Commit graph

1080 commits

Author SHA1 Message Date
Jeldrik Hanschke
480ceb5e08 provide Content-Security-Policy by meta tag
Having both a Content-Security-Policy (CSP) in meta tag and per header
works fine together. They are merged and the strongest one is applied.
It makes Croodle safer for all users even if the hoster does not apply CSP
for some reason (e.g. they can't set custom headers).

It's still a good idea to recommend using a CSP header cause that ones
are applied earlier - even so this shouldn't be a problem cause we ensure
that CSP meta tag is present before any other link, style or script element.
2019-02-23 23:56:49 +01:00
Jeldrik Hanschke
5381c87d73 downgrade Chart.js to fix CSP violations
https://github.com/chartjs/Chart.js/issues/5208
2019-02-23 23:56:49 +01:00
Jeldrik Hanschke
ba57e915f8 X-Content-Security-Policy and X-Webkit-CSP are not needed anymore
All major browsers support standard by now. Only IE11 has limited support
for X-Content-Security-Policy. But that support is limited to sandbox
directive, which isn't used by Croodle.
2019-02-23 23:56:49 +01:00
Jeldrik Hanschke
de52f7afd4 CSP referrer is deprecated, Referrer-Policy header should be used instead 2019-02-23 23:56:49 +01:00
Jeldrik Hanschke
dcb70f74f8 deps: uprade ember-cli-content-security-policy 2019-02-23 23:56:49 +01:00
Jeldrik Hanschke
06a92b947f refactor: replace bootstrap-datepicker by ember-power-calendar
Also renders two linked calendars if there is enough space.

Closes #143
2019-01-20 17:08:16 +01:00
Jeldrik Hanschke
5b34199f41 refactor: drop jQuery from tests except for jQuery plugin bootstrap-datepicker 2019-01-18 20:42:21 +01:00
Jeldrik Hanschke
2def069142 deps: only include required component of Ember Boostrap in build
This reduced the vendor.js size from 1.54 MB (395.39 KB gzipped)
to 1.48 MB (385.52 KB gzipped).
2019-01-03 07:16:25 +01:00
Jeldrik Hanschke
dad9fbddf0 deps: drop bower 2019-01-03 07:09:36 +01:00
Jeldrik Hanschke
96f1990542 fix: label should reflect validation state of all times of a day 2019-01-03 00:46:36 +01:00
Jeldrik Hanschke
cf9efe993b refactor: replace LESS by SASS 2019-01-02 23:48:48 +01:00
Jeldrik Hanschke
af4fe70f72 refactor: drop ember-simple-select 2019-01-02 23:48:36 +01:00
Jeldrik Hanschke
3091f9ac5e deps: upgrade ember-page-title
Current page title is put before generic one, e.g. "Create a poll | Croodle"
instead of "Croodle | Create a poll". This was an upstream change with
could reasoning. Have a look here:
https://github.com/adopted-ember-addons/ember-page-title/releases/tag/5.0.0

Version 4.0.0 required the `{{head-layout}}` component in application's
template:
https://github.com/adopted-ember-addons/ember-page-title/releases/tag/4.0.0
2018-12-31 14:12:21 +01:00
Jeldrik Hanschke
3330151156 refactor: drop unnecessary dynamic component usage 2018-12-31 12:09:23 +01:00
Jeldrik Hanschke
174b6d493c refactor create/settings to avoid observer
This also fix a bug if user creates more than one croodle without reloading window
in between. In that case a data fragment is reused which throws.

