Christopher Grebs
f42f51f8b7
fix(package): update clean-css to version 4.0.2 ( #4504 )
...
* fix(package): update clean-css to version 4.0.2
With v4.0 clean-css has split it's command line tools into a separate
package.
Closes #4475
* fix paths
2017-01-30 14:18:06 +01:00
Andy McKay
8cda544825
github validate hook again
2016-12-23 11:43:57 -08:00
Christopher Grebs
717ca578ce
Add configured domain to ALLOWED_HOSTS. Fixes circleci tests and our runserver. ( #3918 )
...
* Add configured domain to ALLOWED_HOSTS. Fixes circleci tests and our runserver.
* Correctly map uitests to olympia.dev
2016-11-02 16:56:10 +01:00
Andrew Williamson
be18b6cbdf
Make all responses to email API return a validation response. ( #3650 )
2016-10-04 11:53:58 +01:00
Mark Striemer
b6000cfcb0
Define FxA config names in settings_base.py ( #3574 )
2016-09-21 10:56:39 -05:00
Mark Striemer
1ee3c80093
Support development FxA config on dev ( #3540 )
2016-09-20 17:08:09 -05:00
Mark Striemer
2b5d8a09fe
Update incorrect FXA_CONFIG redirect_urls
2016-09-14 17:49:33 -05:00
Mark Striemer
c939ccbc67
Support multiple FxA configurations ( fixes #3496 )
...
Fixes #3505
2016-09-14 17:49:25 -05:00
Andrew Williamson
a0facd5236
Add API endpoint to process POST email content and add to activity log;
...
emails received send notification emails;
review emails and notification emails can be replied to.
2016-09-13 18:29:43 +01:00
Stuart Colville
3c3c6470f7
Remove 'self' and https://addons.mozilla.org from script-src
2016-09-09 15:01:25 +01:00
Mathieu Pillard
2e85926e59
Set SERVICES_DOMAIN and SERVICES_URL correctly for local development
2016-07-20 14:05:22 +02:00
Mark Striemer
b8b7475ba7
Use redirect_url not redirect_uri in internal auth ( #2511 )
2016-04-27 09:54:15 -05:00
Mark Striemer
c64fba4c48
Internal login JSON API ( fixes #2425 )
2016-04-21 15:31:31 -05:00
Mark Striemer
0cffe96db7
Internal login start endpoint ( fixes #2424 )
2016-04-20 13:23:28 -05:00
Mark Striemer
0d1edc19f2
Allow setting the recursion limit with RECURSION_LIMIT ( fixes #1911 )
2016-03-15 17:31:26 +01:00
Christopher Grebs
74f14b492a
Remove VALIDATE_ADDONS setting.
...
There's no need for it anymore.
2016-03-14 17:20:16 +01:00
Christopher Grebs
81845f9f84
First steps towards Django 1.7 support.
...
* Upgrade to Django 1.7.10
* Upgrade to Jingo 0.9
* Make sure the app minimalistically runs with Django 1.7
* Upgrades django-waffle and django-cache-machine
* Upgrades to a forked hack of django-piston
* Fixes systems checks
* update redisutils config
* Get rid of Jingo monkey patch.
* Update to proper SafeData support (which now supports __html__)
2016-02-24 17:11:46 +01:00
Christopher Grebs
0cbb294201
Rename addons-validator to addons-linter and update to latest release.
...
