haskell/yesod
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,804 Commits 42 Branches 853 Tags 10 MiB
d7a29977bf
Commit Graph

4804 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Snoyman
d7a29977bf
Merge pull request #1617 from league/url-encode 
URL-encode POST parameters in yesod-test
 2019-08-20 09:10:21 +03:00
Michael Snoyman
56e85572d4
Merge pull request #1620 from jezen/master 
Move JavaScript form submission to script block
 2019-08-20 09:08:55 +03:00
Christopher League
fa90ab19ca Update changelog 2019-08-19 15:57:15 -04:00
Jezen Thomas
d385ada853
Move JavaScript form submission to script block 
If someone wants their website to score a good grade on a security
vulnerability scanner like Mozilla Observatory, they will need to enable
the Content Security Policy header. When using CSP, it is possible to
explicitly allow inline JavaScript in `<script>` tags by specifying the
sha256 of the snippet. However the same is _not_ true of any JavaScript
included in a HTML attribute like `onload`.

This changes moves the JavaScript form submission out of the `onload`
HTML attribute and into a `<script>` tag so the user can add the hash of
this script to their explicitly-allowed `script-src` list, and they can
avoid using undesirable CSP rules like `unsafe-inline`.

Without explicitly allowing this script when using CSP, the script would
fail and the user would have to click the button to continue.
 2019-08-19 20:56:00 +02:00
James Burton
d8ebb95c96
Added Multi Input Form Functionality (#1601) 2019-08-16 04:30:20 +01:00
Christopher League
08a9632eba yesod-test: correction to PR for multipart 2019-08-13 11:58:11 -04:00
Christopher League
3f98190645 Bump version to 1.6.6.2 2019-08-13 10:39:44 -04:00
Christopher League
a79f73a040 yesod-test: url-encode addPostParam keys & values 
Fixes #1616
 2019-08-13 10:34:57 -04:00
Christopher League
ac66323394 yesod-test: failing tests for encoding errors 
Related to issue #1616
 2019-08-13 10:29:21 -04:00
Michael Snoyman
37c0df8dc1
Merge pull request #1613 from jezen/master 
Add mreqMsg
 2019-07-18 14:52:35 +03:00
Jezen Thomas
e5e39f353d
Implement mreq in terms of mreqMsg 2019-07-18 13:56:19 +03:00
Jezen Thomas
14ade1ad98
Add mreqMsg 
When a form has multiple `mreq` fields and the user submits a form with
more than one of these values missing, they see an ambiguous collection
of "Value is required" messages. The `mreqMsg` function allows you to
provide your own MsgValueRequired message for a better UX.
 2019-07-18 11:11:02 +03:00
Michael Snoyman
bc73850173
Merge pull request #1608 from leifmetcalf/ignore 
Trivial: add stack.yaml.lock to .gitignore
 2019-07-07 20:18:19 +03:00
Michael Snoyman
1af6f243f6
Merge pull request #1607 from leifmetcalf/patch-1 
Trivial: use git clone --recurse-submodules instead of --recursive
 2019-07-07 20:17:17 +03:00
Leif Metcalf
048148824c
Ignore stack.yaml.lock 2019-07-06 14:22:32 +12:00
Leif Metcalf
6eb597052a
Use git clone --recurse-submodules 2019-07-06 14:00:11 +12:00
Michael Snoyman
636f35b081
Merge pull request #1605 from mmilata/html-typo 
Trivial: remove comma from <form> tag
 2019-06-18 21:46:36 -07:00
Martin Milata
b4d3e01afb Remove comma from <form> tag 2019-06-18 01:56:32 +02:00
Michael Snoyman
af038b75f8
Merge pull request #1604 from jprider63/optional-labels 
Optional labels
 2019-06-16 06:28:08 -07:00
James Parker
0f8441eb73 Updated changelog. 2019-06-15 09:45:32 -04:00
James Parker
4424abe449 Hide bootstrap labels when empty 2019-06-11 14:09:54 -04:00
Steven Leiva
c90c50911c
Merge pull request #1598 from StevenXL/update-clearcreds 
clearCreds redirect behavior depends on request type.
 2019-05-24 10:20:55 -05:00
patrick brisbin
e470f1a3f8 Version bump 2019-05-21 12:10:03 -04:00
patrick brisbin
096049e0e3 sendClose and sendPing act in m () 
The previous type signature was attempting to read the Connection off of
the m in WebSocketsT m, rather than the WebSocketsT itself. This was
likely a typo that happened to type-check. The types for these now align
with the rest of the API, read the Connection off of WebSocketsT, and
make no demands of the m other than MonadIO.

