alois/Verso
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
27,955 Commits 8 Branches 11 Tags
5cfd7b6c6aeda4aabde65f5ce093989b7c2a29ec
Commit Graph
27955 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Simon GardnerandCopybot 5cfd7b6c6a [migration] re-use paypal methods if billing agreement ids match (#33720) 
GitOrigin-RevId: 4a324c1cdde84dabf620a2616a0aa27242cf041e
 2026-05-21 08:06:38 +00:00
Olzhas AskarandCopybot bb0dc07d22 Merge pull request #33741 from overleaf/lg-sanitize-html-upgrade 
[Security upgrade] Upgrade sanitize-html to 2.17.4 (GHSA-rpr9-rxv7-x643)

GitOrigin-RevId: 40a11361eac35d44a6fd7069e0d0d7c02a6628ec
 2026-05-21 08:06:33 +00:00
Miguel SerranoandCopybot ad651a22fa Revert "[web] Add SVG support to file-view panel (#32155)" (#33832) 
This reverts commit e80c491a10db6f5757c568430e17d9cbb613c5b4.

GitOrigin-RevId: dbe0de698bc7349e5b8f9712d1d13998e41ab528
 2026-05-21 08:06:28 +00:00
Miguel SerranoandCopybot 35681dd3b2 [web] Add SVG support to file-view panel (#32155) 
* [web] Add SVG support to file-view panel

Adds support by reading the content of the downloaded SVG, then creating a blob and rendering it as native HTML.

GitOrigin-RevId: e80c491a10db6f5757c568430e17d9cbb613c5b4
 2026-05-21 08:06:16 +00:00
Miguel SerranoandCopybot f9c53fe147 [web] Added DEFAULT_LATEX_COMPILER env (#32455) 
This is mainly intended to be used in CE/Server Pro

GitOrigin-RevId: 277f9afca389a1e7b00db2d987129432fb1707b5
 2026-05-21 08:06:12 +00:00
Miguel SerranoandCopybot 107189cd5f [web] Clear hardcoded password in external SP auth (#33597) 
registerExternalAuthAdmin() now generates a random password on admin registration.

A migration clears the password for existing installs only in CE/SP

GitOrigin-RevId: 94a82d35dc8cd46915c31fb24f477c19367025eb
 2026-05-21 08:06:07 +00:00
Simon GardnerandCopybot 2233ac9b1d Harden shell quoting in CI pipeline definitions (#33789) 
GitOrigin-RevId: a21c02f632b1e357ba18a86378d796a0d93fa484
 2026-05-20 08:07:46 +00:00
Mathias JakobsenandCopybot 5d4f38e57a Merge pull request #33629 from overleaf/lg-fast-uri-resolution 
[Security upgrade] Pin fast-uri to 3.1.2 via resolutions (GHSA-q3j6-qgpj-74h6, GHSA-v39h-62p7-jpjc)

GitOrigin-RevId: 154e742e12cb68e8b1c8d5b88e1a188160746784
 2026-05-20 08:07:34 +00:00
Liam O'BrienandCopybot b4a76fee6d [web] Implementing library search (#33604) 
* Initial working version of library search

draft fetch allowing optional search param

draft debounce search

draft search bar

draft using  for search

draft search params

draft data index creation

draft prefix-regex search

draft add fields only on search

draft index setup

draft search tests

draft search tests for extra params

draft using correct display value from bib entry for tokenization

* Library search handles diacritics

* Library styling and refreshing table data without
reloading table

* Updating mongo search query and creating migration
scripts for existing data

* Using Mongo query for sorting results

* Moving copied files into shared directory

* Addressing review comments

* Pulling changes from bibtex-search-token for consistency with migration

* Fixing lint

* Using mongo collation for handling case and diacritics in search queries

* Boosting citation keys with  check for tokens

* Removing double foldLatinDigraphs call

* Matching figma designs for Library search component

* Adding cursor for paginated Library search results

* Re-fixing flash after searching library

* Unit test for cursor search

* Using same cursor object for search and get all results

* Data migration moved to manual script

GitOrigin-RevId: b7e6a1f07f775c8450dd97e7269cab3b68ca0eb3
 2026-05-20 08:07:29 +00:00
Jessica LawsheandCopybot 9acf3b8e7f Merge pull request #33610 from overleaf/jel-hostname-capturedByGroup 
[web] Check `capturedByGroup` when adding new email

