878 Commits

Author SHA1 Message Date
winkidney
c97805cae5 fix: flake8 v2.1.7 2022-04-14 07:57:54 -07:00
winkidney
ad46d3bd57 fix: use getpinry/pinry as default docker image name 2022-04-14 07:52:16 -07:00
winkidney
03d1aed7aa feature: add command to reset all tokens 2022-04-14 07:50:33 -07:00
winkidney
8a5f434616 fix: fix token permission for public users 2022-04-14 07:50:33 -07:00
Ji Qu
e48a7d35c0 close #328 2022-04-12 12:07:54 +08:00
FreeTheSmoke
daba98ebef Update theories.md
Typo
2022-04-10 22:28:27 +08:00
dependabot[bot]
d3669530aa Build(deps): Bump url-parse from 1.5.7 to 1.5.10 in /pinry-spa
Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.7 to 1.5.10.
- [Release notes](https://github.com/unshiftio/url-parse/releases)
- [Commits](https://github.com/unshiftio/url-parse/compare/1.5.7...1.5.10)

---
updated-dependencies:
- dependency-name: url-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-27 21:55:21 -08:00
winkidney
98f7d033e3 close #306 2022-02-22 07:54:13 -08:00
Ji Qu
053a80503e Update README.md 2022-02-21 14:19:04 +08:00
dependabot[bot]
4646574f0b Build(deps): Bump url-parse from 1.5.3 to 1.5.7 in /pinry-spa
Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.3 to 1.5.7.
- [Release notes](https://github.com/unshiftio/url-parse/releases)
- [Commits](https://github.com/unshiftio/url-parse/compare/1.5.3...1.5.7)

---
updated-dependencies:
- dependency-name: url-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-18 22:24:57 -08:00
winkidney
0f813bb48b Feature Ignore local settings file 2022-02-18 21:58:01 -08:00
Ji Qu
9cba25e2ec Merge pull request #323 from pinry/feature/api-support
Feature/api support
v2.1.6
2022-02-18 21:52:44 -08:00
winkidney
fe2892123f Doc: Update README for API support 2022-02-18 21:52:22 -08:00
winkidney
69667006d8 Fix: Fix test failure caused http error code(from 403 to 401) 2022-02-18 21:48:44 -08:00
winkidney
df92ddf5cc Feature: Add doc for API support 2022-02-18 21:37:58 -08:00
winkidney
837e9f0334 Fix: Fix doc link in frontend 2022-02-18 21:37:48 -08:00
winkidney
18bda6dfd1 Fix: Should enable token auth in DRF 2022-02-18 21:37:18 -08:00
winkidney
a59fce881f Feature: Add frontend support for API token and fix bug 2022-02-18 21:17:27 -08:00
winkidney
2892ebb333 Feature: Add token creation for auth 2022-02-18 20:27:19 -08:00
dependabot[bot]
bd7251f8d1 Build(deps): Bump follow-redirects from 1.14.7 to 1.14.8 in /pinry-spa
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.14.8.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.7...v1.14.8)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-13 21:00:13 -08:00
dependabot[bot]
549ee5ae58 Build(deps): Bump ajv from 6.10.2 to 6.12.6 in /pinry-spa
Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.10.2 to 6.12.6.
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](https://github.com/ajv-validator/ajv/compare/v6.10.2...v6.12.6)

---
updated-dependencies:
- dependency-name: ajv
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-13 20:59:57 -08:00
dependabot[bot]
a5cab47923 Build(deps): Bump django from 2.2.26 to 2.2.27
Bumps [django](https://github.com/django/django) from 2.2.26 to 2.2.27.
- [Release notes](https://github.com/django/django/releases)
- [Commits](https://github.com/django/django/compare/2.2.26...2.2.27)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-13 00:16:14 -08:00
Ji Qu
b08862009b Add python and node.js build status 2022-02-05 19:08:26 +08:00
Ji Qu
09b739a4c9 Add docker pull on master 2022-02-05 19:03:11 +08:00
dependabot[bot]
39213dd1d1 Build(deps-dev): Bump mkdocs from 1.1.2 to 1.2.3
Bumps [mkdocs](https://github.com/mkdocs/mkdocs) from 1.1.2 to 1.2.3.
- [Release notes](https://github.com/mkdocs/mkdocs/releases)
- [Commits](https://github.com/mkdocs/mkdocs/compare/1.1.2...1.2.3)

