20 Commits

Author SHA1 Message Date
Ruben Fiszel 3c09275960 feat: support bash as 4th language (#865)
* bash support

* bash backend working

* frontend part

* bash backend working
2022-11-06 23:48:18 +01:00
Jakub Kołodziejczak 3333713644 chore(backend): set csp based on env var (#864)
* chore(backend): set csp based on env var

* use extension instead of reading directly from env var
2022-11-06 22:35:37 +01:00
Jakub Kołodziejczak 209dee7bd8 chore(csp): fix trailing semicolon (#863) 2022-11-06 19:50:45 +01:00
Jakub Kołodziejczak 3ba18700de fix(backend): improve csp (#861)
rationale for setting `'unsafe-inline'` is that it cannot be more void
than the lack of `script-src` but it still might add some benefits
2022-11-06 18:00:16 +01:00
Jakub Kołodziejczak 7040bbe4c9 fix(backend): tighten http security headers (#860)
* fix(backend): set http security headers (vol.1)

* (vol.2) minimal *working* content security policy

* (vol.3) set csp only if https and if hosted on cloud

* improve generics

* get CLOUD_HOSTED from extension

* remove X-XSS-Protection

rationale as per: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection

* conditionally set all security related http headers
2022-11-06 17:07:25 +01:00
Ruben Fiszel 8fd0e23c80 UX improvements for run script 2022-11-06 16:08:10 +01:00
Ruben Fiszel cddec6469e fix(backend): tighten security around cookies to avoid csrf (#859)
* fix(backend): tighten security around cookies to avoid csrf

* everything httponly

* sqlx

* also handle 404

* shoter Windmill v message

* fix chart
2022-11-05 21:21:13 +01:00
Ruben Fiszel 464642dac7 improve superadmin settings 2022-11-05 12:30:11 +01:00
Ruben Fiszel 6439ffc2b5 remove initial invite to demo for ruben@windmill.dev 2022-11-05 10:45:17 +01:00
Ruben Fiszel 25c5e74d73 fix approving twice same flow 2022-11-04 00:32:55 +01:00
Ruben Fiszel 76e53a0139 feat(backend): add global delete user endpoint 2022-11-03 14:06:09 +01:00
Kai Jellinghaus 5bbfb40ee1 feat(backend): Deno lock files (#851)
* Enable generating locks for deno

* Handle deno lockfile

* Fix bug with empty lockfiles

* Handle deno lockfiles

* Allow unstable features when resolving deno deps

* Ignore bad lockfiles

* Handle Deno Path

* No Color output

* Fix OsStr
2022-11-02 23:52:45 +01:00
Ruben Fiszel 59da17bff8 UX improvements 2022-11-02 21:26:52 +01:00
Ruben Fiszel 513924b043 feat: implement allowed domains for self-hosted 2022-11-02 14:52:35 +01:00
Ruben Fiszel 9eb12e09b6 make get suspended flow job unauthed 2022-11-02 08:50:17 +01:00
Ruben Fiszel 918fb1f9a4 restore connect workspace to slack 2022-11-01 22:03:36 +01:00
Ruben Fiszel 39937e6a83 feat(backend): add parallel option for forloop and branchall (#840)
* parallel

* parallel

* fix 1

* fix 2

* fix 3

* fix 3

* fix 4

* sqlx

* add parallel toggle on frontend

* parallel in frontend

* serde

* fix everything

* fix everything
2022-11-01 06:09:00 +01:00
Ruben Fiszel ee91ca50cf clearer error message for unable to exchange refresh token 2022-10-30 21:35:22 +01:00
Ruben Fiszel 4bd74ad723 fix(backend): fix error handler progress update 2022-10-30 13:47:28 +01:00
Kai Jellinghaus 0034129a30 restructure the entire backend layout using workspaces (#815) 2022-10-29 11:58:06 +02:00