Commit Graph

1030 Commits

Author SHA1 Message Date
4286864263 Puma Worker Configuration (#1701)
We noticed that the current default settings perform very poorly under
load. We managed to literally take down Greenlight during a larger event
when people where accessing the landing page for rooms and when doing
some tests, I was more or less able to DoS Greenlight on my own.

This patch adds a default worker configuration similar to the previous
configuration with one worker, but lets users easily adjust it to more
workers which significantly improves the situation. The small, 4 core
machine I was testing on could handle about thrice the amount of
requests.

Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-29 11:44:47 -04:00
ba7beb827a Switched default cable adapter to postgres (#2139) 2020-09-29 11:31:42 -04:00
f8a4f85193 Test email configuration during setup (#1144)
* create proper test message and use correct env var for from address. designed to work with sandboxed AWS ses

* use actionmailer in configuration test rake task

* remove mailfactory gem

* tidy up Gemfile and gem lock

* fix rubocop issues

* Update configuration.rake

Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
Co-authored-by: Ahmad Farhat <ahmad.farhat@blindsidenetworks.com>
2020-09-23 11:20:49 -04:00
b89cbfad03 ENABLE_SSL is now defaulted to true for new installations (#2121) 2020-09-23 10:25:44 -04:00
5a38ae488e Allow customization of test email recipient (#2107)
* Update configuration.rake

use env variable SMTP_TEST_RECIPIENT so customers using mail providers like Microsoft can specify RFC 2606 compliant destination test recipients

* add SMTP_TEST_RECIPIENT to sample.env

add SMTP_TEST_RECIPIENT to sample.env with default value to ensure retro compatibility

* default to notifications@example.com

default to notifications@example.com should SMTP_TEST_RECIPIENT not be defined

Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-22 11:03:47 -04:00
75b989240a Added validation for name: Should not include a http(s) url (#2114) 2020-09-22 10:46:17 -04:00
816cefe1b6 Fixed 404 when resending verification email (#2110) 2020-09-21 15:32:05 -04:00
360783606e Fixed 500 caused by editting a user when not allowed to (#2108) 2020-09-21 13:20:15 -04:00
74ebb15dad Fixed 500 when there is an invalid profile picture (#2109) 2020-09-21 13:12:17 -04:00
f992f76ae1 Set default cable adapter to postgres (#2096) 2020-09-17 15:02:54 -04:00
7309ef9bfd Added back join retry as fallback (#2095) 2020-09-17 14:19:18 -04:00
a8251338af Translate /config/locales/en.yml in fr (#2090)
translation completed for the source file '/config/locales/en.yml'
on the 'fr' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-17 14:11:55 -04:00
55dd5725b5 Fixed 404 on room join (#2092) 2020-09-17 11:32:06 -04:00
a27884733d fixes #2082 proper link in mail (#2083)
* fixes #2082 proper link in mail

only send the promoted user a link to the admin page if their role 
allows them to.

* addressed review

Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-15 16:08:32 -04:00
ca94ac46ba Added back ability to set maintenance window through env variables (#2089) 2020-09-15 13:37:58 -04:00
83cc7ed3cc Translate /config/locales/en.yml in ja_JP (#2074)
translation completed for the source file '/config/locales/en.yml'
on the 'ja_JP' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-08 14:22:52 -04:00
015b17098e Translate /config/locales/en.yml in nl (#2070)
translation completed for the source file '/config/locales/en.yml'
on the 'nl' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-08 14:12:48 -04:00
e096ba8d6e Translate /config/locales/en.yml in zh_CN (#2068)
translation completed for the source file '/config/locales/en.yml'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-08 13:41:50 -04:00
a97900b916 Translate /config/locales/en.yml in de_DE (#2065)
translation completed for the source file '/config/locales/en.yml'
on the 'de_DE' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-08 13:38:11 -04:00
db20b94fee Translate /config/locales/en.yml in gl (#2061)
translation completed for the source file '/config/locales/en.yml'
on the 'gl' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-08 13:30:06 -04:00
ff2bfb0f02 Translate /config/locales/en.yml in es (#2042)
translation completed for the source file '/config/locales/en.yml'
on the 'es' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-08 13:22:33 -04:00
4deefdfee9 Docker ignore new security policy (#2062) 2020-09-03 12:04:19 -04:00
a00732c10e Create SECURITY.md 2020-09-03 11:25:24 -04:00
5cbcc82e9b Added confirm modal when deleting recording (#2056) 2020-09-03 11:08:13 -04:00
99c7262971 Added env variable to exclude recording formats from public recordings (#2055) 2020-09-03 10:55:24 -04:00
3de60daf85 WR342136 One more piece for hide/show recording (#2059)
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-03 10:45:53 -04:00
c1c62e8bf8 Fixed issue with shared room not having correct record setting (#2053) 2020-09-02 13:55:09 -04:00
cb700404f3 Fixed bug allowing users to access their own room when they aren't allowed (#2054) 2020-09-02 13:45:29 -04:00
f85fb90cae Translate /config/locales/en.yml in zh_CN (#2048)
translation completed for the source file '/config/locales/en.yml'
on the 'zh_CN' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-02 11:34:37 -04:00
56b8802120 Translate /config/locales/en.yml in hu_HU (#2002)
translation completed for the source file '/config/locales/en.yml'
on the 'hu_HU' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-02 10:58:32 -04:00
2d4d76e70b Translate /config/locales/en.yml in ko_KR (#2003)
translation completed for the source file '/config/locales/en.yml'
on the 'ko_KR' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-09-02 10:28:00 -04:00
5760bea00b LDAP Sign-In form: user field attributes (#2014)
- autocomplete="username": Tell the browser a user name should be filled, if any.
  Reference: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete
- autocapitalize="none": Tell browsers (especially on mobile devices like iOS) not to
  capitalize the first letter
  Reference: https://developer.apple.com/library/archive/documentation/AppleApplications/Reference/SafariHTMLRef/Articles/Attributes.html#//apple_ref/doc/uid/TP40008058-autocapitalize
- spellcheck="false": Do not spell-check the user name
  Reference: https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/spellcheck
- autofocus: indicates that the input should automatically have focus, which makes sense
  because this form is shown after having clicked the "login" button so it's not an issue that
  the screen reader will skip the "Sign in to your account" text.
  Reference: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input#htmlattrdefautofocus