Fixes #1742
2016-02-24 10:53:26 +01:00
Stuart Colville
f3a1c4b06c
Enforce CSP in Production
2016-02-08 09:59:48 +00:00
Christopher Grebs
e9fb38a665
Merge branch 'master' of github.com:mozilla/olympia into feature/restructure-modules
2016-02-04 19:43:32 +01:00
Stuart Colville
952effefb0
Revert "Enforce CSP on prod + stage"
2016-02-02 14:29:57 +00:00
Christopher Grebs
0130503f3e
Merge branch 'master' of github.com:mozilla/olympia into feature/restructure-modules
2016-02-01 19:31:18 +01:00
Stuart Colville
9a911ca080
Enforce CSP on prod + stage
2016-01-29 18:37:47 +00:00
Christopher Grebs
4e11d67d09
Merge branch 'master' of github.com:mozilla/olympia into feature/restructure-modules
2016-01-25 09:20:46 +01:00
Stuart Colville
95cd64946d
Enforce CSP on local-dev
2016-01-22 10:08:06 +00:00
Christopher Grebs
400d52eb86
Merge branch 'master' of github.com:mozilla/olympia into feature/restructure-modules
2016-01-22 06:49:19 +01:00
Mathieu Agopian
2c7679e944
Make it easier to enable the Django Debug Toolbar, and make it work with CSP
2016-01-21 16:05:57 +01:00
Christopher Grebs
ea92a3d2d9
Merge branch 'master' of github.com:mozilla/olympia into feature/restructure-modules
2016-01-18 16:03:44 +01:00
Stuart Colville
f6d8c0fabb
Add font-src and fix default-src
2016-01-14 13:45:35 +00:00
Stuart Colville
c81f1dfa71
Initial iframe settings for PayPal
2016-01-14 09:26:06 +00:00
Stuart Colville
e57841601c
CSP: Allow GA on www subdomain over http for local dev
2016-01-12 09:08:49 +00:00
Stuart Colville
52b0917194
Use the csp-report endpoint in addons-nginx
2016-01-11 17:30:32 +00:00
Christopher Grebs
580ccf7710
Update gitignore, updates to mock/patch import paths, minor fixes along the way.
2016-01-06 10:48:04 +01:00
Christopher Grebs
7ec38cc446
Update setup.cfg, fix package imports, syntax errors, various cleanups.
...
* Update installed apps, fix grouping and naming.
* Fix app-names in settings
* re-add startup import to manage.py for now
Various more import fixes, all import rewrites are now done.
This unfortunately still failes because of some circular imports
depending on django not being setup early enough.
2016-01-06 10:48:03 +01:00
Christopher Grebs
0734dbcf67
Install addons-validator and configure it's path. Fixes #881
2015-12-04 00:45:07 +01:00
Mark Striemer
6f8a211445
Redirect flow for FxA ( fixes #984 )
2015-11-27 17:04:17 -06:00
Mark Striemer
3f51470766
Account registration with FxA ( fixes #867 )
2015-11-26 13:25:11 -06:00
Mark Striemer
266e8f59b9
Pull FxA config from body[data-fxa-config] ( fixes #862 )
2015-11-25 14:25:31 -06:00
Mark Striemer
31bef578ca
Initial Firefox Accounts login
...
Fixes #863 , fixes #864
2015-11-19 12:50:39 -06:00
Kumar McMillan
cb047c39c3
Add SITE_URL to local server from environ variable
2015-10-30 12:39:15 -05:00
Mark Striemer
ebdbcd9f5f
Disable django debug toolbar by default
2015-10-20 13:03:19 -05:00
Mark Striemer
2bd5f6dd43
Use celery and validate add-ons by default
2015-10-20 13:03:16 -05:00
Kumar McMillan
b96f7703d9
JWT token auth for signing API (bug 1210889)
2015-10-09 13:39:58 -05:00
Stuart Colville
5104fe4d47
Move npm installation to Dockerfile
2015-09-29 09:39:46 +01:00
Mathieu Agopian
8cbc0db18e
Add tip on how to display the Django Debug Toolbar to the docs
2015-09-28 16:40:28 +02:00
Kris Maglione
fab345ca02
Bug 1185021: Part 2 - Let the validator handle errors, particularly soft timeouts, internally.
2015-07-30 16:36:46 -07:00
Kris Maglione
8dd9db7fa9
Bug 1163799: Use Celery soft timeouts rather than the validator's problematic setitimer/SIGALRM implementation.
2015-07-13 11:04:13 -07:00
Mathieu Agopian
a121c9290d
better experience for local dev: display 500 django page
2015-03-16 10:50:22 +01:00
Mathieu Agopian
a98b7e4236
Don't use X-SENDFILE for local dev
2015-03-07 19:23:18 +01:00
Mathieu Agopian
f45b26f49d
TASK_USER_ID setting uses an existing fixture for local dev
2015-03-07 16:22:21 +01:00