GitOrigin-RevId: f9ef3d4cc7387dc0139a70aecd6cfcb20170abc6
 2026-05-20 08:07:18 +00:00
Eric Mc SweenandCopybot 2f32b9d61e Merge pull request #32706 from overleaf/em-dropbox-queue 
[third-party-datastore] Apply Dropbox→Overleaf updates inline, removing queue hop

GitOrigin-RevId: 1ea17eefe57aaf32634ce3395682f7eac2e53dc5
 2026-05-20 08:07:10 +00:00
Lucie GermainCopybotClaude Opus 4.7
 		2f08f6f6eb Bump mongoose to 8.22.1 (GHSA-wpg9-53fq-2r8h) (#33648) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
GitOrigin-RevId: f092e8d914ea5825e285fe4741bb42dd2c5d5fa3
 2026-05-20 08:07:05 +00:00
Alf EatonandCopybot 34d272afa9 Reapply "Wrap PDF setDocument in startViewTransition (#33346)" (#33633) 
GitOrigin-RevId: 11dc65d8a8195c8cd6e6e2b58905a0f8b7b218f4
 2026-05-20 08:06:53 +00:00
Alf EatonandCopybot 1d959af16e Process zip import entries in parallel (#33176) 
GitOrigin-RevId: f77c2b08d4c085b51a8608d2621dd5bbe1134258
 2026-05-20 08:06:48 +00:00
Alf EatonandCopybot 7eed283b11 Ignore entries in __MACOSX folder when importing zip archive (#33147) 
GitOrigin-RevId: e990d593d96085e13a209d4155823097b0814276
 2026-05-20 08:06:40 +00:00
Alf EatonandCopybot efab968153 Treat qmd and rmd extensions as Markdown (#33786) 
GitOrigin-RevId: 89d79e958ea08f3388bde8dc561b04f87a1b6549
 2026-05-20 08:06:36 +00:00
Alf EatonandCopybot 7c8e89923d Add .qmd to editable file extensions (#33785) 
GitOrigin-RevId: 868a96e66e8d408ceb2f5b29e59f0d1ee12992dd
 2026-05-20 08:06:31 +00:00
Alf EatonCopybotClaude Opus 4.7
 		d8c33cc34c Allow multiple concurrent reference searches (#33739) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
GitOrigin-RevId: 403d4f5900a8c4ccdc64032d365adb285a191b71
 2026-05-20 08:06:23 +00:00
Alf EatonandCopybot c0acddbfaf Use sharejs doc type in Storybook stories (#33565) 
GitOrigin-RevId: a2bf64d3ce376dd05e740796e8f1ea74913ed8f0
 2026-05-20 08:06:19 +00:00
Alf EatonandCopybot 3dbbf95fbb Disable Yarn telemetry (#33561) 
GitOrigin-RevId: f835277a689e142b7d336ee38af3f142e37c6f5c
 2026-05-20 08:06:14 +00:00
Alf EatonCopybotCopilot
 		30edd837e1 Use resolve.tsconfig (#31639) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
GitOrigin-RevId: 1c7da49e14af5935f85f1927186a825b116bb4e9
 2026-05-20 08:06:05 +00:00
EvelynandCopybot b5654c5a01 fix: chown /var/lib/overleaf mount point to www-data (#33764) 
The init script chowns all subdirectories but not the mount point
itself. When the host volume is owned by a non-www-data user with
restrictive permissions (e.g. 770), the web process cannot traverse
the directory and crashes with EACCES, causing a 502.

