From 8370189cdfe153471b8e0423bd3b333c2f67c368 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Fri, 20 Jan 2023 14:55:33 +0100 Subject: [PATCH 1/8] Update config_panel.toml --- config_panel.toml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/config_panel.toml b/config_panel.toml index 80cb82f..7fdaacf 100644 --- a/config_panel.toml +++ b/config_panel.toml @@ -6,6 +6,15 @@ name = "Element configuration" [main.config] name = "Configuration Options" + + [main.config.default_home_server] + ask = "Default Home Server" + type = "string" + default = "matrix.org" + help = "Define the Default Home Server." + bind = "default_home_server:/var/www/__APP__/config.json" + + [main.config.login_for_welcome] ask = "Display login as welcome page" type = "boolean" From ecf687773c899940702b4c27f533c106005c0279 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Fri, 20 Jan 2023 13:55:38 +0000 Subject: [PATCH 2/8] Auto-update README --- README.md | 2 +- README_fr.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index c105d95..4b0c2b6 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in Element is a new type of messaging app. You choose where your messages are stored, putting you in control of your data. It gives you access to the Matrix open network, so you can talk to anyone. Element provides a new level of security, adding cross-signed device verification to default end-to-end encryption. -**Shipped version:** 1.11.19~ynh1 +**Shipped version:** 1.11.20~ynh1 **Demo:** https://app.element.io/ diff --git a/README_fr.md b/README_fr.md index 98d3e39..98ea357 100644 --- a/README_fr.md +++ b/README_fr.md @@ -17,7 +17,7 @@ Si vous n’avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) po Element est un nouveau type d'application de messagerie. Vous choisissez où vos messages sont stockés, ce qui vous donne le contrôle de vos données. Il vous donne accès au réseau ouvert Matrix, vous pouvez donc parler à n'importe qui. Element offre un nouveau niveau de sécurité, en ajoutant la vérification des appareils par signature croisée au chiffrement de bout en bout par défaut. -**Version incluse :** 1.11.19~ynh1 +**Version incluse :** 1.11.20~ynh1 **Démo :** https://app.element.io/ From 9b573d4ca9c1e1d8c68e7fca3b95e4db1b795e0f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Fri, 20 Jan 2023 14:58:56 +0100 Subject: [PATCH 3/8] Update config_panel.toml --- config_panel.toml | 1 - 1 file changed, 1 deletion(-) diff --git a/config_panel.toml b/config_panel.toml index 7fdaacf..74e4af7 100644 --- a/config_panel.toml +++ b/config_panel.toml @@ -6,7 +6,6 @@ name = "Element configuration" [main.config] name = "Configuration Options" - [main.config.default_home_server] ask = "Default Home Server" type = "string" From 758f43e593245610eab43a8cd409509dd1a7353b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Tue, 24 Jan 2023 10:06:47 +0100 Subject: [PATCH 4/8] Update DISCLAIMER.md --- doc/DISCLAIMER.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/DISCLAIMER.md b/doc/DISCLAIMER.md index 22d6e95..fde090f 100644 --- a/doc/DISCLAIMER.md +++ b/doc/DISCLAIMER.md @@ -9,7 +9,7 @@ This application support the SSO. If you want to use the SSO, you need to define ### Important Security Note We do not recommend running Element from the same domain name as your Matrix -homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting) +homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting) vulnerabilities that could occur if someone caused Element to load and render malicious user generated content from a Matrix API which then had trusted access to Element (or other apps) due to sharing the same domain. From 1fb1ba1589a81bb80ec4d34d1986d34bbeec4822 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Tue, 24 Jan 2023 09:06:51 +0000 Subject: [PATCH 5/8] Auto-update README --- README.md | 4 ++-- README_fr.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 4b0c2b6..6dd6110 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ It shall NOT be edited by hand. # Element for YunoHost -[![Integration level](https://dash.yunohost.org/integration/element.svg)](https://dash.yunohost.org/appci/app/element) ![Working status](https://ci-apps.yunohost.org/ci/badges/element.status.svg) ![Maintenance status](https://ci-apps.yunohost.org/ci/badges/element.maintain.svg) +[![Integration level](https://dash.yunohost.org/integration/element.svg)](https://dash.yunohost.org/appci/app/element) ![Working status](https://ci-apps.yunohost.org/ci/badges/element.status.svg) ![Maintenance