480 Commits

Author SHA1 Message Date
Philip Standt
c38e045df2 feat: support self hosted grist (#5655)
Co-authored-by: Tom Moor <tom.moor@gmail.com>
2023-08-14 11:46:24 -07:00
Tom Moor
b7bfc4bb1a chore: Remove optimize imports to allow vite upgrade (#5691) 2023-08-14 11:44:58 -07:00
Tom Moor
c32cec7bff Add support for SSL in development (#5668) 2023-08-09 04:21:41 -07:00
Apoorv Mishra
401ae73a04 Request validation for /api/collections.* (#5619) 2023-08-06 09:54:13 -07:00
Tom Moor
d8f1f55a80 fix: type is optional input for integrations.list endpoint 2023-08-06 11:09:22 -04:00
Apoorv Mishra
2331bbbd36 Request validation for /api/integrations.* (#5638) 2023-08-01 18:17:01 -07:00
Tom Moor
91585ee09d feat: Add tracking pixel to notifications for mark-as-read functionality (#5626) 2023-07-31 15:01:50 -07:00
Tom Moor
ccdcda372f chore: Move last usage of sequelize.transaction to middleware 2023-07-29 22:30:26 -04:00
Apoorv Mishra
ddc883bfcd Preview arbitrary urls within a document (#5598) 2023-07-29 16:51:49 -07:00
Apoorv Mishra
e3807a1c75 fix: tests 2023-07-26 21:40:34 +05:30
Apoorv Mishra
2a17e0cbf6 fix: send user context for authorize calls 2023-07-25 19:35:31 +05:30
Apoorv Mishra
9ac1e13227 fix: just return 204 2023-07-25 19:35:31 +05:30
Apoorv Mishra
bd0240b7a5 fix: handle errors from Iframely 2023-07-25 19:35:31 +05:30
Apoorv Mishra
a30487c2d7 fix: presentUnfurl 2023-07-25 19:35:31 +05:30
Apoorv Mishra
43a91626b2 feat: pipe external urls through iframely 2023-07-25 19:35:30 +05:30
Tom Moor
f8927ff819 tsc 2023-07-23 17:50:33 -04:00
j0ok34n
72adcd10ef Comment fix
- Workspace administrators will not be able to delete or edit comments within private collections for which they do not have permissions.
- Users will not be able to delete or modify their comments if they have been removed from a private collection.
2023-07-23 15:57:20 -04:00
Tom Moor
7bc37cb700 tsc 2023-07-23 13:11:02 -04:00
Tom Moor
404f5ff871 Merge branch 'main' of github.com:outline/outline 2023-07-23 12:01:54 -04:00
Apoorv Mishra
0db6f39f43 Display correct info in hover preview (#5597) 2023-07-23 09:01:46 -07:00
Tom Moor
479b805613 Add per-document control over who can see viewer insights (#5594) 2023-07-23 09:01:36 -07:00
Tom Moor
48f1047016 chore: improve collections router 2023-07-22 16:39:47 -04:00
Tom Moor
caf7333682 fix: Pass user context to document loader in urls unfurl 2023-07-22 16:07:21 -04:00
Tom Moor
8d549abaa9 Add rate limiting to unfurl endpoint 2023-07-22 13:27:58 -04:00
Apoorv Mishra
5d71398ea6 Preview mentions (#5571)
Co-authored-by: Tom Moor <tom.moor@gmail.com>
2023-07-22 09:13:09 -07:00
Tom Moor
4b14fa5dd7 Inherit 'full width' setting creating new child document
towards #5562
2023-07-15 23:21:59 -04:00
Tom Moor
39e12cef65 chore: Use httpOnly authentication cookie (#5552) 2023-07-15 13:56:32 -07:00
Tom Moor
66331d3d4f Add csp nonce to all inline script tags (#5566) 2023-07-15 07:15:14 -07:00
Apoorv Mishra
3c2e7b5b63 Request validation for /api/subscriptions.* (#5476)
* chore: req validation for subscriptions.list

* chore: req validation for subscriptions.info

* chore: req validation for subscriptions.create

* chore: req validation for subscriptions.delete

* fix: reuse validations
2023-07-03 08:43:45 +05:30
Tom Moor
f843a20a54 chore: Improves linting rule to catch mishandled promises (#5506) 2023-07-01 10:25:51 -07:00
Apoorv Mishra
768fcbf6c4 Request validation for /api/stars.* (#5475)
* chore: req validation for stars.create

* chore: req validation for stars.list

* chore: req validation for stars.update

* chore: req validation for stars.delete

* fix: DRY

* fix: group validation attributes and message
2023-07-01 19:25:57 +05:30
Tom Moor
92c8eff61d fix: No need to validate SSO access immediately after sign-in 2023-06-29 21:08:49 -04:00
Tom Moor
89d5527d39 Handle promise linting (#5488) 2023-06-28 17:18:18 -07:00
Apoorv Mishra
9987c15daf chore: req validation for api/developer (#5482) 2023-06-26 19:20:22 +05:30
Apoorv Mishra
a234a92f80 chore: schema for api/auth (#5481) 2023-06-26 18:37:18 +05:30
Tom Moor
7940cef517 Improve document revision creation (#5474) 2023-06-25 05:29:24 -07:00
Apoorv Mishra
86d6117a31 Request validation for /api/shares.* (#5467)
* chore: req validation for shares.info

* chore: req validation for shares.list

* chore: req validation for shares.update

* chore: req validation for shares.create

* chore: req validation for shares.revoke

* fix: review
2023-06-25 17:50:23 +05:30
Apoorv Mishra
d96bf5106d chore: request validation for pins (#5465) 2023-06-22 15:57:00 +05:30
Apoorv Mishra
8d69de1be0 chore: request validation for searches (#5460) 2023-06-21 10:38:38 +05:30
Tom Moor
eb62b961a4 feat: Add option to not include attachments in exported data (#5463) 2023-06-20 18:17:39 -07:00
Tom Moor
9ef375d83c fix: Import max length not correctly communicated on import (#5434) 2023-06-17 00:52:57 -07:00
Tom Moor
45641103ba Allow viewing diff before revision is written (#5399) 2023-05-29 19:49:13 -07:00
dependabot[bot]
fbd16d4b9a chore(deps-dev): bump prettier from 2.1.2 to 2.8.8 (#5372)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Moor <tom.moor@gmail.com>
2023-05-22 19:14:56 -07:00
Tom Moor
ea885133ac Notifications interface (#5354)
Co-authored-by: Apoorv Mishra <apoorvmishra101092@gmail.com>
2023-05-20 07:47:32 -07:00
Tom Moor
e2bc2f2067 Transfer changes from enterprise codebase 2023-05-13 12:30:24 -04:00
Tom Moor
7ce97f4d50 feat: Enable admins to list all collections in workspace 2023-05-11 22:25:12 -04:00
Tom Moor
07ae67924f Use team name and favicon (when public branding enabled) on shared links 2023-05-08 14:46:25 -04:00
Apoorv Mishra
c8ee501377 Request validation for cron (#5307)
* chore: add validations for /api/cron.*

* fix: coerce limit to number

* fix: review
2023-05-07 10:41:20 +05:30
Tom Moor
ac8946f0c5 fix: Admins should be able to add and remove themselves from collections 2023-05-04 21:52:59 -04:00
Apoorv Mishra
3d6a875631 fix: allow null for subdomain (#5289) 2023-05-02 18:19:08 +05:30