Fixes #1325 and #1465

COPYBARA_INTEGRATE_REVIEW=https://github.com/overleaf/overleaf/pull/1475 from ev-not-eve:patch-1 269a80500f

Co-authored-by: Evelyn <evansvevelyn@gmail.com>
GitOrigin-RevId: 959051861246c9f3958e56861821b92d84167926
 2026-05-19 08:04:55 +00:00
Mathias JakobsenandCopybot ce6f9b8e8c Merge pull request #33705 from overleaf/mj-clsi-cwd-for-conversions 
[clsi] Add cwd argument to CommandRunner and use to simplify conversions

GitOrigin-RevId: 5333e3262a99e602ab5470ae1e23facb5b28a170
 2026-05-19 08:04:51 +00:00
Jakob AckermannandCopybot c0111fec29 [monorepo] run format_fix and trigger prettier on .agents changes (#33759) 
* [monorepo] run format_fix and trigger prettier on .agents changes

* [monorepo] cleanup stale prettier ignore rule

* [monorepo] tweak format:monorepo-check:fix

GitOrigin-RevId: e6c29a0c601fbf388a048eb42706f9bd0a18344f
 2026-05-19 08:04:48 +00:00
Jakob AckermannandCopybot 1f8371e0a3 [document-updater] flush_all: log progress after every 1k projects (#33757) 
GitOrigin-RevId: b5b68f6f53bece51234799fb626d0d6a2a5b590c
 2026-05-19 08:04:41 +00:00
Jakob AckermannandCopybot 293d89a4cb [web] inline contacts service into web (#33546) 
GitOrigin-RevId: d5e84d4f80f5ad4e951934d6dcdc332b0d26f3d0
 2026-05-19 08:04:34 +00:00
Miguel SerranoandCopybot b79d432deb [web] Conditionally show items in insert figure toolbar (#33721) 
Removes the options for inserting an image from another project or by downloading an external URL if the features are disabled.

GitOrigin-RevId: ffa64e5929e254d8a236c8e9aca4eb8210f444c9
 2026-05-19 08:04:21 +00:00
Jakob AckermannandCopybot 99148d5956 [web] silence customer.io integration when not configured in dev/CI (#33731) 
GitOrigin-RevId: c9498f57f0dacb3d18cd7617388df11d5cf029de
 2026-05-19 08:04:17 +00:00
Brian GoughandCopybot 60860aa202 Merge pull request #33576 from overleaf/bg-jpa-convert-document-to-file 
Modify convertDocToFile to bypass docstore

GitOrigin-RevId: 3ec789034a369d39d223450462394c8f303caa07
 2026-05-19 08:04:13 +00:00
Jakob AckermannCopybotBrian Gough
 		b1a0bb16db [migrations] delete expired oauth access tokens after 24h (#33575) 
Co-authored-by: Brian Gough <brian.gough@overleaf.com>
GitOrigin-RevId: 7f67a7e6949472c66f5f75a6053161d8e359f5df
 2026-05-19 08:04:09 +00:00
KristinaandCopybot 2f5d838e0f Merge pull request #33704 from overleaf/kh-add-reject-change-preference-check 
[web] add reject tracked change preference check

GitOrigin-RevId: b55dba21b3d4f42e68528d2b5906862c57794cd1
 2026-05-18 08:06:57 +00:00
Andrew RumbleandCopybot e9aedce4ab Merge pull request #33625 from overleaf/ar-update-vitest 
[monorepo] bump vitest to 4.1.5

GitOrigin-RevId: 22ba2249ae384fd59347c9aa45c70f51ccdf8890
 2026-05-18 08:06:49 +00:00
Andrew RumbleandCopybot 19ad00c329 Merge pull request #33743 from overleaf/lg-systeminformation-upgrade 
[Security Upgrade] Upgrade systeminformation to 5.31.6 (GHSA-hvx9-hwr7-wjj9)

GitOrigin-RevId: bd75d2bc59e183d23972e367f40f753c08ca6967
 2026-05-18 08:06:41 +00:00
Eric Mc SweenandCopybot 2913e462ec Merge pull request #33665 from overleaf/copilot/fix-error-logging-in-git-bridge 
git-bridge: Log WrongBranchException and ForcedPushException at WARN instead of ERROR
GitOrigin-RevId: 7aaa934a0df614e336ce3c20b892af1af0cd070f
 2026-05-18 08:06:29 +00:00
Eric Mc SweenandCopybot a3682af6e4 Merge pull request #33710 from overleaf/em-tpds-config 
Clean up tpdsworker config from web and third-party-datastore

