Jonne Haß
b8128d356b
Merge branch 'hotfix/0.0.2.4' into develop
...
Conflicts:
Changelog.md
app/views/people/show.html.haml
config/defaults.yml
spec/helpers/layout_helper_spec.rb
2013-02-01 22:24:37 +01:00
Jonne Haß
7134513b28
Fix XSS vulnerabilities caused by not escaping a users name fields when loading it from JSON. #3948
...
From a quick look at the for us available databases this was not actually used in the wild.
2013-02-01 22:20:31 +01:00
Jonne Haß
cba76060bf
ensure our locales are at the bottom of the load path, fixes #2614
2013-01-31 16:41:09 +01:00
Ruxton
40fdf3819b
Added DailyMotion & Twitter oEmbeds
2013-01-25 22:31:44 +08:00
Ruxton
89042078ca
Oembed Update - Added instagram, better display for rich/photo
2013-01-22 22:37:36 +08:00
Jonne Haß
bf27cca03a
Do not generate paths like /a/b/c/config/boot.rb/../../Gemfile to require and open things, create a proper path instead.
2012-11-30 18:16:56 +01:00
Dennis Schubert
ba5b779cd0
Make Devise remember the session for 2 weeks. Fix #3472
2012-11-06 22:24:57 +01:00
Jonne Haß
5a70311fe7
update and fix services
2012-10-25 17:54:18 +02:00
Jonne Haß
5c7a9c1ce6
Release cleanup, closes #3620
...
* remove un-/underused gems
* remove their associated files
* remove some parallel_tests leftovers
2012-09-30 22:26:23 +02:00
Jonne Haß
234b76a936
properly integrate asset_sync
2012-09-26 20:23:45 +02:00
Jonne Haß
2a4db54db9
New configuration system
...
* Throw away old system
* Add new system
* Add new example files
* Replace all calls
* add the most important docs
* Add Specs
* rename disable_ssl_requirement to require_ssl
* cloudfiles isn't used/called in our code
* since community_spotlight.list is only used as enable flag replace it with such one and remove all legacy and irelevant codepaths around it
* die if session secret is unset and on heroku
* First basic infrastructure for version information
2012-09-26 20:19:37 +02:00
Jonne Haß
6c1a1ec6d2
it's enviroNment
2012-09-15 18:52:12 +02:00
Jonne Haß
48dcccf7b3
Unify redis initialization
...
REDISTOGO_URL is now deprecated in favor of REDIS_URL which is supported by the redis gem too.
2012-09-15 18:23:22 +02:00
Jonne Haß
3e935e1104
use present to check if redis_url is empty
2012-09-12 22:30:08 +02:00
Jonne Haß
70a9218ea5
add thread_safe true to redis initialization because resque does it too now
2012-09-12 22:17:14 +02:00
Jonne Haß
142e38e78b
update devise
2012-09-12 13:29:57 +02:00
Jonne Haß
d27408d8a9
set perform_deliveries, this should fix #3524
2012-09-07 21:46:13 +02:00
Lawrence Leonard "Larry" Gilbert
37b6045c04
Clarify warning shown when single_process_mode used in production
2012-07-04 18:02:40 -07:00
Steven Hancock
a8de3a5a3f
Rails.root and File.join cleanup
...
- `Rails.root` is a `Pathname`, so let's use `Rails.root.join`
- Clean up most of the remaining `File.join`s
2012-06-11 03:13:20 -07:00
danielgrippi
72d2f619fc
added GA back into rack; added mixpanel configuration options
2012-05-30 13:30:28 -07:00
Steven Hancock
c2bc7272fb
Escape hashtags in emails
...
Custom Redcarpet renderer to escape hashtags (but not legitimate headers)
in emails before Markdown processing. Prevents hashtags from being rendered
as H1 headers. This also leaves open the possibility of parsing hashtags
into clickable links in the future.
fixes #3325
2012-05-28 21:31:27 -07:00
Maxwell Salzberg
75277b4d0e
gzip outgoing stuffs for great success
2012-05-24 13:02:20 -07:00
Maxwell Salzberg
980ec78b7b
fix piwki loading [ci skip]
2012-05-23 11:03:02 -07:00
Florian Staudacher
d815cf5d82
take acts-as-taggable-on gem from git, solve tag case-sensitivity
2012-05-21 17:20:04 +02:00
Maxwell Salzberg
d069865c42
upgrade carrierwave to 0.6.2
2012-05-17 18:51:12 -07:00
Maxwell Salzberg
455dc34eae
remove hotlink controller, just rewrite those landing assets
2012-05-16 15:02:59 -07:00
danielgrippi
d7a099dadb
add publish_actions to facebook connection [ci skip]
2012-05-15 14:07:34 -07:00
Maxwell Salzberg
ab2e740ca2
upgrade to Rails 3.2.3
2012-05-14 21:53:16 -07:00
Dennis Collinson
927b78b79d
kill references to ServiceUser
2012-05-14 18:47:14 -07:00
Maxwell Salzberg
379df76118
Update to faraday-middleware, as faraday stack has been deprecated.
