If you select a presentation with a very long filename in in Greenlight,
the filename text in the upload dialog wraps at the end and leaves the
label box, leading to a slightly broken looking user interface.
This patch adjusts the style to hide the end of a long filename, ending
with a horizontal ellipsis instead.
We noticed that the current default settings perform very poorly under
load. We managed to literally take down Greenlight during a larger event
when people where accessing the landing page for rooms and when doing
some tests, I was more or less able to DoS Greenlight on my own.
This patch adds a default worker configuration similar to the previous
configuration with one worker, but lets users easily adjust it to more
workers which significantly improves the situation. The small, 4 core
machine I was testing on could handle about thrice the amount of
requests.
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
This patch fixes a cross-site-scripting vulnerability in Greenlight
which allowed users to inject code into Greenlight by adding scripts
into their names.
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
* Allow uploading larger presentations
This patch allows uploading presentations up to 30MB instead of the
default 1MB. This should prevent users from getting an 401 reply from
Nginx in most cases.
* Update greenlight.nginx
Co-authored-by: Ahmad Farhat <ahmad.farhat@blindsidenetworks.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
This patch allows anonymous and user based authentication to LDAP
servers. This change is based on a patch against bn-ldap-authentication:
- https://github.com/blindsidenetworks/bn-ldap-authentication/pull/2
The patch introduces a new environment variable `LDAP_AUTH` which
controls the authentication method used against the LDAP server:
- `anonymous` enables an anonymous bind to the LDAP with no password
being used.
- `user` uses the user's own credentials to search for his data,
enabling authenticated login to LDAP without the need for a user with
global read privileges.
The default still remains at using a bind user, allowing for a seamless
upgrade path from the previous version.
This fixes#1082
Co-authored-by: Jesus Federico <jesus@123it.ca>
* Color Configuration for Cookie Banner
Right now, the colors of the cookie banner are hard-coded which can
easily clash with the configured site colors in site settings.
This patch switches to using the configured colors instead.
* Update application.scss
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
Co-authored-by: Jesus Federico <jesus@123it.ca>
Lars Kiesow