It's also the first step in dropping {{simple-select}} which is very outdated.
2018-12-31 12:09:17 +01:00
Jeldrik Hanschke
f938f2ad93 update README
[skip ci]
2018-12-31 10:17:03 +01:00
Jeldrik Hanschke
bcd4bc7ac6 upgrade to ember 3.4 2018-12-31 10:17:03 +01:00
Jeldrik Hanschke
b7e63ed83b refactor: replace ember-object-at-helper by ember-composable-helpers 2018-12-30 10:06:49 +01:00
Jeldrik Hanschke
71d303174e refactor: drop ember-array-computed-macros 2018-12-30 01:04:33 +01:00
jelhan
b8af8ea121
Merge pull request #148 from jelhan/fix-translation-of-validation-errors
fix: validation errors should be translated
2018-12-29 22:09:22 +01:00
Jeldrik Hanschke
8f591e2978 refactor: use version provided in config in favor of ember-cli-build-info 2018-12-29 22:09:14 +01:00
Jeldrik Hanschke
b8d4087aaf fix: validation errors should be translated
https://github.com/jasonmit/ember-i18n-cp-validations/tree/v3.1.0#breaking-changes-between-2x-and-3x-for-ember-i18n-cp-validations
2018-12-29 21:23:29 +01:00
Jeldrik Hanschke
933a3bc6e8 reset deprecation workflow 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
11265cb82d deps: upgrade ember to 2.18 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
0749668435 deps: upgrade ember-native-dom-helpers 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
5cea1d48b6 deps: upgrade ember-awesome-macros 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
8f90414f0c deps: upgrade ember-cli-mirage 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
a6dee88dc1 deps: upgrade ember-moment 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
792d2089bb deps: remove unused dependencies 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
97e447bbe7 deps: yarn upgrade 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
39a5c7d94c deps: upgrade array-helper, math-helpers, truth-helpers and transition-helper 2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
78ddf381c1 deps: upgrade ember-cli-bootstrap-datepicker
Drops another bower dependency. 🎉
2018-12-29 20:23:19 +01:00
Jeldrik Hanschke
6592102837 deps: upgrade ember-cp-validations to 3.x 2018-12-29 20:23:19 +01:00
jelhan
9c4bd9e669
upgrade ember-bootstrap and ember-bootstrap-cp-validations to latest versions (#146)
Ember Bootstrap has changed a lot since the very outdated pre 1.0 release
which was used here. Changes are mostly about using composable components
and closure actions.

Also replaces PhantomJS with Chrome in CI cause PhantomJS is also very
outdated and causing test failure not related to any real world issues.
Ember CLI has replaced PhantomJS with Chrome in v2.15.1, which is the
upfollowing minor release to the version currently used.
2018-10-28 22:54:14 +01:00
jelhan
acd2ec24ae upgrade ember-cli-build-info to fix deprecation warning
Fixes deprecation warning:
  DEPRECATION: Ember CLI addons manage their own module transpilation during
  the `treeForAddon` processing. `ember-cli-build-info` has overridden the
  `this.options.babel` options which conflicts with the addons ability to
  transpile its `addon/` files properly. Falling back to default babel
  configuration options.
2017-11-02 11:50:30 +01:00
jelhan
d0db209821 Released v0.5.6 2017-08-31 16:28:45 +02:00
jelhan
2ac3bfacdb Fix: do not link assets with absolut paths to support serving from subdirectory
Bug introduced by 632c36eb12
2017-08-31 16:12:45 +02:00
jelhan
f41d8ebea0 Released v0.5.5 2017-08-31 14:43:46 +02:00
jelhan
f851ca3e69 run test against safari latest in SauceLab 2017-08-31 14:27:50 +02:00
jelhan
fe826666ba Fixes "TypeError: attempted to assign to readonly property" in Safari 10.1 2017-08-31 14:24:49 +02:00
jelhan
ee8c64e031 show expiration date and warn if poll will expire in next days (#140)
Closes #121
2017-08-26 02:14:09 +02:00
jelhan
ee6728314a replace jstimezonedetect by moment.tz.guess() (#139)
Closes #118
2017-08-26 01:54:41 +02:00
jelhan
70ba444b39 ensure that only non dev api dependencies are included in build (#138) 2017-08-26 01:29:57 +02:00
jelhan
565b426b03 tests/dummyData is not used anymore since 87ad9b0506 2017-08-13 20:43:33 +02:00
jelhan
fc342b6c05 Fix: poll creation time is not displayed as formatted
Also fixes #122
2017-08-13 20:32:23 +02:00
jelhan
e7555f873f do not hardcode another DATA_DIR if php built-in webserver is used 2017-08-13 20:22:01 +02:00
jelhan
7979b4d43d update codeception/phpbuiltinserver 2017-08-12 18:36:04 +02:00
jelhan
1a7d42af4f update api dependencies 2017-08-12 18:34:38 +02:00
jelhan
2078b2bcc1 flow/jsonpath is only required by tests 2017-08-12 18:32:47 +02:00
jelhan
e3286dfebf dependencies must support php 5.6 2017-08-12 18:30:04 +02:00