Commit graph

447 commits

Author SHA1 Message Date
shortcutme
1f5db0aa24
Nonce checking moved to route command 2017-10-04 12:41:14 +02:00
shortcutme
74b2408668
Move path checking to parsePath 2017-10-04 12:39:08 +02:00
shortcutme
f53612bef7
Media request should start with normal characters 2017-10-04 12:38:44 +02:00
shortcutme
4d991cda6d
Also serve htm files with wrapper 2017-10-04 12:37:56 +02:00
shortcutme
6984575901
Remove dead reload code 2017-10-04 12:37:34 +02:00
shortcutme
75b44f6980
Raise SecurityError on invalid path 2017-10-04 12:37:22 +02:00
shortcutme
3c46f60042
Show wrapper automatically if wrapper nonce is invalid 2017-10-04 12:35:15 +02:00
shortcutme
7dbc323f76
ZeroNet-internal virtual path on UiServer for internal commands 2017-10-04 12:33:43 +02:00
shortcutme
903b62ba7c
Make fileNeed API command async 2017-10-04 12:32:40 +02:00
shortcutme
53da40fe5d
Allow to show site directory in local file browser 2017-10-04 12:31:57 +02:00
ZeroNet
27a9ea78b8 Merge pull request #1122 from imachug/siteclone
Allow siteClone for non-admin sites
2017-09-22 11:01:43 +02:00
Ivanq
7fa019321c Check site before cloning 2017-09-22 08:28:39 +03:00
Ivanq
f98f52a50e Allow siteClone not for admin sites 2017-09-22 08:24:18 +03:00
ZeroNet
bc71555a73 Merge pull request #1070 from anoadragon453/small_gram_fix
Small English grammer fixes
2017-09-21 13:46:11 +02:00
Ivanq
db339eecd3 Allow 'backup' or 'log' as directories 2017-09-16 21:57:20 +03:00
ZeroNet
53cd2cdbf3 Merge pull request #1114 from imachug/binary
Read files as binary in fileGet()
2017-09-10 09:28:45 +02:00
Ivanq
4bbea46b90 Read files as binary in fileGet() 2017-09-10 09:46:21 +03:00
shortcutme
bfd3d18a10
Fix multiuser plugin compatibility 2017-09-02 14:28:01 +02:00
grez911
158f9e37e5 Added explanation of convertion actionWrapper response to list 2017-08-25 11:05:48 +03:00
grez911
905976a1b6 Added exception handling for broken user.json 2017-08-22 17:43:55 +03:00
shortcutme
f1c320dd22
Log sign errors 2017-08-18 14:38:58 +02:00
shortcutme
1db2327b3d
Rev2180, Allow ajax requests using ajax_key http get parameter 2017-08-15 02:40:38 +02:00
shortcutme
65d68fb8ac
Compile Ui js 2017-08-09 14:21:09 +02:00
shortcutme
d093764731
New API command: fileNeed to request optional file 2017-08-09 14:20:49 +02:00
shortcutme
24982aee42
Log invalid wrapper messages 2017-08-09 14:20:20 +02:00
Andrew (anoa)
c1aff56cf2
Small grammer fixes 2017-08-04 15:13:31 -07:00
shortcutme
fa96ab453f
Rev2166, Mobile friendly notifications 2017-07-28 15:36:49 +02:00
shortcutme
35efd6b107
ServerShowdirectory admin API command to show directory 2017-07-27 16:29:39 +02:00
shortcutme
504d7812e5
Fix exception if no path_parts returned 2017-07-19 16:46:37 +02:00
shortcutme
1f7b25b60c
Ignore http protocol in same origin comparison 2017-07-18 20:57:33 +02:00
shortcutme
34ec05d4b4
