potsda.mn-Kollektiv
1af8e37e9b
fix(front-end): add more security fixes for formatted lists and notifier
...
- introduce html escape function
- escape message content in notifier plugin
- escape user name in ConversationListItem
- escape user name in the Event EditView contacts section
- display user summary as plain text in ActorCard
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-07 14:29:20 +01:00
Thomas Citharel
41227d994c
style: linting front-end
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:18:36 +01:00
Thomas Citharel
ffff379d47
fix: always consider report content as text
...
Report content was used as HTML in front-end and e-mails but wasn't sanitized as such.
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 11:05:56 +01:00
Thomas Citharel
ded59bec27
fix(front): fix XSS because of bad operations when setting the group's summary
...
Group summary (HTML) is properly sanitized by the backend, but for groups we did a special operation
before setting the HTML in the Vue app. This is now removed
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-06 08:47:44 +01:00
Thomas Citharel
f81472e081
fix(front): fix tag loading
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-05 08:28:11 +01:00
Thomas Citharel
c4d2ec69ad
fix(front): only show participants & announcements menu items to organizers
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-05 08:15:11 +01:00
Thomas Citharel
10ce812660
fix(front): make recipient field placeholder translatable
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-04 13:49:42 +01:00
Thomas Citharel
d831dff9fc
feat(front): add dedicated page and route for event announcements
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-01 11:29:56 +01:00
Thomas Citharel
9e6b232a78
feat: add links to cancel anonymous participations in emails
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-12-01 11:29:53 +01:00
Thomas Citharel
f81804d57f
resolve result promise in a shorter way
2023-11-27 16:43:12 +00:00
summersamara
83da88ca28
fix fullAddressAutocomplete component not loading results
...
- introduce refetch method to fetch the result when query variables change
2023-11-27 16:52:23 +01:00
Thomas Citharel
5e86ef1e8c
fix(front): hide all categories card if we don't have even one
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-11-21 16:40:34 +01:00
Thomas Citharel
5602164c62
build: replace @vueuse/head with @unhead/vue
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-11-21 16:40:32 +01:00
Thomas Citharel
7ef85fe19b
fix(announcements): load group announcements
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-11-20 17:35:37 +01:00
Thomas Citharel
b635937091
fix: various fixes
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-11-20 09:35:21 +01:00
Thomas Citharel
105d3b5814
test: fix front-end tests
...
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-11-15 12:38:36 +01:00
Thomas Citharel
bfbc299f37
test: fix histoire configuration
...
Nearly
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-11-14 18:59:28 +01:00
Thomas Citharel
2e72f6faf4
build: switch from yarn to npm to manage js dependencies and move js contents to root
...
yarn v1 is being deprecated and starts to have some issues
Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-11-14 17:24:42 +01:00
