Signed-off-by: BinotaLIU <binota@binota.org>

Signed-off-by: BinotaLIU <binota@binota.org>

Signed-off-by: BinotaLIU <binota@binota.org>

Signed-off-by: Tamotsu Takahashi <ttakah@gmail.com>

hackmdio#1581 (comment)

Signed-off-by: Tamotsu Takahashi <ttakah@gmail.com>

Move HTML from JS to EJS.
hackmdio#1581 (comment)
hackmdio#1581 (comment)

Signed-off-by: Tamotsu Takahashi <ttakah@gmail.com>

Move HTML from JS to EJS

I don't know how to register i18n helper to handlebars,
so "export to raw HTML" has not been touched.
You can do the same for html.hbs if you want.

Signed-off-by: Tamotsu Takahashi <ttakah@gmail.com>

hackmdio#1580 (comment)

Signed-off-by: Tamotsu Takahashi <ttakah@gmail.com>

The function should match only the beginnings of lines.

For example, see this testcase:
```
:::spoiler
here is a :::
:::
:::
```
The last line should be completed.

Without this patch, the third line is completed and the last is not.

Signed-off-by: Tamotsu Takahashi <ttakah@gmail.com>

Signed-off-by: Joachim Mathes <joachim_mathes@web.de>

simplify the regex
suggested by yukaii in hackmdio#1605

Co-authored-by: Yukai Huang <yukaihuangtw@gmail.com>

simplify the regex
suggested by yukaii in hackmdio#1605

Co-authored-by: Yukai Huang <yukaihuangtw@gmail.com>
Signed-off-by: Tamotsu Takahashi <ttakah@gmail.com>

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Signed-off-by: Max Wu <jackymaxj@gmail.com>

…-data-filename-zero

Avoid append zero suffix on exporting user data

…-for-return-url

Handle when request url has no valid referer

ref issue: aws/aws-sdk-js-v3#1396

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Signed-off-by: Max Wu <jackymaxj@gmail.com>

…d-s3-config

Fix S3 client config passing for image upload

…-mathjax

Add TeX mhchem extensions for MathJax

…art.js-1.15.0

Upgrade flowchart.js to version 1.15.0

Signed-off-by: Raccoon <raccoon@hackmd.io>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: Raccoon <raccoon@hackmd.io>

Run CI with GitHub Actions

Signed-off-by: Raccoon <raccoon@hackmd.io>

Signed-off-by: Raccoon <raccoon@hackmd.io>

… [Security Issue]

Signed-off-by: Max Wu <jackymaxj@gmail.com>

…ist show loading attrtributes

Signed-off-by: Max Wu <jackymaxj@gmail.com>

to avoid mermaid prototype pollution mermaid-js/mermaid#1940

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Signed-off-by: Max Wu <jackymaxj@gmail.com>

…red-XSS

Strip HTML tags for gist id to avoid stored XSS on showing error [Security Issue]

…d-8.10.1

Upgrade mermaid to version 8.10.2 to avoid prototype pollution

Add dev container for GitHub Codespaces and VSCode remote container

Signed-off-by: YadominJinta <i@yadom.in>

Convert "include" directives to functions

Move HTML-related code from JS to EJS to enable more i18n

Add arm64 docker image build.

Signed-off-by: Raccoon <raccoon@hackmd.io>

Currently CodiMD does not support limiting access of GitHub OAuth users
based on their organization membership. This is a very useful
functionality for teams that want to limit write access to their notes.

I've implemented a crude solution to this problem, which most probably
requires some adjusments to make it better. I'm not sure if this
implementation is kosher, but it definitely works on my deployment.

Open to suggestions on how I can improve it.

Signed-off-by: Jakub Sokołowski <jakub@status.im>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

…section

Signed-off-by: Bruno Duyé <brunetton@brunetton.org>

…dex-reference-in-clearDuplicatedHistory

fix: may referernce out of bound index in clearDuplicatedHistory

…data

Feat/csrf export user data

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

- https://sequelize.org/master/manual/models-definition.html
- hackmdio#1579

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

sequelize.import deprecation

Signed-off-by: Yukai Huang <yukaihuangtw@gmail.com>

Upgrade codemirror to 5.63.2

chore: remove unused uglifyjs-webpack-plugin dep

Signed-off-by: Max Wu <jackymaxj@gmail.com>

Signed-off-by: Vincent Nadoll <vincent.nadoll@googlemail.com>

better german

Signed-off-by: NotYourBusiness <NotYourBusiness>

Update de.json

Signed-off-by: Raccoon <raccoon@hackmd.io>

Signed-off-by: chenxuanzzy <chenxsuan019@gmail.com>

Signed-off-by: blademainer <blademainer@gmail.com>

Signed-off-by: blademainer <blademainer@gmail.com>

Signed-off-by: inductor <kela@inductor.me>

Signed-off-by: Raccoon <raccoon@hackmd.io>

Release 2.4.2

this fixes "error: 	uncaughtException: Unknown authenticationOk message typeMessage { name: 'authenticationOk', length: 23 }"

Signed-off-by: Anton Wolkov <7001904+phntom@users.noreply.github.com>

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

fixes hackmdio#1761

closes hackmdio#1738

…IE-support

Update README.md to remove IE from supporting list

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

Signed-off-by: Charlie Hsieh <gasbomb_tw@hotmail.com>

…-vulnerability

…ame-cause-crash

FIX: server crash when filename too long

Signed-off-by: Cédric Eyssette <cedric.eyssette@gmail.com>

…ked-to-0-5-0

Signed-off-by: Étienne Michon <etienne@scalingo.com>

Signed-off-by: Sean Young <assanges@icloud.com>

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

Try to simply update the npm packages without any additional changes.

Signed-off-by: Peter Dave Hello <hsu@peterdavehello.org>

…ty-issue

…esBaseline

Update minimum required node.js version to v12 with npm package dependencies

Signed-off-by: Masatoshi Yamaguchi <masatoshi@yamaguchi.org>
Signed-off-by: MasatoshiYamaguchi <masatoshi.yamaguchi@asia-quest.jp>

…apanese

【fix】reword japanese

Signed-off-by: Theo Li <bbtfrr@gmail.com>