Fix notification id collision 2017-07-18 20:55:53 +02:00
Andrew (anoa)
dc82f7ab3e
Small grammar fix 2017-07-15 00:30:25 -07:00
shortcutme
a0d85d7d83
Prompt new site addition in raw mode 2017-07-15 01:32:15 +02:00
shortcutme
d281f112d9
Rev2154, Fix same origin checking in proxy mode 2017-07-14 11:08:22 +02:00
shortcutme
e525ea2431
Rev2144, Fix CSP header in FilePack plugin, Allow media-src and font-src from self source 2017-07-11 23:00:33 +02:00
shortcutme
7c6bea6ddd
Fix raw site access without / at the site address end 2017-07-10 02:42:28 +02:00
shortcutme
efbef25c76
UserSetSettings, UserGetSettings Websocket API commands 2017-07-10 02:41:01 +02:00
shortcutme
426fe561c9
Cleanup not used wrapper opener check 2017-07-09 14:12:13 +02:00
shortcutme
5950b04c40
Add allow-origin header for media requests from same origin to fix css font support 2017-07-09 14:11:44 +02:00
shortcutme
434cfce32a
More simple same origin test for media files cross-site access 2017-07-09 14:11:06 +02:00
shortcutme
febdea6c64
Serve files without wrapper if requested using /raw/ prefix 2017-07-09 14:10:01 +02:00
shortcutme
49735b7e55
Fix not internal error on request files from not seeded sites 2017-07-06 00:09:35 +02:00
shortcutme
1d6168f457
Download, svg, xml, flash, pdf files instead of displaying to avoid js execution 2017-07-06 00:09:05 +02:00
shortcutme
2a161f4421
Never allow cross-origin file request 2017-07-06 00:08:32 +02:00
shortcutme
03cabcb07c
Rev2127, Fix delete files without file_info 2017-06-27 18:08:28 +02:00
shortcutme
79ca1069ec
Display exact sign error to UI on failure 2017-06-19 16:11:47 +02:00
shortcutme
c2b177434d
Drop error if want to publish non existent file 2017-06-19 15:38:05 +02:00
shortcutme
e9ce137e14
Display invalid hosts 2017-06-15 19:49:51 +02:00
shortcutme
c84fcf2034
Support manual ui_host command line parameter 2017-06-15 19:48:01 +02:00
shortcutme
0d3fa43f00
Remove unnecessary ui ip replace 2017-06-15 19:43:23 +02:00
shortcutme
2e04ba1880
Bind ui server to ipv4 address 2017-06-15 19:42:38 +02:00
shortcutme
42874038e2
Only allow UI requests from safe hosts 2017-06-13 14:19:23 +02:00
shortcutme
d55fbd1728
Remove obsolete auth_key_sha512 2017-06-13 14:18:17 +02:00
shortcutme
742c2fe684
Rev2099, Keep tor client running until update finished 2017-06-06 00:05:43 +02:00
shortcutme
0b7d1ad90d
Add callback for certSelect 2017-06-03 00:53:40 +02:00
shortcutme
ba9cd9b0ca
Fix undefined placeholder 2017-05-23 12:42:02 +02:00
shortcutme
7900578077
Rev2082, Log websocket receive errors 2017-05-22 11:34:16 +02:00
MuxZeroNet
35a18bd0b2 Weak password warning (#938)
* Weak password warning

* Update UiWebsocket.py

* Don't implement print with an O(n^2) iteration

* Rename method

* Fix logging, uncaught exception in addNotes

and pushes a notification when UI server is bound to the whole Internet.

* Remove memo comments. Remove terminal hue.
