89b6183704
Merge pull request #69 from superhumane/xss_fix
...
Escape strings in HTML output (XSS fix)
2018-01-25 14:37:30 +01:00
35328be26b
Escape strings in HTML output (XSS fix)
...
Modify the template producing HTML error responses to correctly
escape all strings that are possibly coming from the client making the
request. Before this change, the error responses were vulnerable to XSS
(cross-site scripting) attacks.
2018-01-25 14:16:24 +01:00
4c69370751
Update LICENSE.md
2017-11-10 23:32:39 -05:00
1117948629
2.3.0
...
* update strong-globalize to 3.1.0 (shimks)
* CODEOWNERS: add zbarbuto (Miroslav Bajtoš)
* Update Issue and PR Templates (#59 ) (Sakib Hasan)
* fixed json typo of server/middleware.json (karanssj4)
* Add CODEOWNER file (Diana Lau)
2017-10-13 13:15:58 +02:00
61505f3dd1
Merge pull request #64 from strongloop/update-strong-globalize
...
update strong-globalize to 3.1.0
2017-10-13 13:15:13 +02:00
b4ec4e7645
update strong-globalize to 3.1.0
2017-10-12 22:54:27 -04:00
8979744cd5
Merge pull request #62 from strongloop/welcome-zbarbuto
...
CODEOWNERS: add zbarbuto
2017-09-27 11:11:30 +02:00
7d0682e7ae
CODEOWNERS: add zbarbuto
2017-09-25 09:58:12 +02:00
0ee193bb61
Update Issue and PR Templates ( #59 )
...
* update issue template
* update pr template
2017-08-16 11:24:49 -04:00
0bb801bed6
Merge pull request #58 from karanssj4/patch-1
...
fix json typo of server/middleware.json
2017-08-02 14:06:43 +02:00
99e69336d9
fixed json typo of server/middleware.json
...
the json format is valid now
2017-08-02 14:21:49 +05:30
5acee7e873
Merge pull request #57 from strongloop/add-codeowner
...
Add CODEOWNER file
2017-07-26 20:45:32 -04:00
69eb7209c5
Add CODEOWNER file
2017-07-25 20:37:59 -04:00
3bf59a7d17
2.2.0
...
* Add new option: negotiateContentType (Raj)
2017-07-20 10:27:02 +02:00
68e0aa58d1
Merge pull request #55 from charanrajtc/added-response-format-option
...
Add contentType option for passing mandatory type
2017-07-20 10:26:37 +02:00
4d973929c1
Add new option: negotiateContentType
...
The option controls whether response content type is negotiated with
the client and it's enabled by default.
2017-07-20 10:19:29 +02:00
323cd4dfbf
2.1.0
...
* Bump js2xmlparser dependency to version 3.0.0 (Matthew O'Donoghue)
2017-04-18 15:34:51 +02:00
93c7d05a41
Merge pull request #53 from mattyod/bump-js2xml-version
...
Bump js2xmlparser dependency to version 3.0.0
2017-04-18 15:33:19 +02:00
24ece6d9d5
Bump js2xmlparser dependency to version 3.0.0
2017-04-13 11:21:08 +01:00
7fbb7e6439
2.0.0
...
* Fix markdown formatting in README (Miroslav Bajtoš)
* Fix the order of arguments in the jsdoc comment. (Charlie Schliesser)
* Update readme with added XML support (David Cheung)
* Add a machine-readable "code" property (Zak Barbuto)
* Upgrade dependencies to their latest versions (Miroslav Bajtoš)
* Describe "safeFields" option in README (Zak Barbuto)
* Drop support for Node v0.10/v0.12 (Miroslav Bajtoš)
2017-03-22 10:05:23 +01:00
c24e6be174
Merge pull request #50 from strongloop/fix-README-markdown-1
...
Fix markdown formatting in README
2017-03-22 10:03:55 +01:00
095ee9d1bd
Fix markdown formatting in README
2017-03-22 09:49:22 +01:00
37cb2ce938
Merge pull request #49 from charlie-s/issue-46
...
Fix order of arguments in jsdoc comment of negotiateContentProducer.
2017-03-13 17:21:04 +01:00
f96e7433d8
Fix the order of arguments in the jsdoc comment.
2017-03-13 10:46:10 -05:00
afeedcc7b2
Merge pull request #44 from strongloop/update-readme-xml-support
...
