8329 Commits

Author SHA1 Message Date
Panagiotis Papadopoulos
d56752e5a9 fix(utils/dynamicRequire): pass moduleName explicitly as string
fixes the Webpack warning:
"WARNING in ./src/public/app/services/utils.ts 249:15-34
Critical dependency: the request of a dependency is an expression"

as we now explicitly pass the moduleName as string and not "expression"
source:
https://stackoverflow.com/questions/42908116/
2025-01-19 12:57:27 +01:00
Panagiotis Papadopoulos
c9619e1a1b chore(tests): fix type error in data_dir.spec 2025-01-18 20:45:01 +01:00
Panagiotis Papadopoulos
121e7b33ec chore(tests): comment out "todo" code in attribute_parser.spec
we now have more stricter TS rules being applied to the spec files, so `tsc` fails with these now.
and since this is set to TODO, because of outdated code,
let's comment out, instead of using //@ts-expect-error
2025-01-18 20:32:40 +01:00
Panagiotis Papadopoulos
627b2faf0b chore(tests): move remaining valid tests next to actual files 2025-01-18 20:20:30 +01:00
Panagiotis Papadopoulos
49246ee456 chore(tests): move tests next to actual file 2025-01-18 20:15:29 +01:00
Adorian Doran
5ad4092cb2 Merge branch 'develop' of https://github.com/TriliumNext/Notes into style/next/forms 2025-01-18 20:23:16 +02:00
Elian Doran
658317799d
feat(options_init): enable fixed editing toolbar by default for new users 2025-01-18 19:38:41 +02:00
Elian Doran
5899ba9a57
Revert "feat(options_init): enable horizontal layout by default for new users"
This reverts commit 637d1df0f597849d8c4bfc3ad53b6863bf665ba3.
2025-01-18 19:37:09 +02:00
Elian Doran
637d1df0f5
feat(options_init): enable horizontal layout by default for new users 2025-01-18 19:16:26 +02:00
Elian Doran
0a0707434e
feat(mobile): allow resetting launch bar config 2025-01-18 18:49:36 +02:00
Elian Doran
1369cd8b16
feat(client): implement move to available/visible launchers on mobile as well 2025-01-18 18:45:13 +02:00
Elian Doran
b367862fe8
fix(client): launch bar move commands not working (fixes #989) 2025-01-18 18:02:26 +02:00
Elian Doran
c7e688b6e6
chore(client/ts): port left_pane_container 2025-01-18 12:56:00 +02:00
Elian Doran
8e3faffd35
fix(left-pane): preferred width is not restored (closes #990) 2025-01-18 12:54:59 +02:00
Elian Doran
148e166f5e
fix(electron): mime type not always checkable in settings 2025-01-18 12:44:51 +02:00
Elian Doran
0ae5453717
feat(settings): disable unchecking of plain text mime 2025-01-18 12:36:23 +02:00
Elian Doran
0a611ac4bb
fix(settings): list of mime types disappearing one by one (fixes #988) 2025-01-18 12:33:18 +02:00
Elian Doran
f2382e2ef5
refactor(canvas): solve API deprecation 2025-01-18 11:15:54 +02:00
Elian Doran
7d3f506efb
refactor(deps): use webpack import for canvas 2025-01-18 11:09:57 +02:00
Elian Doran
ac30e00c02
refactor(client): remove redundant variable 2025-01-18 01:24:21 +02:00
Elian Doran
0776f17ebb
chore(types): remove redundant interface 2025-01-18 01:24:04 +02:00
Elian Doran
3db93cdf24
chore(client/ts): port note_icon 2025-01-18 01:14:47 +02:00
Elian Doran
043d92a1ab
feat(revisions): add spacing between help and delete (closes #974) 2025-01-18 01:02:03 +02:00
Elian Doran
5985519570
fix(mobile): tab bar context menu (closes #969) 2025-01-18 00:51:59 +02:00
Elian Doran
7c7fd044c6
chore(client/ts): port canvas 2025-01-18 00:42:19 +02:00
Elian Doran
2167948509
