- Core: improved assets routing
- UI: Replace Rollbar with self-hosted GlitchTip to avoid sending potentially sensitive user data to 3rd party
- Core: Added CORS headers for assets served over CDN
- Core: upgrade to Rails 7.0
- UI: New frontend build pipeline with vite
Multiple vulnerabilities was fixed by upstream dependencies:
Impact:
-
Affected by Puma's Keep-alive Connections Denial Of Service
- Users and their data are not affected by Denial Of Service attack
-
Not affected by Puma's request smuggling attacks:
- Only snippet routes are exposed: create, update and fork
- Only snippet edits requests can be smuggled, but they required edit key, which is not stored in user session and attacker must obtain it beforehand
- We have no indication that this attack was performed against Playground after 12 Sep 2023
-
Not affected by Active Support encrypted files disclosure
- We don't store any files
- UI: Replace Rollbar with self-hosted GlitchTip to avoid sending any data to 3rd parties
- UI: Replace Google Analytics with self-hosted Plausible to preserve your privacy in GDPR complaint way
Playground is back 🥳
- Core: Update dependencies
- CI: Automatic deployments
- Core: Allow identifier names (aka 'unqoted' strings) as keys
- Core: Show error message when ISODate is invalid
- UI: Resize data editor when split panel size changed
- Core: Redirect back to snippet when edit key doesn't match
- Core: Show error message when collection failed to create
- UI: Disallow
?edit=in robots.txt - CI: Report deploys to Rollbar
- Core: MongoDB v4.2 compatibility
- Core: Temporary databases are cleaned even when command sequence is failed
- Core: Allow non-ASCII symbols in strings
- Core: Show proper error message when query document is invalid
- Core: Show error message when query or collections is empty string
- Core: Show error message when query failed to execute
- Core: Emit EJSON events and use them to react on state changes
- UI: Show confirmation dialog when leaving playground with unsaved changes
- UI: Allow running queries with a keyboard shortcut: Cmd/Ctrl+Enter
- UI: Highlight matching brackets
- UI: Reduce flickering on initial load in Chrome
- UI: Restore style of validation messages (was broken by 0.4.1)
- UI: Update, Query & Aggregate Operator snippets are added
- UI: Aggregation snippets are loaded only in Aggregation playground
- Core: Add Explain output for Find and Aggregate commands
- UI: Find And Modify editor now fully loads (was broken by 0.3.1)
- Core: Fix issue with EJSON integration, that broke some playgrounds.
- Core: FindAndModify and Update playgrounds added
- Core: Support all Mongo Extended JS(ON) features, including NumberDecimal. Thanks to EJSON parser
- Core: Query & collection size limit increased to 32Kbyte
- UI: Editing experience improved by adding real-time syntax checker in the editor
- Core: Find playground added
- Core: Snippets now can be forked
- UI: Unnecessary scrollbar removed from control panel
- Core: Aggregation Pipeline playground added