2017-05-22 11:13:45 +02:00
shortcutme
e6680b4f60
Version 0.5.5, Rev2081, Lack of JS notification 2017-05-18 23:03:26 +02:00
shortcutme
edd726ac9f
Site upgrade support in clone command 2017-05-18 03:07:32 +02:00
shortcutme
cbf184846a
Fix permissionAdd/Remove admin command 2017-05-18 03:05:45 +02:00
shortcutme
2677ad92d3
Fix multi-line confirmation dialog 2017-05-18 03:05:02 +02:00
shortcutme
d467aabd4c
Rev2067, Fix inner_path stripping 2017-05-11 18:18:12 +02:00
shortcutme
5908d2ca53
RenderWrapper showloadingscreen parameter 2017-05-11 18:01:16 +02:00
shortcutme
27a582634f
Don't check referrer for html files 2017-05-11 18:00:57 +02:00
shortcutme
47245f485a
ActionFile security check 2017-05-11 17:59:46 +02:00
shortcutme
545459be88
RenderWrapper with parameters 2017-05-11 17:59:12 +02:00
shortcutme
b5d3995874
GetSiteUrl based on if it's proxy request 2017-05-11 17:57:29 +02:00
shortcutme
487f5cb8c2
Fix unicode url redirects 2017-05-11 17:56:01 +02:00
shortcutme
cc31081f1c
Different design for second button of wrapperConfirm 2017-05-11 17:55:38 +02:00
shortcutme
a9b9902e60
Placeholder support for displayPrompt 2017-05-11 17:55:09 +02:00
shortcutme
f183e756f3
Multi button support for wrapperConfirm 2017-05-11 17:54:48 +02:00
shortcutme
f67cb7b145
Rev2059, Fix download test, boost priority on request by 15, Adjust default priorities 2017-05-07 21:21:26 +02:00
shortcutme
34a6337c01
Rev2055, Don't add ? to url if start with # using replaceState and pushState 2017-05-06 17:27:49 +02:00
mishfit
270eb677c7 allow empty file query filters 2017-04-21 03:26:17 -06:00
shortcutme
49adea1654
siteSetLimit returns with ok on success 2017-04-12 17:36:50 +02:00
shortcutme
dafe9981a2
Rev2043, Fix selected domain display 2017-04-12 00:45:48 +02:00
shortcutme
1a7a22eb91
Set added cert 2017-04-12 00:32:19 +02:00
shortcutme
f3edd8013d
Rev2034, Fix leaking users.json via webui 2017-04-09 16:54:28 +02:00
shortcutme
d7ba9f6924
Rev2004, Fix message utf8 error 2017-03-18 11:11:01 +01:00
shortcutme
afcd6dfa14
Rev2003, Fix dbQuery exception in verbose mode 2017-03-15 13:13:21 +01:00
shortcutme
50937990e5
Fix typos 2017-03-06 15:30:31 +01:00
ZeroNet
0e2f742b7e Merge pull request #842 from mishfit/refactorListAndWalk
Rename SiteStorage.list to SiteStorage.walk
2017-03-04 12:39:06 +01:00
MuxZeroNet
dff261eb18 Log ZeroFrame errors to console 2017-03-03 02:42:20 +00:00
shortcutme
36db8a4dc9
Ratelimit progressbar update to save some cpu time 2017-03-02 23:39:31 +01:00
shortcutme
871588aa9f
Move invalid path test upper level 2017-02-27 11:21:22 +01:00
shortcutme
97cec2ba46
Benchmark helper for console 2017-02-27 00:13:41 +01:00
mishfit
656c818211 rename SiteStorage.list to SiteStorage.walk
also, add SiteStorage.list as non-recursive
directory listing (`os.listdir`)
2017-02-24 21:58:46 -07:00
shortcutme
c95637eee1
Rev1941, Use utf-8 encoding on text files 2017-02-24 14:39:20 +01:00
shortcutme
45e2b350a9
Raise exception on invalid path 2017-02-19 00:51:47 +01:00
shortcutme
39734dfadb
innerLoaded command alias as wrapperInnerLoaded 2017-02-16 19:04:00 +01:00
shortcutme
0106a193e5