status](https://ci-apps.yunohost.org/ci/badges/element.maintain.svg) [![Install Element with YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=element) *[Lire ce readme en français.](./README_fr.md)* @@ -38,7 +38,7 @@ This application support the SSO. If you want to use the SSO, you need to define ### Important Security Note We do not recommend running Element from the same domain name as your Matrix -homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting) +homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting) vulnerabilities that could occur if someone caused Element to load and render malicious user generated content from a Matrix API which then had trusted access to Element (or other apps) due to sharing the same domain. diff --git a/README_fr.md b/README_fr.md index 98ea357..4070b49 100644 --- a/README_fr.md +++ b/README_fr.md @@ -5,7 +5,7 @@ It shall NOT be edited by hand. # Element pour YunoHost -[![Niveau d’intégration](https://dash.yunohost.org/integration/element.svg)](https://dash.yunohost.org/appci/app/element) ![Statut du fonctionnement](https://ci-apps.yunohost.org/ci/badges/element.status.svg) ![Statut de maintenance](https://ci-apps.yunohost.org/ci/badges/element.maintain.svg) +[![Niveau d’intégration](https://dash.yunohost.org/integration/element.svg)](https://dash.yunohost.org/appci/app/element) ![Statut du fonctionnement](https://ci-apps.yunohost.org/ci/badges/element.status.svg) ![Statut de maintenance](https://ci-apps.yunohost.org/ci/badges/element.maintain.svg) [![Installer Element avec YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=element) *[Read this readme in english.](./README.md)* From 0ecd846a00e77038c7286329b2da9e3d7dad5c48 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Fri, 17 Mar 2023 14:28:53 +0000 Subject: [PATCH 6/8] Auto-update README --- README.md | 23 ----------------------- 1 file changed, 23 deletions(-) diff --git a/README.md b/README.md index 10d1fb4..b228744 100644 --- a/README.md +++ b/README.md @@ -26,29 +26,6 @@ Element is a new type of messaging app. You choose where your messages are store ![Screenshot of Element](./doc/screenshots/homepage-all-platforms-1_1.png) - -## Disclaimers / important information - -## YunoHost specific features - -### Multi-users support - -This application support the SSO. If you want to use the SSO, you need to define the path to the default homeserver as your homeserver witch is installed on your YunoHost instance. - -## Additional informations - -### Important Security Note - -We do not recommend running Element from the same domain name as your Matrix -homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting) -vulnerabilities that could occur if someone caused Element to load and render -malicious user generated content from a Matrix API which then had trusted -access to Element (or other apps) due to sharing the same domain. - -We have put some coarse mitigations into place to try to protect against this -situation, but it's still not good practice to do it in the first place. See -https://github.com/vector-im/riot-web/issues/1977 for more details. - ## Documentation and resources * Official app website: From 0560ceae0e5c22cfb69f4026ae6e9b645d465da1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?E=CC=81ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Fri, 17 Mar 2023 15:29:37 +0100 Subject: [PATCH 7/8] Update config_panel.toml --- config_panel.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config_panel.toml b/config_panel.toml index 75bb0ec..3214ad4 100644 --- a/config_panel.toml +++ b/config_panel.toml @@ -13,7 +13,7 @@ name = "Element configuration" type = "string" default = "matrix.org" help = "Define the Default Home Server." - bind = "default_home_server:/var/www/__APP__/config.json" + bind = "default_home_server:__INSTALL_DIR__/config.json" [main.config.login_for_welcome] From 8ad9119df6e9d1d3d29accc3ef540a036da2255e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?E=CC=81ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Fri, 17 Mar 2023 15:40:21 +0100 Subject: [PATCH 8/8] Update config_panel.toml --- config_panel.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config_panel.toml b/config_panel.toml index 3214ad4..2eefc64 100644 --- a/config_panel.toml +++ b/config_panel.toml @@ -13,7 +13,7 @@ name = "Element configuration" type = "string" default = "matrix.org" help = "Define the Default Home Server." - bind = "default_home_server:__INSTALL_DIR__/config.json" + bind = "base_url:__INSTALL_DIR__/config.json" [main.config.login_for_welcome]