Commit Graph

258 Commits

Author SHA1 Message Date
renovate[bot]
c6e83653db
Update dependency sharp to ~0.27.0 (#340)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-25 21:08:43 +07:00
renovate[bot]
2ea469891c
Update dependency systeminformation to ~4.33.1 (#339)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-25 21:08:34 +07:00
renovate[bot]
22f56de902
Update dependency eslint to ~7.16.0 (#338)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-19 12:03:41 +07:00
renovate[bot]
280d5b8131
Update dependency knex to ~0.21.14 (#337)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-18 12:26:06 +07:00
renovate[bot]
3cf22397dc
Update dependency eslint-plugin-compat to ~3.9.0 (#334)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-16 04:20:49 +07:00
renovate[bot]
0d6d8d1202
Update dependency systeminformation to ~4.32.0 (#335)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-16 04:20:33 +07:00
renovate[bot]
8717ae8c20
Update dependency browserslist to ~4.16.0 (#330)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-16 04:20:09 +07:00
renovate[bot]
2b9398d181
Update dependency postcss to ~8.2.1 (#329)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-16 04:18:12 +07:00
renovate[bot]
07f91865cc
Update dependency knex to ~0.21.13 (#333)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-16 04:13:24 +07:00
renovate[bot]
cf32e91a2b
Update dependency systeminformation to ~4.31.2 (#332)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-16 04:13:05 +07:00
renovate[bot]
f89bae3ac2
Update dependency systeminformation to ~4.31.0 (#328)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-06 23:15:58 +07:00
renovate[bot]
2914990fd8
Update dependency eslint to ~7.15.0 (#327)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-06 23:15:32 +07:00
renovate[bot]
e2c4018dab
Update dependency postcss to ~8.1.14 (#326)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-06 02:29:53 +07:00
renovate[bot]
92b2c753a1
Update dependency browserslist to ~4.15.0 (#325)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-06 02:29:40 +07:00
renovate[bot]
59b01b8f1c
Update dependency systeminformation to ~4.30.11 (#324)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-12-06 02:29:13 +07:00
renovate[bot]
4b3311401f
Update dependency systeminformation to ~4.30.7 (#321)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-30 19:54:13 +07:00
renovate[bot]
13afe9a75e
Update dependency express-rate-limit to ~5.2.3 (#316)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-26 19:59:25 +07:00
renovate[bot]
c114fd592a
Update dependency postcss to ~8.1.10 (#318)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-26 19:57:54 +07:00
renovate[bot]
d0ecaac1cf
Update dependency eslint to ~7.14.0 (#317)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-26 19:57:48 +07:00
renovate[bot]
39bb2b0357
Update dependency systeminformation to ~4.30.4 (#319)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-26 19:57:16 +07:00
renovate[bot]
3845329c78
Update dependency postcss to ~8.1.8 (#315)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-21 06:34:20 +07:00
renovate[bot]
95247daa80
Update dependency eslint-config-standard to ~16.0.2 (#313)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-18 13:37:33 +07:00
Bobby Wibowo
c30361e648
fix version requirement for gulp-dart-sass
also bumped v1 version string to trigger rebuilding again
it's mostly so that github actions' yarn cache gets rebuilt too or smth
2020-11-18 05:19:11 +07:00
Bobby Wibowo
a94d482fc5
replaced gulp-sass with gulp-dart-sass
removed node-sass as explicit dev dependency
gulp-dart-sass will already require sass (new dart sass, not node-sass)

added fibers as a new dev dependency
this is a requirement to speed up async sass compiling
https://sass-lang.com/dart-sass

full sub-dependencies upgrade (deleted yarn.lock then did yarn install)

