Commit graph

2961 commits

Author SHA1 Message Date
caryoscelus
6260a98759
Merge branch 'main' into git-and-newdir 2024-05-10 10:28:18 +00:00
caryoscelus
f6b970c3f6
Add missing argparseCompat 2024-05-10 10:24:21 +00:00
caryoscelus
2191e496b4
Cleanup 2024-05-10 10:23:51 +00:00
caryoscelus
e9eec9bb27
Merge pull request #254 from caryoscelus/filter-cert
Optional ignoring of compromised id certificates
2024-05-08 23:53:39 +00:00
caryoscelus
d8b06a28bb
Fix directories 2024-05-07 20:58:26 +00:00
caryoscelus
bdddf58712
WIP: change default data directories, subdirectories and config file 2024-05-07 14:03:44 +00:00
caryoscelus
e8da744744
WIP 2024-04-08 13:30:49 +00:00
caryoscelus
7772036559
Fix some CORS/redirectering cases 2024-04-05 10:49:34 +00:00
caryoscelus
e3b010175f
--ui-ip-protect option to only apply recent privacy protection where it makes sense (i.e. on localhost) by default
refs #263, #270
2024-04-04 23:42:34 +00:00
caryoscelus
d09e1f8757
Build script 2024-04-04 22:15:34 +00:00
caryoscelus
b674737f99
Restructure main, split Actions.py, minor clean-up 2024-04-04 13:08:21 +00:00
caryoscelus
bbe577310c
New config/data path management (WIP) 2024-04-04 12:37:47 +00:00
caryoscelus
33436f7eb6
Remove outdated compatibility code 2024-03-31 16:21:52 +00:00
caryoscelus
41ebf510cb
Merge branch 'master' into git-and-newdir 2024-03-31 16:07:41 +00:00
caryoscelus
6702f331a3
IPv6/non-localhost IP fix
- Content-Security-Policy: `frame-src *` for main UiRequest and `self` for
  user-content UiRequest
- revert change in getHostWithoutPort to make ipv6 work
2024-03-30 14:31:22 +00:00
yggverse
f4e52fce5a rollback ipv6_testip feature as dependent of config implementation #263 #269 2024-03-28 17:06:57 +02:00
yggverse
b928cfc0d5 add ipv6 support to openBrowser method #263 2024-03-28 16:48:01 +02:00
yggverse
3c24e5d34c fix object name #263 2024-03-28 16:32:30 +02:00
yggverse
8fb98991ef fix optional ipv6_testip check #263 2024-03-28 16:31:44 +02:00
yggverse
4030d3a859 remove ipv6_testip info as dependent #263 2024-03-28 16:28:58 +02:00
yggverse
5858a68d11 add ipv6_testip to server info #263 2024-03-28 16:22:44 +02:00
yggverse
658c685a45 add configurable ipv6_testip #263 2024-03-28 16:16:02 +02:00
yggverse
762c5f2402 remove square brackets from IPv6 host #263 #264 #267 2024-03-28 15:52:19 +02:00
yggverse
d17f4afdd0 fix IPv6 validation #263 2024-03-27 20:33:52 +02:00
caryoscelus
ca5d573908
Fix typo 2024-02-09 15:55:21 +00:00
caryoscelus
2520024f56
Allow cross-site embedding without "cors-" prefix
..As long as CORS read permission is granted. This is done for
compatibility with sites that relied on lack of enforcing of cross-site
isolation in previous ZeroNet versions.

fixes #259
2024-02-09 15:55:21 +00:00
caryoscelus
e48df971e7
Merge remote-tracking branch 'origin/master' into filter-cert 2024-01-17 21:30:00 +00:00
caryoscelus
25bfc0341c
Use integer rev in UiWebSocket for dashboard compatibility 2023-12-27 14:24:03 +00:00
caryoscelus
d66dafc111
WIP 2023-12-27 13:58:03 +00:00
caryoscelus
15dddc27c6
Get rid of using old-style revision everywhere 2023-12-27 13:17:59 +00:00
caryoscelus
1a8c6aaa93
Fetch version info from git or Build file 2023-12-27 11:27:15 +00:00
caryoscelus
dbe283e593
Fix import 2023-12-26 19:06:09 +00:00
caryoscelus
0382aee68f
CHANGELOG 2023-12-26 15:14:27 +00:00
caryoscelus
cf86f1a9ba
Merge branch 'master' into filter-cert 2023-12-24 12:01:22 +00:00
caryoscelus
6d7c5a4a52
Merge pull request #253 from caryoscelus/py39-compat
Fix py3.9 compatibility
2023-12-23 14:29:58 +00:00
caryoscelus
2ce87828b0
Fix py3.9 compatibility
refs #252
2023-12-22 17:20:11 +00:00
caryoscelus
31d94a16b6
Add option to ignore compromised certificates
This would allow to stop spam attacks without pausing sites that allow
compromised certificates and without action from site owners. However,
without mass adoption of adding individual permissions on sites for
valid users of such certificates, this will also block updates from
such users.

In any case this is more of a temporary measure in case we face such
an attack before the whole user id issue is resolved
2023-12-22 12:59:04 +00:00
caryoscelus
ee0829d95e
Minor CryptBitcoin refactor 2023-12-22 11:00:58 +00:00
caryoscelus
0c31000593
Use dashes in command line options instead of underscore
- using underscore is deprecated but still works
- also don't override commandline --open-browser option
2023-12-21 10:18:57 +00:00
caryoscelus
f37ab4ee5d
Continuing previous commit: --ui_site_port 2023-12-07 09:56:01 +00:00
caryoscelus
a4cc2eeb9f
Separate http server for site content WIP
This resolves issue introduced by 14e8130acb
by having wrapper and iframe exist in different origins

Note that this does introduce minor UX issue: copying links now shows them
with a different port
2023-12-07 07:38:14 +00:00
caryoscelus
ba60f5dc0e Add basic ipython-based repl via --repl 2023-11-26 18:09:56 +00:00
caryoscelus
28440346b1
Merge pull request #243 from caryoscelus/docker-update
Docker update & minor improvements
2023-11-23 19:02:28 +00:00
caryoscelus
47db0898e2 Rewrite untitialized directory detection 2023-11-17 17:57:25 +00:00
caryoscelus
23321bd300 Fix SyntaxWarning: invalid escape sequence 2023-11-17 17:56:28 +00:00
caryoscelus
93ed7418ab Merge branch 'master' into always-nonce 2023-11-16 14:20:30 +00:00
caryoscelus
fc408ef985 Modern browsers all support nonce now so drop checking UA 2023-11-16 14:04:33 +00:00
caryoscelus
38f53edc2b
Merge pull request #239 from caryoscelus/fix-referrer
Rewrite cross-site and cross-host requests detection
2023-11-16 14:01:09 +00:00
caryoscelus
497ad0f4b1 Merge branch 'master' into disable_plugins_in_data 2023-11-14 23:19:52 +00:00
caryoscelus
14e8130acb Rewrite cross-site and cross-host requests detection
Make sure browsers send referrers so we can track cross-site
requests (could be used to identify which sites user hosts)

This breaks /raw because there are no referrers there

fixes #227
fixes #223
fixes #224
2023-11-14 23:11:51 +00:00