404 Commits

Author SHA1 Message Date
Mystikfluu
65ca2838ee add bio back to user page 2022-07-09 15:54:22 +02:00
Mystikfluu
6e1bd58c87 change settings icon size to match text size 2022-07-09 15:52:42 +02:00
Mystikfluu
6eae26ef39 optimize images 2022-07-09 15:51:25 +02:00
Mystikfluu
8b2c3acb36 align settings icon right 2022-07-09 15:44:18 +02:00
Mystikfluu
57d094f74e add settings
remove settings buttons from user page
2022-07-09 15:37:34 +02:00
Mystikfluu
508e3401a0 added some function documentation 2022-07-07 14:44:08 +02:00
Mystikfluu
9fe43ae497 removed 2 arguments for reply function
this will add stronger protection against xss attacks
2022-07-05 14:27:04 +02:00
Mystikfluu
7b288d964d add call to changePW function 2022-07-04 00:47:36 +02:00
Mystikfluu
1f5fed8c98 add favicon 2022-07-04 00:15:40 +02:00
Mystikfluu
ac0a2545ac add comments to root variables 2022-07-03 23:46:23 +02:00
Mystikfluu
ff43510f2f change regex once again 2022-07-03 23:26:08 +02:00
Mystikfluu
9f5b3d1aca change escape pattern to regex 2022-07-03 21:49:29 +02:00
Mystikfluu
7e9849c671 remove overlapping characters in unescape charsets 2022-07-03 21:46:27 +02:00
Mystikfluu
7e309850ef add another escaping function for another characterset 2022-07-03 21:34:22 +02:00
Mystikfluu
0f49d4f023 more filtering 2022-07-03 12:16:03 +02:00
Mystikfluu
c55bf8fb8c update escape regex 2022-07-03 12:12:30 +02:00
Mystikfluu
ad0d9b1215 add x-xss-protection header 2022-07-03 11:16:55 +02:00
Mystikfluu
f29ab9c96f add escaping for ` and \ 2022-07-03 11:13:16 +02:00
Mystikfluu
c107a1a1f0 add security information 2022-07-03 11:09:45 +02:00
Code002Lover
935ee58aea
Merge pull request #17 from 002Hub/snyk-upgrade-cb7e9bd0cc8af5ca4b7b61a41e275cb1
[Snyk] Upgrade ws from 8.7.0 to 8.8.0
2022-07-03 00:51:22 -07:00
snyk-bot
e7f73928ab
fix: upgrade ws from 8.7.0 to 8.8.0
Snyk has created this PR to upgrade ws from 8.7.0 to 8.8.0.

See this package in npm:
https://www.npmjs.com/package/ws

See this project in Snyk:
https://app.snyk.io/org/mystikfluu/project/a0cb5db3-5314-4f12-be9d-493a8475edd5?utm_source=github&utm_medium=referral&page=upgrade-pr
2022-07-02 23:24:07 +00:00
Mystikfluu
5f150cf118 fix typo 2022-06-24 22:25:26 +02:00
Mystikfluu
ab2834010e remove @everyone, @here, check for replies 2022-06-24 22:24:57 +02:00
Mystikfluu
825ca879dd only remove old posts when new ones finished loading 2022-06-24 22:21:04 +02:00
Mystikfluu
7c9499ae31 add try catch for invalid replies 2022-06-24 22:16:56 +02:00
Mystikfluu
59f40b2983 remove old reply highlighting 2022-06-24 22:15:11 +02:00
Mystikfluu
acad8694c6 add reply showcase to posts 2022-06-24 22:13:09 +02:00
Mystikfluu
f256b471be update api documentation 2022-06-24 21:57:57 +02:00
Mystikfluu
30b7d0e7ad getotheruser returns public key 2022-06-24 21:46:50 +02:00
Mystikfluu
4c1aecf78e change reply text to a multiline string 2022-06-24 21:42:04 +02:00
Mystikfluu
4b22c554f3 setting the reply id when replying 2022-06-23 23:21:34 +02:00
Mystikfluu
3d81cab301 add reconstructing the original message in reply 2022-06-23 21:55:08 +02:00
Mystikfluu
ad30ba5ba8 escaping even more to finally get rid of this stupid error 2022-06-23 21:52:49 +02:00
Mystikfluu
8272eb1230 harsher escaping in order to fix xss 2022-06-23 21:48:14 +02:00
Mystikfluu
f37b9a5bd0 add escaping of ' 2022-06-23 21:28:21 +02:00
Mystikfluu
91a61f2e69 add filter to the reply button text argument 2022-06-23 21:25:34 +02:00
Mystikfluu
7e14d7da8d add length check to post endpoint 2022-06-23 21:11:24 +02:00
Code002Lover
b5f60d1acf
Merge pull request #13 from 002Hub/snyk-upgrade-2ff62ce934baebf153fd23932cc844d2
[Snyk] Upgrade ws from 8.6.0 to 8.7.0
2022-06-23 12:01:54 -07:00
snyk-bot
2ea78ae131
fix: upgrade ws from 8.6.0 to 8.7.0
Snyk has created this PR to upgrade ws from 8.6.0 to 8.7.0.

See this package in npm:
https://www.npmjs.com/package/ws

See this project in Snyk:
https://app.snyk.io/org/mystikfluu/project/a0cb5db3-5314-4f12-be9d-493a8475edd5?utm_source=github&utm_medium=referral&page=upgrade-pr
2022-06-22 23:37:48 +00:00
Mystikfluu
2666b0b075 add cache to getPost 2022-06-22 20:25:45 +02:00
Mystikfluu
f36b98f0d6 return the single post object on getPost
insstead of an array with the one post object in it
2022-06-22 20:24:10 +02:00
Mystikfluu
a2e0b69791 only send websocket update if the posted message is for everyone 2022-06-22 20:20:25 +02:00
Mystikfluu
dcd1013e38 add getPost api endpoint
for getting a post by its id
2022-06-22 20:16:33 +02:00
Mystikfluu
297d7c6eb0 add auto redirect to https 2022-06-22 09:30:00 +02:00
Mystikfluu
7c38022e0b fix bug when getting avatar 2022-06-22 09:25:48 +02:00
Mystikfluu
29dbd58831 add caching header to avatars 2022-06-22 09:23:12 +02:00
Mystikfluu
35df3913da make getotheruser browser accessible (CORS) 2022-06-21 23:32:26 +02:00
Mystikfluu
285c31d58b add a config for an api endpoint
to decide if `getotheruser` should be allowed to be called without a 
cookie
2022-06-21 23:21:58 +02:00
Mystikfluu
3cf533cc0a add individual url ratelimiting 2022-06-18 18:28:29 +02:00
Mystikfluu
2db1f8ec64 add check for completely invalid reply ids 2022-06-18 12:27:38 +02:00