Commit graph

29105 commits

Author SHA1 Message Date
Thibault Duplessis 134287091e move nonce from Context to PageData 2018-05-08 01:51:10 +02:00
Thibault Duplessis a56f5b88d2 supercharge game export by IDs
See https://lichess.org/api#operation/gamesExportIds
2018-05-08 01:51:10 +02:00
Thibault Duplessis dcb2a5f424 mobile API request 2018-05-08 01:51:10 +02:00
Thibault Duplessis 3ca98b77fa remove deprecated API
use https://lichess.org/api#operation/gamesExportUsername instead
2018-05-08 01:51:10 +02:00
Thibault Duplessis 987606dbd9 better stream team members 2018-05-08 01:51:10 +02:00
Thibault Duplessis 6225b48ca7 better stream team members 2018-05-08 01:51:10 +02:00
Niklas Fiekas bfef27dc57 html5 validation for authentication code field 2018-05-08 01:51:10 +02:00
Thibault Duplessis 261489f428 tweak level 8 rating 2018-05-08 01:51:10 +02:00
Niklas Fiekas c67bef7486 misc improvements from review 2018-05-08 01:49:10 +02:00
Niklas Fiekas f6aebbd992 allow embedding chesspursuit 2018-05-07 21:23:44 +02:00
Niklas Fiekas 1c9724239f allow socket fallback ports in csp 2018-05-07 20:50:00 +02:00
Niklas Fiekas 9b15821df2 Revert "wip csp header setting"
This reverts commit f7c2a26519.
2018-05-07 20:42:16 +02:00
Niklas Fiekas b35e8649aa fix typo 2018-05-07 20:42:11 +02:00
Niklas Fiekas 5a3a681558 patch jquery for csp 2018-05-07 20:34:10 +02:00
Niklas Fiekas 54f2d9b4dd csp is in beta 2018-05-07 20:07:05 +02:00
Niklas Fiekas deb6c5ee5d fix csp for video embeds 2018-05-07 19:53:50 +02:00
Niklas Fiekas d6747cd5f8 use cdnjs instead of maxcdn 2018-05-07 19:45:51 +02:00
Niklas Fiekas 68e1ea8c40 liberal csp for spreadshirt 2018-05-07 19:42:35 +02:00
Niklas Fiekas 39e65f16eb fix csp on strip checkout page 2018-05-07 19:35:16 +02:00
Niklas Fiekas a9403f93f8 apply csp almost everywhere 2018-05-07 19:21:33 +02:00
Niklas Fiekas f1b021d770 csp for analyse/embed.scala.html 2018-05-07 18:52:42 +02:00
Niklas Fiekas 4546e4b7be whitelist explorer in csp 2018-05-07 18:43:55 +02:00
Niklas Fiekas 55d1475945 add a content security policy 2018-05-07 18:32:18 +02:00
Niklas Fiekas f7c2a26519 wip csp header setting 2018-05-07 17:52:55 +02:00
Niklas Fiekas 7066dc893a generate random nonce for emebedJs 2018-05-07 17:52:55 +02:00
Niklas Fiekas d90f3c620a sepcify charset as soon as possible 2018-05-07 17:42:03 +02:00
Thibault Duplessis e60496e000 monitor ws, xhr, bot and page requests 2018-05-07 16:03:26 +02:00
Thibault Duplessis da4925221b inc assets version 2018-05-07 05:41:47 +02:00
Thibault Duplessis 8d01da9d63
New Crowdin translations (#4334)
* New translations site.xml (Lithuanian)

* New translations site.xml (Latvian)

* New translations site.xml (Latvian)

* New translations site.xml (Latvian)

* New translations site.xml (Latvian)

* New translations site.xml (Latvian)

* New translations site.xml (Latvian)

* New translations site.xml (Catalan)

* New translations site.xml (Latvian)

* New translations site.xml (Latvian)

* New translations emails.xml (Latvian)

* New translations emails.xml (Latvian)

* New translations emails.xml (Latvian)

* New translations activity.xml (Latvian)

* New translations learn.xml (Latvian)

* New translations learn.xml (Latvian)

* New translations learn.xml (Latvian)

* New translations learn.xml (Latvian)

* New translations site.xml (Croatian)

* New translations site.xml (German)

* New translations site.xml (Lithuanian)

* New translations site.xml (Lithuanian)

* New translations site.xml (Portuguese, Brazilian)

* New translations site.xml (German)

* New translations site.xml (German)

