389 Commits

Author SHA1 Message Date
Mystikfluu
c55bf8fb8c update escape regex 2022-07-03 12:12:30 +02:00
Mystikfluu
ad0d9b1215 add x-xss-protection header 2022-07-03 11:16:55 +02:00
Mystikfluu
f29ab9c96f add escaping for ` and \ 2022-07-03 11:13:16 +02:00
Mystikfluu
c107a1a1f0 add security information 2022-07-03 11:09:45 +02:00
Code002Lover
935ee58aea
Merge pull request #17 from 002Hub/snyk-upgrade-cb7e9bd0cc8af5ca4b7b61a41e275cb1
[Snyk] Upgrade ws from 8.7.0 to 8.8.0
2022-07-03 00:51:22 -07:00
snyk-bot
e7f73928ab
fix: upgrade ws from 8.7.0 to 8.8.0
Snyk has created this PR to upgrade ws from 8.7.0 to 8.8.0.

See this package in npm:
https://www.npmjs.com/package/ws

See this project in Snyk:
https://app.snyk.io/org/mystikfluu/project/a0cb5db3-5314-4f12-be9d-493a8475edd5?utm_source=github&utm_medium=referral&page=upgrade-pr
2022-07-02 23:24:07 +00:00
Mystikfluu
5f150cf118 fix typo 2022-06-24 22:25:26 +02:00
Mystikfluu
ab2834010e remove @everyone, @here, check for replies 2022-06-24 22:24:57 +02:00
Mystikfluu
825ca879dd only remove old posts when new ones finished loading 2022-06-24 22:21:04 +02:00
Mystikfluu
7c9499ae31 add try catch for invalid replies 2022-06-24 22:16:56 +02:00
Mystikfluu
59f40b2983 remove old reply highlighting 2022-06-24 22:15:11 +02:00
Mystikfluu
acad8694c6 add reply showcase to posts 2022-06-24 22:13:09 +02:00
Mystikfluu
f256b471be update api documentation 2022-06-24 21:57:57 +02:00
Mystikfluu
30b7d0e7ad getotheruser returns public key 2022-06-24 21:46:50 +02:00
Mystikfluu
4c1aecf78e change reply text to a multiline string 2022-06-24 21:42:04 +02:00
Mystikfluu
4b22c554f3 setting the reply id when replying 2022-06-23 23:21:34 +02:00
Mystikfluu
3d81cab301 add reconstructing the original message in reply 2022-06-23 21:55:08 +02:00
Mystikfluu
ad30ba5ba8 escaping even more to finally get rid of this stupid error 2022-06-23 21:52:49 +02:00
Mystikfluu
8272eb1230 harsher escaping in order to fix xss 2022-06-23 21:48:14 +02:00
Mystikfluu
f37b9a5bd0 add escaping of ' 2022-06-23 21:28:21 +02:00
Mystikfluu
91a61f2e69 add filter to the reply button text argument 2022-06-23 21:25:34 +02:00
Mystikfluu
7e14d7da8d add length check to post endpoint 2022-06-23 21:11:24 +02:00
Code002Lover
b5f60d1acf
Merge pull request #13 from 002Hub/snyk-upgrade-2ff62ce934baebf153fd23932cc844d2
[Snyk] Upgrade ws from 8.6.0 to 8.7.0
2022-06-23 12:01:54 -07:00
snyk-bot
2ea78ae131
fix: upgrade ws from 8.6.0 to 8.7.0
Snyk has created this PR to upgrade ws from 8.6.0 to 8.7.0.

See this package in npm:
https://www.npmjs.com/package/ws

See this project in Snyk:
https://app.snyk.io/org/mystikfluu/project/a0cb5db3-5314-4f12-be9d-493a8475edd5?utm_source=github&utm_medium=referral&page=upgrade-pr
2022-06-22 23:37:48 +00:00
Mystikfluu
2666b0b075 add cache to getPost 2022-06-22 20:25:45 +02:00
Mystikfluu
f36b98f0d6 return the single post object on getPost
insstead of an array with the one post object in it
2022-06-22 20:24:10 +02:00
Mystikfluu
a2e0b69791 only send websocket update if the posted message is for everyone 2022-06-22 20:20:25 +02:00
Mystikfluu
dcd1013e38 add getPost api endpoint
for getting a post by its id
2022-06-22 20:16:33 +02:00
Mystikfluu
297d7c6eb0 add auto redirect to https 2022-06-22 09:30:00 +02:00
Mystikfluu
7c38022e0b fix bug when getting avatar 2022-06-22 09:25:48 +02:00
Mystikfluu
29dbd58831 add caching header to avatars 2022-06-22 09:23:12 +02:00
Mystikfluu
35df3913da make getotheruser browser accessible (CORS) 2022-06-21 23:32:26 +02:00
Mystikfluu
285c31d58b add a config for an api endpoint
to decide if `getotheruser` should be allowed to be called without a 
cookie
2022-06-21 23:21:58 +02:00
Mystikfluu
3cf533cc0a add individual url ratelimiting 2022-06-18 18:28:29 +02:00
Mystikfluu
2db1f8ec64 add check for completely invalid reply ids 2022-06-18 12:27:38 +02:00
Mystikfluu
32ba1a24a0 fix bug where not replying would crash the server 2022-06-18 12:25:24 +02:00
Mystikfluu
eda956b94c add a bit spacing and a newline to reply 2022-06-17 23:21:25 +02:00
Mystikfluu
20da099a4d removed markers 2022-06-17 23:19:05 +02:00
Mystikfluu
c8bc625541 Merge branch 'master' of https://github.com/Mystikfluu/authwebsite 2022-06-17 23:18:29 +02:00
Mystikfluu
225179b0dc add id-based replies 2022-06-17 23:18:01 +02:00
Mystikfluu
631eff5d1d add id-based replies 2022-06-17 23:16:03 +02:00
Mystikfluu
4a4a8416c5 fix bug where it wouldn't reload the posts 2022-06-17 22:58:04 +02:00
Mystikfluu
983cd54c2d added limit to getPosts 2022-06-17 22:53:58 +02:00
Mystikfluu
dc1149675b add wss_server value to reduce duplicated code 2022-06-17 22:13:50 +02:00
Mystikfluu
579ea0dd54 add ports to server config 2022-06-17 20:08:03 +02:00
Mystikfluu
03a5803786 add ssl privatekey/certificate to config 2022-06-17 20:00:50 +02:00
Mystikfluu
1e64231556 fix bug where it would log messages multiple times 2022-06-16 18:13:13 +02:00
Mystikfluu
1b0a8fddfc add warning message to not paste in dev console 2022-06-16 16:15:46 +02:00
Mystikfluu
58734901b1 remove unneeded debug log 2022-06-16 16:15:08 +02:00
Mystikfluu
b41d420ce1 add logout button to user page 2022-06-16 16:03:26 +02:00