Daniel
3a762a50ed
Implement path traversal safeguards for image uploads as well - consolidate safeguards in utils.js
2021-07-13 16:09:50 +00:00
95312f9c09
fix code styling
2021-07-13 00:11:23 +02:00
Daniel
c223589add
Security improvements: protect from directory traversal and iFrame content injection
2021-07-12 17:14:43 +00:00
4f4c5fe87e
escape the query on loadwhiteboard and getReadOnlyWid
2021-06-22 23:10:23 +02:00
334f8c8f38
rename vars
2021-06-17 08:35:04 +02:00
41932a3dce
fix typo
2021-05-26 14:22:46 +02:00
ff8bde2289
add option to define an other images file location
2021-05-20 17:25:20 +02:00
03c7e0c670
store all whiteboards in different db files so we use less memory
2021-05-20 17:15:03 +02:00
486be88731
change expose static folder order
2021-05-19 13:46:05 +02:00
5dbb0ab532
fix format of code
2021-05-14 13:49:44 +02:00
369f104bd7
fix style format
2021-05-11 11:33:02 +02:00
715ec149d7
update readme and format
2021-05-11 11:26:20 +02:00
Thijs Kroesbergen
f70e03a691
Added support for sticky notes
2021-03-11 15:05:38 +01:00
1c23b8fc6a
add function to save the whiteboard to a file
2021-03-07 16:54:54 +01:00
6dfe2e6e9e
Add API Doc
2021-03-01 16:03:45 +01:00
f9dd886e8e
add API functions to control the board through REST
2021-03-01 14:15:01 +01:00
cf3975107e
run prettier on server-backend.js
2021-02-11 14:39:56 +01:00
Kirill Maltsev
4e60e4f163
Add "start" command
...
So the app could be easily deployed to Heroku
2020-12-08 16:33:16 +02:00
Florent Chehab
522d1b72a7
feat(backend): sync whiteboard info for readonly and non-readonly whiteboards
2020-06-01 21:54:55 +02:00
Florent Chehab
b37c296542
fix(backend): don't console log config when running jest
2020-06-01 21:54:55 +02:00
Florent Chehab
3844d08bdd
refacto(backend): new backend WhiteboardInfoBackendService
...
* WhiteboardInfo set private inside this module
2020-06-01 21:54:54 +02:00
Florent Chehab
99e5bb0d98
fix(backend): readonly is readonly
2020-06-01 21:54:54 +02:00
Florent Chehab
2c2c104bbf
feat: restored image upload
...
* only use readonly id when storing image to prevent leaking of the editable id
2020-06-01 21:54:54 +02:00
Florent Chehab
14e1ee5391
feat(backend): main handling of readonly sharing
...
* Saving works as before
* Don't broadcast drawevents from readonly whiteboard (prevents malicious use)
2020-06-01 21:54:54 +02:00
Florent Chehab
0240171d0e
refacto(backend): real private read-only fields
...
* Just like in the backend thanks to node 12
2020-06-01 21:54:54 +02:00
a33973eeb6
add option to change the background image grid
2020-05-22 15:45:11 +02:00
4134c4130a
add option to draw grid to image on download
2020-05-22 15:24:11 +02:00
22126840e9
fix uploading images to the whiteboard
2020-05-22 14:43:10 +02:00
d804f56152
add option to download images in different formats
2020-05-20 14:24:33 +02:00
Florent Chehab
00f7b10ac9
chore: added doc on new classes
2020-05-11 17:54:41 +02:00
Florent Chehab
f9804e750f
feat(config): cleaned & doc
2020-05-11 17:33:47 +02:00
Florent Chehab
dbc7e8c2f9
feat(config): show / hide info on load
2020-05-11 17:32:57 +02:00
Florent Chehab
efaa4b795c
refacto(backend): regrouped config related handling
2020-05-11 17:32:56 +02:00
Florent Chehab
ca47c41c69
feat: throttling configuration
2020-05-11 17:32:56 +02:00
Florent Chehab
b0337d9f5b
feat: dynamic frontend configuration
2020-05-11 17:32:38 +02:00
Florent Chehab
9fda0a2c4b
fix(back): prevent crash
2020-05-11 17:32:38 +02:00
Florent Chehab
0b1d1943ec
feat(backend): new config handling based on file
...
* Config should be provided as Yaml file now
* Other way to provide configuration are now deprectaed
* The config format is checked agaist a schema with the json-schema standard
* Tests are are added to the project (in the backend for config parsing)
2020-05-11 17:32:37 +02:00
Florent Chehab
4476ce3284
refacto: handling of smallest screen size as a whiteboard info
...
* Also started a bit of config handling cleaning
2020-05-11 17:32:37 +02:00
Florent Chehab
685caffd43
feat: 'new websocket' to share whiteboard info
...
* share whiteboard info only on change and at specific frequency
* front update to track nb user connected
2020-05-10 15:34:19 +02:00
Florent Chehab
d4a30ea3ed
style: formatted entire repo
2020-05-09 15:45:17 +02:00
e3cec1a194
remove volatile because problems even on local connections (not drawn lines)
2020-05-09 15:06:21 +02:00
Florent Chehab
6f68f9f21f
feat(backend): no compression & volatile
...
* Should enable for more performances when there are a lot of users
* Messages are pretty small so compression might not be needed
* Volatile reduces the number of exchanges between the server and the clients
2020-05-06 21:55:13 +02:00
30acafc1ec
catch error on smallestScreenResolutions not set
2020-05-06 17:27:07 +02:00
Florent Chehab
0ef46fea2f
fix(start): change the way the app is launched
...
* And updated README accordingly
2020-04-20 11:03:07 +02:00
Florent Chehab
033d01e1cf
fixup! refacto(scipts): reorganized & support dev server
2020-04-20 10:34:41 +02:00
Florent Chehab
ffff0899cc
docs: updated README
...
* and small documentation changes
2020-04-19 18:14:44 +02:00
Florent Chehab
d5cb969ee5
fix: undefined vars / resizable / upload
...
* was brokend by refacto
2020-04-19 17:57:54 +02:00
Florent Chehab
6c5016003a
refacto(Dockerfile): optimized with new setup
2020-04-19 17:18:38 +02:00
Florent Chehab
7d1db66a26
refacto(scipts): reorganized & support dev server
2020-04-19 16:42:32 +02:00
Florent Chehab
1534edba64
refacto(scripts): added dir
2020-04-19 16:35:10 +02:00
