This patch fixes a cross-site-scripting vulnerability in Greenlight
which allowed users to inject code into Greenlight by adding scripts
into their names.
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
* Allow uploading larger presentations
This patch allows uploading presentations up to 30MB instead of the
default 1MB. This should prevent users from getting an 401 reply from
Nginx in most cases.
* Update greenlight.nginx
Co-authored-by: Ahmad Farhat <ahmad.farhat@blindsidenetworks.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
This patch allows anonymous and user based authentication to LDAP
servers. This change is based on a patch against bn-ldap-authentication:
- https://github.com/blindsidenetworks/bn-ldap-authentication/pull/2
The patch introduces a new environment variable `LDAP_AUTH` which
controls the authentication method used against the LDAP server:
- `anonymous` enables an anonymous bind to the LDAP with no password
being used.
- `user` uses the user's own credentials to search for his data,
enabling authenticated login to LDAP without the need for a user with
global read privileges.
The default still remains at using a bind user, allowing for a seamless
upgrade path from the previous version.
This fixes#1082
Co-authored-by: Jesus Federico <jesus@123it.ca>
* Color Configuration for Cookie Banner
Right now, the colors of the cookie banner are hard-coded which can
easily clash with the configured site colors in site settings.
This patch switches to using the configured colors instead.
* Update application.scss
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
Co-authored-by: Jesus Federico <jesus@123it.ca>
Lars KiesowandAhmad Farhat