Update readme with added XML support
2017-02-01 14:13:30 -05:00
1878aca979
Update readme with added XML support
2017-02-01 11:12:13 -05:00
fb68b611c1
Merge pull request #38 from zbarbuto/error-code-prop
...
Add machine readable code property
2017-02-01 16:26:05 +01:00
382fffc8b0
Add a machine-readable "code" property
...
Include `error.code` in 4xx responses.
2017-02-01 10:10:20 +01:00
4dddf78354
Merge pull request #43 from strongloop/update/deps
...
Upgrade dependencies to their latest versions
2017-02-01 09:49:47 +01:00
461867de1d
Upgrade dependencies to their latest versions
...
Also:
- fix linting errors after upgrading eslint-config-loopback
- fix a bug discovered by eslint where uknown `?_format`
was throwing an unhandled error
2017-02-01 09:24:21 +01:00
425364e2fa
Merge pull request #41 from zbarbuto/safe_fields_desc
...
Safe fields property description
2017-01-31 12:42:25 +01:00
9e576ce041
Describe "safeFields" option in README
2017-01-31 11:13:45 +01:00
bd7af70585
Merge pull request #42 from strongloop/drop-support-for-legacy-node-versions
...
[SEMVER-MAJOR] Drop support for Node v0.10/v0.12
2017-01-31 09:43:46 +01:00
05d8844399
Drop support for Node v0.10/v0.12
...
Also add Node 7 to .travis.yml.
2017-01-31 09:31:51 +01:00
c8845ff448
1.2.1
...
* Stop adding safeFields to original options arg (Miroslav Bajtoš)
2017-01-30 15:05:14 +01:00
cbde9551ec
Merge pull request #39 from strongloop/fix/immutable-options
...
Stop adding safeFields to original options arg
2017-01-30 15:04:53 +01:00
936e2d4838
Stop adding safeFields to original options arg
2017-01-30 14:48:38 +01:00
e6126d1548
1.2.0
...
* Support options.safeFields (Zak Barbuto)
* Readme cleanup (#36 ) (Rand McKinney)
* xml support added (Ahmet Ozisik)
* Update paid support URL (Siddhi Pai)
* Downstream ignore dashboard-controller (Simon Ho)
* Update pt translation file (Candy)
* Make the examples more clear (Amir Jafarian)
* Fix readme (Amir Jafarian)
2017-01-30 14:16:24 +01:00
51395209fe
Merge pull request #37 from zbarbuto/safe_fields7
...
Allow specifying safeFields
2017-01-30 14:08:31 +01:00
4e3f6eb6cc
Support options.safeFields
2017-01-30 13:51:34 +01:00
9d6f07181f
Merge pull request #35 from aozisik/master
...
add xml error output support
2017-01-09 15:45:07 -05:00
7658eb4d32
Readme cleanup ( #36 )
...
* Cleanup README for docs
* Final fixes
* Update README.md
Note that migration required only for apps scaffolded w/ older tools.
* Update README.md
* Update README.md
* Update README.md
Made final fixes per review comments.
2017-01-09 12:09:47 -08:00
06c53d1f73
xml support added
2017-01-09 19:01:52 +03:00
13ec01fb18
Merge pull request #31 from strongloop/update-support-URL
...
Update paid support URL
2016-12-09 14:54:11 -08:00
f2352f86f2
Update paid support URL
2016-12-09 14:28:59 -08:00
cfb08a147f
Merge pull request #33 from strongloop/downstream-ignore-dashboard-controller
...
Downstream ignore dashboard-controller
2016-12-09 12:21:14 -08:00
1bf1bdf6e9
Downstream ignore dashboard-controller
2016-12-09 11:17:57 -08:00
f1d5f064f0
Merge pull request #29 from strongloop/add_translation5
...
Update pt translation file
2016-11-10 15:44:12 -05:00
e166091f57
Update pt translation file
2016-11-10 12:49:57 -05:00
613c7209d3
Merge pull request #27 from strongloop/clear_example
...
Make the example more clear
2016-10-18 08:02:42 -04:00
Miroslav Bajtoš
Zachery Metcalf
Diana Lau
shimks
Sakib Hasan
karanssj4
Raj
Miroslav Bajtoš
Matthew O'Donoghue
Charlie Schliesser
David Cheung
David Cheung
Zak Barbuto
Rand McKinney
Ahmet Ozisik
siddhipai
Simon Ho
Simon Ho
Candy
Amirali Jafarian