GitOrigin-RevId: 3856126d9dc856fea4bc4133b11402c35b10630b
 2026-05-18 08:06:25 +00:00
Antoine ClausseCopybotClaude Opus 4.7
 		9e42d3a530 [web] Address design QA items on pricing page (#33682) 
- pricing table: integration icons gap uses --spacing-06 (horizontal),
  integrations content gap uses --spacing-04 (vertical)
- Student card no longer renders with the green stroke highlight
- Interstitial H1 wrapped in .main-heading-section so its spacing
  matches the pricing page

Part of #33619.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
GitOrigin-RevId: 12ddd223f68c776c06a3d5dc5faa841819baae90
 2026-05-18 08:06:17 +00:00
Antoine ClausseCopybotClaude Opus 4.7
 		0089c0af08 [web] Space skip link from disclaimer on interstitial (#33464) 
The "continue with free plan" skip link sat directly under the
disclaimer with no separation. Add spacing-08 margin-top to match
the disclaimer's own padding-top above the cards.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
GitOrigin-RevId: ba7334785757a39ca0bdff309ded224e6cb8e3bf
 2026-05-18 08:06:09 +00:00
Olzhas AskarandCopybot 868da835b6 Merge pull request #32434 from overleaf/oa-babelfish 
[web] Project Babelfish

GitOrigin-RevId: da8c47c0831eaab3e2c74a9507892ae9571919e8
 2026-05-18 08:05:57 +00:00
Olzhas AskarandCopybot d388e48a99 Merge pull request #33679 from overleaf/oa-plan-names 
[web] Get plan names from the settings

GitOrigin-RevId: 1e61975c3306c025f33e05686f9d2b57964b4f65
 2026-05-18 08:05:52 +00:00
Olzhas AskarandCopybot 6c267e68d3 Merge pull request #33707 from overleaf/oa-learn-links 
[web] Learn Overleaf links

GitOrigin-RevId: af9f72da008ad8b8c86e4c355268123eb6c40bcd
 2026-05-18 08:05:48 +00:00
Andrew RumbleandCopybot 25dfaab2a1 Merge pull request #33641 from overleaf/lg-fast-xml-builder-resolution 
[Security upgrade] Pin fast-xml-builder to 1.1.7 via resolutions (GHSA-5wm8-gmm8-39j9, GHSA-45c6-75p6-83cc)

GitOrigin-RevId: ab13841bd8c20da98a136567cf7436ebb9f73722
 2026-05-15 08:08:40 +00:00
Noel SchenkandCopybot ba016d798e Upgrade MongoDB image from 6.0 to 8.0 (#33579) 
sharelatex  | The MongoDB server has version 6.0.27, but Overleaf requires at least version 8.0. Aborting.

COPYBARA_INTEGRATE_REVIEW=https://github.com/overleaf/overleaf/pull/1480 from noel-schenk:patch-1 4a13e4fbcd

Co-authored-by: Noel Schenk <schenknoel@gmail.com>
GitOrigin-RevId: 9035d16f2c34edcb39c0da99e9d02b9ed8a9f6fa
 2026-05-15 08:08:35 +00:00
Mathias JakobsenandCopybot ac961f1d40 Merge pull request #33687 from overleaf/mj-temporary-tabs-fix 
[web] Only consider real key presses to make tab permanent

GitOrigin-RevId: 50ab453445e111de2b317f50470f9f4eec39a66f
 2026-05-15 08:08:28 +00:00
Mathias JakobsenandCopybot 6538c00742 Merge pull request #33690 from overleaf/mj-prune-deleted-tabs 
[web] Prune non-existent tabs when file tree changes