This PR will improve usability especially on mobile devices. It does *not* not attempt to improve WCAG compliance.

Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-26 14:03:19 -04:00
e2bfdef967 More work to fix CSRF issue on join (#2043) 2020-08-26 10:20:50 -04:00
503ca52806 Fix Cross-Site-Scripting Vulnerability (#2034)
This patch fixes a cross-site-scripting vulnerability in Greenlight
which allowed users to inject code into Greenlight by adding scripts
into their names.

Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-24 14:32:14 -04:00
e5340d2a7a Add env variables to change same_site and secure (#2040) 2020-08-24 14:19:46 -04:00
b23715c906 Changed room joining post to hopefully fix CSRF errors (#2027) 2020-08-19 16:03:10 -04:00
6dea54ccd7 Added cable url (#2026) 2020-08-19 15:55:50 -04:00
f82090fabc Translate /config/locales/en.yml in da (#1993)
translation completed for the source file '/config/locales/en.yml'
on the 'da' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-05 10:19:26 -04:00
f6dcee3417 Translate /config/locales/en.yml in gl (#1991)
translation completed for the source file '/config/locales/en.yml'
on the 'gl' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-05 10:08:52 -04:00
9f66c39839 Translate /config/locales/en.yml in fa_IR (#1989)
translation completed for the source file '/config/locales/en.yml'
on the 'fa_IR' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
2020-08-05 09:54:08 -04:00
aeb5edf8a0 Hide recording table when disabled through room config (#1988) 2020-08-04 17:59:47 -04:00
ace029b124 Translate /config/locales/en.yml in de_DE (#1985)
translation completed for the source file '/config/locales/en.yml'
on the 'de_DE' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-04 16:45:20 -04:00
d30df21097 Translate /config/locales/en.yml in nl (#1983)
translation completed for the source file '/config/locales/en.yml'
on the 'nl' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-04 16:33:50 -04:00
892a9bad69 Translate /config/locales/en.yml in ja_JP (#1981)
translation completed for the source file '/config/locales/en.yml'
on the 'ja_JP' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-04 16:24:46 -04:00
ba1f1efb4a Translate /config/locales/en.yml in gl (#1961)
translation completed for the source file '/config/locales/en.yml'
on the 'gl' language.

Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-04 16:14:55 -04:00
61b91881d7 Allow uploading larger presentations (#1977)
* Allow uploading larger presentations

This patch allows uploading presentations up to 30MB instead of the
default 1MB. This should prevent users from getting an 401 reply from
Nginx in most cases.

* Update greenlight.nginx

Co-authored-by: Ahmad Farhat <ahmad.farhat@blindsidenetworks.com>
Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-04 15:41:03 -04:00
620416f18a Fixed issue causing account verify to throw 404 (#1987) 2020-08-04 14:04:47 -04:00
0710c569b7 GRN2-xx: Allowed file types now matches BigBlueButton (#1966)
* Allowed file types now matches BigBlueButton

* Uppercased file types are now allowed

* Rubocop
2020-08-04 10:35:07 -04:00
35c82f9c17 small cosmetic changes (#1872)
* removed remains

* comment adapted

* removes blinking background from icons on buttons 

like copy (from room links)

Co-authored-by: Ahmad Farhat <ahmad.af.farhat@gmail.com>
2020-08-04 10:26:41 -04:00
bb83bf553d Revert hiding recording menus when recording disabled (#1959) 2020-07-30 15:18:28 -04:00