7c97fac746
feat: support bash as 4th language ( #865 )
...
* bash support
* bash backend working
* frontend part
* bash backend working
2022-11-06 23:48:18 +01:00
5bee890032
chore(backend): set csp based on env var ( #864 )
...
* chore(backend): set csp based on env var
* use extension instead of reading directly from env var
2022-11-06 22:35:37 +01:00
d8d82fa12d
chore(csp): fix trailing semicolon ( #863 )
2022-11-06 19:50:45 +01:00
2562f98cbc
fix(backend): improve csp ( #861 )
...
rationale for setting `'unsafe-inline'` is that it cannot be more void
than the lack of `script-src` but it still might add some benefits
2022-11-06 18:00:16 +01:00
df1c619e25
fix(backend): tighten http security headers ( #860 )
...
* fix(backend): set http security headers (vol.1)
* (vol.2) minimal *working* content security policy
* (vol.3) set csp only if https and if hosted on cloud
* improve generics
* get CLOUD_HOSTED from extension
* remove X-XSS-Protection
rationale as per: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
* conditionally set all security related http headers
2022-11-06 17:07:25 +01:00
de9e96ddd2
UX improvements for run script
2022-11-06 16:08:10 +01:00
a747c0060c
fix(backend): tighten security around cookies to avoid csrf ( #859 )
...
* fix(backend): tighten security around cookies to avoid csrf
* everything httponly
* sqlx
* also handle 404
* shoter Windmill v message
* fix chart
2022-11-05 21:21:13 +01:00
39351d3fb8
remove initial invite to demo for ruben@windmill.dev
2022-11-05 10:45:17 +01:00
3b1368700e
fix approving twice same flow
2022-11-04 00:32:55 +01:00
621ed290cf
feat(backend): Deno lock files ( #851 )
...
* Enable generating locks for deno
* Handle deno lockfile
* Fix bug with empty lockfiles
* Handle deno lockfiles
* Allow unstable features when resolving deno deps
* Ignore bad lockfiles
* Handle Deno Path
* No Color output
* Fix OsStr
2022-11-02 23:52:45 +01:00
aab23b8768
feat: implement allowed domains for self-hosted
2022-11-02 14:52:35 +01:00
1c9b59cdfa
make get suspended flow job unauthed
2022-11-02 08:50:17 +01:00
ceb7d36dee
restore connect workspace to slack
2022-11-01 22:03:36 +01:00
463d73399d
feat(backend): add parallel option for forloop and branchall ( #840 )
...
* parallel
* parallel
* fix 1
* fix 2
* fix 3
* fix 3
* fix 4
* sqlx
* add parallel toggle on frontend
* parallel in frontend
* serde
* fix everything
* fix everything
2022-11-01 06:09:00 +01:00
9a4bb545cd
clearer error message for unable to exchange refresh token
2022-10-30 21:35:22 +01:00
b02521d7ff
fix(backend): fix error handler progress update
2022-10-30 13:47:28 +01:00
6263e90735
restructure the entire backend layout using workspaces ( #815 )
2022-10-29 11:58:06 +02:00
Ruben Fiszel
Jakub Kołodziejczak
Kai Jellinghaus