gristlabs_grist-core

Commit Graph

Author	SHA1	Message	Date
Paul Fitzpatrick	6171a012db	(core) updates from grist-core	2 months ago
CamilleLegeron	0bfdaa9c02	Add authorization header in webhooks stored in secrets table (#941 ) Summary: Adding authorization header support for webhooks. Issue: https://github.com/gristlabs/grist-core/issues/827 --------- Co-authored-by: Florent <florent.git@zeteo.me>	3 months ago
Jarosław Sadziński	7f28aee79c	(core) Billing updates Summary: - Adding confirmation dialog when user doesn't want to cancel site - Changing `Cancel subscription` to `Cancel plan` - Removing `Pro` from upgrade header on pricing modal - Better handling situation when there is no default price - Removing mentions about sprouts program - Removing cache for stripe plans Test Plan: Updated tests Reviewers: georgegevoian Reviewed By: georgegevoian Differential Revision: https://phab.getgrist.com/D4273	3 months ago
github-actions[bot]	187358cfa2	automated update to translation keys (#1065 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	3 months ago
Leslie H	24ce54b586	Improve session ID security (#1059 ) Follow-up of #994. This PR revises the session ID generation logic to improve security in the absence of a secure session secret. It also adds a section in the admin panel "security" section to nag system admins when GRIST_SESSION_SECRET is not set. Following is an excerpt from internal conversation. TL;DR: Grist's current implementation generates semi-secure session IDs and uses a publicly known default signing key to sign them when the environment variable GRIST_SESSION_SECRET is not set. This PR generates cryptographically secure session IDs to dismiss security concerns around an insecure signing key, and encourages system admins to configure their own signing key anyway. > The session secret is required by expressjs/session to sign its session IDs. It's designed as an extra protection against session hijacking by randomly guessing session IDs and hitting a valid one. While it is easy to encourage users to set a distinct session secret, this is unnecessary if session IDs are generated in a cryptographically secure way. As of now Grist uses version 4 UUIDs as session IDs (see app/server/lib/gristSessions.ts - it uses shortUUID.generate which invokes uuid.v4 under the hood). These contain 122 bits of entropy, technically insufficient to be considered cryptographically secure. In practice, this is never considered a real vulnerability. To compare, RSA2048 is still very commonly used in web servers, yet it only has 112 bits of security (>=128 bits = "secure", rule of thumb in cryptography). But for peace of mind I propose using crypto.getRandomValues to generate real 128-bit random values. This should render session ID signing unnecessary and hence dismiss security concerns around an insecure signing key.	3 months ago
github-actions[bot]	8bc8d60fca	automated update to translation keys (#1053 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	3 months ago
github-actions[bot]	d6ff2ec60b	automated update to translation keys (#987 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	4 months ago
CamilleLegeron	5956c20c29	feat: add new translations (#1004 )	4 months ago
CamilleLegeron	6443c9f914	feat: add translation of vue types when added (#946 )	4 months ago
github-actions[bot]	6d9df7de7e	automated update to translation keys (#974 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	4 months ago
github-actions[bot]	b8315a83d6	automated update to translation keys (#959 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	5 months ago
github-actions[bot]	b87ade6149	automated update to translation keys (#957 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	5 months ago
github-actions[bot]	192e2f36ba	automated update to translation keys (#936 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	5 months ago
CamilleLegeron	fe9cc80ccc	Create team site for self-hosted instances (#903 )	5 months ago
CamilleLegeron	76ef4d54f8	Webhook trigger update by column (#832 ) Add functionality to filter webhooks based on a column or columns.	5 months ago
github-actions[bot]	e23f83c1b0	automated update to translation keys (#912 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	6 months ago
github-actions[bot]	a86c5da5c5	automated update to translation keys (#911 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	6 months ago
CamilleLegeron	f3f320a193	Feat: rename all column label from a given row with right click (#848 )	6 months ago
github-actions[bot]	87121e89af	automated update to translation keys (#888 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	7 months ago
CamilleLegeron	9ce8ed3f25	Feat: add title query params for exported csv and xlsx + download translations (#872 ) Co-authored-by: Florent <florent.git@zeteo.me>	7 months ago
github-actions[bot]	ed137c1fa1	automated update to translation keys (#868 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	7 months ago
github-actions[bot]	09287170d1	automated update to translation keys (#843 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	7 months ago
CamilleLegeron	a0a968a2d8	Make free coaching call url configurable and popup translatable (#823 )	8 months ago
github-actions[bot]	c59c71eaf3	automated update to translation keys (#841 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	8 months ago
github-actions[bot]	f45c53d7d4	automated update to translation keys (#833 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	8 months ago
CamilleLegeron	b2e3d8787c	Mark more strings as translatable (#795 ) * add modals translations * GridViewMenus: add translations for column type	8 months ago
github-actions[bot]	1f5cd0a9d5	automated update to translation keys (#829 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	8 months ago
github-actions[bot]	e751117bd1	automated update to translation keys (#825 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	8 months ago
github-actions[bot]	4bfc1b1eac	automated update to translation keys (#811 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	9 months ago
github-actions[bot]	16b6b01134	automated update to translation keys (#805 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	9 months ago
github-actions[bot]	a3161f6499	automated update to translation keys (#787 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	9 months ago
github-actions[bot]	87228e9c74	automated update to translation keys (#774 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	10 months ago
github-actions[bot]	aa73a34c05	automated update to translation keys (#758 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	10 months ago
github-actions[bot]	1a8e432d5d	automated update to translation keys (#723 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	11 months ago
github-actions[bot]	98dc10dec7	automated update to translation keys (#711 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	11 months ago
github-actions[bot]	4be7e8c8c9	automated update to translation keys (#697 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	11 months ago
github-actions[bot]	5bc8118eae	automated update to translation keys (#695 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	11 months ago
github-actions[bot]	f345d78245	automated update to translation keys (#691 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	12 months ago
github-actions[bot]	d7608a2604	automated update to translation keys (#686 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	12 months ago
github-actions[bot]	a48bd85db3	automated update to translation keys (#684 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
github-actions[bot]	17d9c973e7	automated update to translation keys (#663 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
github-actions[bot]	b9b0632be8	automated update to translation keys (#662 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
github-actions[bot]	c214fd51d2	automated update to translation keys (#636 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
github-actions[bot]	884803592c	automated update to translation keys (#617 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
github-actions[bot]	cefea55198	automated update to translation keys (#613 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
CamilleLegeron	02841bd15c	Header colored (#581 )	1 year ago
github-actions[bot]	8bfba150b9	automated update to translation keys (#611 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
Jarosław Sadziński	6416994c22	(core) Import redesign Summary: New UI design for incremental imports. Test Plan: Updated Reviewers: georgegevoian Reviewed By: georgegevoian Differential Revision: https://phab.getgrist.com/D3945	1 year ago
github-actions[bot]	3d84014116	automated update to translation keys (#598 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago
github-actions[bot]	47ffa93e05	automated update to translation keys (#586 ) Co-authored-by: Paul's Grist Bot <paul+bot@getgrist.com>	1 year ago

1 2 3

111 Commits (f2141851be8db43c383e9f994d346f1431c0144a)