Commit graph

979 commits

Author SHA1 Message Date
Niklas Fiekas 0df50ea0be rename unsafe version of splitNumber (closes #4424) 2018-07-04 15:18:56 +02:00
Isaac Levy d5952be49a Revert "Revert "Merge pull request #4420 from isaacl/stringOpts""
This reverts commit ae1afb645d.
2018-06-28 00:06:25 -04:00
Thibault Duplessis ae1afb645d Revert "Merge pull request #4420 from isaacl/stringOpts"
This reverts commit 8dcddaa104, reversing
changes made to 37e803307f.
2018-06-27 06:36:03 +02:00
Isaac Levy c5f7db1790 Various regex opts
- Prefer unanchored matching over `.*<pattern>.*`
- Prefer possessive matching when possible, which
is faster is nearly every circumstance and universal use
minimizes bad regex behavior
- guard <string>.replace, which is slow in jdk below 9.
  even at jdk 9, indexOf is faster than replace for misses,
  but the performacne isn't much different.
2018-06-25 00:43:16 -04:00
Niklas Fiekas 9851210b90 csp: child-src is deprecated 2018-06-20 22:34:23 +02:00
Thibault Duplessis c36d856b8f speed up mod view display 2018-05-28 12:37:37 +02:00
Thibault Duplessis babf2c5819 upgrade flatpickr 2018-05-11 18:47:40 -05:00
Thibault Duplessis 62d263c238 CSP enabled live setting 2018-05-11 02:41:54 +02:00
Thibault Duplessis 0dbb12700c stop counting open reports 2018-05-09 03:56:39 +02:00
Niklas Fiekas 62e180a6b5 use Option[Nonce] instead of stub 2018-05-08 02:55:47 +02:00
Niklas Fiekas c67bef7486 misc improvements from review 2018-05-08 01:49:10 +02:00
Niklas Fiekas f6aebbd992 allow embedding chesspursuit 2018-05-07 21:23:44 +02:00
Niklas Fiekas 1c9724239f allow socket fallback ports in csp 2018-05-07 20:50:00 +02:00
Niklas Fiekas deb6c5ee5d fix csp for video embeds 2018-05-07 19:53:50 +02:00
Niklas Fiekas 39e65f16eb fix csp on strip checkout page 2018-05-07 19:35:16 +02:00
Niklas Fiekas a9403f93f8 apply csp almost everywhere 2018-05-07 19:21:33 +02:00
Niklas Fiekas 4546e4b7be whitelist explorer in csp 2018-05-07 18:43:55 +02:00
Niklas Fiekas 55d1475945 add a content security policy 2018-05-07 18:32:18 +02:00
Niklas Fiekas 7066dc893a generate random nonce for emebedJs 2018-05-07 17:52:55 +02:00
Thibault Duplessis c250d595c9 GDPR erasure WIP (command + forum erasure) 2018-05-03 23:44:05 +02:00
Thibault Duplessis 802a5fa6dd fix #4268 2018-04-26 04:45:50 +02:00
Thibault Duplessis 32c42589ce user bot title 2018-04-18 00:18:04 +02:00
Thibault Duplessis 7b3124b0cf Use (Light)Pov.gameId 2018-04-07 19:07:26 +02:00
Thibault Duplessis 7305ff6efb make websocket domain configurable
so it's possible to run lichess on localhost:

domain = "localhost:9663"
socket.domain = ${net.domain}

For #4190
2018-04-06 01:43:59 +02:00
Greg Finley 52b486ae03 Tournament mode translation from form page, closes #3958 2018-04-05 14:00:41 -07:00
Thibault Duplessis 6df4270aeb tweak asset helper 2018-03-28 21:10:30 +02:00
Thibault Duplessis c282eec64f instanciate Html("") only once 2018-03-08 09:57:31 -05:00
Thibault Duplessis 54845b3aa5 add stage warning (yes some players are signing up on stage) 2018-02-01 15:41:47 -05:00
Thibault Duplessis 6e3b1c4057 replace more Game fields with Game.chess 2018-01-26 16:40:41 -05:00
Thibault Duplessis e618d542f4 replace several Game fields with Game.history 2018-01-26 16:40:41 -05:00
Thibault Duplessis 1b2878c17b remove CastleLastMove from Game 2018-01-26 16:36:25 -05:00
Thibault Duplessis 4358283c80 refactor livestream API 2018-01-06 08:31:51 -05:00
Thibault Duplessis 90c7343226 show streamer title 2018-01-04 22:11:35 -05:00
Thibault Duplessis 6795a4ac31 set the streamer mic on fire 2018-01-03 11:42:55 -05:00
Thibault Duplessis 2f844e6f8a more streamer approval process 2017-12-31 10:05:15 -05:00
Thibault Duplessis 63e0bf972d Merge branch 'master' of github.com:ornicar/lila into streamers
* 'master' of github.com:ornicar/lila: (23 commits)
  call functions unsafe only when crossing boundary
  update test for @ in url
  tweak argument name
  update autoLink tests
  remove shortenWithBr
  unify autoLink, addLinks and addUserProfileLinks (#3936)
  fix double escape, remove html.shorten
  review string templating helpers
  fix nl2br signature
  remove escapeHtmlUnsafe
  fix xss in markdownLinks
  test that slugs are safe in html
  make escapeHtmlUnsafe private
  safeJsonString: "/" is safe in all contexts
  types for forecast
  translate round expiration countdown
  fix trans.vdomPlural
  translate analysis context menu
  forgot a translation: learnFromThisMistake
  minor fixes for Tree.Node typing
  ...
2017-12-31 00:08:13 -05:00
Thibault Duplessis 384a861095 streamers WIP 2017-12-31 00:08:01 -05:00
Niklas Fiekas 521da9560e fix double escape, remove html.shorten 2017-12-30 22:42:37 +01:00
Niklas Fiekas ffbcc64fe6 review string templating helpers
* repositionTooltip -> repositionTooltipUnsafe
* remove strong
2017-12-30 22:11:37 +01:00
Niklas Fiekas dc3a2e32ec make escapeHtmlUnsafe private 2017-12-30 20:44:15 +01:00
Thibault Duplessis 12960d1d4a some true minus signs - for #3926 2017-12-29 13:36:14 -05:00
Thibault Duplessis 55e5a07d35 some true minus signs - for #3926 2017-12-29 13:35:45 -05:00
Thibault Duplessis b09735aa1d pagination MaxPerPage type safety 2017-12-29 10:05:11 -05:00
Niklas Fiekas 7775b57492 clean js vendor tags 2017-12-05 17:42:51 +01:00
Thibault Duplessis 6909f19d0c report list UI 2017-12-04 13:19:40 -05:00
Thibault Duplessis 42aebed3a1 more work on weighted reports 2017-12-04 12:40:44 -05:00
Thibault Duplessis 15823ccd1c more work on weighted reports 2017-12-04 00:22:27 -05:00
Thibault Duplessis 42a72d25aa more work on report atoms 2017-12-01 10:18:43 -05:00
Thibault Duplessis 66c5958928 remove old CasualOnly mode 2017-11-29 23:42:27 -05:00
Thibault Duplessis a2ebdcaf03 Rapid WIP 2017-11-29 12:58:08 -05:00