fix(canvas): significant lag when dragging (fixes #967) 2025-01-18 00:14:31 +02:00
Elian Doran
7cf1fbf088
fix(mobile): position of note detail menu (closes #971) 2025-01-18 00:04:06 +02:00
Elian Doran
e3bcd75a5a
chore(client/ts): port mobile_detail_menu 2025-01-17 23:55:46 +02:00
Elian Doran
229f473f8b
style(next): alignment of dropdown keyboard shortcuts 2025-01-17 23:47:29 +02:00
Elian Doran
11009a5af8
fix(client): positioning of keyboard shortcuts on legacy theme (closes #685) 2025-01-17 23:46:19 +02:00
Elian Doran
fdbc33aa23
fix(client): alignment of "Advanced" option in global menu 2025-01-17 23:43:06 +02:00
Elian Doran
d9335bec37
fix(client): shortcuts wrapped on two lines on global menu (closes #976) 2025-01-17 23:37:34 +02:00
Elian Doran
59d8def2c5
Merge remote-tracking branch 'origin/develop' into share-fix 2025-01-17 23:19:53 +02:00
Elian Doran
7fc5f9ab83
Merge pull request #977 from pano9000/test_vitest
test: add vitest as test framework and port current tests
2025-01-17 22:22:00 +02:00
Elian Doran
dd3397bcbb
chore(client/ts): port note_map 2025-01-17 21:25:36 +02:00
Panagiotis Papadopoulos
33274ada65 test: port spec tests to vitest 2025-01-17 20:24:20 +01:00
Elian Doran
e7eb385b8f
refactor(deps): integrate force-graph into webpack 2025-01-17 20:21:52 +02:00
Elian Doran
0cee8f9f20
refactor(mermaid): use webpack import for mermaid-elk 2025-01-17 19:53:09 +02:00
Panagiotis Papadopoulos
9382c278b3 fix(csrf): add exception for electron for httpOnly cookie
it does not seem to like having httpOnly set in electron
2025-01-17 17:26:52 +01:00
Adorian Doran
faa4a5fcd8 client: update the markup for the "Available MIME types" check boxes 2025-01-17 01:36:54 +02:00
Adorian Doran
e8f6f68987 style(next): disable text selection for check boxes and radio buttons 2025-01-17 01:24:34 +02:00
Adorian Doran
07dd8995b6 style(next): overhaul the check / uncheck animation for radio buttons 2025-01-17 01:22:09 +02:00
Adorian Doran
4c84bc724d style(next): refactor 2025-01-17 01:06:25 +02:00
Adorian Doran
2773d560b9 style(next): enforce left padding for radios and check boxes 2025-01-17 01:00:19 +02:00
Adorian Doran
a2a9bee7eb style(next): rename some variables 2025-01-17 00:58:11 +02:00
Adorian Doran
398591fb1f style(next): restyle check boxes 2025-01-17 00:51:26 +02:00
Adorian Doran
fe539b1647 style(next): tweak the colors of the radio buttons 2025-01-16 23:39:18 +02:00
Caleb Norton
b8f15d2fe3
Fix parent share link 2025-01-16 15:28:30 -06:00
Panagiotis Papadopoulos
5f605b3a91 fix(csrf): set more secure cookieOptions settings
- `sameSite` - previous setting inherited from csurf was to simply not set it at all, which makes all browser nag in their dev console output.
They will default to "Lax" for these type of cookies in the future.
We can even use "strict" here though for our use case:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value

- `httpOnly`: should be enabled for the csrf cookie as well
for the session cookie it already is enabled.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#httponly
2025-01-16 21:40:12 +01:00
Panagiotis Papadopoulos
ec19ccd7a7 fix(csrf): stop leaking the CSRF token in the server logs
As per OWASP:
"A CSRF token must not be leaked in the server logs or in the URL.", see:
https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#transmissing-csrf-tokens-in-synchronized-patterns
2025-01-16 21:16:33 +01:00