it originates from autoprefixer-rails	9 years ago
Oliver Günther	a6c4ed2703	Bump sprockets	9 years ago
Oliver Günther	631e791611	Bump airbrake	9 years ago
Oliver Günther	7f1162a371	Bump delayed_job_active_record	9 years ago
Oliver Günther	d3af3e05fa	Bump date_validator	9 years ago
Oliver Günther	4d537d9279	Bump will_paginate	9 years ago
Oliver Günther	81483efb3d	Bump request_store	9 years ago
Oliver Günther	46d0532cd1	Bump rubytree	9 years ago
Oliver Günther	8562d01527	Bump parallel_tests	9 years ago
Markus Kahl	cac89c8b27	dropped rfpdf to use prawn instead (#4388) ... Dropped the ancient, embedded rfpdf plugin for PDF generation. PDFs generated through that were corrupt and could not be processed by SharePoint for instance. The PDFs are now generated using prawn. May make an update of the openproject-pdf_export plugin necessary which uses an also ancient version of prawn itself (0.14, the current version being 2.1).	9 years ago
Oliver Günther	29d69a3fc5	Introduce header and Rails caching for schemas ... This commit introduces cached project-scoped work packages schema. Their caches are expired on a key based on - the Project ID - the Type ID - the allowed custom fields for the given project This commit only caches schema, not form endpoints.	9 years ago
Oliver Günther	8817313bf6	Bump livingstyleguide ... Avoids redcarpet-3.0.0 XSS https://github.com/livingstyleguide/livingstyleguide/issues/161	9 years ago
Oliver Günther	e49c163d00	Remove gulp with simpler npm tasks ... This removes `gulp` and provides a simpler `karma` and `webpack`, `webpack-watch` npm scripts. For actual development, users will need the Rails stack anyway, so it won't make sense to keep a separate set of dependencies up to date. * Instead of `gulp webpack`, use `npm run webpack`. * Instead of `gulp watch`, use `npm run webpack-watch`, which is *drastically* faster than gulp watch-polling. * Instead of `gulp tests:karma` use `npm run karma`, or just `npm test`. This also removes all traces of express and restores the Rails styleguide. It is not whitelisted for precompilation and is only available in the context of the development mode. To access the styleguide, use `/assets/styleguide.html`.	9 years ago
Oliver Günther	7f55c7ec95	Remove letter_opener restriction	9 years ago
Oliver Günther	3c2bee2a53	Bump oj	9 years ago
Oliver Günther	e14cb0d4cb	Bump selenium-webdriver	9 years ago
Oliver Günther	1f75bd22b0	Use XML parser middleware	9 years ago
Oliver Günther	9740a86578	Use forked omniauth with relative url support ... Using my own fork that contributes to the PR at https://github.com/intridea/omniauth/pull/837	9 years ago
Oliver Günther	315532a46a	Bump dalli ... This clarifies a warning/error message on production servers using Unicorn with `preload_app` set ( which was recently introduced here ). `127.0.0.1:11211 failed (count: 0) RuntimeError: Cannot share client between multiple processes`. Related to https://github.com/petergoldstein/dalli/pull/556	9 years ago
Oliver Günther	cfa69177f8	Allow custom gems to be installed through a separate source ... In a packaged installation, installing custom plugins is unfeasible by default to them breaking on each upgrade of the package (since the Gemfile(.lock) is being overridden. This commit allows users to specify a separated Gemfile, that will be checked by the package installer.	9 years ago
Jens Ulferts	5434a861e3	update rails and rails-html-sanitizer ... Fixes: * CVE-2015-7581 * CVE-2015-7580 * CVE-2016-0753 * CVE-2016-0752 * CVE-2015-7579 * CVE-2015-7578 * CVE-2015-7577 * CVE-2016-0751 * CVE-2015-7576	9 years ago
Oliver Günther	8320623d24	Bump nokogiri ... https://groups.google.com/forum/#!topic/ruby-security-ann/aSbgDiwb24s	9 years ago
Oliver Günther	bc35f1ea58	Define new dependencies as a separate group ... This allows user to exclude this from the bundle and also gives us the option to define the group as optional some time later.	9 years ago
Cyril Rohr	97ac309fe6	dockerize	9 years ago
Jens Ulferts	7ae871f314	bump parallel_tests version	9 years ago
Jonas Heinrich	a5dbb66ed9	Revert "Adapt branch of OpenProject-Translations" ... This reverts commit f9210ae024.	9 years ago
Jonas Heinrich	f9210ae024	Adapt branch of OpenProject-Translations	9 years ago