bumped v1 version string to trigger auto rebuild
2020-11-18 01:13:30 +07:00
renovate[bot]
e86c614ee9
Update dependency sharp to ~0.26.3 (#310)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-18 00:28:25 +07:00
renovate[bot]
74daa71e4a
Update dependency gulp-terser to v2 (#311)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-18 00:27:18 +07:00
renovate[bot]
f01dfecfcc
Update dependency stylelint to ~13.8.0 (#312)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-18 00:26:34 +07:00
renovate[bot]
274a7173f1
Update dependency systeminformation to ~4.30.1 (#309)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-18 00:26:12 +07:00
renovate[bot]
629063553d
Update dependency gulp-sourcemaps to v3 (#307)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-12 16:07:19 +07:00
renovate[bot]
f5363596d6
Update dependency systeminformation to ~4.30.0 (#308)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-12 16:04:36 +07:00
renovate[bot]
4a337f1e61
Update dependency postcss to ~8.1.7 (#306)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-12 16:04:13 +07:00
renovate[bot]
395a318de0
Update dependency browserslist to ~4.14.7 (#303)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-10 22:27:58 +07:00
renovate[bot]
4af6c00c4f
Update dependency eslint to ~7.13.0 (#301)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-10 22:27:02 +07:00
renovate[bot]
00970a75e6
Update dependency postcss to ~8.1.6 (#300)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-10 22:25:07 +07:00
renovate[bot]
9d9fcf8460
Update dependency systeminformation to ~4.29.3 (#299)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-10 22:24:14 +07:00
Bobby Wibowo
4b6199a909
removed eslint-plugin-standard
it's deprected. the only rule that standard used from it had already
been merged to eslint-plugin-node instead.
2020-11-10 22:18:00 +07:00
renovate[bot]
d4a3ebbc58
Update dependency knex to ~0.21.12 (#298)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-02 18:08:22 +07:00
renovate[bot]
a74ff753f6
Update dependency browserslist to ~4.14.6 (#296)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-02 18:08:11 +07:00
renovate[bot]
165c4204d7
Update dependency helmet to ~4.2.0 (#297)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-02 18:07:53 +07:00
renovate[bot]
6eec4dbfeb
Update dependency knex to ~0.21.11 (#295)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-01 10:27:06 +07:00
Bobby Wibowo
88f852584c
!! REPLACED ClamAV BACKEND: clamdjs -> clamscan !!
Update your config file!
2020-11-01 06:35:56 +07:00
renovate[bot]
1902b1c668
Update dependency knex to ~0.21.10 (#294)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-01 05:19:27 +07:00
renovate[bot]
6d11d9c4b2
Update dependency eslint-config-standard to ~16.0.1 (#290)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-31 11:11:24 +07:00
renovate[bot]
1ce736f517
Update dependency gulp-terser to ~1.4.1 (#291)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-31 11:11:07 +07:00
Bobby Wibowo
c40478dd0a
Upgraded to ESLint 7 2020-10-30 22:54:02 +07:00
Renovate Bot
0fd751d8cd
Update dependency postcss to ~8.1.4 2020-10-30 15:22:59 +00:00
renovate[bot]
42448c2048
Update dependency systeminformation to ~4.27.11 (#287)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-30 22:22:10 +07:00
Renovate Bot
bafba3f798
Update dependency knex to ~0.21.9 2020-10-29 21:48:45 +00:00
renovate[bot]
ee89684a2d
Update dependency systeminformation to ~4.27.10 (#280)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-21 22:59:26 +07:00
renovate[bot]
72db74f854
Update dependency sharp to ~0.26.2 (#281)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-21 22:57:49 +07:00
renovate[bot]
ae71949b3b
Update dependency postcss to ~8.1.2 (#282)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-21 22:56:41 +07:00
renovate[bot]
aa5e5ce87b
Update dependency bulma to ~0.9.1 (#277)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-02 23:25:47 +07:00
renovate[bot]
991a229050
Update dependency systeminformation to ~4.27.6 (#279)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-02 23:23:41 +07:00
renovate[bot]
22cd89779d
Update dependency postcss to ~8.1.1 (#278)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-02 04:06:06 +07:00
renovate[bot]
cbd0142dc5
Update dependency knex to ~0.21.6 (#275)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-02 03:00:16 +07:00
renovate[bot]
530245aac8
Update dependency eslint-plugin-import to ~2.22.1 (#276)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-10-02 02:59:16 +07:00
renovate[bot]
9b2721dfc8
Update dependency postcss to ~8.1.0 (#272)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-09-27 08:11:37 +07:00
Bobby Wibowo
e0901baa8b
Added postcss as an actual dev dependency
This is required since gulp-postcss no longer has postcss as an explicit
dependency since v9.
2020-09-27 06:17:56 +07:00
renovate[bot]
64e66e4b9a
Update dependency gulp-postcss to v9 (#271)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-09-27 06:08:28 +07:00
renovate[bot]
0580c374b9
Update dependency node-addon-api to v2.0.2 (#269)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-09-27 06:04:09 +07:00
Bobby Wibowo
b7399d2d8d
Updated dependencies
helmet: 4.1.0 -> 4.1.1
sharp: 0.26.0 -> 0.26.1
systeminformation: 4.27.3 -> 4.27.5

dev dependencies:
browserslist: 4.14.1 -> 4.14.5
del: 5.1.0 -> 6.0.0
stylelint: 13.7.0 -> 13.7.2

No client assets rebuild needed.
2020-09-27 04:43:35 +07:00
Bobby Wibowo
c8a5f7be16
Added setContentDisposition option
Resolves #192

This added 2 new dependencies:
content-disposition
BobbyWibowo/serve-static

content-disposition:
This has fallback generation for file names that are outside ISO-8859-1.
Plus it was already a sub-dependency due to express to begin with.

BobbyWibowo/serve-static:
A fork of express/serve-static to allow specifying an async setHeaders
function by the name preSetHeaders, that will be awaited before
creating send stream to clients.
2020-09-27 04:33:42 +07:00
Bobby Wibowo
6b2b8e9b0e
Updated dependencies
node-fetch: 2.6.0 -> 2.6.1 (security)

browserslist: 4.14.0 -> 4.14.1
stylelint: 13.6.1 -> 13.7.0

Obligatory bump to versions.json as this commit requires rebuilding
client assets (dev dependencies updates affect style.css).
As usual, rebuilds will be in the next commit by the build bot.
2020-09-07 23:08:53 +07:00
Bobby Wibowo
a34fa97084
Updated dependencies
sharp: 0.25.4 -> 0.26.0
systeminformation: 4.26.11 -> 4.27.3

gulp-terser: 1.3.2 -> 1.4.0
2020-08-28 05:24:42 +07:00
Bobby Wibowo
41fb14e865
Added system & node uptime to Statistics menu
src/js/misc/utils.js: Added page.getPrettyUptime().

