Commit graph

1211 commits

Author SHA1 Message Date
Pranav Kant
b8ef017610 Move JWT auth to inside websocket to prevent CSRF
... instead of setting a httpOnly cookie for admin websocket
endpoint which can be CSRFed.

With this, we remove the httpOnly tag on jwt cookie so that
scripts in admin html pages can access the jwt cookie and
authenticates after opening websocket endpoint. Until
authenticated using 'auth authToken' command, admin will not
respond to any admin command.

Also, adapt admin test these changes
2016-07-29 12:03:14 +05:30
Henry Castro
7f5eed80a0 loleaflet: remove styles toolbar from spreadsheets 2016-07-24 10:55:51 -04:00
Ashod Nakashian
e685f6a306 loleaflet: disable grey-out when debug-tools is open
Change-Id: Id3d2502fc7a38303395e70b710adaeaf7fae92a6
Reviewed-on: https://gerrit.libreoffice.org/27451
Reviewed-by: Ashod Nakashian <ashnakash@gmail.com>
Tested-by: Ashod Nakashian <ashnakash@gmail.com>
2016-07-23 02:57:49 +00:00
Henry Castro
fa02df7ad3 loleaflet: avoid Uncaught TypeError: Cannot read property
Uncaught TypeError: Cannot read property 'toLowerCase' of undefined
2016-07-22 20:39:29 -04:00
Pranav Kant
6457d779da loleaflet: admin console: Refactor and fix potential XSS
Use jquery instead of plain html methods.

Change-Id: I6f70ef81ca7f021f8b42a1e4faea055ef1f15e37
2016-07-19 15:54:42 +05:30
Andras Timar
35f0ba3c5b Pull translations from Pootle 2016-07-18 16:47:19 +02:00
Pranav Kant
c9f0f81a1a loleaflet: Convert Ctrl + s to .uno:Save
Saving this way, key sequences are forwarded to core directly, so
loolwsd is not aware if a save operation is going on or not. This
leads to problem as loolwsd might want to upload to storage.

Change-Id: I32d10012064a0dda7fff0c3ac4848f140b1b6fb8
2016-07-18 12:10:25 +05:30
Henry Castro
d57c5758fd loleaflet: add a menu drop down toolbar item 2016-07-14 22:24:50 -04:00
Henry Castro
ddfd0a3341 loleaflet: add more toolbar items
.uno:SortAscending
.uno:SortDescending
2016-07-14 13:49:35 -04:00
Henry Castro
7fd9d334af loleaflet: cleanup unused statusbar items 2016-07-13 14:26:54 -04:00
Henry Castro
0202479687 loleaflet: l10n of 'Slide %1 of %2' 2016-07-13 10:45:23 -04:00
Henry Castro
3e2d81f37b loleaflet: l10n of '%1 words, %2 characters' 2016-07-13 10:02:59 -04:00
Henry Castro
374c288800 loleaflet: l10n of 'Page %1 of %2' 2016-07-13 09:18:00 -04:00
Henry Castro
e5a6ea3421 loleaflet: l10n of '$1 rows, $2 columns selected' 2016-07-12 18:04:37 -04:00
Henry Castro
111c660d46 loleaflet: l10n of 'Sheet 1% of %2' 2016-07-12 16:54:49 -04:00
Pranav Kant
1265032896 loleaflet: Separate document URL from query params
Change-Id: I9b8381b8c0d92796aadabe0bc63e5a1b144f8b41
2016-07-11 11:24:19 +05:30
Pranav Kant
62814d29cf loolwsd: Introduce a readonly mode
Specified when websocket is initialized. Documents once
opened in readonly mode cannot edit throughout the life of the session.
This is very much like present view mode except the ability to
change to edit mode.

Change-Id: I176e3bbf210c3383268d1a5b50dc17f0cbfb26b8
2016-07-11 11:24:16 +05:30
Henry Castro
71efcf2b28 loleaflet: l10n of insert modes 2016-07-09 22:10:34 -04:00
Henry Castro
7137c9ef8e loleaflet: remove PageStyleName
It always return "Default"
2016-07-09 20:11:03 -04:00
Henry Castro
5905d25a41 loleaflet: fix state table cell
In cp-5.1 branch, the state table cell reports the string "Sum=0"
for empty cells, the client side splits the string with a separator '=',
so the status item shows "Sum".
2016-07-09 19:26:44 -04:00
Henry Castro
c6745cba8e loleaflet: l10n of selection modes 2016-07-09 18:07:55 -04:00
Andras Timar
3d80e2a263 Write translation to json, even when translation is the same as original string
A bug was found: Slide was translated to Slide in pt_BR, while Slide was
translated to Diapositivo in pt. The identical translation was ignored,
and browser fell back to pt translation, which was wrong in pt_BR UI.
2016-07-07 22:53:48 +02:00
Henry Castro
fdebaf6070 loleaflet: spreadsheet: add number format toolbar items 2016-07-07 14:03:30 -04:00
Henry Castro
4fb0869504 loleaflet: spreadsheet: add toolbaritems
Wrap Text
Merge and Center Cells
2016-07-06 14:38:17 -04:00
Henry Castro
e480aa86d6 loleaflet: spreadsheet: remove toolbar items 2016-07-05 14:03:55 -04:00
Pranav Kant
f3b263be27 loleaflet: Fix incorrect assignment
Assigning this._graphicMarker to visibleCursor leads to problems
as graphicMarker is not the same kind of object as visibleCursor.

