523 commits

Author	SHA1	Message	Date
Matt Jankowski	5405bdd344	Remove unused E2EE messaging code (#31193)	2024-09-18 09:27:43 +00:00
Claire	d5cf27e667	Add global Regexp timeout (#31928)	2024-09-16 09:40:18 +00:00
Claire	a496aeabcb	Change form-action Content-Security-Policy directive to be more restrictive (#26897)	2024-09-12 13:24:19 +00:00
Eugen Rochko	24ef8255b3	Change design of embed modal in web UI (#31801)	2024-09-12 12:54:16 +00:00
Matt Jankowski	b530fc5267	Update rails to version 7.1.4 (#31563)	2024-09-06 15:22:35 +00:00
Claire	ee55d20fd5	Allow POST /oauth/revoke through CORS (#31743)	2024-09-04 10:46:28 +00:00
David Roetzel	388d5473e1	Refactor (ruby) redis configuration (#31694)	2024-09-02 14:19:55 +00:00
Matt Jankowski	85e8d1f285	Use rails configuration storage for paperclip path (#31651)	2024-08-30 09:46:09 +00:00
Matt Jankowski	6ec768668e	Remove nsa statsd integration (replaced by OpenTelemetry) (#30240)	2024-08-22 20:28:54 +00:00
Matt Jankowski	02df1b4e4a	Finish email allow/deny list naming migration (#30530)	2024-08-13 07:37:32 +00:00
Emelia Smith	a1f723a6a4	Add support for PKCE Extension in OmniAuth OIDC (#31131)	2024-08-12 14:32:52 +00:00
Claire	eaedd52def	Fix incorrect rate limit on PUT requests (#31356)	2024-08-09 14:48:05 +00:00
Adam Niedzielski	887e64efd4	Allow @ at the end of an URL (#31124)	2024-07-25 15:02:58 +00:00
Renaud Chaput	36592d10aa	Change Sidekiq readiness file to use an environment variable (#30988)	2024-07-10 12:57:25 +00:00
Renaud Chaput	7542a134d5	Add a file for Sidekiq to signal it is ready to process jobs (#30971)	2024-07-09 10:47:08 +00:00
Claire	8de5df225e	Change instructions to use bundle exec rails instead of rake (#30917)	2024-07-05 08:54:45 +00:00
Matt Jankowski	bc3737f0c3	Add detail about running version on vips error failure (#30858)	2024-06-27 16:27:42 +00:00
Claire	b15a3614dc	Stub Vips::Error when not using libvips (#30857)	2024-06-27 15:25:27 +00:00
Renaud Chaput	845fe1c693	Add the Interlingua locale (#30828)	2024-06-25 14:05:24 +00:00
Tim Rogers	f6e466058a	Added check for STATSD_ADDR setting to emit a warning and proceed rather than crashing if the address is unreachable (#30691)	2024-06-24 14:41:04 +00:00
Matt Jankowski	980034e2e1	Fix Style/NilLambda cop in paperclip initializer (#30695)	2024-06-14 09:50:50 +00:00
Matt Jankowski	0e1110c947	Use SECRET_KEY_BASE_DUMMY feature as placeholder during asset compilation (#30505)	2024-06-10 20:08:04 +00:00
Matt Jankowski	0cf91213c9	Opt in to remaining Rails 7.1 defaults (#30332) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2024-06-10 06:32:20 +00:00
Claire	80cd001e0a	Fix linting issue (#30595)	2024-06-07 14:32:29 +00:00
Isa S	773283ffb9	Make S3's retry limit a ENV variable (#23215)	2024-06-07 13:54:55 +00:00
Victor Dyotte	299ae9bf92	Add S3_KEY_PREFIX environment variable (#30181)	2024-06-07 12:29:30 +00:00
Emelia Smith	e02d23b549	Change read:me scope to profile scope (#30357) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2024-06-06 07:30:10 +00:00
Eugen Rochko	5f15a892fa	Add support for libvips in addition to ImageMagick (#30090) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2024-06-05 19:15:39 +00:00
Matt Jankowski	4d3748ac44	Fix rack attack match_type value typo in logging config (#30514)	2024-06-03 07:16:01 +00:00
Matt Jankowski	a22865a352	Add :email to filter parameter logging config (#30492)	2024-05-31 09:35:56 +00:00
Claire	73a78cc19d	Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483)	2024-05-30 12:56:18 +00:00
Claire	3fa0dd0b88	Merge pull request from GHSA-c2r5-cfqr-c553 ... * Add hardening monkey-patch to prevent IP spoofing on misconfigured installations * Remove rack-attack safelist	2024-05-30 14:24:29 +02:00
Claire	16249946ae	Merge pull request from GHSA-q3rg-xx5v-4mxh	2024-05-30 14:14:04 +02:00
Emelia Smith	d20a5c3ec9	Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2024-05-29 14:00:05 +00:00
Nick Schonning	87156f57b5	Enable Style/StringConcatenation (#30428)	2024-05-27 09:41:45 +00:00
Renaud Chaput	acc77c3836	Add instrumentation to the search services (#30350)	2024-05-24 13:13:23 +00:00
Renaud Chaput	9658d3e580	Use the job class as span name for Sidekiq root spans (#30353)	2024-05-20 08:01:04 +00:00
Claire	12472e7f40	Add emphasis on ActiveRecord Encryption configuration values being secret (#30340)	2024-05-17 09:28:40 +00:00
Matt Jankowski	1b6eb2c7f0	Enable YJIT when available (#30310)	2024-05-16 09:56:48 +00:00
Renaud Chaput	283a891e92	Allow to customise the OTEL service name prefix (#30322)	2024-05-16 09:28:10 +00:00
Matt Jankowski	6beead3867	Move simplecov config into rails_helper (#30302)	2024-05-15 09:33:36 +00:00
Nick Schonning	13fb54920b	Enable Style/IfUnlessModifier RuboCop (#30260)	2024-05-13 09:54:15 +00:00
Renaud Chaput	68b9fe824d	Add OpenTelemetry instrumentation (#30130) ... Co-authored-by: Juliano Costa <juliano.costa@datadoghq.com> Co-authored-by: Robb Kidd <robbkidd@honeycomb.io>	2024-05-10 12:40:20 +00:00
Matt Jankowski	040aaf3a48	Use default: ... assignment for Devise config, fixes Style/ClassVars cop (#30214)	2024-05-10 09:42:01 +00:00
Claire	33368e3e79	Change ActiveRecordEncryption variable to be more explicit (#30151)	2024-05-03 09:26:24 +00:00
Matt Jankowski	32ead51e5a	Add material design icons to admin/settings views (#27780) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2024-04-23 16:43:49 +00:00
Emelia Smith	049b159beb	Add read:me OAuth 2.0 scope, allowing more limited access to user data (#29087)	2024-04-23 11:47:00 +00:00
Tim Rogers	1ca6ff8ca5	Fixed crash when supplying FFMPEG_BINARY environment variable (#30022)	2024-04-22 09:00:24 +00:00
Matt Jankowski	c7384adc00	Fix Style/TrailingCommaInArguments cop (#30003)	2024-04-19 20:37:18 +00:00
Matt Jankowski	933189887b	Fix Style/StringLiterals cop (#30005)	2024-04-19 20:33:00 +00:00