Tim Abbott 04db0b5df0 reload: Fix passing data to next browser session. ...

Apparently, Django's CSRF protection mechanism changed at some point,
and now we get a different CSRF token every time the webapp is loaded.
This, in turn, caused our reload logic to avoid losing state to be
completely ineffective, since the CSRF check in reload.initialize
always failed.

We fix this in a secure fashion by passing the reload instructions
from the browser to its reloaded self via localstorage, keyed by a
randomly generated token.  The token randomization is primarily
relevant for handling several Zulip tabs in the same browser, but also
servers to make it very difficult for an attacker to ever trigger this
code path by redirecting a browser to `/#reload` URLs.

Fixes #3411.
Fixes #3687.

2017-03-22 22:46:54 -07:00

..

portico

Fixes for /integrations/ page.

2017-03-21 13:55:59 -07:00

src

lint: Add dangling commas in JavaScript objects.

2017-01-11 15:23:42 -08:00

stats

stats: Change time ranges for bar graph and pie chart.

2017-03-07 17:25:58 -08:00

.eslintrc.json

Change name of eslintrc file to .eslintrc.json

2016-11-29 08:58:39 -08:00

activity.js

bug fix: Fix missing return statement in get_filter_li().

2017-03-20 09:49:19 -07:00

admin.js

Avoid deprecated report_success() call.

2017-03-22 06:53:21 -07:00

alert_words_ui.js

alert_words: Trim whitespace around alert words.

2017-02-16 21:06:18 -08:00

alert_words.js

refactor: Move is_current_user() to people.js.

2017-01-21 21:45:12 -08:00

attachments_ui.js

attachment: Add file icon to the green box when file has no extension.

2017-03-09 00:56:37 -08:00

avatar.js

Add size limit for uploading user avatars and realm icons.

2017-03-07 22:13:01 -08:00

blueslip.js

Add ui_report shim.

2017-03-19 11:05:44 -07:00

bot_data.js

bot_data.js: Add get_all_bots_for_current_user() function.

2017-02-28 16:15:10 -08:00

channel.js

Migrate JS modules to CommonJS style.

2016-12-07 16:11:52 -08:00

click_handlers.js

unread: Move bankruptcy code out of click_handlers.js.

2017-03-22 20:49:05 -07:00

colorspace.js

Migrate JS modules to CommonJS style.

2016-12-07 16:11:52 -08:00

common.js

auth: Make min password length and strength configurable.

2017-01-10 04:55:41 -08:00

components.js

Select first toggle tab by default.

2017-02-21 11:30:59 -08:00

compose_fade.js

Add recipient() and composing() shims.

2017-03-18 15:52:50 -07:00

compose.js

compose: Fix missing opts argument to show_box.

2017-03-22 16:32:53 -07:00

composebox_typeahead.js

Extract js/ui_util.js.

2017-03-19 11:05:45 -07:00

condense.js

edit: Remove More/Collapse when in message edit/view source mode.

2017-03-16 11:30:49 -07:00

copy_and_paste.js

lint: Fix many no-unused-vars eslint rule violations.

2016-12-14 21:34:51 -08:00

custom_markdown.js

Add ui_report shim.

2017-03-19 11:05:44 -07:00

debug.js

lint: Add dangling commas in JavaScript objects.

2017-01-11 15:23:42 -08:00

dict.js

lint: Add dangling commas in JavaScript objects.

2017-01-11 15:23:42 -08:00

drafts.js

Add compose_actions.start() shim.

2017-03-18 15:52:50 -07:00

echo.js

markdown: Add TeX typesetting support.

2017-03-21 16:40:00 -07:00

emoji.js

bugdown: Change rendered emoji image to unicode/<codepoint>.png.

2017-02-26 18:30:15 -08:00

favicon.js

Switch from deprecated $.browser to userAgent test.

2016-08-25 14:12:58 -07:00

feature_flags.js

Remove feature_flags.fade_users_when_composing.

