No description
Find a file
Ayhan Yalçınsoy c1df79e229 loleaflet: Towards eslint 6.0.0 #396 - no-prototype-builtins
The "extends": "eslint:recommended" property in a configuration file enables this rule.

In ECMAScript 5.1, Object.create was added, which enables the creation of objects
with a specified [[Prototype]]. Object.create(null) is a common pattern used to create
objects that will be used as a Map. This can lead to errors when it is assumed that
objects will have properties from Object.prototype. This rule prevents calling some
Object.prototype methods directly from an object.

Additionally, objects can have properties that shadow the builtins on Object.prototype,
potentially causing unintended behavior or denial-of-service security vulnerabilities.
For example, it would be unsafe for a webserver to parse JSON input from a client and
call hasOwnProperty directly on the resulting object, because a malicious client could
send a JSON value like {"hasOwnProperty": 1} and cause the server to crash.

To avoid subtle bugs like this, it's better to always call these methods from Object.prototype.
For example, foo.hasOwnProperty("bar") should be replaced with Object.prototype.hasOwnProperty.call(foo, "bar").

See: https://eslint.org/docs/rules/no-prototype-builtins

Change-Id: Id7723f0f0ed81e074f56955f80eda3d70241294e
Signed-off-by: Ayhan Yalçınsoy <ayhanyalcinsoy@pisilinux.org>
2020-11-01 00:47:10 +03:00
.git-hooks Add also the pre-commit and post-merge hooks, they are useful too. 2020-10-07 15:04:58 +02:00
.github Fix #391, Add "Actual behavior" to GitHub issue... 2020-10-22 22:06:55 +03:00
.gitpod-files Gitpod: Add custom loolwsd.xml 2020-10-09 19:46:53 +03:00
android Translated using Weblate (Hebrew) 2020-10-28 17:36:19 +01:00
common Remove Poco/TimeStamp.h left-over 2020-10-26 03:30:32 +03:00
cypress_test Created a cypress test for Insert Hyperlink on writer 2020-10-31 09:39:39 +01:00
debian change product name 2020-10-02 14:18:28 +02:00
docker change product name 2020-10-02 14:18:28 +02:00
etc change product name 2020-10-02 14:18:28 +02:00
fuzzer DocumentBroker::saveToStorage: guard against nullptr _storage 2020-10-26 10:57:23 +01:00
gtk fix license headers 2020-10-01 11:56:43 +02:00
ios Translated using Weblate (Hebrew) 2020-10-28 17:36:19 +01:00
kit Remove pseudo-code pushed in error. 2020-10-26 19:59:55 +00:00
kubernetes/helm change product name 2020-10-02 14:18:28 +02:00
loleaflet loleaflet: Towards eslint 6.0.0 #396 - no-prototype-builtins 2020-11-01 00:47:10 +03:00
man Fix typos 2020-10-07 12:51:08 +02:00
net Provide methods that output error headers into the socket 2020-10-28 13:12:27 +03:00
scripts pep8 coding style conformance for scripts/unocommands.py 2020-10-15 12:44:54 +03:00
test Make Themeing related CSS vars UI Configurable 2020-10-30 11:20:00 +01:00
tools Migrate code to use generic sendError 2020-10-28 13:12:27 +03:00
wsd wsd: privatize public members 2020-10-31 15:07:53 -04:00
.clang-format
.clang-tidy
.gitignore Fix gtk fake mobile application build 2020-07-14 16:20:38 +02:00
.gitpod.dockerfile Gitpod: Enable VNC and add browser 2020-10-10 01:54:42 +03:00
.gitpod.yml Gitpod: Silence the unneeded port popups 2020-10-17 08:54:23 +03:00
AUTHORS
autogen.sh Add FreeBSD case to autogen.sh 2020-10-24 17:51:15 +01:00
browsersync-config.js
ChangeLog
CODE_OF_CONDUCT.md Complete the CoC statement 2020-10-20 20:45:57 +03:00
configure.ac set the INFO_URL for the community project 2020-10-05 10:45:06 +02:00
CONTRIBUTING.md Create CONTRIBUTING.md 2020-10-26 05:45:29 +03:00
COPYING fix license headers 2020-10-01 11:56:43 +02:00
discovery.xml Add favIconUrl to apps in discovery 2020-09-29 09:52:21 +02:00
favicon.ico
g g review: check if 'gh' is authenticated already 2020-10-26 11:03:32 +01:00
loolkitconfig-mobile.xcu
loolkitconfig.xcu [cp] Collabora help URL 2020-10-02 13:43:33 +02:00
loolwsd-generate-proof-key Proof: fixed a typo, and handled the case when the script is running from rootless docker 2020-04-24 20:04:33 +02:00
loolwsd-systemplate-setup mount: handle symlinks and improve updating systemplate 2020-10-19 07:34:26 +02:00
loolwsd.init.rhel6
loolwsd.service change product name 2020-10-02 14:18:28 +02:00
loolwsd.spec.in change product name 2020-10-02 14:18:28 +02:00
loolwsd.xml.in The non-implemented WebDAV host was cleaned up, so let's kill these references, too. 2020-10-07 18:41:43 +02:00
Makefile.am Provide methods that output error headers into the socket 2020-10-28 13:12:27 +03:00
NEWS
PROBLEMS
README.CONTRIBUTING.md Clarify, re: E-mail. 2020-10-26 19:03:53 +00:00
README.md Update README.md 2020-10-30 16:50:12 +01:00
SECURITY.md Create SECURITY.md 2020-10-12 21:04:50 +02:00
sysconfig.loolwsd change product name 2020-10-02 14:18:28 +02:00

Collabora Online

irc Telegram Forum Website L10n Gitpod Ready-to-Code

LibreOffice in the Cloud on your own Terms

Key features

  • View and edit text documents, spreadsheets, presentations & more
  • Collaborative editing features
  • Works in any modern browser no plugin needed
  • Open Source

Website

For many more details, build instructions, downloads and more please visit https://collaboraonline.github.io/

Developer assistance

Please ask your questions on irc.freenode.net in our #cool-dev channel

Join the conversation on our Discourse server at https://forum.collaboraonline.com/

Development bits

This project has several components:

  • wsd/
    • The Web Services Daemon - which accepts external connections
  • kit/
    • The client which lives in its own chroot and renders documents
  • common/
    • Shared code between these processes
  • loleaflet/
    • The client side JavaScript component
  • test/
    • C++ based unit tests
  • cypress_test/
    • JavaScript based integration tests

Please consult the README files in the component's directory for more details:

  • wsd/README
  • loleaflet/README

iOS and Android apps

See the corresponding READMEs:

  • ios/README
  • android/README

Enjoy!