Commit Graph

6054 Commits

Author SHA1 Message Date
pitchum 0fe25bc3a8 Fix markdown syntax in README.packaging.md 2024-03-10 18:11:08 +00:00
pitchum fd27b1b2e3 Release v4.0.2-2 2024-03-10 17:20:11 +00:00
pitchum 95fbed352d Remove languages having less than 50% of translated strings. 2024-03-10 17:13:22 +00:00
pitchum b9f3c38519 Update d/changelog 2024-03-10 13:20:45 +00:00
pitchum b75e909677 Move files needed for reverse-proxy in /var/lib/mobilizon/www 2024-03-10 13:19:46 +00:00
pitchum 0bd8396b23 Populate /var/lib/mobilizon and update config.exs accordingly 2024-03-10 13:15:43 +00:00
pitchum 8578fd0a73 Update d/changelog 2024-03-10 08:45:45 +00:00
pitchum 5a02f26bb9 Fix config for dh_installdocs 2024-03-10 08:42:09 +00:00
pitchum 7f88d5ffa2 Update packaging documentation. 2024-03-10 08:40:18 +00:00
pitchum fcb500fa17 Provide nginx example config file 2024-03-10 08:06:10 +00:00
pitchum e66f001099 Move Web static files into /var/lib/ 2024-03-09 12:06:56 +00:00
pitchum 99a616f5bb Execute db migration script in d/postinst 2024-03-09 12:06:56 +00:00
pitchum d366719168 Remove *.ex files generated by dh_make 2024-03-09 12:06:56 +00:00
pitchum 3d4c99b96c Add some docs. 2024-03-09 12:06:56 +00:00
pitchum 8aeddc0b85 update d/changelog 2024-01-17 11:49:05 +00:00
pitchum 5d9ef8af39 Include wrapper script /bin/mobilizon_ctl 2024-01-17 11:48:16 +00:00
pitchum c3ffd33166 Update deps and some metadata in d/control 2024-01-17 11:43:17 +00:00
pitchum 267626aeba Build config.exs from config.exs.tpl 2024-01-17 11:36:49 +00:00
pitchum d804d339fe WIP debconf 2024-01-14 15:32:19 +00:00
pitchum 3337e87496 Add postinst 2024-01-14 11:36:11 +00:00
pitchum eadb757371 Add missing runtime deps 2024-01-14 11:36:11 +00:00
pitchum 0c7f7e36a1 Disable tests because they require docker-compose 2024-01-14 11:36:11 +00:00
pitchum 354200cab8 Add build-dep erlang-eldap 2024-01-14 11:36:11 +00:00
pitchum c389ab48db Add d/patch to downgrade elixir version 2024-01-14 11:36:11 +00:00
pitchum 985d2fcc6c Start packaging with git-buildpackage 2024-01-14 11:36:11 +00:00
Thomas Citharel 42896aa6c2 chore(release): 4.0.2
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2024-01-14 11:36:11 +00:00
potsda.mn-Kollektiv 1af8e37e9b
fix(front-end): add more security fixes for formatted lists and notifier
- introduce html escape function
- escape message content in notifier plugin
- escape user name in ConversationListItem
- escape user name in the Event EditView contacts section
- display user summary as plain text in ActorCard

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 14:29:20 +01:00
Thomas Citharel 5e3d8a861f
chore(release): 4.0.1
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 12:36:11 +01:00
Thomas Citharel 0caaf2bf2e
build(packages): remove alpine packages as there's no demand for it
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 12:30:49 +01:00
Thomas Citharel 795ef2463f
build(packages): add back Debian Buster as it seems people are still using it
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 12:30:27 +01:00
Thomas Citharel 38f2443d7b Merge branch 'weblate-mobilizon-frontend' into 'main'
Translations update from Framasoft Weblate

See merge request framasoft/mobilizon!1499
2023-12-07 11:19:20 +00:00
josé m 97c53bb8d3 Translated using Weblate (Galician)
Currently translated at 100.0% (91 of 91 strings)

Translation: Mobilizon/Activity
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/activity/gl/
2023-12-07 12:14:44 +01:00
josé m e08b057e06 Translated using Weblate (Galician)
Currently translated at 71.2% (1169 of 1640 strings)

Translation: Mobilizon/Frontend
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/frontend/gl/
2023-12-07 12:14:43 +01:00
josé m ec5e4366e5 Translated using Weblate (Galician)
Currently translated at 6.5% (6 of 91 strings)

Translation: Mobilizon/Activity
Translate-URL: https://weblate.framasoft.org/projects/mobilizon/activity/gl/
2023-12-07 12:14:43 +01:00
Thomas Citharel 211d07b68e Merge branch 'xss-fixes' into 'main'
Security and docker fixes

See merge request framasoft/mobilizon!1500
2023-12-07 11:14:36 +00:00
Thomas Citharel db385501aa
fix(emails): use tls_certificate_check to add tls config for mailer
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 11:42:19 +01:00
Thomas Citharel 7210f86889
feat(cli): add command to test emails send correctly
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 09:17:33 +01:00
Thomas Citharel 4855af8f87
feat(docker): allow to configure loglevel at runtime through env variable
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 09:17:33 +01:00
Thomas Citharel 9907f887c9
fix(docker): use separate env for tzdata dir path
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:07:42 +01:00
Thomas Citharel 126727bf58
fix(docker): fix getting default value for MOBILIZON_SMTP_SSL env
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:07:03 +01:00
Thomas Citharel 7d725bd942
fix(config): fix setting path for Mobilizon.Service.SiteMap
System.get_env/2 makes no sense at compile time

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:06:20 +01:00
Thomas Citharel 28063bd1d9
fix(docker): fix getting configuration value from env MOBILIZON_SMTP_TLS
Closes #1381

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 16:05:33 +01:00
Thomas Citharel 09f41328ab
fix(graphql): set default value for resource type parameter
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 14:43:51 +01:00
Thomas Citharel 94bf2e53bf
fix(front): put correct value for CONVERSATION_LIST enum value
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:51:45 +01:00
Thomas Citharel dc6647f5dc
fix: sanitize descriptions from resources
Currently resources descriptions are not used anywhere but they are
prefilled from source URL preview. Still, doesn't hurt to sanitize
these.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:47:28 +01:00
Thomas Citharel 58e50e3c9f
test: add new tests for XSS in actors summary
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:19:19 +01:00
Thomas Citharel 41227d994c
style: linting front-end
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:18:36 +01:00
Thomas Citharel 2c12fbfd09
fix(front): anonymous participant text is plain text, avoid using v-html
It was using v-html when opening to "view more"

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:18:05 +01:00
Thomas Citharel 77518deb54 Merge branch 'weblate-mobilizon-frontend' into 'main'
Translations update from Framasoft Weblate

See merge request framasoft/mobilizon!1498
2023-12-06 10:07:48 +00:00
Thomas Citharel ffff379d47
fix: always consider report content as text
Report content was used as HTML in front-end and e-mails but wasn't sanitized as such.

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:05:56 +01:00