* New translations site.xml (German)

* New translations site.xml (Galician)

* New translations site.xml (Galician)

* New translations site.xml (Galician)

* New translations site.xml (Korean)

* New translations site.xml (Korean)

* New translations site.xml (Korean)

* New translations site.xml (Korean)

* New translations learn.xml (Chinese Traditional)

* New translations learn.xml (Chinese Traditional)

* New translations site.xml (Serbian (Cyrillic))

* New translations site.xml (Romanian)

* New translations site.xml (Romanian)

* New translations site.xml (Arabic)

* New translations site.xml (Arabic)

* New translations site.xml (Arabic)

* New translations learn.xml (Portuguese, Brazilian)

* New translations site.xml (Galician)

* New translations site.xml (Thai)

* New translations site.xml (Thai)

* New translations site.xml (Russian)

* New translations site.xml (Russian)

* New translations site.xml (Arabic, Saudi Arabia)

* New translations learn.xml (Arabic)

* New translations emails.xml (Arabic, Saudi Arabia)

* New translations site.xml (German)

* New translations site.xml (Italian)

* New translations site.xml (Arabic)

* New translations emails.xml (Arabic)

* New translations learn.xml (Arabic, Saudi Arabia)

* New translations site.xml (Danish)

* New translations site.xml (Portuguese, Brazilian)

* New translations site.xml (Spanish)
2018-05-07 05:37:18 +02:00
Thibault Duplessis e36cc6c85f puzzle tweaks 2018-05-07 05:36:45 +02:00
Thibault Duplessis 3fcfa761ce update legacy API 2018-05-07 02:35:08 +02:00
Thibault Duplessis 03d2bd91ac download games played against a specific opponent 2018-05-07 02:34:46 +02:00
Thibault Duplessis e89b7f1ef1 improve export of a single game 2018-05-07 02:17:23 +02:00
Thibault Duplessis 3428119b3c unify game exports 2018-05-07 02:10:47 +02:00
Thibault Duplessis f83fedfc2e stream games as application/x-ndjson 2018-05-07 01:26:42 +02:00
Thibault Duplessis 1dd0491c64 don't export analysis glyphs 2018-05-07 01:02:19 +02:00
Thibault Duplessis 4ffed3ede3 support JSON in new game export API 2018-05-07 00:56:13 +02:00
Thibault Duplessis eed7f88031 refactor shit like there's a tomorrow 2018-05-07 00:40:17 +02:00
Thibault Duplessis 4910b743b7 fix game export API max parameter - closes #4335 2018-05-06 22:50:15 +02:00
Niklas Fiekas a3431461aa hasher rate limiting for 2fa forms 2018-05-06 21:52:59 +02:00
Thibault Duplessis f21fd02625 add missing hasher rate limiter 2018-05-06 21:48:56 +02:00
Thibault Duplessis a58139560f fix password rate limiter 2018-05-06 21:46:52 +02:00
Thibault Duplessis 0f7b806d99 normalize username before ratelimiting 2018-05-06 21:42:58 +02:00
Thibault Duplessis 043d00395f 2FA for everyone 2018-05-06 21:37:27 +02:00
Thibault Duplessis bf00ec0751 remove unused function 2018-05-06 21:36:59 +02:00
Thibault Duplessis 49249ceed0 let everyone create broadcasts 2018-05-06 21:36:59 +02:00
Niklas Fiekas 067ba16cd7 more consistent wording 2018-05-06 21:24:36 +02:00
Niklas Fiekas 14cf4f092e errMsgMaterial is a bit nicer (but still global) 2018-05-06 21:22:39 +02:00
Niklas Fiekas 2763bd11e2 Merge branch '2fa' 2018-05-06 21:18:47 +02:00
Thibault Duplessis d7a7ad3f9f Merge branch '2fa'
* 2fa: (33 commits)
  22FA login wording
  improve 2fa feedback
  fix login form error message
  2fa login form
  let enabling 2fa terminate all other sessions
  totpDefault -> currentTotp, totp(period) can be private
  XHR login form
  use Seq.has in ToptSecret.verify
  login with ToptToken - WIP
  white border around qrcode required for dark theme
  license header for qrcode.min.js
  trans invalidAuthenticationToken
  hide 2fa as beta
  allow mods to disable 2fa
  load totp secret in user object
  allow to disable 2fa again
  fixes from code review
  remove wrapping div
  more tests
  actually enable totp
  ...
2018-05-06 21:17:14 +02:00