---
updated-dependencies:
- dependency-name: mkdocs
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-19 07:24:36 -08:00
winkidney
3f1269e88e Fix #316: Fix build failure caused by new version of rcssmin build 2022-01-19 07:11:19 -08:00
dependabot[bot]
a2e41de9dd Build(deps): Bump django-filter from 2.2.0 to 2.4.0
Bumps [django-filter](https://github.com/carltongibson/django-filter) from 2.2.0 to 2.4.0.
- [Release notes](https://github.com/carltongibson/django-filter/releases)
- [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst)
- [Commits](https://github.com/carltongibson/django-filter/compare/2.2.0...2.4.0)

---
updated-dependencies:
- dependency-name: django-filter
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-19 05:42:37 -08:00
dependabot[bot]
be5413b4c5 Build(deps): Bump django from 2.2.24 to 2.2.26
Bumps [django](https://github.com/django/django) from 2.2.24 to 2.2.26.
- [Release notes](https://github.com/django/django/releases)
- [Commits](https://github.com/django/django/compare/2.2.24...2.2.26)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-19 05:41:45 -08:00
dependabot[bot]
0978114f02 Build(deps): Bump follow-redirects from 1.14.3 to 1.14.7 in /pinry-spa
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.3 to 1.14.7.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.3...v1.14.7)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-15 22:43:07 -08:00
Ji Qu
4a68b44288 Fix: Add X-Frame-Options by default 2021-10-02 20:12:36 +08:00
Ji Qu
49452b1ad5 Update SECURITY.md 2021-09-29 16:17:37 +08:00
Ziding Zhang
002540d97c Create SECURITY.md
A simple instruction for security researchers.
2021-09-29 16:17:10 +08:00
dependabot[bot]
e61566d3e3 Build(deps): Bump axios from 0.21.1 to 0.21.2 in /pinry-spa
Bumps [axios](https://github.com/axios/axios) from 0.21.1 to 0.21.2.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/master/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v0.21.1...v0.21.2)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-11 18:48:51 +08:00
dependabot[bot]
e6f87350d6 Build(deps): Bump sqlparse from 0.4.1 to 0.4.2
Bumps [sqlparse](https://github.com/andialbrecht/sqlparse) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/andialbrecht/sqlparse/releases)
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](https://github.com/andialbrecht/sqlparse/compare/0.4.1...0.4.2)

---
updated-dependencies:
- dependency-name: sqlparse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-11 18:48:37 +08:00
dependabot[bot]
d0831087d3 Build(deps): Bump pillow from 8.2.0 to 8.3.2
Bumps [pillow](https://github.com/python-pillow/Pillow) from 8.2.0 to 8.3.2.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/8.2.0...8.3.2)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-09 15:04:33 +08:00
dependabot[bot]
00b8b30b81 Build(deps): Bump path-parse from 1.0.6 to 1.0.7 in /pinry-spa
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-16 11:54:45 +08:00
dependabot[bot]
478d62986e Build(deps): Bump color-string from 1.5.3 to 1.6.0 in /pinry-spa
Bumps [color-string](https://github.com/Qix-/color-string) from 1.5.3 to 1.6.0.
- [Release notes](https://github.com/Qix-/color-string/releases)
- [Changelog](https://github.com/Qix-/color-string/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Qix-/color-string/commits/1.6.0)

