liz/wikijs-fork
liz/wikijs-fork
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,098 Commits 1 Branch 0 Tags 31 MiB
Vue 47.7%
JavaScript 42.1%
SCSS 5%
HTML 2%
Shell 1.7%
Other 1.5%
545ba4ec95
Go to file
Kyle Gehmlich 545ba4ec95
fix: remove duplicate query parameters on HTTPS redirect (#6460) 
HTTPS redirection rebuilds the full URL using req.originalUrl, which
includes query parameters (see
https://expressjs.com/en/api.html#req.originalUrl). Prior to this patch,
appending the stringified query params to req.originalUrl resulted in
duplicate parameters, e.g.
wiki.js/callback?session=123&code=abc?session=123&code=abc
which caused errors when being redirected from an insecure (http://)
callback URL to a secure version when using OIDC (e.g. with keycloak).

This issue is probably rare, but in cases where HTTPS redirection is
enabled and a user tries to hit an insecure URL with query parameters,
it could cause problems.
2023-06-03 23:19:01 -04:00
.devcontainer misc: add support for VSCode remote development (#1533) 2020-02-28 16:49:18 -05:00
.github ci: fix build arm64 action 2023-02-04 15:21:10 -05:00
.vscode misc: i18n-ally config 2021-10-15 22:29:01 -04:00
client fix: disable template compilation in source view 2023-06-03 23:15:22 -04:00
dev docs(helm): Correct spelling mistake in comment (#6202) 2023-03-11 17:15:15 -05:00
server fix: remove duplicate query parameters on HTTPS redirect (#6460) 2023-06-03 23:19:01 -04:00
.babelrc fix: disable code block line break + copy button 2019-11-22 16:16:37 -05:00
.editorconfig fix: root admin access deny bug + patreon link 2019-02-02 12:09:25 -05:00
.eslintignore refactor: dev optimizations + improvements 2018-03-17 22:41:16 -04:00
.eslintrc.yml fix: MSSQL migration 2.5.1 2020-07-05 15:59:02 -04:00
.gitattributes fix: sidebar display 2019-08-04 13:54:23 -04:00
.gitignore fix: login dialog dark mode 2019-08-26 22:54:02 -04:00
.npmrc chore: updated dependencies 2017-08-12 17:26:27 -04:00
.nvmrc fix: remove makefile + update nvmrc version 2020-05-21 00:20:57 -04:00
config.sample.yml feat(logging): add option to configure JSON logging (#5022) 2022-02-18 19:48:22 -05:00
cypress.json fix: cypress crash on CI 2020-07-05 16:13:40 -04:00
LICENSE Initial commit 2016-08-16 15:35:26 -04:00
package.json chore: update dependencies 2023-02-04 04:01:37 -05:00
README.md docs: update BACKERS 2023-05-22 18:36:02 -04:00
SECURITY.md docs: update SECURITY.md 2021-12-27 16:02:36 -05:00
yarn.lock chore: update dependencies 2023-02-04 04:01:37 -05:00

README.md

Wiki.js

Release License Standard - JavaScript Style Guide Downloads Docker Pulls
Build + Publish Huntr GitHub Sponsors Open Collective backers and sponsors Subscribe to Newsletter
Chat on Slack Follow on Twitter Follow on Telegram Chat on Discord Reddit

A modern, lightweight and powerful wiki app built on NodeJS

Follow our Twitter feed to learn about upcoming updates and new releases!

Donate

Wiki.js is an open source project that has been made possible due to the generous contributions by community backers. If you are interested in supporting this project, please consider becoming a sponsor, becoming a patron, donating to our OpenCollective, via Paypal or via Ethereum (0xe1d55c19ae86f6bcbfb17e7f06ace96bdbb22cb5).

Become a Sponsor Become a Patron Donate on OpenCollective Donate via Paypal
Donate via Ethereum Donate via Bitcoin Buy a T-Shirt

Gold Tier Sponsors

GitHub Sponsors

Support this project by becoming a sponsor. Your name will show up in the Contribute page of all Wiki.js installations as well as here with a link to your website! [Become a sponsor]

Alexander Casassovici
(@alexksso) 		Broxen
(@broxen) 		Dacon
(@xDacon) 		Jay Daley
(@JayDaley) 		Oleksii
(@idokka)

OpenCollective Sponsors

Support this project by becoming a sponsor. Your logo will show up in the Contribute page of all Wiki.js installations as well as here with a link to your website! [Become a sponsor]

Patreon Backers

Thank you to all our patrons! 🙏 [Become a patron]

  • Al Romano
  • Alex Balabanov
  • Alex Milanov
  • Alex Zen
  • Arti Zirk
  • Ave
  • Brandon Curtis
  • Damien Hottelier
  • Daniel T. Holtzclaw
  • Dave 'Sri' Seah
  • djagoo
  • dz
  • Douglas Lassance
  • Ergoflix
  • Ernie Reid
  • Etienne
  • Flemis Jurgenheimer
  • Florent
  • Günter Pavlas
  • hong
  • Hope
  • Ian
  • Imari Childress
  • Iskander Callos
  • Josh Stewart
  • Justin Dunsworth
  • Keir
  • Loïc CRAMPON
  • Ludgeir Ibanez
  • Lyn Matten
  • Mads Rosendahl
  • Mark Mansur
  • Matt Gedigian
  • Mike Ditton
  • Nate Figz
  • Patryk
  • Paul O'Fallon
  • Philipp Schürch
  • Tracey Duffy
  • Quaxim
  • Richeir
  • Sergio Navarro Fernández
  • Shad Narcher
  • ShadowVoyd
  • SmartNET.works
  • Stepan Sokolovskyi
  • Zach Crawford
  • Zach Maynard
  • 张白驹

OpenCollective Backers

Thank you to all our backers! 🙏 [Become a backer]

Contributors

This project exists thanks to all the people who contribute. [Contribute].

Special Thanks

Browserstack
Browserstack for providing access to their great cross-browser testing tools.

Cloudflare
Cloudflare for providing their great CDN, SSL and advanced networking services.

DigitalOcean
DigitalOcean for providing hosting of the Wiki.js documentation site and APIs.

Icons8
Icons8 for providing access to their beautiful icon sets.

Localazy
Localazy for providing access to their great localization service.

Lokalise
Lokalise for providing access to their great localization tool.

MacStadium
MacStadium for providing access to their Mac hardware in the cloud.

Netlify
Netlify for providing hosting for our website.

ngrok
ngrok for providing access to their great HTTP tunneling services.

Porkbun
Porkbun for providing domain registration services.