2ee2b05d1c
Implement Content-Security-Policy ( #15567 )
...
* feat(security): implement CSP
* fix(csp): update helmet version to latest
* Squashed commit of the following:
commit cc6a35e61db07759c1f32716185543bc48bce760
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 17:27:50 2025 -0600
fix(CSP): more Amazon domains
commit 985b86c29af866b2df942c21217d99390a2c6e92
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 17:18:08 2025 -0600
fix(csp): more loggly allowance
commit 166bd315272f9c3a42652f3a026c27a88ed1a549
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 17:12:00 2025 -0600
fix(csp): data, inline, some refactoring
commit 1a0a6c1806a53d43a7199bb2ef72cff610e908be
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 17:05:44 2025 -0600
fix(CSP): override default script-src
commit 023d9886c835989da9c5901c168d66b572097dcf
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 16:56:24 2025 -0600
fix(CSP): unsafe-eval in default-src
commit f51f0a0c93b60dfec7ce02be0ecd2587fc882fe0
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 16:52:14 2025 -0600
fix(CSP): move trusted list to default-src
commit 83b2ba7688dea38abb651cf5c27482a7a3648374
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 16:38:05 2025 -0600
fix(CSP): explicit habitica/aws in script-src
commit d5ca5172d5ad2fd8cec9402d7d2c9452c6ece7a1
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 16:31:38 2025 -0600
fix(CSP): need escaped single quotes
commit c677a1ffeff5793b6da228924e68d2c2e47794b2
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 16:27:46 2025 -0600
fix(CSP): unsafe-eval
commit 6ef35c3f7281c8426d9c333686be6bb65f00b3a8
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 16:15:07 2025 -0600
fix(CSP): might need to skip entirely in dev but try no 'self'
commit 5759fb37d82fa61b474f01e9ce5e2dc461f6ceba
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 12 15:51:26 2025 -0600
fix(csp): permit AWS in default-src
commit 9f238abf9373bc29715657b945b2247ef23c9224
Author: Kalista Payne <kalista@habitica.com >
Date: Fri Dec 5 17:22:25 2025 -0600
fix(csp): update helmet version to latest
commit 9462e90f4f3058f4014137b3178b9751c5280e97
Author: Kalista Payne <kalista@habitica.com >
Date: Tue Nov 25 09:27:05 2025 -0600
feat(security): implement CSP
commit 72539f9ba3kalista@habitica.com >
Date: Wed Dec 10 14:16:53 2025 -0600
5.42.2
commit dabd466719kalista@habitica.com >
Date: Wed Dec 10 14:16:48 2025 -0600
Revert "Chat optimization (#15545 )"
This reverts commit 2917955ef08bf2304330kalista@habitica.com >
Date: Wed Dec 10 14:15:48 2025 -0600
chore(event): G1G1 date tweaks
commit 6937dc4e4ekalista@habitica.com >
Date: Mon Dec 8 16:37:04 2025 -0600
fix(subscription): couple more layout tweaks
* fix(csp): move unsafe-eval to default? ig?
* Revert "fix(csp): move unsafe-eval to default? ig?"
This reverts commit 90476cbf6c59132024d4fbaeceb7cdb19a876303.
* fix(security): no unsafe! yay!
* fix(packages): remove webpack
* fix(lint): object destructuring
* fix(csp): remove Vue-Fragment
* wip(i18n): load Moment locale from cache
* fix(gulp): remove unneeded cache task
* fix(i18n): add Moment weekday abbrevs to translations
* fix(lint): destructuring
...why is this happening here and not develop lol
* fix(csp): add amplitude to whitelist
---------
Co-authored-by: Phillip Thelen <phillip@thelen.space >
2026-04-02 15:19:35 -05:00
ea17b2e9c7
Rework how strings are localized ( #15589 )
...
* replace lodash template usage with micromustache
* remove function brackets from translations
* add newline
* remove old test
* split core translations from content translations
* fix directory not existing
* fix lint
2026-01-21 14:34:25 -06:00
1892d6288a
Clean up translations ( #14985 )
2023-11-03 15:54:48 -05:00
c71f0b3fda
Squashed commit of the following:
...
commit 6d74f87db332fd28c7522cabc0f96a390d36e64f
Author: SabreCat <sabe@habitica.com >
Date: Fri Aug 18 20:04:52 2023 -0500
fix(i18n): default to EN for empties
2023-08-22 12:23:02 -05:00
e5f1f3b279
Improve i18n caching ( #12030 )
...
* fix indentation
* wip: cache i18n responses
* cache i18n browser script to disk
* typos
* misc fixes
2020-05-05 20:31:33 +02:00
e92ff9737a
Automatically Logout Banned Users ( #12037 )
...
* wip
* logout banned users, fix and refactor language library and middleware
* req.locals -> res.locals
* fix tests
* redirect to login page
2020-04-02 21:46:01 +02:00
04a9c97393
Fix Typos ( #11644 )
...
* Fix Typos
* Fix More Typos
2019-12-23 17:52:55 +01:00
8bae0223bb
fix linting for server (except for length of apidoc)
2019-10-10 20:11:50 +02:00
621787915c
start upgrading eslint
2019-10-08 16:57:10 +02:00
c4f44fce4c
Add missing translations from transifex ( #11367 )
...
* Add missing translations from transifex
* update i18n tests
* fix lint error
2019-09-29 18:46:01 +02:00
7aa2fac14a
Localize time for due dates and chat messages ( #10555 )
...
* localize time for pt_BR and zh
* add zh_TW to moment langs mapping
2018-08-03 11:57:43 +02:00
81b7eeeb71
Common reorg ( #8025 )
...
* Re-organize common folder
* fix: Correct paths in tests
* fix: move new content to proper folder
* chore: Move audio folder to assets
* Move sprites to sprites assets directory
* Move css sprites to assets directory
* Split out readmes for common code and sprites
* Move images to assets directory
* Move destinatin of shared browserified file
* remove unused file
* move compiled js to client-old
* Fix karma tests
* fix: Correct paths for sprites
2016-09-16 17:18:07 +02:00
4b6af73a1b
add support for brazilian portuguese ( #7910 )
2016-09-04 20:00:49 +02:00
60f34dafb0
Deprecate API v2 (was Revert "Revert "Deprecate API v2"") ( #7802 )
...
* Revert "Revert "Deprecate API v2""
* fix path in shops controller
2016-08-01 22:36:10 +02:00
590adb3438
Revert "Deprecate API v2" ( #7801 )
2016-07-17 18:15:25 +02:00
45c31a2bcf
Deprecate API v2 ( #7761 )
...
* deprecate api-v2
* remove v2 test helpers
* remove unused string
2016-07-16 19:56:18 +02:00
Kalista Payne