1392 Commits

Author SHA1 Message Date
Remy Sharp
aee76ffd4c Merge branch 'master' into feature/bin-info-tweaks
Conflicts:
	lib/routes.js
	views/index.html
2014-07-14 16:07:31 +01:00
Remy Sharp
4f9d3e586d Ensure the output string goes back 2014-07-14 16:04:25 +01:00
Remy Sharp
973f3da67a Fixed full output 2014-07-14 10:58:17 +01:00
Remy Sharp
7256346c93 SAMEORIGIN instead of DENY
Allows for iframe testing *inside* jsbin
2014-07-14 10:41:07 +01:00
Remy Sharp
0d02dd63d3 Merge branch 'master' into feature/scss
Conflicts:
	package.json
	public/js/vendor/stylus.js
2014-07-14 10:32:26 +01:00
Remy Sharp
24d19bf96c Merge pull request #1651 from jsbin/fix/no-iframes-please
x-frame-options applied to full bin output
2014-07-13 13:58:56 +01:00
Remy Sharp
2622b77db8 Putting infocard public & codecasting by default
Lots of testing around spike and codecasting follows.
2014-07-13 13:19:15 +01:00
Remy Sharp
147d32747d Fixed #1174
Ensure the *old* bin is going in to do the bump lookup. Somehow it was using the latest bin (suspect the line that changes the req.bin, via spike/index.js)
2014-07-13 13:17:05 +01:00
Remy Sharp
557596a84c x-frame-options applied to full bin output 2014-07-13 12:01:14 +01:00
Remy Sharp
7bf4f25d35 processors: result.result => output.result 2014-07-13 07:25:32 +01:00
Giulia Alfonsi
b19c573d1b Enabled processors feature flag for everyone 2014-07-11 16:15:31 +01:00
Remy Sharp
f94b8e47ef Push processor messages to local port
And pennyworth will *pull* these messages and process them.
2014-07-11 15:48:32 +01:00
Remy Sharp
215e5ce9bc Merge pull request #1644 from jsbin/fix/1643
Don't blow up when configs don't exist
2014-07-11 13:16:57 +01:00
Remy Sharp
8619bb6697 undefsafe that bad boy.
Fixes #1643
2014-07-11 13:15:14 +01:00
Giulia Alfonsi
c0a33aaff0 Merge branch 'master' into feature/scss
Conflicts:
	lib/handlers/bin.js
	views/index.html
2014-07-11 12:58:16 +01:00
Fabien O'Carroll
baa5815744 Add testForMemcachedServer function
This just creates a TCP socket and trys to connect to the specified
port. if it fails we send a message to the node.js console.

This closes #1566
2014-07-10 16:27:17 +01:00
Remy Sharp
e86245c2de Ensure SSL is respected in all places 2014-07-09 13:26:44 +01:00
Remy Sharp
ca36f8daa9 Fix #1633
First test for the meta tag with a charset property, and insert the license copy below.

If that's not found, put it after the html element. Sure, we should probably look for the title tag, but let's face it, it's just a dumping ground for test code, and dear author: include a meta charset for heavens' sake.

...okay, maybe I should do the title check too, but maybe _after_ someone files an issue.
2014-07-08 21:41:45 +01:00
Remy Sharp
1d0c91d130 Fixed embedding
Fixed #1634

Also added some more defaults to protected urls.