Updated dependency:
helmet: 3.23.3 -> 4.1.0

lolisafe.js: Disabled CSP by default.
Since helmet 4, CSP would instead be enabled by default.
2020-08-22 01:35:30 +07:00
Bobby Wibowo
52bc0a7db2
Updated some dependencies
knex: 0.21.2 -> 0.21.5
systeminformation: 4.26.10 -> 4.26.11

browserslist: 4.13.0 -> 4.14.0
gulp-terser: 1.2.1 -> 1.3.2
2020-08-22 01:01:22 +07:00
Bobby Wibowo
34d3601c30
Transitioned styling to Sass
Added new dev dependencies:
bulma, gulp-sass, node-sass

Updated some dependencies

Various other things related to styling

Bumped v1 version string and rebuilt client assets
2020-07-28 21:47:48 +07:00
Bobby Wibowo
63330bdc3f
sqlite3/node-addon-api 2.0.0 -> 2.0.1 2020-07-19 19:03:07 +07:00
Bobby Wibowo
a200f81fd5
Updated dependencies
Rebuilt client assets and bumped v1 version string
2020-07-19 18:23:33 +07:00
Bobby Wibowo
2edb7f8bab
Updated dependencies
Bumped v1 version string and rebuilt client assets
2020-07-02 15:16:13 +07:00
Bobby Wibowo
e552017bfb
Change deps versions from major to minor ranges
Since I'd usually test for new versions of dependencies anyway, only
minor version updates that I personally support for self-update.
2020-06-20 00:17:16 +07:00
Bobby Wibowo
4aeb364d0d
Upgraded all dependencies
Consult package.json
2020-06-18 03:46:27 +07:00
Bobby Wibowo
e7fc354729
Updated dependencies
systeminformation: 4.26.4 -> 4.26.5
As always, full upgrade. So some sub-dependencies were updated as well.
2020-05-29 02:58:56 +07:00
Bobby Wibowo
62a977542e
Switched to BLAKE3 for file hashing [MORE]
UPDATE YOUR CONFIG FILE IF YOU USE CHUNKED UPLOADS!
Read more about this at the end.

Added new dependency: blake3

Hashes will be created as the uploads are being written to disk.
With exception for chunked uploads!
For them specifically, their hashes will be created as they're being
rebuilt into a single file.
Should still be a lot better than the previous case where it had to
re-read the already written files.

To support that feature, added a new file
controllers/multerStorageController.js.
It's just a custom storage engine for Multer.

chunkSize option now allows setting max chunk size from config file.
Previously it was hardcoded to 95MB, but assuming you have paid
Cloudflare plans, you can actually have up to 500MB.

Also moved the option to be after maxSize and before urlMaxSize.
Made a lot more sense to me this way, as chunked uploads only work on
regular uploads.

Updated v1 version string and rebuilt client assets.
2020-05-29 02:52:58 +07:00
Bobby Wibowo
feef65a165
Updated dependencies
systeminformation: 4.26.1 -> 4.26.4
eslint-plugin-compat: 3.6.0 -> 3.7.0
gulp-cli: 2.2.0 -> 2.2.1
2020-05-27 01:12:56 +07:00
Bobby Wibowo
559670bd83
Updated dependencies
Added SQLite's WAL files to .gitignore
2020-05-19 23:46:23 +07:00
Bobby Wibowo
9c56dd327a
Updated dependencies
systeminformation: 4.23.9 -> 4.26.1
eslint-plugin-compat: 3.5.1 -> 3.6.0

Renamed all .eslintrc.json to .eslintrc.js.

Removed unnecessary init for missing params in favor of default params.
Buble will take care of compiling that for old browsers.

Bumped ecmaVersion for client JS from 6 (2015) to 7 (2016).
Buble should support compiling ES2016 features as well.

Properly deny some actions when an online section is still loading.

Properly apply progress cursor on items/buttons that shouldn't be used
while an online section is still loading.

Bumped v1 version string and rebuilt client assets.
2020-05-17 00:11:10 +07:00
Bobby Wibowo
ee443b5108
Updated dependencies
express-rate-limit: 5.1.1 -> 5.1.3
systeminformation: 4.23.8 -> 4.23.9
2020-04-30 05:58:47 +07:00
Bobby Wibowo
ff54f088bd
Added client assets update detection
/api/check and /api/token/verify will now pass along v1 version string
if used (when config.cacheControl is used) for both home.js and
dashboard.js to use to compare version strings.
This should help notify users using browsers with a bit more overbearing
caching (generally mobile browsers).

Rebuilt client assets and bumped v1 version string

Slight update to yarn.lock (a small syntax change for node-gyp, idk why)
2020-04-30 05:56:28 +07:00
Bobby Wibowo
4759995ff3
Updated README.md
Updated screenshot.

Edited claim about node 12 not being tested, as I've tested it.
Couldn't find any issues.

Added a new section about updating when you have modified some files.

Rephrased ClamAV support section a bit.

Updated dependencies:
knex: 0.21.0 -> 0.21.1

Rebuilt yarn.lock file with node 12.
Nothing significant really changed.
Things seem to be backward compatible to node 10.
2020-04-29 13:31:13 +07:00
Bobby Wibowo
e73514b62e
Updated dependencies
sqlite3: 4.1.1 -> 4.2.0
systeminformation: 4.23.5 -> 4.23.8
stylelint: 13.3.1 -> 13.3.1
2020-04-28 06:10:25 +07:00
Bobby Wibowo
8932615fbb
Updated dependencies
Updated README.md to emphasize Node 10.x is the oldest supported version
and that Node 12.x have NOT been tested.

