2ee2b05d1c
* feat(security): implement CSP * fix(csp): update helmet version to latest * Squashed commit of the following: commit cc6a35e61db07759c1f32716185543bc48bce760 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 17:27:50 2025 -0600 fix(CSP): more Amazon domains commit 985b86c29af866b2df942c21217d99390a2c6e92 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 17:18:08 2025 -0600 fix(csp): more loggly allowance commit 166bd315272f9c3a42652f3a026c27a88ed1a549 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 17:12:00 2025 -0600 fix(csp): data, inline, some refactoring commit 1a0a6c1806a53d43a7199bb2ef72cff610e908be Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 17:05:44 2025 -0600 fix(CSP): override default script-src commit 023d9886c835989da9c5901c168d66b572097dcf Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 16:56:24 2025 -0600 fix(CSP): unsafe-eval in default-src commit f51f0a0c93b60dfec7ce02be0ecd2587fc882fe0 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 16:52:14 2025 -0600 fix(CSP): move trusted list to default-src commit 83b2ba7688dea38abb651cf5c27482a7a3648374 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 16:38:05 2025 -0600 fix(CSP): explicit habitica/aws in script-src commit d5ca5172d5ad2fd8cec9402d7d2c9452c6ece7a1 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 16:31:38 2025 -0600 fix(CSP): need escaped single quotes commit c677a1ffeff5793b6da228924e68d2c2e47794b2 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 16:27:46 2025 -0600 fix(CSP): unsafe-eval commit 6ef35c3f7281c8426d9c333686be6bb65f00b3a8 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 16:15:07 2025 -0600 fix(CSP): might need to skip entirely in dev but try no 'self' commit 5759fb37d82fa61b474f01e9ce5e2dc461f6ceba Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 12 15:51:26 2025 -0600 fix(csp): permit AWS in default-src commit 9f238abf9373bc29715657b945b2247ef23c9224 Author: Kalista Payne <kalista@habitica.com> Date: Fri Dec 5 17:22:25 2025 -0600 fix(csp): update helmet version to latest commit 9462e90f4f3058f4014137b3178b9751c5280e97 Author: Kalista Payne <kalista@habitica.com> Date: Tue Nov 25 09:27:05 2025 -0600 feat(security): implement CSP commit72539f9ba3Author: Kalista Payne <kalista@habitica.com> Date: Wed Dec 10 14:16:53 2025 -0600 5.42.2 commitdabd466719Author: Kalista Payne <kalista@habitica.com> Date: Wed Dec 10 14:16:48 2025 -0600 Revert "Chat optimization (#15545)" This reverts commit2917955ef0. commit8bf2304330Author: Kalista Payne <kalista@habitica.com> Date: Wed Dec 10 14:15:48 2025 -0600 chore(event): G1G1 date tweaks commit6937dc4e4eAuthor: Kalista Payne <kalista@habitica.com> Date: Mon Dec 8 16:37:04 2025 -0600 fix(subscription): couple more layout tweaks * fix(csp): move unsafe-eval to default? ig? * Revert "fix(csp): move unsafe-eval to default? ig?" This reverts commit 90476cbf6c59132024d4fbaeceb7cdb19a876303. * fix(security): no unsafe! yay! * fix(packages): remove webpack * fix(lint): object destructuring * fix(csp): remove Vue-Fragment * wip(i18n): load Moment locale from cache * fix(gulp): remove unneeded cache task * fix(i18n): add Moment weekday abbrevs to translations * fix(lint): destructuring ...why is this happening here and not develop lol * fix(csp): add amplitude to whitelist --------- Co-authored-by: Phillip Thelen <phillip@thelen.space>
65 lines
1.9 KiB
JSON
65 lines
1.9 KiB
JSON
{
|
|
"name": "habitica-client",
|
|
"version": "1.0.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"serve": "vite",
|
|
"serve:docker": "npx vite --host 0.0.0.0",
|
|
"build": "vite build",
|
|
"preview": "vite preview",
|
|
"test:unit": "vitest run",
|
|
"test:unit:watch": "vitest watch",
|
|
"lint": "eslint --ext .js,.vue --ignore-path ../../.gitignore --fix .",
|
|
"lint-no-fix": "eslint --ext .js,.vue --no-fix src",
|
|
"postinstall": "node ./scripts/npm-postinstall.js"
|
|
},
|
|
"dependencies": {
|
|
"@froxz/vite-plugin-s3": "^1.6.0",
|
|
"@vitejs/plugin-vue2": "^2.3.3",
|
|
"@vue/test-utils": "1.0.0-beta.29",
|
|
"amplitude-js": "^8.21.3",
|
|
"assert": "^2.1.0",
|
|
"autoprefixer": "^10.4.20",
|
|
"axios": "^0.28.0",
|
|
"axios-progress-bar": "^1.2.0",
|
|
"bootstrap": "^4.6.0",
|
|
"bootstrap-vue": "^2.23.1",
|
|
"eslint": "7.32.0",
|
|
"eslint-config-habitrpg": "6.2.0",
|
|
"eslint-plugin-mocha": "5.3.0",
|
|
"eslint-plugin-vue": "7.20.0",
|
|
"habitica-markdown": "^4.0.0",
|
|
"hellojs": "^1.20.0",
|
|
"intro.js": "^7.2.0",
|
|
"jquery": "^3.7.1",
|
|
"lodash": "^4.17.21",
|
|
"markdown-it": "^14.0.0",
|
|
"micromustache": "^8.0.3",
|
|
"moment": "^2.29.4",
|
|
"nconf": "^0.12.1",
|
|
"sass": "^1.63.4",
|
|
"sinon": "^17.0.1",
|
|
"stopword": "^2.0.8",
|
|
"timers-browserify": "^2.0.12",
|
|
"uuid": "^9.0.1",
|
|
"validator": "^13.9.0",
|
|
"vite": "^6.3.6",
|
|
"vite-plugin-compression2": "^1.3.3",
|
|
"vue": "^2.7.10",
|
|
"vue-mugen-scroll": "^0.2.6",
|
|
"vue-router": "^3.6.5",
|
|
"vuedraggable": "^2.24.3",
|
|
"vuejs-datepicker": "git://github.com/habitrpg/vuejs-datepicker.git#153d339e4dbebb73733658aeda1d5b7fcc55b0a0"
|
|
},
|
|
"devDependencies": {
|
|
"@babel/plugin-proposal-optional-chaining": "^7.21.0",
|
|
"@vitest/browser": "^3.0.5",
|
|
"babel-plugin-lodash": "^3.3.4",
|
|
"inspectpack": "^4.7.1",
|
|
"jsdom": "^26.0.0",
|
|
"mocha": "^11.1.0",
|
|
"playwright": "^1.50.1",
|
|
"vitest": "^3.0.5"
|
|
}
|
|
}
|