Skip to content

Conversation

@stanley2058
Copy link
Contributor

@stanley2058 stanley2058 commented Dec 26, 2023

CodiMD 2.5.0

Security Fixes

Fixes

Enhancements

DX

Thank you

Thank you guys for being here and making CodiMD awesome ❤️

Joachim Mathes and others added 30 commits November 21, 2020 20:41
Signed-off-by: Joachim Mathes <joachim_mathes@web.de>
Signed-off-by: Raccoon <raccoon@hackmd.io>
Currently CodiMD does not support limiting access of GitHub OAuth users
based on their organization membership. This is a very useful
functionality for teams that want to limit write access to their notes.

I've implemented a crude solution to this problem, which most probably
requires some adjusments to make it better. I'm not sure if this
implementation is kosher, but it definitely works on my deployment.

Open to suggestions on how I can improve it.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
…section

Signed-off-by: Bruno Duyé <brunetton@brunetton.org>
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
Signed-off-by: Max Wu <jackymaxj@gmail.com>
Signed-off-by: Vincent Nadoll <vincent.nadoll@googlemail.com>
Signed-off-by: chenxuanzzy <chenxsuan019@gmail.com>
Signed-off-by: blademainer <blademainer@gmail.com>
Signed-off-by: blademainer <blademainer@gmail.com>
Signed-off-by: inductor <kela@inductor.me>
this fixes "error: 	uncaughtException: Unknown authenticationOk message typeMessage { name: 'authenticationOk', length: 23 }"

Signed-off-by: Anton Wolkov <7001904+phntom@users.noreply.github.com>
Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>
Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>
Update README.md to remove IE from supporting list
Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>
Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>
…e-crash

FIX: server crash when filename too long
Signed-off-by: Cédric Eyssette <cedric.eyssette@gmail.com>
Signed-off-by: Étienne Michon <etienne@scalingo.com>
Signed-off-by: Sean Young <assanges@icloud.com>
Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>
Try to simply update the npm packages without any additional changes.

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>
jackycute and others added 12 commits June 5, 2023 16:12
Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>
npm found 160 vulnerabilities (6 low, 75 moderate, 63 high, 16 critical)
from the original dependencies. Using `npm audit fix` to update most of
the dependencies will eliminate 37 of the 160 vulnerabilities.

markmap-lib was excluded in this update because it actually contains
breaking changes.

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>
Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>
Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>
Reference: e6d2b7a

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>
Signed-off-by: Michael Wang <michael19920327@gmail.com>
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
…-xss

fix: sanitize pdf url to prevent XSS on inline PDFs
Update both Traditional and Simplified Chinese locales
hcyuser and others added 9 commits December 26, 2023 17:44
Signed-off-by: hcyuser <user@hcy.idv.tw>
Signed-off-by: hcyuser <user@hcy.idv.tw>
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>
Signed-off-by: stanley2058 <stanley2058@yahoo.com.tw>
Signed-off-by: stanley2058 <stanley2058@yahoo.com.tw>
Signed-off-by: stanley2058 <stanley2058@yahoo.com.tw>
@jackycute
Copy link
Member

Thanks @stanley2058 @Yukaii

@jackycute jackycute merged commit 78e6663 into master Dec 26, 2023
@Neustradamus
Copy link

@stanley2058: Nice version with SCRAM-SHA-256 support!

Linked to:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.