I'll work on testing Node 12.x in the near future though!
2020-04-21 17:12:00 +07:00
Bobby Wibowo
3e3878b93c
Massively overhauled uploads filtering endpoint
Please consult the Help? button again to learn all the syntax changes!
The prompt will now also have its width expanded!

Updated dependency, knex: 0.20.13 -> 0.20.15.

Added new dependency: search-query-parser.

Updated all sub-dependencies.

Critical? Admins-only API /users/edit will no longer return NEW password
salt of the user when randomizing their password.

Added page.escape() function to js/misc/utils.js.
This will be used to escape input in upload filters input box.
The same function used in utilsController.js.

Pretty dates will now use / instead of - for date separator.
This is due to the fact that date range key for filtering uploads
can not accepts dates with - separator.
To avoid inconsistency, we will now use / separator.

Caching system of album public pages will now be disabled during
development (yarn develop).

Cleaned up domClick() function in js/dashboard.js.

If using date or expiry range keys when filtering uploads, attach
client's timezone offset to the API requets.
This will be used by the server to calculate timezone differences.

Success prompt when changing token will now auto-close.

Removed ID column from Manage Users.

Improved success prompt when editing users.
This will properly list all of the edited fields at once,
excluding user group change.
Success message for user group change will require a bit more changes
on the API endpoint, which is a bit annoying.

Rebuilt client-side assets and bumped v1 version string.
2020-04-19 02:52:11 +07:00
Bobby Wibowo
e5041a6d0b
Updated dependencies
systeminformation: 4.23.1 -> 4.23.3
stylelint: 13.3.0 -> 13.3.1

Rebuilt client assets. Affected file:
dist/js/dashboard.js.map

Bumped v1 version string.
2020-04-12 15:29:14 +07:00
Bobby Wibowo
f534ac2e4d
Updated all dependencies
Updated lolisafe.js
2020-04-04 22:08:37 +07:00
Bobby Wibowo
6741798085
Updated all dependencies 2020-03-24 15:06:54 +07:00
Bobby Wibowo
3a787ade65
Dropped support for Node 8, and more
Updated all dependencies.

Some latest version of dependencies such as bcrypt and sharp
requires Node 10+.

Updated fontello.css to uses latest version string from versions.js.
When updating version strings in commit
2670db269d, I forgot to rebuild this css.
2020-03-10 00:10:36 +07:00
Bobby Wibowo
2670db269d
Updated dependency systeminformation
And bumped all version strings to update latest cache control.
2020-02-11 17:20:43 +07:00
Bobby Wibowo
c0fc463595
Updated all dependencies
Rebuilt all CSS assets, not sure why.
Probably due to browserslist being updated?

While I was as it, I also updated safe.fiery.me's node version to
10.19.0.
2020-02-09 16:42:08 +07:00
Bobby Wibowo
eee024e0ca
Updated all dependencies 2020-01-11 02:14:23 +07:00
Bobby Wibowo
32e4f8a71c
Upgraded dependencies
knex: 0.20.3 -> 0.20.4
sharp: 0.23.3 -> 0.23.4
sqlite3: 4.1.0 -> 4.1.1

Upgraded dev dependencies:

browserslist: 4.7.3 -> 4.8.2
eslint: 6.7.1 -> 6.7.2
2019-12-08 15:25:26 +07:00
Bobby Wibowo
337a0a61ff
Implemented parallel URL uploads
This doesn't use the server's built-in ability to accept multiple URLs
per API request.
It behaves the same as regular uploads, in that it executes one API call
per file, simultaneously.

I figured this is a better implementation to shift queues faster.

---

Fetch error from URL uploads due to exceeding size limit will no longer
be logged in server's console.

Clients will also see better formatted error message for URL uploads'
file size limit errors.

---

Bumped dependencies:
knex: 0.20.2 -> 0.20.3
systeminformation: 4.15.3 -> 4.16.0

Bumped v1 version string
2019-11-29 17:42:29 +07:00
Bobby Wibowo
ec7c160f31
Fixed uploads timing out without error after 30 s
As it turns out, Dropzone had a built-in timeout of 30 seconds.
There'll be no timeout now (thus respecting timeout settings of the
server and/or CDN).

While I was at it, I also refactored the bits for initializing Dropzone.

Also added a hacky method to handle Dropzone timeout,
in case someone wants to re-enable that.
"Hacky" due to lack of Dropzone's built-in timeout event handler.

Updated dev dependency:
eslint: 6.6.0 -> 6.7.1
2019-11-25 15:18:14 +07:00
Bobby Wibowo
5207df6123
Updated dependencies
bcrypt: 3.0.6 -> 3.0.7
knex: 0.20.1 -> 0.20.2
sharp: 0.23.2 -> 0.23.3

Dev dependency:
browserslist: 4.7.2 -> 4.7.3

As always, this was a full upgrade, so sub-dependencies were also
upgraded if applicable (more details in yarn.lock).

I noticed stylelint also got updated to v12, but I will be postponing
that till gulp-stylelint updates its peer dependency requirement.
2019-11-20 20:16:37 +07:00
Bobby Wibowo
d5cd5b7b5b
Updated
Uploads thumbs view (dashboard) will no longer use smooth scrolling on
page change, etc.
This used to cause all thumbs to be loaded anyway when navigating with
its bottom pagination bar.

