Release 2.5.0 by stanley2058 · Pull Request #1835

Release 2.5.0 by stanley2058 · Pull Request #1835 · hackmdio/codimd

and others added 30 commits

November 21, 2020 20:41

Signed-off-by: Joachim Mathes <joachim_mathes@web.de>

Signed-off-by: Raccoon <raccoon@hackmd.io>

Currently CodiMD does not support limiting access of GitHub OAuth users
based on their organization membership. This is a very useful
functionality for teams that want to limit write access to their notes.

I've implemented a crude solution to this problem, which most probably
requires some adjusments to make it better. I'm not sure if this
implementation is kosher, but it definitely works on my deployment.

Open to suggestions on how I can improve it.

Signed-off-by: Jakub Sokołowski <jakub@status.im>

…section

Signed-off-by: Bruno Duyé <brunetton@brunetton.org>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Signed-off-by: Vincent Nadoll <vincent.nadoll@googlemail.com>

Signed-off-by: chenxuanzzy <chenxsuan019@gmail.com>

Signed-off-by: blademainer <blademainer@gmail.com>

Signed-off-by: blademainer <blademainer@gmail.com>

Signed-off-by: inductor <kela@inductor.me>

this fixes "error: 	uncaughtException: Unknown authenticationOk message typeMessage { name: 'authenticationOk', length: 23 }"

Signed-off-by: Anton Wolkov <7001904+phntom@users.noreply.github.com>

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

Update README.md to remove IE from supporting list

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

…e-crash

FIX: server crash when filename too long

Signed-off-by: Cédric Eyssette <cedric.eyssette@gmail.com>

Signed-off-by: Étienne Michon <etienne@scalingo.com>

Signed-off-by: Sean Young <assanges@icloud.com>

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

Try to simply update the npm packages without any additional changes.

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

npm found 160 vulnerabilities (6 low, 75 moderate, 63 high, 16 critical)
from the original dependencies. Using `npm audit fix` to update most of
the dependencies will eliminate 37 of the 160 vulnerabilities.

markmap-lib was excluded in this update because it actually contains
breaking changes.

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

Reference: e6d2b7a

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

Signed-off-by: Michael Wang <michael19920327@gmail.com>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

…-xss

fix: sanitize pdf url to prevent XSS on inline PDFs

Update both Traditional and Simplified Chinese locales

Signed-off-by: hcyuser <user@hcy.idv.tw>

Signed-off-by: hcyuser <user@hcy.idv.tw>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: stanley2058 <stanley2058@yahoo.com.tw>

Signed-off-by: stanley2058 <stanley2058@yahoo.com.tw>

Signed-off-by: stanley2058 <stanley2058@yahoo.com.tw>