Fixes #1599.
 2019-05-21 12:10:03 -04:00
Steven Leiva
ceeeb16ae0 clearCreds redirect behavior depends on request type. 2019-05-14 13:20:34 +00:00
Michael Snoyman
006fa6cb9e
Update ChangeLog 2019-04-30 11:33:32 +03:00
Michael Snoyman
8c4b8e5094
Merge pull request #1595 from yesodweb/move-to-azure 
Move to azure
 2019-04-30 09:29:34 +03:00
Michael Snoyman
3647bf94b7 Strip CRs for Windows testing 2019-04-30 07:03:22 +03:00
Michael Snoyman
3b58652483
Compat with network 3 2019-04-30 05:13:10 +03:00
Michael Snoyman
3ba15fb8d3
Skip lts-9 on Windows (needs more extra-deps) 2019-04-30 04:53:14 +03:00
Michael Snoyman
5921a10ded
Increase Azure timeout 2019-04-30 04:47:30 +03:00
Michael Snoyman
5fe5e24eb0
Add missing rio dependency 
Travis was handling this via the solver, which we don't want to be using
 2019-04-29 19:21:27 +03:00
Michael Snoyman
5acc62b5e2
Updated badge for Azure 2019-04-29 18:48:37 +03:00
Michael Snoyman
772324e8cb
Azure config 2019-04-29 18:44:47 +03:00
Michael Snoyman
c7bb2d22af
Remove Travis config 2019-04-29 18:44:26 +03:00
Michael Snoyman
d9d4863fc1
Remove appveyor 2019-04-29 18:37:18 +03:00
Michael Snoyman
abdea8d157
Remove out-of-date ReleaseNotes.md 2019-04-29 18:37:00 +03:00
Michael Snoyman
3015a9a9f1
Remove out-of-date README 2019-04-29 18:36:35 +03:00
Michael Snoyman
b30a2a5b07
Remove sources.txt 2019-04-29 18:36:06 +03:00
Michael Snoyman
de209b3b94
Merge pull request #1594 from yesodweb/persistent-2-10 
Test against persistent 2.10
 2019-04-29 18:00:40 +03:00
Michael Snoyman
2a51e05448
Test against persistent 2.10 2019-04-29 16:03:39 +03:00
Michael Snoyman
ad6ed03aa4
Add support for persistent 2.10 2019-04-22 08:46:21 +03:00
Michael Snoyman
cc2d19a25d
Relax upper bound on persistent 2019-04-22 08:45:44 +03:00
Michael Snoyman
b5839420aa
Version bump 2019-04-13 22:01:17 +03:00
Michael Snoyman
42fbab9129
Merge pull request #1592 from StevenXL/add-jsonresponse-type 
Introduce JSONResponse.
 2019-04-13 22:00:23 +03:00
Steven Leiva
ab096c649c Introduce JSONResponse. 
This data type allows us to return a domain type in our handlers, even
if we eventually want to send JSON to the client.

See: https://tech.freckle.com/2015/12/21/servant-style-handlers-for-yesod/
 2019-04-12 16:13:53 -05:00
Michael Snoyman
6a7370a9e6
Merge pull request #1589 from geekingfrog/maximumContentLengthIO 
maximumContentLengthIO
 2019-03-17 11:11:45 +02:00
Grégoire Charvet 黑瓜
f1374c9140 add doc for maximumContentLength override 2019-03-17 09:10:07 +00:00
Grégoire Charvet 黑瓜
a691f49258 update changelog 2019-03-15 20:37:46 +00:00
Grégoire Charvet 黑瓜
48bfe0d573 maximumContentLengthIO 2019-03-15 20:35:39 +00:00