Change-Id: Ic0aa1d7d2a8d11fa38a86e2c143342c9a16d507e
2016-07-05 20:56:16 +05:30
Pranav Kant
528707b334 loleaflet: Fire file chooser dialog even if same file is selected
OnInsertFile is triggered on onchange event, but this event is
not triggered if same image is choosen again from file chooser
dialog. Reset the value everytime so that onchange event is
always triggered.

Change-Id: I1efb76122b3a9437622754d28d0c55d4adbf32e8
2016-07-05 18:54:24 +05:30
Henry Castro
5442be5208 loleaflet: add status bar items css loleaflet-font 2016-07-03 11:02:24 -04:00
Henry Castro
1a6b102469 loleaflet: remove status bar item 'Signature'
They always report the same value
2016-07-03 10:49:36 -04:00
Henry Castro
c6af7d4a06 loleaflet: add status bar items for Impress 2016-07-03 10:33:22 -04:00
Andras Timar
c8144cdd01 loleaflet: Pull translations from Pootle 2016-07-03 13:08:25 +02:00
Henry Castro
dcf9839a0d loleaflet: add status bar items for Writer 2016-07-02 23:58:02 -04:00
Henry Castro
b3ff83251f loleaflet: replace '_' for ' ', to avoid ugly effect 2016-07-02 14:35:51 -04:00
Henry Castro
cc8f9f4c64 loleaflet: add status bar items for Calc 2016-06-30 18:25:57 -04:00
Pranav Kant
277c191eb0 loleaflet: Disable revision history option by default
Hosts are supposed to provide 'revisionhistory' parameter when
calling loleaflet.html

Change-Id: I6c1a89b602a739c0d30b7aeea680b4c577b37cc4
2016-06-29 19:44:31 +05:30
Pranav Kant
1106c0a5ac loleaflet: Simplify enable/disable logic in menubar
There is still one problem though, that if already opened
document is opened in a different browser window, it doesn't
receive any command states which shows enable/disable states of
menubar items incorrectly.

Change-Id: Ib03f1becfb6585fed075bb5f1bf9c587063323a6
2016-06-27 16:50:13 +05:30
Pranav Kant
f0812c14f0 Use new event doclayerinit in menubar init for menubar
This event was introduced in
c39045b1e4ece3eabbf9a9dbf24d8d4df7651e87

Change-Id: Icacb6584ac9e3ab7aaaef55c2c7f7cf2ea2393a7
2016-06-27 16:50:13 +05:30
Pranav Kant
8e023584ea loleaflet: Ask my host to show revision-history
Change-Id: If1ed5fc03c6504e22c565b0278983bb168bb6fc8
2016-06-27 16:50:13 +05:30
Pranav Kant
b2acd1cfbc Remove invalid placeholder
This is no longer valid since context menus are implemented in
loleaflet already.

Change-Id: Ic2e21a92c5fdd87a2f3c34a3ff16628337184e1d
2016-06-27 16:50:13 +05:30
Pranav Kant
454999fa57 loleaflet: Resurrect loleaflet permission model for readonly mode
Remove direct usage of editlock; instead change loleaflet
permission from view to edit when editlock message is received.
By default, map would be in 'view' mode and only get to 'edit'
when server asks it to switch to.

Use a new event 'doclayerinit' for actions that are directly
dependent on intialization of doclayer.

Change-Id: Iaceb95ad85721ddcd675c75cfeb1504ab2759ad4
2016-06-27 16:50:13 +05:30
Pranav Kant
29f2f3ec54 loleaflet: Lint before building
Change-Id: I5e38373959574b3a72fbfe0715a8758de9765438
2016-06-27 16:50:13 +05:30
Andras Timar
f540fb087c loolwsd: document new command line options in READMEs 2016-06-27 09:41:41 +02:00
Andras Timar
c3db6d719e reserve version 2.0.0 for actual release... 2016-06-27 09:20:09 +02:00
Pranav Kant
ce6866b0e5 loleaflet: Allow 'about', 'keyboard-shortcuts' in non-edit modes
Change-Id: I2def7a17d05ec7834290b94a51edfd589f6187ed
2016-06-24 23:33:42 +05:30
Andras Timar
95684540ea loleaflet: avoid ReferenceError exception when brandProductName is undefined 2016-06-22 23:46:39 +02:00
Andras Timar
80a81abc46 loleaflet: remove extra dist/ from URL 2016-06-22 23:38:06 +02:00
Andras Timar
17abf005a8 loleaflet: Collabora Office version x.y-z style in About box
LibreOffice is unaffected
2016-06-22 23:35:10 +02:00
Pranav Kant
10a5f8c08b loleaflet: l10n: Placeholder for product name
Change-Id: I883ff7e42cf37cd457b6cfcc065fff47b3dc469d
Reviewed-on: https://gerrit.libreoffice.org/26573
Reviewed-by: Andras Timar <andras.timar@collabora.com>
Tested-by: Andras Timar <andras.timar@collabora.com>
2016-06-22 20:36:36 +00:00
Pranav Kant
55ead88236 loleaflet: Kill simplemodal library
Its use has been superceded by vex now

Change-Id: I4b032dd6e5de61548b76b56e946ced6fc86734d3
2016-06-22 20:09:35 +05:30
Pranav Kant
a789cff8e8 loleaflet: Migrate about dialog to vex
Change-Id: Id853ec14d817b2f4312dee70a087a4ac526e951b
2016-06-22 20:09:32 +05:30