Store SiteManager to UiServer 2017-02-11 18:26:36 +01:00
shortcutme
f523925817
Add separate function to check if user has run the API command 2017-02-11 18:26:36 +01:00
shortcutme
90c9adc8dc
Fix error reporting on asnyc websocket functions 2017-02-09 01:53:02 +01:00
ZeroNet
c9fa29c562 Merge pull request #798 from l5h5t7/master
Update Chinese translation
2017-02-05 23:19:13 +01:00
shortcutme
f74e9397db
Rev1861, Fix favicon for zero url access type 2017-02-05 22:55:24 +01:00
shortcutme
a08114b1b0
Rev1855, Fix content type detection, Formatting 2017-02-02 12:51:41 +01:00
shortcutme
2b389e4e85
Support since parameter for siteUpdate 2017-01-29 19:02:08 +01:00
lmath
4559ee0d7f Update Chinese translation 2017-01-28 06:27:45 +08:00
shortcutme
13f0ccf8c6
Fix optional files deleting 2017-01-27 14:01:55 +01:00
shortcutme
d65c7d05a4
Remove /media access 2017-01-27 13:05:49 +01:00
shortcutme
c9ba59e895
Fix new version popup on first visit 2017-01-27 12:09:23 +01:00
shortcutme
697e177e13
Don't remove missing optional files 2017-01-27 12:02:14 +01:00
shortcutme
802b6775d7
Wait a bit before browser open to let http server start 2017-01-23 12:54:47 +01:00
shortcutme
54c553d13b
Timeout and Base64 encoding support for fileGet 2017-01-22 11:09:45 +01:00
shortcutme
bf34d95bc1
Call fileGet and fileList in async 2017-01-22 11:09:26 +01:00
shortcutme
b6644887bd
Move admin_commands to class variable 2017-01-22 11:08:41 +01:00
shortcutme
2dc981496b
Rev1821, Show progress bar on publishing 2017-01-16 13:41:57 +01:00
shortcutme
b68424f008
wrapperProgress API command 2017-01-16 13:41:11 +01:00
shortcutme
d3fc1cf897
Rev1816, Fix exe distribution forbidden error 2017-01-14 12:43:05 +01:00
MuxZeroNet
6b0ef500ed Fix extension detection 2017-01-12 05:22:26 +00:00
MuxZeroNet
4a6dc7971e #752 2017-01-09 05:01:49 +00:00
shortcutme
1a5bfd973e Only download media if site is already added 2017-01-08 17:31:03 +01:00
shortcutme
6c68f8dd6c Fix content type detection for options request 2017-01-08 17:27:57 +01:00
shortcutme
2447279191 Rename websocket detection 2017-01-08 17:26:59 +01:00
MuxZeroNet
0a1eecee20 WebSocket requests not allowed 2017-01-08 06:56:42 +00:00
shortcutme
bea212a8d1 Fix certAdd error 2017-01-07 01:09:05 +01:00
MuxZeroNet
da7821a3a9 X-Frame-Options 2017-01-06 01:44:22 +00:00
shortcutme
5c2b90c20f Rev1799, Force correct css content type 2017-01-05 02:33:33 +01:00
shortcutme
eee65da257 FileList API command 2017-01-05 02:26:58 +01:00
shortcutme
5103879471 wrapperRequestFullscreen command 2016-12-30 19:32:36 +01:00
shortcutme
74a4a4b9da Update websocket on permission add and remove 2016-12-30 18:55:11 +01:00
shortcutme
86b0046f28 Don't allow load load wrapper frames as prefetch or as image 2016-12-27 11:37:35 +01:00
shortcutme
c0d2e5efa6 Fix ZeroTalk scroll fixing 2016-12-14 00:25:47 +01:00
shortcutme
a17ab1ce25 Rev1781, Only force / to end of site address 2016-12-09 01:00:53 +01:00
shortcutme
10772a704e Root path parameter for cloning 2016-12-08 17:14:55 +01:00
shortcutme
64321043b7 Fix permission error 2016-12-08 17:14:30 +01:00
shortcutme
58848068e6 Save sites.json before updating 2016-12-04 18:55:03 +01:00