Bumped v1 version string.

---

Updated dependency:
systeminformation: 4.14.17 -> 4.15.3
2019-11-13 13:21:36 +07:00
Bobby Wibowo
a28d862c14
Added group bypass to virus scanning
Also better-ish scan results handling again, I guess

Updated dependency knex: 0.20.0 -> 0.20.1
2019-11-06 03:35:04 +07:00
Bobby Wibowo
8f48889c90
Updated dependencies 2019-10-29 05:37:25 +07:00
Bobby Wibowo
36763c2a77
Security fix
Replaced all instances of DB .whereRaw with their much safer equivalent
methods.

All previous usages of .whereRaw were vulnerable to SQL injections,
cause we were passing the data directly.

Fortunately, they were only used in API routes that required staff
(moderators included) accounts.

---

Updated dependency:
helmet: 3.21.1 -> 3.21.2
2019-10-22 10:52:52 +07:00
Bobby Wibowo
cf8d2895f1
Updated dependencies
systeminformation: 4.14.12 -> 4.14.16
browserslist: 4.7.0 -> 4.7.1
2019-10-21 17:51:31 +07:00
Bobby Wibowo
321e4557db
Updated dependencies
systeminformation: 4.14.11 -> 4.14.12
gulp-stylelint: 9.0.0 -> 10.0.0
2019-10-15 17:46:09 +07:00
Bobby Wibowo
7855801d62
Updated
Rewritten codes for home uploader config.
All options are now defined in a single config object in home.js.
Config tab content will be dynamically generated through that config.
This should eliminate the need of modifying home.njk whenever a new
option needs to be added,
make the codes more readable, and easier to extend.

Upgrade stylelint dev dependency.

Bumped v1 version string.
2019-10-11 12:36:59 +07:00
Bobby Wibowo
b2f96360ae
Updated knex.js to 0.19.5
Renamed todo.md to TODO.md

Edited a todo task
2019-10-09 12:36:19 +07:00
Bobby Wibowo
256686f400
Updated dependencies 2019-10-06 05:24:20 +07:00
Bobby Wibowo
582440e5ef
Updated sharp to 0.23.1 2019-09-28 16:45:36 +07:00
Bobby Wibowo
a233dd6bba
Updated helmet 2019-09-22 11:40:59 +07:00
Bobby Wibowo
6133554013
Updated stylelint dev dependency 2019-09-20 12:19:28 +07:00
Bobby Wibowo
a79803cbd6
Updated
Added gulp-replace dev dependency.

Removed version strings of Fontello fonts from fontello.css

Added "build:fontello" Gulp task which will append version string to
Fontello fonts, then do the usual processing for CSS file.
It will use type 5 from versions.json, if available.
Also updated src/README.md about it.
2019-09-19 20:39:23 +07:00
Bobby Wibowo
9e9b0d4439
Updated
Updated some dev dependencies.

---

Gulp will now build CSS/JS files during development into dist-dev
directory, to prevent IDE's Git from unnecessarily building diff's.

Added dist-dev to ignore files.

---

The entire config fille will now be passed to Nunjuck templates for ease
of access of config values.

Root domain for use in Nunjuck templates will now be parsed from config.

Better page titles.

Updated help message for "Uploads history order" option in
homepage's config tab.

Added "Load images for preview" option to homepage's config tab.
Setting this to false will now prevent image uploads from loading
themselves for previews.

Uploads' original names in homepage's uploads history are now
selectable.

Min/max length for user/pass are now enforced in auth's front-end.

Improved performance of album public pages.
Their generated HTML pages will now be cached into memory.
Unfortunately, No-JS version of their pages will be cached separately,
so each album may take up to double the memory space.

File names in thumbnails no longer have their full URLs as tooltips.
I saw no point in that behavior.

Added video icons.
Homepage's uploads history will now display video icons for videos.

"View thumbnail" button in Dashboard is now renamed to "Show preview".
Their icons will also be changed depending on their file types.

Added max length for albums' title & description.
These will be enforced both in front-end and back-end.
Existing albums that have surpassed the limits will not be enforced.

A few other small improvements.
2019-09-17 11:13:41 +07:00
Bobby Wibowo
c9ba16e1d6
Updates (very important to read)
Client-side CSS & JS files will now be processed with Gulp.
Gulp tasks are configured in gulpfile.js file.

CSS files will be optimized with postcss-preset-env, which will
auto-add vendor prefixes and convert any parts necessary for browsers
compatibility.
Afterwards they will be minified with cssnano.

JS files will be optimized with bublé,
likewise for browsers compatibility.
Afterwards they will be minified with terser.

Unprocessed CSS & JS files will now be located at src directory, while
the processed results will be located at dist directory.

Due to bublé, the JS files should now be compatible up to IE 11
at the minimum.
Previously the safe would not work in IE 11 due to extensive usage of
template literals.
Due to that as well, JS files in src directory will now extensively use
arrow functions for my personal comfort (as they will be converted too).

The server will use the processed files at dist directory by default.
If you want to rebuild the files by your own, you can run "yarn build".
Gulp is a development dependency, so make sure you have installed all
development dependencies (e.i. NOT using "yarn install --production").

---

yarn lint -> gulp lint

yarn build -> gulp default

yarn watch -> gulp watch

yarn develop -> env NODE_ENV=development yarn watch

---

Fixed not being able to demote staff into normal users.