---
updated-dependencies:
- dependency-name: color-string
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-16 11:54:32 +08:00
dependabot[bot]
fa8f6644d5 Build(deps): Bump url-parse from 1.5.1 to 1.5.3 in /pinry-spa
Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.1 to 1.5.3.
- [Release notes](https://github.com/unshiftio/url-parse/releases)
- [Commits](https://github.com/unshiftio/url-parse/compare/1.5.1...1.5.3)

---
updated-dependencies:
- dependency-name: url-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-16 11:54:13 +08:00
Ethan Crawford
7591993e89 Fix: Replace deprecated node-sass with sass
Node Sass is considered deprecated - the recommended alternative is Dart Sass.
This change implements the suggested migration, as outlined at the following
URL:
https://sass-lang.com/blog/libsass-is-deprecated#how-do-i-migrate
2021-08-11 17:59:29 +08:00
dependabot[bot]
fadf0ba76e Build(deps): Bump postcss from 7.0.25 to 7.0.36 in /pinry-spa
Bumps [postcss](https://github.com/postcss/postcss) from 7.0.25 to 7.0.36.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/7.0.25...7.0.36)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-19 17:21:24 +08:00
dependabot[bot]
e195837afd Build(deps): Bump django from 2.2.20 to 2.2.24
Bumps [django](https://github.com/django/django) from 2.2.20 to 2.2.24.
- [Release notes](https://github.com/django/django/releases)
- [Commits](https://github.com/django/django/compare/2.2.20...2.2.24)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 11:20:14 +08:00
dependabot[bot]
f7ee68ae70 Build(deps): Bump pillow from 8.1.2 to 8.2.0
Bumps [pillow](https://github.com/python-pillow/Pillow) from 8.1.2 to 8.2.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/8.1.2...8.2.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 11:10:42 +08:00
dependabot[bot]
00b3bf6847 Build(deps): Bump ws from 6.2.1 to 6.2.2 in /pinry-spa
Bumps [ws](https://github.com/websockets/ws) from 6.2.1 to 6.2.2.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/commits)

---
updated-dependencies:
- dependency-name: ws
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-08 12:35:41 +08:00
dependabot[bot]
4c9c424f4f Build(deps): Bump urllib3 from 1.26.4 to 1.26.5
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.4 to 1.26.5.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.4...1.26.5)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-03 19:13:47 +08:00
dependabot[bot]
be519cc754 Build(deps): Bump dns-packet from 1.3.1 to 1.3.4 in /pinry-spa
Bumps [dns-packet](https://github.com/mafintosh/dns-packet) from 1.3.1 to 1.3.4.
- [Release notes](https://github.com/mafintosh/dns-packet/releases)
- [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mafintosh/dns-packet/compare/v1.3.1...v1.3.4)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-31 22:40:56 +08:00
winkidney
fd4ef22f6a close #276 2021-05-30 03:31:25 -07:00
Lapo Luchini
24d54d5dbb Fix bookmarklet layout to work on more pages.
`display: block` is needed on some pages that have local CSS overrides that happen to apply to our elements as well.
`z-index: 2147483647` seems to be the maximum allowed values, as per http://web.archive.org/web/20160502062529/http://www.puidokas.com/max-z-index

Fixes #273 on GitHub upstream.
2021-05-30 18:24:16 +08:00
dependabot[bot]
b84cf6840c Build(deps): Bump browserslist from 4.8.2 to 4.16.6 in /pinry-spa
Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.8.2 to 4.16.6.
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.8.2...4.16.6)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-28 10:48:07 +08:00
dependabot[bot]
df4336b6d6 Build(deps): Bump hosted-git-info from 2.8.5 to 2.8.9 in /pinry-spa
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.5 to 2.8.9.
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.9)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-13 11:28:08 +08:00
dependabot[bot]
a1499756c0 Build(deps): Bump lodash from 4.17.19 to 4.17.21 in /pinry-spa
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.19...4.17.21)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-11 16:47:36 +08:00