Emily Stark
de05d27cf3
Make browser-policy-content tell webapp about inline script policy.
...
This avoids the need for webapp to probe for browser-policy without
weak-depending on it.
2013-10-09 12:00:23 -07:00
David Glasser
ceb37b48c6
Shrinkwrap update.
2013-10-03 15:52:19 -07:00
David Glasser
26af82fcf0
Upgrade lots of package Npm dependencies.
2013-10-03 15:52:19 -07:00
Emily Stark
3afe10d947
Move meteor_runtime_config.js pathname check first
2013-10-03 13:56:03 -07:00
Emily Stark
b5286b941a
Separate browser policy functions into two packages.
...
* browser-policy uses browser-policy-framing and browser-policy-content, both of
which set default policies when they are used. This way you get a default
policy when you add a browser policy package, but you can pick and choose
different packages if you only want to think about one of them.
* The two packages use different namespaces: BrowserPolicy.framing and
BrowserPolicy.content, which meant some functions got renamed (e.g. not using
"framing" or "content in the function name when it's already in the
namespace).
2013-10-03 13:56:03 -07:00
Emily Stark
9d1e3dbd56
Enable CSP differently for tests.
...
Avoids sending header and using meteor_runtime_config.js on tests. Also tweak
wording on browser-policy docs.
2013-09-28 18:44:31 -07:00
Emily Stark
e6300461b1
Reorganize browser-policy docs a bit.
...
Addressing Nick's suggestions. Haven't decided yet about combining
browser-policy and starter-browser-policy docs.
2013-09-28 18:44:04 -07:00
Emily Stark
4893fe048c
Package for security-related http headers.
2013-09-28 18:44:04 -07:00
Emily Stark
008c1cf7f2
Use decoded pathnames in staticFiles keys.
...
Fixes #1339
2013-08-20 11:37:11 -07:00
Naomi Seyfer
19ba844f14
Renames
2013-08-14 17:46:23 -07:00
Naomi Seyfer
53cb4a11c5
Webapp now correctly tells proxy not to bind to 4433 but rather 44333 dummy port
2013-08-14 17:46:23 -07:00
Naomi Seyfer
3df06fc1b9
Re-allow the BIND_IP env var to affect things. Put settings in the right place.
2013-08-14 17:46:23 -07:00
Naomi Seyfer
8b50d3b3d7
Needed to use variable proxyServiceName
2013-08-14 17:46:23 -07:00
Naomi Seyfer
dde80aac91
removing console log
2013-08-14 17:46:23 -07:00
Naomi Seyfer
663cc1ba01
New way of interacting with galaxy now actually binds to proxy
2013-08-14 17:46:22 -07:00
Naomi Seyfer
a3e5196109
Todos now runs correctly outside galaxy again. Still have to try the NWO inside galaxy
2013-08-14 17:46:22 -07:00
Naomi Seyfer
11fccbe013
incorporating MONGO_URL into default app config
2013-08-14 17:46:22 -07:00
Naomi Seyfer
89844e7218
Some initial sketching. Unlikely to actually work at all
2013-08-14 17:46:22 -07:00
Emily Stark
63327b5075
Use callbacks for proxy binding method calls.
...
If an app is trying to connect to a proxy that's down, this prevents it from
freezing up and allows it to try another proxy if it hears about one.
2013-08-07 13:53:13 -07:00
Emily Stark
6decfd43d6
Use setting to select which proxy service to bind to
2013-08-06 12:58:29 -07:00
Nick Martin
ae965f1aa1
Make an environment variable to control where we bind.
...
This only affects the bundled app (eg, what you'd run in production). The dev mode runner has a bunch of '127.0.0.1' addresses hardcoded, and will need more work.
2013-07-30 20:00:15 -07:00
David Glasser
719bbb115b
Move bindToProxy to WebAppInternals; it is needed by the Galaxy proxy.
2013-07-29 23:21:08 -07:00
David Glasser
3e76c40cce
Improve data flow from deployConfig to mongo-livedata.
...
(Still ought to be better refactored though.)
2013-07-29 11:54:52 -07:00
David Glasser
4b3cb9d305
Rename api.exportSymbol -> api.export.
2013-07-25 18:54:43 -07:00
David Glasser
1e36cdb784
most tests pass, just not coffeescript
2013-07-25 18:54:41 -07:00
David Glasser
9f38258b54
Drop all @export lines. Add api.exportSymbol instead.
2013-07-25 18:54:40 -07:00
Geoff Schmidt
d2024ccee1
Clean up namespacing in accounts system too.