Tweaked embedded styles, and also ignore user template when cached.
2014-07-08 19:49:27 +01:00
Giulia Alfonsi
3a99844ab6 Merge branch 'master' into feature/scss
Conflicts:
	lib/features.js
	lib/handlers/bin.js
	lib/routes.js
	package.json
2014-07-08 11:55:16 +01:00
Remy Sharp
2073a96ea1 Ensure referrer saving works on https 2014-07-03 23:39:42 +01:00
Remy Sharp
3554da35ec THE INSANITY!!! 2014-07-03 18:51:23 +01:00
Remy Sharp
e1c6b21779 Force output to https if enable 2014-07-03 16:29:58 +01:00
Remy Sharp
dfb3521215 https on output & protect jsbin.user object
If users want to change their settings from the console, they have to use a key to unlock the feature.
2014-07-03 16:26:48 +01:00
Remy Sharp
41993ac9a4 Merge pull request #1610 from jsbin/feature/no-full-for-anon
Limit full previews for 90 minutes
2014-07-03 11:37:02 +01:00
Remy Sharp
97160623c5 Allow free for 90 minutes
Not 1 minute!!!
2014-07-03 11:28:04 +01:00
Remy Sharp
6f8198253d Add a config option to control this setting 2014-07-03 10:45:42 +01:00
Remy Sharp
9c0fa2cbc3 Make enable SSL a pro feature 2014-07-02 17:15:17 +01:00
Giulia Alfonsi
d71f4c009c Renamed processor.port in processor.address 2014-07-01 02:25:06 +01:00
Remy Sharp
65715c1409 typo 2014-06-28 18:28:41 +01:00
Remy Sharp
834a097c1b remove console 2014-06-28 17:54:57 +01:00
Remy Sharp
bab8f07487 Limit full previews for 2 hours
We've been getting more and more spammers using JS Bin to create either phishing pages, or using the JS to redirect. We have an internal method to blacklist these spammers, but JS Bin's weak spot is that anyone can create anonymous bins and link to the full output (i.e. without any of the JS Bin bits - like a mini geocities).

It's been getting worse as time goes on, so I'm moving to a model that allows full previews for 2 hours, then automatically redirects to the /edit view - which at the very least, informs the visitor that they're actually on jsbin.com and not being phished.

I will adjust this change so that it only applies to *new* bins since the release of this code.

If you create your bins as registered user, this has no effect for you.

However, if you're registered and creating spam, it'll in breach of our T&Cs, so we will remove your account - be nice!
2014-06-28 17:37:55 +01:00
Giulia Alfonsi
07040e5d7e Added stylus - not finished 2014-06-26 17:49:08 +01:00
Giulia Alfonsi
de5459d1b5 Added Myth processor, both pennyworth and clientside 2014-06-26 17:14:37 +01:00
Giulia Alfonsi
2fb0fa020c Handling errors in case pennyworth is not available 2014-06-26 17:11:19 +01:00
Giulia Alfonsi
4e41a56c2d Show result out of process output in panel source code 2014-06-26 11:30:24 +01:00
Remy Sharp
1374d6e4cd Fixed default jshint 2014-06-20 16:51:51 +01:00
Remy Sharp
5f278a8db6 Merge branch 'master' into feature/upgrade
Conflicts:
	lib/features.js
2014-06-20 16:10:38 +01:00
Remy Sharp
791cdbe9e8 Update feature flags 2014-06-20 16:08:31 +01:00
Remy Sharp
da39f2b6b6 Tweaks 2014-06-20 15:57:06 +01:00
Giulia Alfonsi
1ce9c1a227 Show coupon input only if requested on query string 2014-06-20 15:55:43 +01:00
Remy Sharp
cf9d66fc03 Support regex 2014-06-19 18:47:09 +01:00
Giulia Alfonsi
95a608c31c Added sass standalone connection to pennyworth 2014-06-18 18:49:55 +01:00
Giulia Alfonsi
091baf697d Standalone css output 2014-06-18 18:43:40 +01:00
Fabien O'Carroll
375b18da7f Merge branch 'feature/scss' of git://github.com/jsbin/jsbin into feature/scss
* 'feature/scss' of git://github.com/jsbin/jsbin:
  Added sass and stuff
  Accept error messages (and show in console log for the moment)
2014-06-18 11:05:21 +01:00
Giulia Alfonsi
720efd8db9 Added sass and stuff 2014-06-17 17:30:12 +01:00
Remy Sharp
01f33260b6 Fixed /source link 2014-06-17 15:41:31 +01:00
Remy Sharp
2e29c300e6 Ensure /upgrade is in account urls 2014-06-16 17:53:58 +01:00
Remy Sharp
08b526431e Strict in routes. Cleaning up feature flags. 2014-06-16 13:40:45 +01:00
Fabien O'Carroll
00277eb7f3 Read url from config 2014-06-13 17:56:30 +01:00