Commit graph

1456 commits

Author SHA1 Message Date
shortcutme
2777c4c537
Read max 6MB from archive to protect against tar/zipbombs 2017-07-12 12:28:03 +02:00
shortcutme
e525ea2431
Rev2144, Fix CSP header in FilePack plugin, Allow media-src and font-src from self source 2017-07-11 23:00:33 +02:00
shortcutme
c8f37674c6
Rev2142, Fix random wrong data dir path 2017-07-11 21:03:24 +02:00
shortcutme
12ca870e38
Rev2141 2017-07-10 02:42:50 +02:00
shortcutme
f630e6c25e
Test raw access security 2017-07-10 02:42:41 +02:00
shortcutme
7c6bea6ddd
Fix raw site access without / at the site address end 2017-07-10 02:42:28 +02:00
shortcutme
efbef25c76
UserSetSettings, UserGetSettings Websocket API commands 2017-07-10 02:41:01 +02:00
shortcutme
1384da4691
Rev2137 2017-07-09 14:54:20 +02:00
shortcutme
26a250d1df
Media isMediaRequestAllowed no longer required for origin checking 2017-07-09 14:12:53 +02:00
shortcutme
426fe561c9
Cleanup not used wrapper opener check 2017-07-09 14:12:13 +02:00
shortcutme
5950b04c40
Add allow-origin header for media requests from same origin to fix css font support 2017-07-09 14:11:44 +02:00
shortcutme
434cfce32a
More simple same origin test for media files cross-site access 2017-07-09 14:11:06 +02:00
shortcutme
febdea6c64
Serve files without wrapper if requested using /raw/ prefix 2017-07-09 14:10:01 +02:00
shortcutme
6c0062dbc1
Rev2132 2017-07-06 00:09:47 +02:00
shortcutme
49735b7e55
Fix not internal error on request files from not seeded sites 2017-07-06 00:09:35 +02:00
shortcutme
1d6168f457
Download, svg, xml, flash, pdf files instead of displaying to avoid js execution 2017-07-06 00:09:05 +02:00
shortcutme
2a161f4421
Never allow cross-origin file request 2017-07-06 00:08:32 +02:00
shortcutme
f30b2b6fc2
Rev2130, Use SslPatch to load openssl library, Fix Android 6 openssl loading 2017-07-04 01:12:58 +02:00
shortcutme
ebbe19131b
Rev2128, Update to OpenSSL v1.0.2l 2017-06-30 10:13:25 +02:00
shortcutme
03cabcb07c
Rev2127, Fix delete files without file_info 2017-06-27 18:08:28 +02:00
shortcutme
401d3ec1c9
Rev2125, Fix missing if line 2017-06-21 00:03:26 +02:00
shortcutme
fd1f104f4e
Rev2124 2017-06-20 20:32:59 +02:00
shortcutme
66e2192e65
Add --silent option to disable logging to terminal 2017-06-20 20:32:51 +02:00
shortcutme
0d6d19502f
Format json reply for peerCmd command line action 2017-06-20 20:29:11 +02:00
shortcutme
a7b22e2055
Fix error on exit for peers without site 2017-06-20 20:28:35 +02:00
shortcutme
71fbcee76c
Fix error on exiting when there is no stream_server started 2017-06-20 20:28:09 +02:00
shortcutme
e157894694
Rev2122 2017-06-20 11:20:48 +02:00
shortcutme
f08f354eb6
More detailed file size match error logging 2017-06-20 11:20:43 +02:00
shortcutme
23db93d20f
Fix invalid update logging 2017-06-20 11:20:30 +02:00
shortcutme
67212ee29e
Rev2121 2017-06-19 16:19:04 +02:00
shortcutme
15d8589069
Fix typo, less verbose socket logging 2017-06-19 16:18:37 +02:00
shortcutme
14cd9315c1
Don't try to send to closed socket 2017-06-19 16:18:20 +02:00
shortcutme
f1786c2ee6
Handle unknown message type 2017-06-19 16:16:43 +02:00
shortcutme
7d9cb65ba1
Catch message type errors on connection parsing 2017-06-19 16:16:13 +02:00
shortcutme
9f72fdeb41
Display sign error on command line siteSign command failure 2017-06-19 16:14:36 +02:00
shortcutme
b7106995b7
Test size errors on getFile 2017-06-19 16:14:14 +02:00
shortcutme
dca3c775d1
Test expect exact sign and verification errors 2017-06-19 16:13:58 +02:00
shortcutme
916709a7e4
Allow less peer error if for popular sites 2017-06-19 16:13:06 +02:00
shortcutme
066f54f521
Only log listModification request in verbose mode 2017-06-19 16:12:41 +02:00
shortcutme
64199c7ded
Reduce logging on tracker error 2017-06-19 16:12:24 +02:00
shortcutme
79ca1069ec
Display exact sign error to UI on failure 2017-06-19 16:11:47 +02:00
shortcutme
43c8dacd70
Catch and log exact verification errors on worker download 2017-06-19 16:10:49 +02:00
shortcutme
f773bf3336
Add file_size to request to avoid unnecessary download 2017-06-19 16:10:18 +02:00
shortcutme
9a9bd71634
Catch file verification errors on update request 2017-06-19 16:07:36 +02:00
shortcutme
25657ebdca
Log to site instead of fileserver 2017-06-19 16:04:17 +02:00
shortcutme
c7146613a1
Store inner path to variable on update request to save some complexity 2017-06-19 16:02:52 +02:00
shortcutme
c58d28861d
Raise RequestError instead of Exception of fileGet error 2017-06-19 16:01:41 +02:00
shortcutme
ff69b04216
Catch verify exceptions on manual site files verification process 2017-06-19 15:57:02 +02:00
shortcutme
7653cba247
SiteVerify command line action display verify error 2017-06-19 15:49:39 +02:00
shortcutme
b0ee0dae93
Remove old testing code 2017-06-19 15:48:50 +02:00