shortcutme
5adf4c31cb Rev1755, wrapperSetTitle command 2016-11-22 02:06:32 +01:00
shortcutme
430805adcc Add language to serverinfo 2016-11-18 20:11:11 +01:00
shortcutme
38ff33512f Use raise instead of assert for sql select filter 2016-11-18 20:11:03 +01:00
shortcutme
8ad6cd2e81 Allow to change language configuration parameter, reload translate files on change 2016-11-18 20:10:24 +01:00
shortcutme
0f31f1d34a Make UiWebsocket messages translatable 2016-11-18 20:09:51 +01:00
shortcutme
b25bf97cad Add language to UI js as paramter to avoid cache 2016-11-18 20:07:58 +01:00
shortcutme
9ff2bfc4bb Easier UI js translation 2016-11-18 20:07:26 +01:00
shortcutme
6c74f6c527 Possible to disable length header on sitemeda 2016-11-16 11:19:35 +01:00
shortcutme
c076f605aa Rev1703, Allow custom favicon 2016-11-10 23:14:30 +01:00
shortcutme
b3ba79a0fd Function to check if the user has permission to modife a site 2016-11-07 22:55:09 +01:00
shortcutme
81744c584e Merge wrapper js modifications 2016-11-07 22:53:07 +01:00
shortcutme
7677b6859e Move config file modification to Config class 2016-11-07 22:51:43 +01:00
shortcutme
ccb35f1353 Send content size header for normal files 2016-11-07 22:49:13 +01:00
shortcutme
a4a52e7ed4 Add websockets messages until its connected 2016-11-07 22:44:54 +01:00
shortcutme
fbdc9e2b40 Comment typo 2016-10-02 14:24:48 +02:00
Durand D'souza
13837971a7 Update UiRequest.py
Fixed a bug where a lack of a trailing slash in every url caused zeronet to fail to load the page, even if it existed.
2016-09-20 05:23:34 +01:00
shortcutme
fe59618eaf Rev1523, Real fix file write confirmation 2016-09-14 18:41:28 +02:00
shortcutme
60dd797d1a Rev1522, Fix file write confirmation dialog 2016-09-14 18:28:48 +02:00
shortcutme
14544922bf Don't check files on siteUpdate 2016-09-14 10:51:10 +02:00
shortcutme
59205088d2 Move site deletion to dedicted function 2016-09-05 13:55:51 +02:00
shortcutme
49efcd0c2d Execute garbage collection on site delete 2016-09-04 18:05:55 +02:00
shortcutme
69f0e972d3 Check site files on forced update 2016-09-04 18:05:42 +02:00
shortcutme
46a2ea9421 Log slow db queries on verbose mode 2016-09-04 18:05:31 +02:00
shortcutme
96043ba279 Try not to overwrite currently in sync files 2016-09-04 18:05:17 +02:00
shortcutme
5a36a002bf Use bad_files to display progress if that is larger 2016-09-04 18:01:48 +02:00
shortcutme
b52e8f74e2 Rev1428, Don't display websocket error when navigating away 2016-08-27 11:52:44 +02:00
ZeroNet
447a37f228 Compiled wrapper.coffee 2016-08-10 12:28:05 +02:00
ZeroNet
70cf67498b Hide progress bar after 300ms 2016-08-10 12:27:37 +02:00
ZeroNet
10b46db524 Also display progress bar for other sites 2016-08-10 12:27:24 +02:00
ZeroNet
687208a785 Fix wrapperReload command 2016-08-10 12:26:00 +02:00
ZeroNet
2915eb7a83 Reply to setlocalstorage 2016-08-10 12:25:39 +02:00
ZeroNet
f82055fef7 Wrapper permissionadd confirm 2016-08-10 12:25:25 +02:00
ZeroNet
835381fbb1 Filter media referrer by original request address 2016-08-10 12:24:47 +02:00
ZeroNet
04bed98a97 Store original request address 2016-08-10 12:24:09 +02:00