/api/token/verify will no longer respond with 401 HTTP error code,
unless an error occurred (which will be 500 HTTP error code).

Fixed /nojs route not displaying file's original name when a duplicate
is found on the server.

Removed is-breeze CSS class name, in favor of Bulma's is-info.

Removed custom styling from auth page, in favor of global styling.

Removed all usage of style HTML attribute in favor of CSS classes.

Renamed js/s/ to js/misc/.

Use loading spinners on dashboard's sidebar menus.

Disable all other sidebar menus when something is loading.

Changed title HTML attribute of disabled control buttons in
uploads & users list.

Hid checkboxes and WIP controls from users list.

Better error messages handling.
Especially homepage will now support CF's HTTP error codes.

Updated various icons.
Also, added fontello config file at public/libs/fontello/config.json.
This should let you edit them more easily with fontello.

Use Gatsby icon for my blog's link in homepage's footer.

A bunch of other improvements here & there.
2019-09-15 13:20:11 +07:00
Bobby Wibowo
10a464bc73
Updated
Moved authors info to AUTHORS file.

Updated Git urls in package.json file.

Added .stylelintrc.

Updated all CSS files to respect current Stylelint guidelines.

Updated dependency: knex.js.

Fixed notice message in no-js version of album public pages.

Bumped v1 version string.
2019-09-12 14:44:31 +07:00
Bobby Wibowo
02e2e402c3
!!! MASSIVE OVERHAUL !!!
As the title says, this commit is a massive overhaul.
I've rewritten/restrucuted almost everything in the controller scripts.
Because of that, there's a considerable possibility that I've broken
something somewhere.

Notable changes:

Added temporary uploads.

Removed file name length changer from dashboard,
in favor of an equivalent in homepage config tab.
This allows non-registered users to also set file name length.

A bunch of other undocmented stuff.
I don't know, I'm too tired to remember them all.
2019-09-08 08:56:29 +07:00
Bobby Wibowo
05b905bc9b
Updated
Upgraded dependencies.

Stop adding cache-control header to album zip files unless
config.cacheControl is enabled.

Updated CSS files.
Moved thumbnail-related styling to thumbs.css.
Various other fixes & improvements.

Moved render.js from public/js to public/js/s.

Removed sharex.js in favor of public/js/s/utils.js.
Moved getPrettyDate() & getPrettyBytes() to that JS file as well.

Added lsKeys global variable wherever applicable.
Previously the idea was only used in dashboard.js.

Added No-JS version of album public pages.
You'll only have to add ?nojs to the URL.
Viewing the regular version with JS disabled will show a notice with
a link to the No-JS version of the particular album.
Overall page size of the regular version will now be lower as well,
since there'll be no need to add noscript tag for each thumbs.

No longer show Administrator section to non-admin in the dashboard.
Moderators will ONLY be able to see manage users menu as well.

Simplified FAQ wherever applicable.
Added a new FAQ about bug report or feature request.

Updated link for Firefox extension.
Also pushed Firefox link before Chrome, cause I like it more.

Added browser settings menu to dashboard.
This allows you to choose file size unit (kilobyte vs kibibyte) for that
specific browser.
The preference will be used on homepage, dashboard and album pages.
This also allows you to set chunk size and maximum parallel uploads
for the homepage uploader.

All menu links in the dashboard will now scroll to the content once
loaded.
Previously it would only do so with manage uploads/users when
switching pages.

Refactored all instances of for-in & for-of loop from browser JS files.
For the sake of uniformity, for now.
2019-09-02 02:23:16 +07:00
Bobby Wibowo
7e3d177d00
Updated
Added logger.js to format console logs (adding timestamps).

Re-ordered modules loading in lolisafe.js, and a few other minor edits.

Updated dev dependencies.

A few other minor edits.
2019-08-27 00:02:06 +07:00
Bobby Wibowo
14d69bf1c1
Updated dev dependencies 2019-08-20 06:04:27 +07:00
Bobby Wibowo
63e26462ea
Updated
Pressing Enter on the auth form will now properly make it try to login.

Slightly better error messages on auth page.

Bumped v1 version string.

Updated dependencies (knex & sqlite).
2019-08-18 16:57:56 +07:00
Bobby Wibowo
6496b03b71
Updates
Updated deps.

Re-enabled eslint rule no-async-promise-executor.
Updated some codes to follow the said rule.
Though I had to disable the rule in a line at utilsController.js
due to complexity.
I'll give it more thoughts in the future.

Bumped v1 version string.
2019-08-04 06:37:55 +07:00
Bobby Wibowo
aab8058b28
Updated dependencies 2019-07-21 05:17:45 +07:00
Bobby Wibowo
1b79ee3e91
Updated dependencies 2019-07-18 06:02:45 +07:00
Bobby Wibowo
34347915ab
Updated dependencies 2019-07-14 17:04:31 +07:00
Bobby Wibowo
32604bc35e
Updated dependencies 2019-07-11 05:08:13 +07:00
Bobby Wibowo
e275ab16ae
Updated
yarn.lock:
+ Rebuild dependencies. I'm starting to think dependabot isn't quite reliable.

