 Oliver Günther
|
a175c84879
|
Move CSP to Rails
|
2025-07-08 16:17:29 +02:00 |
|
|
Oliver Günther
|
8a5d02a1bf
|
Use nonced_javascript_include tag
|
2024-08-19 14:52:14 +02:00 |
|
|
Aaron Dewes
|
5e0bf3d0a1
|
Add support for Cloudflare Turnstile
Cloudflare Turnstile is an alternative to Recaptcha that avoids user interaction.
More information: https://developers.cloudflare.com/turnstile/
|
2024-04-29 06:37:56 +02:00 |
|
|
ulferts
|
3b2121f733
|
Revert "Merge remote-tracking branch 'origin/release/13.4' into dev"
This reverts commit 40b2bbeb09, reversing
changes made to b4c6cb17cc.
|
2024-03-21 11:31:17 +01:00 |
|
|
Ivan Kuchin
|
7787e457a3
|
Revert "Merge branch 'dev' into release/13.4"
This reverts commit a901541269, reversing
changes made to e573ca00b7.
|
2024-03-20 20:19:08 +01:00 |
|
|
Ivan Kuchin
|
9e4934cd0a
|
change quotes using rubocop --only Style/StringLiterals,Style/QuotedSymbols -a
|
2024-03-20 18:05:22 +01:00 |
|
|
Christophe Bliard
|
8fa8584538
|
Run rubocop --autocorrect on all files
Only the safe cops have run. rubocop version is 1.59.0.
|
2024-01-05 15:27:09 +01:00 |
|
|
Markus Kahl
|
472eee17b3
|
do not cache permanently which can change at runtime
|
2023-12-04 12:36:29 +00:00 |
|
|
Oliver Günther
|
2772945880
|
Fix hcaptcha usage and provide as a setting
|
2023-11-28 16:17:57 +01:00 |
|
|
Christophe Bliard
|
e3b807b1d4
|
Fix CSP frame-src for recaptcha
Using www.recaptcha.net/recaptcha/ everywhere www.google.com/recaptcha/ is used as recommended in https://developers.google.com/recaptcha/docs/faq\#can-i-use-recaptcha-globally, and explicitly use frame-src as recommended in https://developers.google.com/recaptcha/docs/faq\#im-using-content-security-policy-csp-on-my-website.-how-can-i-configure-it-to-work-with-recaptcha (the nonce seems to work only for script-src, but not frame-src)
|
2023-04-27 10:00:40 +02:00 |
|
|
Christophe Bliard
|
126fab49ba
|
add setting:available_envs rake task to list overridable env var names
|
2022-05-17 09:56:11 +02:00 |
|
|
Markus Kahl
|
cba3c1ca42
|
register recaptcha config to make it work again
|
2022-04-28 14:45:49 +01:00 |
|
|
Christophe Bliard
|
2c67f992a5
|
stringify hash settings keys and support OPENPROJECT_2FA env var
updated code to look up the string key instead of the symbol key
introduce a 'with settings' rspec shared context
|
2022-04-27 21:27:42 +02:00 |
|
|
Henriette Darge
|
2ee3a06c63
|
* Remove dead links (#9453)
* Use .org website address consistently
* Remove community address as homepage as it does not really offer any value
|
2021-07-14 15:51:09 +02:00 |
|
|
Markus Kahl
|
863d227d4b
|
hcaptcha support (#9022)
|
2021-02-18 09:51:28 +01:00 |
|
|
ulferts
|
1bdd2ab9ae
|
safe automatic fixes by rubocop (#8994)
|
2021-02-11 16:02:18 +01:00 |
|
|
Oliver Günther
|
cf6117b6a8
|
Move configuration block to ensure it only runs once
|
2020-08-25 14:12:20 +02:00 |
|
|
Henriette Darge
|
a61bcc7132
|
Rename cost reports module && Correct author_urls
|
2020-05-15 15:06:21 +02:00 |
|
|
ulferts
|
399e8c3ed9
|
rename according to zeitwerk
|
2020-02-21 20:47:25 +01:00 |
|
|
Oliver Günther
|
08e5f232fb
|
Implement recaptcha v2/v3 module
|
2019-09-05 16:01:44 +02:00 |
|