Commit Graph

62 Commits

Author SHA1 Message Date
Emily Stark
de05d27cf3 Make browser-policy-content tell webapp about inline script policy.
This avoids the need for webapp to probe for browser-policy without
weak-depending on it.
2013-10-09 12:00:23 -07:00
David Glasser
ceb37b48c6 Shrinkwrap update. 2013-10-03 15:52:19 -07:00
David Glasser
26af82fcf0 Upgrade lots of package Npm dependencies. 2013-10-03 15:52:19 -07:00
Emily Stark
3afe10d947 Move meteor_runtime_config.js pathname check first 2013-10-03 13:56:03 -07:00
Emily Stark
b5286b941a Separate browser policy functions into two packages.
* browser-policy uses browser-policy-framing and browser-policy-content, both of
  which set default policies when they are used. This way you get a default
  policy when you add a browser policy package, but you can pick and choose
  different packages if you only want to think about one of them.
* The two packages use different namespaces: BrowserPolicy.framing and
  BrowserPolicy.content, which meant some functions got renamed (e.g. not using
  "framing" or "content in the function name when it's already in the
  namespace).
2013-10-03 13:56:03 -07:00
Emily Stark
9d1e3dbd56 Enable CSP differently for tests.
Avoids sending header and using meteor_runtime_config.js on tests. Also tweak
wording on browser-policy docs.
2013-09-28 18:44:31 -07:00
Emily Stark
e6300461b1 Reorganize browser-policy docs a bit.
Addressing Nick's suggestions. Haven't decided yet about combining
browser-policy and starter-browser-policy docs.
2013-09-28 18:44:04 -07:00
Emily Stark
4893fe048c Package for security-related http headers. 2013-09-28 18:44:04 -07:00
Emily Stark
008c1cf7f2 Use decoded pathnames in staticFiles keys.
Fixes #1339
2013-08-20 11:37:11 -07:00
Naomi Seyfer
19ba844f14 Renames 2013-08-14 17:46:23 -07:00
Naomi Seyfer
53cb4a11c5 Webapp now correctly tells proxy not to bind to 4433 but rather 44333 dummy port 2013-08-14 17:46:23 -07:00
Naomi Seyfer
3df06fc1b9 Re-allow the BIND_IP env var to affect things. Put settings in the right place. 2013-08-14 17:46:23 -07:00
Naomi Seyfer
8b50d3b3d7 Needed to use variable proxyServiceName 2013-08-14 17:46:23 -07:00
Naomi Seyfer
dde80aac91 removing console log 2013-08-14 17:46:23 -07:00
Naomi Seyfer
663cc1ba01 New way of interacting with galaxy now actually binds to proxy 2013-08-14 17:46:22 -07:00
Naomi Seyfer
a3e5196109 Todos now runs correctly outside galaxy again. Still have to try the NWO inside galaxy 2013-08-14 17:46:22 -07:00
Naomi Seyfer
11fccbe013 incorporating MONGO_URL into default app config 2013-08-14 17:46:22 -07:00
Naomi Seyfer
89844e7218 Some initial sketching. Unlikely to actually work at all 2013-08-14 17:46:22 -07:00
Emily Stark
63327b5075 Use callbacks for proxy binding method calls.
If an app is trying to connect to a proxy that's down, this prevents it from
freezing up and allows it to try another proxy if it hears about one.
2013-08-07 13:53:13 -07:00
Emily Stark
6decfd43d6 Use setting to select which proxy service to bind to 2013-08-06 12:58:29 -07:00
Nick Martin
ae965f1aa1 Make an environment variable to control where we bind.
This only affects the bundled app (eg, what you'd run in production). The dev mode runner has a bunch of '127.0.0.1' addresses hardcoded, and will need more work.
2013-07-30 20:00:15 -07:00
David Glasser
719bbb115b Move bindToProxy to WebAppInternals; it is needed by the Galaxy proxy. 2013-07-29 23:21:08 -07:00
David Glasser
3e76c40cce Improve data flow from deployConfig to mongo-livedata.
(Still ought to be better refactored though.)
2013-07-29 11:54:52 -07:00
David Glasser
4b3cb9d305 Rename api.exportSymbol -> api.export. 2013-07-25 18:54:43 -07:00
David Glasser
1e36cdb784 most tests pass, just not coffeescript 2013-07-25 18:54:41 -07:00
David Glasser
9f38258b54 Drop all @export lines. Add api.exportSymbol instead. 2013-07-25 18:54:40 -07:00
Geoff Schmidt
d2024ccee1 Clean up namespacing in accounts system too. 2013-07-25 18:54:40 -07:00
Geoff Schmidt
3d1c09794f Comprehensive namespace cleanup. 2013-07-25 18:54:40 -07:00
Emily Stark
dcd740c35d Don't copy MAIL_URL env var to deployConfig, since we check for it anyway in the
email package.
2013-07-16 16:43:31 -07:00
Emily Stark
737bbc7f12 Get mail url from deployConfig when present. 2013-07-16 15:59:55 -07:00
David Glasser
b9f343f8b4 Add Firefox instructions.
Change comment style to one which does not make FF print warnings. This breaks
Chrome, so start setting the header again.
2013-07-12 10:11:32 -07:00
David Glasser
4308b7c063 - switch from X-SourceMap header to //@ comment
- specify sourceMapUrl in browser manifest
- don't make source maps for app pure-JS files
- make URLs happy
- break traceback beauty
2013-07-12 10:11:31 -07:00
David Glasser
be0611d262 One attempt at making source map URLs cleaner.
You get the source map for /foo.js by asking for /foo.js?sourcemap=y.