auth.js + home.js + _globals.njk:
+ Updated a few error handlings to handle error messages better.
2019-07-03 22:56:45 +07:00
dependabot-preview[bot]
1e0e4efc83 Bump eslint-plugin-promise from 4.1.1 to 4.2.1 (#20)
Bumps [eslint-plugin-promise](https://github.com/xjamundx/eslint-plugin-promise) from 4.1.1 to 4.2.1.
- [Release notes](https://github.com/xjamundx/eslint-plugin-promise/releases)
- [Changelog](https://github.com/xjamundx/eslint-plugin-promise/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xjamundx/eslint-plugin-promise/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-03 22:44:53 +07:00
dependabot-preview[bot]
762a3cadb7 Bump eslint-plugin-import from 2.17.3 to 2.18.0 (#19)
Bumps [eslint-plugin-import](https://github.com/benmosher/eslint-plugin-import) from 2.17.3 to 2.18.0.
- [Release notes](https://github.com/benmosher/eslint-plugin-import/releases)
- [Changelog](https://github.com/benmosher/eslint-plugin-import/blob/master/CHANGELOG.md)
- [Commits](https://github.com/benmosher/eslint-plugin-import/compare/v2.17.3...v2.18.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-03 22:44:43 +07:00
dependabot-preview[bot]
5e42ce01e9 Bump knex from 0.17.6 to 0.18.1 (#22)
Bumps [knex](https://github.com/tgriesser/knex) from 0.17.6 to 0.18.1.
- [Release notes](https://github.com/tgriesser/knex/releases)
- [Changelog](https://github.com/tgriesser/knex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tgriesser/knex/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-07-03 22:44:27 +07:00
Bobby Wibowo
d2d41fc127
Rebuilt yarn.lock 2019-06-18 20:11:17 +07:00
dependabot-preview[bot]
ec6069d962 Bump express-rate-limit from 4.0.4 to 5.0.0 (#18)
Bumps [express-rate-limit](https://github.com/nfriedly/express-rate-limit) from 4.0.4 to 5.0.0.
- [Release notes](https://github.com/nfriedly/express-rate-limit/releases)
- [Commits](https://github.com/nfriedly/express-rate-limit/compare/v4.0.4...v5.0.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-14 20:32:30 +07:00
dependabot-preview[bot]
8eb3ff9a0d Bump sqlite3 from 4.0.8 to 4.0.9 (#16)
Bumps [sqlite3](https://github.com/mapbox/node-sqlite3) from 4.0.8 to 4.0.9.
- [Release notes](https://github.com/mapbox/node-sqlite3/releases)
- [Changelog](https://github.com/mapbox/node-sqlite3/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mapbox/node-sqlite3/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-14 20:32:14 +07:00
dependabot-preview[bot]
9f29335214 Bump knex from 0.17.3 to 0.17.6 (#17)
Bumps [knex](https://github.com/tgriesser/knex) from 0.17.3 to 0.17.6.
- [Release notes](https://github.com/tgriesser/knex/releases)
- [Changelog](https://github.com/tgriesser/knex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tgriesser/knex/commits)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-06-14 20:31:29 +07:00
dependabot[bot]
677aa8f68e
Bump sshpk from 1.13.1 to 1.16.1
Bumps [sshpk](https://github.com/joyent/node-sshpk) from 1.13.1 to 1.16.1.
- [Release notes](https://github.com/joyent/node-sshpk/releases)
- [Commits](https://github.com/joyent/node-sshpk/compare/v1.13.1...v1.16.1)

Signed-off-by: dependabot[bot] <support@github.com>
2019-06-06 08:05:52 +00:00
Bobby Wibowo
5c41fc9249
Updates
utilsController.js:
+ /api/stats: Cache invalidation requests will now only store timestamp
of the request instead of purging the cache entirely.
Subsequent requests to the API will no longer attempt to generate stats
if a previous request before it is still generating, since it can
take a while in big sites.
So instead, the cached stats will be returned to them, regardless of
whether it's still valid.
This should avoid "race condition" in sites with multiple admins.

* dashboard.js:
+ Added an appendix into "Delete by names" feature in dashboard to
inform staffs that they can use the feature to delete files by other
users as well.
+ Added comments explaning the need of page.domClick() function.
+ Addition to the change regarding /api/stats route: If there is no
cached stats, but a previous request is still generating, inform
the user about it.

config.sample.js + lolisafe.js:
+ We now support configuring rate limits through config file.
No more hard-coded rate limits.
Don't forget to update your config.js accordingly.

package.json + yarn.lock:
+ Updated dependencies.
2019-06-04 02:40:24 +07:00
Bobby Wibowo
a8ae88babd
Updated dependencies 2019-05-07 19:35:56 +07:00
Bobby Wibowo
8c3fb78135
Upates
* Added Statistics menu to Administration items in dashboard.

* Added /api/stats route.

Imo, my implementation of this whole thing is rather dirty-ish, but hey
as long as it works.

I'll be using lolisafe2 for future devs tbh.
2019-04-06 00:32:52 +07:00
Bobby Wibowo
2b8f52ff72
Merge branch 'master' into safe.fiery.me 2019-03-28 03:42:27 +07:00
Bobby Wibowo
b2ed4deda8
Reinstall dependencies
Dependencies of dependencies (dependency-ception) were mostly outdated,
so we reinstalled them all to get all the latest versions available.
2019-01-10 16:06:28 +07:00
Bobby Wibowo
e5457d9dba
Updated dependencies 2019-01-10 15:56:09 +07:00
Bobby Wibowo
f0716c8ffd
Updated yarn.lock 2018-12-08 05:16:43 +07:00
Bobby Wibowo
6af52341c9
Init ids-cache branch 2018-12-03 16:18:52 +07:00
Bobby Wibowo
b6bd833110
Replace graphicsmagick with sharp 2018-12-03 14:20:13 +07:00
Bobby Wibowo
6af1f6f490
Removed chokidar resolution
I added the resolution since an issue was reported by Snyk.io.
But I recently noticed that it prevents installation on node 10.x.
I haven't checked whether the resolution is still necessary though.

