phosphor-webui/app/index.html, branch master

Remove CSP protections from HTML

2019-10-23T20:41:42+00:00

When I originally wrote CSP into the webui files, I intended to drop it into the HTML file so it could be removed from bmcweb. Unfortunately, that plan doesn't fly, as the CSP headers in bmcweb need to remain for non-html files. This normally wouldn't matter, but a number of people utilize BMCWEB_INSECURE_DISABLE_XSS_PREVENTION to run the webui locally and debug a new webui patch from a working BMC. This causes the CSP headers to conflict, and the browser to fail with a CSP error on connect-src when debugging locally. Removing the CSP section entirely from the webui resolves this, and doesn't change functionality at all, as it's still covered in bmcweb. Tested: Will verify on a real platform. Verified that building the webui locally with the above bmcweb flag allows the webui to launch correctly. Signed-off-by: Ed Tanous Change-Id: I60e5011361ec3ce1930249a20cf34480beb48a7f

Remove unused errors.html

2019-05-23T17:11:40+00:00

Also removed errorModalDetails and displayErrorModal from dataService since they are no longer used. errors.html was only active when displayErrorModal was true. displayErrorModal was only true when activateErrorModal was called. activateErrorModal was removed in a previous commit. activateErrorModal's only use was removed here: https://github.com/openbmc/phosphor-webui/commit/a38a287ccaa97eddc9df7333e33357b14772d4c6#diff-65affd2488457363c5b9e9266258c3b8 Tested: Searched the repo. Built an image and loaded onto a Witherspoon. No regressions observed. Change-Id: I96e26dd3817d7b02bbce74b4cc093b75dab669ed Signed-off-by: Gunnar Mills

Add toast notifications to SNMP page

2019-01-15T15:22:20+00:00

Design team proposed that our error and success messages be delivered as 'toast' messages on the right side of the screen. This brings in ngToast and implements notifications on SNMP page. Notifications will fade after 10 seconds or can be dismissed. https://github.com/tameraydin/ngToast Change-Id: I1053534cd1ab189ae5c2ac07e2a922acea231c70 Signed-off-by: beccabroek

Enable strict content security policy

2018-12-22T17:36:03+00:00

Webpack allows us to define a content security policy that utilizes hashes to define what is, and isn't allowed to execute in the page context. Because we're a single page application, this means that we can effectively defend the whole page with a few extra lines of setup. This does not utilitize _any_ of the unsafe-* calls that content security policy has, which should meet security standards for all uses. Tested By: Launched GUI, observed no functional changes, and watched console for CSP errors. Saw none. Change-Id: I892df1f1b004384943be0ae6e51046054991fd45 Signed-off-by: Ed Tanous

webui: enable ngCSP

2018-12-22T17:34:04+00:00

ngCSP allows angular to avoid using inline style and unsafe eval mechanisms. Enabling this will allow us to update to a more stringent content-security policy. for more details, see documentation here: https://docs.angularjs.org/api/ng/directive/ngCsp Tested by: Launching the GUI, and saw no ill effects. Change-Id: I4db732e997c2901d1fe57eee99607007b5e3afec Signed-off-by: Ed Tanous

Rename title "OpenBMC"

2018-04-28T20:35:50+00:00

This is the name that appears in the browser tab. Fixed OpenBMC capitalization and removed "app". This conforms to other websites (e.g. the browser tab for riot.im is "Riot". For google.com it is "Google"). Change-Id: Ibd64ccd37d9f4b1fbea42c398e57abfad6efe357 Signed-off-by: Gunnar Mills

Add fixes for cold reboot

2018-04-19T21:17:38+00:00

This fixes the cold reboot issue with the following steps - It applies the command to shut off the chassis. - Then verify the chassis is off. It checks for every 5 seconds. During this time the spinner displays. A 5min timeout has been added. - Once the chassis is off, it turns on the host. fixes openbmc/openbmc#2795 Change-Id: I119a1c95e57c10ccee27be1512a1fc38cde307fa Signed-off-by: Iftekharul Islam Signed-off-by: CamVan Nguyen

Add proper favicon handling

2018-02-02T20:14:40+00:00

The current repo doesn't seem to produce a favicon, so having the reference to it produces either a 404 error or a 401 error depending on the server. Add a transparent favicon until someone can cobble together a proper one from the openbmc SVG files Change-Id: I5a79be5982e164a8ae0b28a69f673129c0a959ba Signed-off-by: Ed Tanous

Modernize web GUI and make it installable on BMC

2017-11-07T00:25:49+00:00

1. Move from gulp server to webpack. This allows the proper compression to allow the webui to be embedded in the BMC. 2. Update js paths to use requires, not hardcoded paths. This was required to make the packaging work correctly. 3. Add babel config to do translation. 4. Update angularjs directive calls to use the angular 1.6 syntax for promises intead of success and fail. https://docs.angularjs.org/guide/migration#migrate1.5to1.6-ng-services-$http 5. As a consequence of using NPM/webpack, the versions of angular and associated modules that were checked in have been updated. Change-Id: Icb71e2eedb0d9a8943fc914f9dc4be11d0983c00 Signed-off-by: Ed Tanous Signed-off-by: Brad Bishop

Updating images and stles

2017-11-02T18:16:17+00:00

Updating images and styles after code merge conflicts Change-Id: I96490926caa41d13e4d625ff67f6a463d7819d34 Signed-off-by: Iftekharul Islam