...
Hopefully this will make REE happy in Travis
2012-05-14 15:59:07 -07:00
Maxwell Salzberg
ad6151c808
Revert "@joshsusser hates our ci setup, /cc @suss"
...
This reverts commit cbca19b3f5 .
2012-05-14 15:59:06 -07:00
Steven Hancock
b16f309aca
Upgrade Rails Admin to latest gem
...
This gives us a clean fix for the Kaminari vs. Will Paginate
issues and fixes a few other little bugs in Rails Admin.
fixes #3210
2012-05-11 03:32:05 -07:00
Steven Hancock
4c644c336b
Actually only load rails admin in production mode
...
This is what I think 28f8db51e7 was supposed to do.
With the initializer in an "unless Rails.env.production?" block
the entire initializer was being ignored in production mode and
loaded in all other environments, but Rails Admin was still
loading regardless of that. 😁
This only loads rails admin in production and excludes it from
all other environments. Also keeps non-admins out of /admin_panel
(without the initializer it was free-for-all) and temp fixes #3210
until a new gem is released.
2012-05-09 11:46:18 -07:00
danielgrippi
0ec364e44c
DG MS; popup on services, inlined in the composer
2012-05-08 18:09:33 -07:00
Jonas Lundqvist
819bb95dbd
reorder so integration2 connects to correct redis port
2012-05-08 11:20:56 +02:00
danielgrippi
5821a84024
validations and all that jazz [ci skip]
2012-05-04 17:38:08 -07:00
danielgrippi
fe49579ff5
remove google-analytics middleware due to the fact that it doesn't support injection of custom variables before _trackPageView is called (this results in custom vars not getting tracked)
...
i've submitted an issue to the gem. hopefully we can put it back in later… for now i've copy and pasted its output into a helper method.
2012-05-01 18:02:25 -07:00
Maxwell Salzberg
d22a98cd96
monkey patch to_xs for ruby 1.8, and fix a test as a result
2012-04-25 11:38:42 -07:00
Dennis Collinson
e55073fdd4
temp reverting to prove max wrong.
...
Revert "killing rails admin to investigate if its what's causing boot and deploy to be so slow"
This reverts commit 78bcb1c321 .
2012-04-24 16:45:25 -07:00
Dennis Collinson
78bcb1c321
killing rails admin to investigate if its what's causing boot and deploy to be so slow
2012-04-24 16:30:31 -07:00
Maxwell Salzberg
28f8db51e7
only load rails admin in production mode
2012-04-24 13:48:14 -07:00
Maxwell Salzberg
63616c5ced
trying this on for size again; Revert "I can't test this at this momement. I will put it back in once i have a"
...
This reverts commit 53304df740 .
Conflicts:
config/initializers/airbrake.rb
2012-04-19 21:02:29 -07:00
Dennis Collinson
8cc5f86298
reverting some test env munging
...
max isn't a princess
learn2git
learn2bash
lulz
2012-04-19 14:59:33 -07:00
Dennis Collinson
cbca19b3f5
@joshsusser hates our ci setup, /cc @suss
...
Revert "silence asset noise in development. Thanks to @joshsusser. @denniscollective said I should put something pithy here, but that sounds like a bad idea."
This reverts commit 1307907330 .
2012-04-19 14:43:19 -07:00
Dennis Collinson
8386179f16
max, you're a princess, WIP
2012-04-19 11:15:59 -07:00
Maxwell Salzberg
1307907330
silence asset noise in development. Thanks to @joshsusser. @denniscollective said I should put something pithy here, but that sounds like a bad idea.
2012-04-18 17:26:27 -07:00
Maxwell Salzberg
24b69236a0
exclude share vis in rails admin, dont exclude users [ci skip]
2012-04-15 17:58:49 -07:00
Maxwell Salzberg
ecc1a84b42
rails_admin; i do what i want
2012-04-13 18:08:52 -07:00
Maxwell Salzberg
bb5aa2821d
use the built in asset_sync initializer. add a rake task to bootstrap
...
heroku and asset sync, which puts the S3 config vars in from your app
config.
2012-04-03 14:47:33 -07:00
Maxwell Salzberg
4ba3ec0b42
update initializer
2012-04-02 18:43:18 -07:00