commit 6091d4d6c85ea5113f02ebd48d16ae957f2e3cb6
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Mon Jun 22 22:26:11 2026 +0200
fix: [XSS] filtering in poll answers
Poll answers are in plain-text but accept []() markdown links.
XSS found and kindly reported by 0xMitsurugi H (many thanks).
Answers are now trimmed.
commit 199bf4e13a82a0d6b2ba1c743a671d9697215a1d
Author: Adrien Dorsaz <adrien@adorsaz.ch>
Date: Sun May 31 21:55:19 2026 +0200
fix linuxfr-img container cache folder permission
Create the cache folder with permissions for ${UID} so docker/podman
now which rights to set when it creates the`cache-img` volume for
this path.
commit c1f87e998e5ebffe511a0300cf5e3744540a15d5
Author: Adrien Dorsaz <adrien@adorsaz.ch>
Date: Sun May 31 21:37:16 2026 +0200
make compose.yaml compatible with docker
commit 7fe3d0b456984b8093d66c2d6c4bdd62599c4e1e
Author: Adrien Dorsaz <adrien@adorsaz.ch>
Date: Sun May 31 10:36:48 2026 +0200
fix development.rb: `config.hosts` does not exists with Rails 5.2
commit fda8c591cfdbd71c9e970b9eaabeece47ddd8e11
Author: Adrien Dorsaz <adrien@adorsaz.ch>
Date: Fri Sep 20 08:37:55 2024 +0200
backport: use custom HTTP public port to use rootless containers by default
This commit introduces two new global constants MY_PUBLIC_URL and
IMG_PUBLIC_URL which should be used now to build URLs.
For alpha and production Ruby environments, they are fixed with their real
values directly in the `config/environments/*.rb` files.
For the development Ruby environment, they are both defined by default to
`http://dlfp.lo`. You can customize either by updating the
`config/environments/development.rb` file or by setting the
*process* environment variables `DOMAIN`, `DOMAIN_HTTP_PORT`, `IMAGE_DOMAIN`
and `IMAGE_DOMAIN_HTTP_PORT`.
For containers, you can set these variables in the `deployment/default.env`
file. For containers the default IMG_DOMAIN is set to `img.dlfp.lo`.
commit ef3c07237c9d05058605932978c711ae5f6952b6
Author: Adrien Dorsaz <adrien@adorsaz.ch>
Date: Sun May 31 10:04:29 2026 +0200
deployment: update container build sources (still using ruby 2)
The easiest was to update the Debian base image to bullseye as previous
Debian releases have been archived.
This commit backports too the new deployment file structure from the
rails7 branch. It uses more generic terms like `Containerfile` and
`compose.yaml` instead of docker specific names like `Dockerfile` and
`docker-compose.yaml`. You should be able to use `podman` dans `docker`
to run the linuxfr stack.
commit 265983e9685bcc696daca9e0eb5072344a657252
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Mon May 18 23:38:19 2026 +0200
update sql schema
commit 0a56499203b6f555a3cb4d2b32094722e2520a84
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Mon May 18 11:53:33 2026 +0200
fix: strip title for diaries too
commit e567cfe2f42c32d620dd71006054e7c91a199886
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Sat May 16 16:18:19 2026 +0200
Add new section logo
commit f969b711e28bb612c72cc5fc64f62b0ea9e45cf4
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Sat May 9 15:53:13 2026 +0200
fix: add lazy loading on sections too
commit d894aa9964263cff675eef6c670cc8d73002f123
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Tue Apr 28 20:28:02 2026 +0200
fix: URL in seeds.rb for FriendSite
commit 45ec5ce4c48a89e29301a83efaaf06ba73b851ec
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Sun Apr 12 12:54:55 2026 +0200
remove protocol-relative / implicit
commit 23dd1eb0483e7502ba780f4b3c83f9c0211ff19d
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Sun Mar 29 12:42:59 2026 +0200
fix: ensure post has been read at creation, for dashboard followup
commit 6dfc67d397d19e0d21a3f3e9c59a9ee6a73593ed
Author: Oumph <37904057+Oumph@users.noreply.github.com>
Date: Sun Mar 29 12:18:38 2026 +0200
Fix missing "poll" content in dashboard + wording
Co-authored-by: Oumph <37904057+Oumph@users.noreply.github.com>
commit e83d59e6125ab920c85470d2b128fa2cc08ea406
Author: Benoît Sibaud <oumph@linuxfr.org>
Date: Thu Mar 19 23:38:26 2026 +0100
add honeypot field for accounts too