#Tag · bonfire.cafe

#Tag

Log in

pvergain (framapiaf) and 4 others boosted

@teamtype@fosstodon.org · 4 days ago

Imagine a protocol like #LSP, but for adding real-time collaboration to existing text editors. It would allow #Neovim to edit a #Hedgedoc, or peer-to-peer pair programming between #VSCode and #Emacs!

We've come up with our own little protocol like that (for Teamtype), but we'd like to open up the discussion:

That's why we're inviting everyone interested to an initial online gathering on Feb 26, 19:00 UTC, to gauge interest for working on a protocol like this together!

https://md.ha.si/collaborative-editing-protocol

A diagram that connects text editors on the left to collaborative applications on the right, using a common, shared protocol, labelled the "Collaborative Editing Protocol".

Initial gathering towards a "Collaborative Editing Protocol" - HedgeDoc

@teamtype@fosstodon.org · 4 days ago

Imagine a protocol like #LSP, but for adding real-time collaboration to existing text editors. It would allow #Neovim to edit a #Hedgedoc, or peer-to-peer pair programming between #VSCode and #Emacs!

We've come up with our own little protocol like that (for Teamtype), but we'd like to open up the discussion:

That's why we're inviting everyone interested to an initial online gathering on Feb 26, 19:00 UTC, to gauge interest for working on a protocol like this together!

https://md.ha.si/collaborative-editing-protocol

A diagram that connects text editors on the left to collaborative applications on the right, using a common, shared protocol, labelled the "Collaborative Editing Protocol".

Initial gathering towards a "Collaborative Editing Protocol" - HedgeDoc

Neil Brown boosted

@hedgedoc@fosstodon.org · 2 weeks ago

We've just released #HedgeDoc 1.10.6 🎉

⚠️ This release contains two security fixes for filesystem hosted SVGs ⚠️

See our security advisory
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-x74j-jmf9-534w
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-672m-p72w-gw28

Read the full changelog on https://hedgedoc.org/releases/1.10.6/

HedgeDoc - Ideas grow better together

HedgeDoc 1.10.6

Security fixes This release contains two medium severity security fixes: GHSA-x74j-jmf9-534w reports a bug where security headers for upload files were not set correctly. GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files. Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!

Missing sanitization of SVG uploads

## Summary Maliciously crafted SVG files that were uploaded to HedgeDoc were able to execute JavaScript in the context of the instance's domain when being included into a note using `` t...

Security headers for uploaded files were not working

## Summary Due to a bug, files served below the `/uploads/` endpoint did not use a more strict security-policy. This resulted in a too open Content-Security-Policy and furthermore opened the po...

@hedgedoc@fosstodon.org · 2 weeks ago

We've just released #HedgeDoc 1.10.6 🎉

⚠️ This release contains two security fixes for filesystem hosted SVGs ⚠️

See our security advisory
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-x74j-jmf9-534w
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-672m-p72w-gw28

Read the full changelog on https://hedgedoc.org/releases/1.10.6/

HedgeDoc - Ideas grow better together

HedgeDoc 1.10.6

Security fixes This release contains two medium severity security fixes: GHSA-x74j-jmf9-534w reports a bug where security headers for upload files were not set correctly. GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files. Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!

Missing sanitization of SVG uploads

## Summary Maliciously crafted SVG files that were uploaded to HedgeDoc were able to execute JavaScript in the context of the instance's domain when being included into a note using `` t...

Security headers for uploaded files were not working

## Summary Due to a bug, files served below the `/uploads/` endpoint did not use a more strict security-policy. This resulted in a too open Content-Security-Policy and furthermore opened the po...

calvin 🛋️ liked this activity

@hedgedoc@fosstodon.org · 2 months ago

We've just released #HedgeDoc 1.10.5 🎉

This release contains a small fix, so that the healthcheck of docker images works again.

Read the full changelog on https://hedgedoc.org/releases/1.10.5/

HedgeDoc - Collaborative markdown editor

HedgeDoc 1.10.5

This release is just a fix for the docker container. It does not contain any changes to HedgeDoc itself. Bugfixes Fix the bundled healthcheck in the docker container

@hedgedoc@fosstodon.org · 2 months ago

We've just released #HedgeDoc 1.10.5 🎉

This release contains a small fix, so that the healthcheck of docker images works again.

Read the full changelog on https://hedgedoc.org/releases/1.10.5/

HedgeDoc - Collaborative markdown editor

HedgeDoc 1.10.5

This release is just a fix for the docker container. It does not contain any changes to HedgeDoc itself. Bugfixes Fix the bundled healthcheck in the docker container

@hedgedoc@fosstodon.org · 2 months ago

We've just released #HedgeDoc 1.10.4 🎉

⚠️ This release contains two security fixes for CSRF possibility through OIDC and for cross-site side-effects in iframes ⚠️

See our security advisory
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-6wm6-3vpq-6qvv
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-gmgw-rcmh-7x47

Read the full changelog on https://hedgedoc.org/releases/1.10.4/

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances

Bonfire social · 1.0.2-alpha.29 no JS en

Automatic federation enabled

Log in