Source files then implicitly show up next to them in the tree.
2013-07-12 10:11:31 -07:00
David Glasser
269434a44b Inline source code in source maps instead of keeping another data structure. 2013-07-12 10:11:31 -07:00
David Glasser
af01be5004 Comment about various browser's support for source map headers. 2013-07-12 10:11:30 -07:00
David Glasser
c329ebf90d Serve sources as well, and use X-SourceMap header.
Source maps now work in Chrome, if you enable them (dev tools -> gears button ->
enable source maps). I can't get them to work in FF 24 though.
2013-07-12 10:11:30 -07:00
David Glasser
31e560e8ca serve source maps (but not sources)
they don't seem to actually work in chrome yet
2013-07-12 10:11:30 -07:00
David Glasser
7ef61492da refactor disk layout of client programs to get rid of static/static_cacheable
This introduces some hacks into how asset dirs work. Will fix later. Might have
broken server assets. Who knows.
2013-07-12 10:11:29 -07:00
David Glasser
5b8e1c17f3 Use manifest, not directory serving, to serve static files. 2013-07-12 10:11:29 -07:00
Naomi Seyfer
18384d197c rename some things having to do with url path prefixes 2013-07-09 11:21:54 -07:00
David Glasser
e4fd5d0a48 Add comment about deployConfig 2013-07-02 16:21:33 -07:00
David Glasser
c4609fc04c rename Meteor._postStartup -> WebApp.onListening (needs matching galaxy change) 2013-07-02 16:15:12 -07:00
David Glasser
e38bf5e1ab Move a few more functions off of __meteor_bootstrap__ 2013-07-02 16:15:12 -07:00
David Glasser
1f26045fe0 __meteor_bootstrap__.bundle -> WebApp.clientProgram 2013-07-02 16:15:12 -07:00
David Glasser
053db8e9e9 Begin to refactor webapp package.
Move stuff from __meteor_bootstrap__ to WebApp exported symbol.

Note that the WebApp API continues to be subject to change.
2013-07-02 16:15:12 -07:00
David Glasser
e2951cca6c Fix routepolicy/webapp dependency.
Inspired by awwx's #1176.

Move Meteor._routePolicy to @exported RoutePolicy.
2013-07-02 15:11:45 -07:00
David Glasser
4fe321bba7 Avoid crash if a client program doesn't have static or static-cachable dirs. 2013-06-17 22:48:45 -07:00
David Glasser
ea82e7c4b4 Move PACKAGE/.npm/ to PACKAGE/.npm/package/
This is to isolate the NPM dependencies of the package at runtime from the NPM
dependencies of any build-time plugins in the package, which live in
PACKAGE/.npm/plugin/foo.

Before, plugins could see the node modules at PACKAGE/.npm/node_modules, which
was not isolated enough.

(One issue would be that if you happened to switch a package from having runtime
dependencies to having buildtime dependencies, the buildtime dependencies would
not get installed. This is partially an issue because we don't know to uninstall
all dependencies if they are all removed, but even if that is fixed it would
enforce an unnecessary ordering semantics on NPM updates.)
2013-06-14 11:12:31 -07:00
Naomi Seyfer
6eeec29398 fix tests that rely on structure of bundled html generated 2013-06-13 18:05:05 -07:00
Naomi Seyfer
1957c4e1d3 Remove unused file; fix spelling
include robots.txt
2013-06-13 18:05:05 -07:00