2013-07-25 18:54:40 -07:00
Geoff Schmidt
3d1c09794f
Comprehensive namespace cleanup.
2013-07-25 18:54:40 -07:00
Emily Stark
dcd740c35d
Don't copy MAIL_URL env var to deployConfig, since we check for it anyway in the
...
email package.
2013-07-16 16:43:31 -07:00
Emily Stark
737bbc7f12
Get mail url from deployConfig when present.
2013-07-16 15:59:55 -07:00
David Glasser
b9f343f8b4
Add Firefox instructions.
...
Change comment style to one which does not make FF print warnings. This breaks
Chrome, so start setting the header again.
2013-07-12 10:11:32 -07:00
David Glasser
4308b7c063
- switch from X-SourceMap header to //@ comment
...
- specify sourceMapUrl in browser manifest
- don't make source maps for app pure-JS files
- make URLs happy
- break traceback beauty
2013-07-12 10:11:31 -07:00
David Glasser
be0611d262
One attempt at making source map URLs cleaner.
...
You get the source map for /foo.js by asking for /foo.js?sourcemap=y.
Source files then implicitly show up next to them in the tree.
2013-07-12 10:11:31 -07:00
David Glasser
269434a44b
Inline source code in source maps instead of keeping another data structure.
2013-07-12 10:11:31 -07:00
David Glasser
af01be5004
Comment about various browser's support for source map headers.
2013-07-12 10:11:30 -07:00
David Glasser
c329ebf90d
Serve sources as well, and use X-SourceMap header.
...
Source maps now work in Chrome, if you enable them (dev tools -> gears button ->
enable source maps). I can't get them to work in FF 24 though.
2013-07-12 10:11:30 -07:00
David Glasser
31e560e8ca
serve source maps (but not sources)
...
they don't seem to actually work in chrome yet
2013-07-12 10:11:30 -07:00
David Glasser
7ef61492da
refactor disk layout of client programs to get rid of static/static_cacheable
...
This introduces some hacks into how asset dirs work. Will fix later. Might have
broken server assets. Who knows.
2013-07-12 10:11:29 -07:00
David Glasser
5b8e1c17f3
Use manifest, not directory serving, to serve static files.
2013-07-12 10:11:29 -07:00
Naomi Seyfer
18384d197c
rename some things having to do with url path prefixes
2013-07-09 11:21:54 -07:00
David Glasser
e4fd5d0a48
Add comment about deployConfig
2013-07-02 16:21:33 -07:00
David Glasser
c4609fc04c
rename Meteor._postStartup -> WebApp.onListening (needs matching galaxy change)
2013-07-02 16:15:12 -07:00
David Glasser
e38bf5e1ab
Move a few more functions off of __meteor_bootstrap__
2013-07-02 16:15:12 -07:00
David Glasser
1f26045fe0
__meteor_bootstrap__.bundle -> WebApp.clientProgram
2013-07-02 16:15:12 -07:00
David Glasser
053db8e9e9
Begin to refactor webapp package.
...
Move stuff from __meteor_bootstrap__ to WebApp exported symbol.
Note that the WebApp API continues to be subject to change.
2013-07-02 16:15:12 -07:00
David Glasser
e2951cca6c
Fix routepolicy/webapp dependency.
...
Inspired by awwx's #1176 .
Move Meteor._routePolicy to @exported RoutePolicy.
2013-07-02 15:11:45 -07:00
David Glasser
4fe321bba7
Avoid crash if a client program doesn't have static or static-cachable dirs.
2013-06-17 22:48:45 -07:00
David Glasser
ea82e7c4b4
Move PACKAGE/.npm/ to PACKAGE/.npm/package/
...
This is to isolate the NPM dependencies of the package at runtime from the NPM
dependencies of any build-time plugins in the package, which live in
PACKAGE/.npm/plugin/foo.
Before, plugins could see the node modules at PACKAGE/.npm/node_modules, which
was not isolated enough.
(One issue would be that if you happened to switch a package from having runtime
dependencies to having buildtime dependencies, the buildtime dependencies would
not get installed. This is partially an issue because we don't know to uninstall
all dependencies if they are all removed, but even if that is fixed it would
enforce an unnecessary ordering semantics on NPM updates.)
2013-06-14 11:12:31 -07:00
Naomi Seyfer
6eeec29398
fix tests that rely on structure of bundled html generated
2013-06-13 18:05:05 -07:00
Naomi Seyfer
1957c4e1d3
Remove unused file; fix spelling
...
include robots.txt
2013-06-13 18:05:05 -07:00