2017-02-26 16:18:02 -08:00

fenced_code.js

bugdown: Remove trailing whitespace on fence code blocks.

2017-03-22 14:17:34 -07:00

filter.js

Create filter.update_email().

2017-02-14 23:25:22 -08:00

floating_recipient_bar.js

compose fade: Introduce message-fade/user-fade CSS classes.

2017-03-16 14:06:40 -07:00

gear_menu.js

hotkeys: Add keyboard shortcut for opening the gear menu.

2017-03-19 22:08:21 -07:00

hash_util.js

js dependencies: Split hash_util.js from hashchange.js.

2017-03-18 20:40:34 -07:00

hashchange.js

docs: Document the frontend hashchange system.

2017-03-22 15:21:36 -07:00

hotkey.js

hotkeys: Add arrow key navigation in streams/subscriptions menu.

2017-03-21 20:32:28 -07:00

invite.js

invite: Display and check default streams in invite modal.

2017-03-21 20:56:34 -07:00

lightbox.js

Fix up YouTube embed issues and styling.

2017-03-21 14:28:13 -07:00

loading.js

Remove the old spinner, replace with new one.

2017-01-06 10:37:54 -08:00

localstorage.js

Add a LocalStorage wrapper for Zulip.

2017-02-23 02:58:22 -08:00

message_edit.js

message_edit: Added copy to clipboard button.

2017-03-22 11:00:18 -07:00

message_events.js

Extract message_util.js

2017-03-19 21:03:45 -07:00

message_fetch.js

Extract message_util.js

2017-03-19 21:03:45 -07:00

message_flags.js

Add "*" hotkey to toggle starred flag on the selected message.

2017-03-19 13:42:11 -07:00

message_list_view.js

collapse: Fix new messages not being collapsed consistently.

2017-03-19 20:39:21 -07:00

message_list.js

js: Rename viewport.js to message_viewport.js.

2017-03-10 14:59:59 -08:00

message_live_update.js

avatar live updates: Do full re-render.

2017-02-22 22:46:44 -08:00

message_store.js

Extract message_util.js

2017-03-19 21:03:45 -07:00

message_util.js

Extract message_util.js

2017-03-19 21:03:45 -07:00

message_viewport.js

Move keep_pointer_in_view() to message_viewport.js.

2017-03-19 10:56:09 -07:00

modals.js

hotkeys: Add lightbox image feed with controls.

2017-03-19 22:11:38 -07:00

muting_ui.js

Migrate json/set_muted_topics to muting/topics.

2017-03-09 20:52:29 -08:00

muting.js

muting: Refactor to move side effects into UI layer.

2017-02-11 08:36:39 -08:00

narrow.js

Extract message_util.js

2017-03-19 21:03:45 -07:00

navigate.js

Move paging methods into navigate.js.

2017-03-19 11:05:46 -07:00

notifications.js

refactor: Extract unread_ops.js

2017-03-18 10:35:52 -07:00

people.js

Make get_user_id blueslip errors clear again.

2017-03-04 07:50:47 -08:00

pm_list.js

refactor: Extract stream_popover.js.

2017-03-05 15:44:43 -08:00

pointer.js

bankruptcy: Fix narrow being lost on declaring bankruptcy.

2017-03-22 22:28:18 -07:00

popovers.js

Fix positioning of message-info-popover.

2017-03-22 16:04:38 -07:00

reactions.js

Pressing enter in reactions search picks first reaction.

2017-03-19 14:36:34 -07:00

realm_icon.js

Add size limit for uploading user avatars and realm icons.

2017-03-07 22:13:01 -08:00

referral.js

lint: Add dangling commas in JavaScript objects.

2017-01-11 15:23:42 -08:00

reload.js

reload: Fix passing data to next browser session.

2017-03-22 22:46:54 -07:00

resize.js

js: Rename viewport.js to message_viewport.js.