Also removed .vscode settings.
I plan to add a cleaner way for this later.
2018-11-24 15:18:23 +07:00
Bobby Wibowo
e2831f2181
Updates
* uploadController.js: expect some multer error codes and don't log their stack traces to console when they occur.

* yarn.lock: added integrity field (yarn's new addition).
2018-10-08 23:14:10 +07:00
Bobby Wibowo
30c011ce5c
Replaced snekfetch with node-fetch 2018-09-23 23:28:15 +07:00
Bobby Wibowo
65442c18c5
Reworked extension parsing
Removed "path-complete-extname" module in favor of an in-house solution, utilsController.extname().

For now the function will attempt to preserve multi-archive extensions (.001, .002, and so on), as well as some known tarballs (.tar.gz and the likes).

The function will always return lower case extension. It should be fine, but do keep it in mind.
2018-09-18 02:32:27 +07:00
Bobby Wibowo
a207c4a806
Init 'clamdjs' branch (#8)
Use clamdjs module instead of clam-engine. This module connects to clam daemon server.
2018-09-04 22:48:24 +07:00
Bobby Wibowo
36da76357e
Updates
* Added an experimental virus scanning feature using ClamAV. This has only been tested with an Ubuntu machine.

* File extensions will now be parsed with path-complete-extname module. This will ensure extensions such as .tar.gz are properly parsed.

Notice: It may take a minute or so to start the safe with virus scanning, as apparently the module takes a while to create the engine. I'm guessing since it'll be loaded to memory? Either way, once the engine is created, everything should work fine. Virus scanning should also not have that much of an impact to the upload time.
2018-09-02 03:37:26 +07:00
Bobby Wibowo
f043f65ca1
Updates
* Added Cloudflare purge cache support. Check configuration sample at config.sample.js.
When it's enabled, whenever files are being deleted, it will send a POST request to Cloudflare's API to purge cache of the deleted files.
This adds a new dependency called "snekfetch". It's lightweight though.

* uploadsController.delete() will now wrap uploadsController.bulkDelete() instead.
2018-05-09 16:53:27 +07:00
Bobby Wibowo
6a25eaac05
Updates
* Updated yarn.lock.

* Added resolution for chokidar. This is going to be used by nunjucks if "watch" is set to true. Although we don't really use it, chokidar 1.x has a vulnerability.
2018-04-25 18:39:54 +07:00
Bobby Wibowo
c2db094e62
Updated dependencies
I forgot to remove handlebars completely, lmao.
Also updated vscode's settings. Temporarily only using "michelemelluso.code-beautifier" extension to beautify CSS until I find a better alternative.
2018-04-19 04:19:05 +07:00
Bobby Wibowo
09f51c8448
Updates~ 😉
Thanks to Zephyrrus for the hints about nunjucks, sort of (he did not really give out any specific hints to me, I stalked his fork, lmao).

* Replaced Handlebars with Nunjucks.

* Replaced all static HTML files with their NJK-equivalent (excluding error pages).

* Renamed "albumDomain" to "homeDomain" in config.sample.js (make sure you update your config.js too).

* Updated dependencies: knex and eslint-plugin-import (dev).

* Updated vscode's settings.json (I may update this again very soon).
2018-04-19 04:00:36 +07:00
Bobby Wibowo
7978325cd6
Updates
* Removed rimraf from dependency. Although really it'll still need to be used by other dependencies, such as eslint and bcrypt, so it'll still have to be downloaded by yarn either way.

* Updated dashboard.css. Added "overflow: hidden" to thumbnail container. Previously potrait thumbnails will be visible outside of their container.

* Removed notice about having "chunks" folder from config.sample.js. Added a line in lolisafe.js to create the folder if it doesn't exist instead.

* Updated bcrypt to v2.0.0. I'm not really sure whatever has changed, but I've tested that it didn't require any additional changes for our current usage.

* Chunks will no longer be saved with their original file's extension. Instead they'll only be saved as plain files named 0, 1, ..., n, without any extension whatsoever. Extension for joined chunks will be read from the original file's name in /api/upload/finishchunks. If the user doesn't pass that data when calling the API, the joined chunks will not have any extension.

* Since rimraf has been removed, uploadsController.actuallyFinishChunks() will now use a combination of fs.unlink() and fs.rmdir(). Promise.all() will be used when running fs.unlink() so that all chunks will be deleted at the same time through multiple instances of async tasks (probably).

* Some other small changes and tweaks in uploadController.js.
2018-04-09 01:30:25 +07:00
Bobby Wibowo
b1dbb931c1
Updates
* Updated eslint-plugin-import dev dependency.

* Added 2 new ESLint rules: "prefer-const" and "object-shorthand".

* Refactor all JS files to follow the new ESLint rules.

* Refactored all instances of for-i into for-of wherever applicable.
2018-04-05 17:52:57 +07:00