GitOrigin-RevId: 97e68a88a201acc2d1e582911ca64e1f72f9bfe1
 2026-05-15 08:08:19 +00:00
CopilotCopybotcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>CopilotBrian GoughCopilotBrian Gough
 		3980b9e580 Fix IDOR in exports by adding token verification (Issue #31637) (#32883) 
* Fix IDOR in exports by adding token verification

Implement jdleesmiller's suggested fix for Issue #31637:
- V1: Return export token in create response
- V1: Verify token in get_export using secure_compare
- Web: Pass token through fetchExport and fetchDownload
- Web: Return token from exportProject to frontend
- Frontend: Pass token as query param on status/download requests
- Add tests for both services

Agent-Logs-Url: https://github.com/overleaf/internal/sessions/7ba5f535-fba2-49a8-91d4-c87bd332d3a0

Co-authored-by: briangough <7457354+briangough@users.noreply.github.com>

Fix window.location.pathname to .href to preserve query params

Code review correctly identified that window.location.pathname strips
query parameters. Switch to window.location.href so the token query
parameter is preserved in download URLs.

Agent-Logs-Url: https://github.com/overleaf/internal/sessions/7ba5f535-fba2-49a8-91d4-c87bd332d3a0

Co-authored-by: briangough <7457354+briangough@users.noreply.github.com>

Fix test mocks to include token in POST responses

Agent-Logs-Url: https://github.com/overleaf/internal/sessions/0350c6ef-0fff-4e98-8464-812cd92c523f

Co-authored-by: briangough <7457354+briangough@users.noreply.github.com>

fix formatting

Fix token assignment in initiateExport to use pollResponse token if available

Add requireExportToken config setting and tests for invalid/missing token cases

Agent-Logs-Url: https://github.com/overleaf/internal/sessions/059bdba2-4f7a-4407-a5a5-cfcffd888739

Co-authored-by: briangough <7457354+briangough@users.noreply.github.com>

fix formatting

Add tests for export status and token validation in ExportsController and MockV1Api

Co-authored-by: Copilot <copilot@github.com>

* Update services/v1/main/app/controllers/api/v1/overleaf/exports_controller.rb

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fix linting

* fix fetchString response handling in ExportsHandler tests

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <copilot@github.com>
Co-authored-by: Brian Gough <briangough@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Brian Gough <brian.gough@overleaf.com>
GitOrigin-RevId: 399aef8eaa15ab3655f0905482f3a31fe94e2251
 2026-05-15 08:08:04 +00:00
Miguel SerranoandCopybot 5a886aa9fb [web] Add extra details to flexible license sales email (#32929) 
* [web] Add extra details to flexible license sales email

GitOrigin-RevId: fbd41adae21c55c5e97f9531565100e1ae911808
 2026-05-15 08:07:56 +00:00
Tim DownandCopybot 248e149701 Default interstitial to monthly plans (#33706) 
* Default interstitial to monthly plans except for upgrade, which defaults to user's existing subscription period

* Add tests for interstitial page period toggle defaults

GitOrigin-RevId: fa0ac41e7d8a7bf858b53e0940287b28ef21253d
 2026-05-15 08:07:49 +00:00
Eric Mc SweenandCopybot 529c332159 Merge pull request #33658 from overleaf/em-fix-docker-tag-length 
build: truncate branch names to 96 chars for Docker image tags
GitOrigin-RevId: 9db313244e78a6d4e0aa5d8c08d25f1aac83318b
 2026-05-14 08:06:45 +00:00
Jakob AckermannandCopybot 0c8e93bb33 [server-pro] fix tag name for branches with slash (#33685) 
GitOrigin-RevId: 25ee2d340b17ce7c758ec8c7e156a67928ab6c73
 2026-05-14 08:06:38 +00:00
Davinder SinghandCopybot a3a508d193 [WEB] Add analytics events for importing and exporting to different file types (#33614) 
* adding events for success and failure for import and export from latex

* adding the operation property to capture the import/export keyword

GitOrigin-RevId: 2e5482b3c7517b402fc151966975ca8718729683
 2026-05-14 08:06:30 +00:00