2017-03-10 14:59:59 -08:00

rows.js

lint: Add dangling commas in JavaScript objects.

2017-01-11 15:23:42 -08:00

scroll_bar.js

lint: Add dangling commas in JavaScript objects.

2017-01-11 15:23:42 -08:00

search_suggestion.js

search_suggestion: Suggest multiple people in pm-with searches.

2017-02-07 14:13:29 -08:00

search.js

Extract js/ui_util.js.

2017-03-19 11:05:45 -07:00

server_events.js

reload: Save narrow when event queues expire.

2017-03-22 22:28:35 -07:00

settings.js

Add ui_report shim.

2017-03-19 11:05:44 -07:00

setup.js

Disable web sockets for mobile devices.

2017-03-20 21:44:23 -07:00

shim.js

js dependencies: Extract ui_state.js.

2017-03-19 14:11:50 -07:00

socket.js

lint: Add dangling commas in JavaScript objects.

2017-01-11 15:23:42 -08:00

stream_color.js

refactor: Remove stream_name param in update_stream_color().

2017-03-05 15:44:43 -08:00

stream_data.js

invite: Display and check default streams in invite modal.

2017-03-21 20:56:34 -07:00

stream_events.js

mark_subscribed: Add a blueslip check for color code path.

2017-03-21 23:36:47 -07:00

stream_list.js

Extract js/ui_util.js.

2017-03-19 11:05:45 -07:00

stream_muting.js

Extract message_util.js

2017-03-19 21:03:45 -07:00

stream_popover.js

Add compose_actions.start() shim.

2017-03-18 15:52:50 -07:00

subs.js

subs: Clean up ancient collapsing logic.

2017-03-21 23:09:32 -07:00

tab_bar.js

lint: Fix many no-unused-vars eslint rule violations.

2016-12-14 21:34:51 -08:00

templates.js

eslint: change no-plusplus from warning to 2 and fix violations.

2016-12-01 14:27:17 -08:00

timerender.js

Change now() to timezone.now() throughout codebase.

2017-02-28 16:03:37 -08:00

topic_list.js

Extract js/ui_util.js.

2017-03-19 11:05:45 -07:00

tutorial.js

Extract js/ui_util.js.

2017-03-19 11:05:45 -07:00

typeahead_helper.js

Move get_cleaned_pm_recipients() to helper module.

2017-03-18 10:35:52 -07:00

typing_data.js

Extract typing indicator inbound timing logic.

2017-03-22 08:20:21 -07:00

typing_events.js

Extract typing indicator inbound timing logic.

2017-03-22 08:20:21 -07:00

typing_status.js

Extract typing_events.js.

2017-03-22 07:29:42 -07:00

typing.js

Extract typing_events.js.

2017-03-22 07:29:42 -07:00

ui_init.js

message_edit: Added copy to clipboard button.

2017-03-22 11:00:18 -07:00

ui_state.js

js dependencies: Extract ui_state.js.

2017-03-19 14:11:50 -07:00

ui_util.js

Extract js/ui_util.js.

2017-03-19 11:05:45 -07:00

ui.js

Extract message_fetch.js.

2017-03-19 21:03:45 -07:00

unread_ops.js

refactor: Extract unread_ops.js

2017-03-18 10:35:52 -07:00

unread_ui.js

bankruptcy: Fix clicking outside bankruptcy modal.

2017-03-22 20:50:44 -07:00

unread.js

Update PM unread counts more dynamically in the client.

2017-02-14 23:25:22 -08:00

upload_widget.js

upload-widget: Correct file input clearing.

2017-03-21 00:59:17 -07:00

user_events.js

Add UI for changing the bot owners.

2017-02-26 21:39:22 -08:00

util.js

Disable web sockets for mobile devices.

2017-03-20 21:44:23 -07:00

zulip.js

Migrate JS modules to CommonJS style.

2016-12-07 16:11:52 -08:00