ZeroNet
d542cc5b32 Log fileWrite permission errors 2016-08-10 12:23:01 +02:00
ZeroNet
c486e9fa1a Pass current site to publisher callback 2016-08-10 12:22:27 +02:00
ZeroNet
92dbe597ea Allow to store extra data in content.json 2016-08-10 12:21:34 +02:00
ZeroNet
c23c397764 Option to accept unknown certs 2016-08-10 12:18:22 +02:00
ZeroNet
d6fdf8af9c Fix fileRules exception without rules 2016-08-10 12:15:16 +02:00
ZeroNet
3d7ba7bdf8 Permission add and remove zeroframe api command 2016-08-10 12:12:47 +02:00
HelloZeroNet
81f196647b Rev1287, Display error for unsupported browsers 2016-05-17 01:17:53 +02:00
HelloZeroNet
3b8dc59ac5 rename wrapperPopstate to wrapperPopState 2016-05-16 22:27:17 +02:00
HelloZeroNet
fc9c604b66 Update signed file using the sidebar 2016-05-16 22:26:40 +02:00
HelloZeroNet
95cbc544de Fix IE11 wrapper nonce errors 2016-04-29 02:56:58 +02:00
HelloZeroNet
038bf4f2c8 Dont add -old postfix for content.json files 2016-04-25 02:26:13 +02:00
HelloZeroNet
34ead0aec2 Allow whitespace prefix for sql queries 2016-04-25 02:25:54 +02:00
HelloZeroNet
38c78dcba1 IE10 compatible origin 2016-04-20 23:22:39 +02:00
HelloZeroNet
d2b9555508 Fix data dir detection 2016-04-18 00:47:26 +02:00
HelloZeroNet
bbf1bc163d Extra debug messages, cleanup unused lines 2016-04-10 13:25:11 +02:00
HelloZeroNet
5720f74669 Typos and formatting 2016-04-09 19:49:23 +02:00
HelloZeroNet
9bb0a0d91b Display confirmation if zeroid already exists 2016-04-09 19:49:12 +02:00
HelloZeroNet
561bd80aa3 Fallback to simple file copy if rename failed 2016-04-09 19:43:44 +02:00
HelloZeroNet
57bf36f90a Only create old file if not exist 2016-04-07 10:35:02 +02:00
HelloZeroNet
6e65169a9d Calculate diff right befor publish 2016-04-07 10:34:30 +02:00
HelloZeroNet
ab1aaea7f5 Calculate and send diffs on publish 2016-04-06 13:57:19 +02:00
HelloZeroNet
888ad2aeff Save files before writing with fileWrite to calculate diff on publish 2016-04-06 13:56:32 +02:00
HelloZeroNet
0e13fbf5dc Queue updates within 30 second to avoid network spam 2016-03-30 23:15:18 +02:00
HelloZeroNet
045a57491a Allow same opener as current window 2016-03-26 00:20:53 +01:00
Erkan Yilmaz
b5d74eec16 typo: definied -> defined 2016-03-21 09:43:53 +01:00
HelloZeroNet
6496a6125f Rev1069, Allow to specify window parameters 2016-03-20 21:33:13 +01:00
HelloZeroNet
99f0407ba2 wrapperOpenWindow command 2016-03-19 18:05:08 +01:00
HelloZeroNet
0ee1448e13 Faster signing by only reload the current content.json 2016-03-18 19:15:38 +01:00
HelloZeroNet
3e8bf598df Remove allow-popups-to-escape-sandbox as its not supported by every browser 2016-03-16 21:08:41 +01:00
HelloZeroNet
52044a50a1 Save CPU by avoid reloading all json file on publish 2016-03-16 21:08:19 +01:00
HelloZeroNet
145d4dbd69 Move path parsing to separate function 2016-03-16 00:33:05 +01:00
HelloZeroNet
b0ac9869ce Wrapper nonce security comments 2016-03-12 20:36:17 +01:00
HelloZeroNet
4d7ce1dc16 Allow popups without sandbox 2016-03-12 20:35:30 +01:00
HelloZeroNet
e891a10e54 Rev957, Sidebar displays onion peers in graph, Sidebar display bad file retry number, Sidebar site Update/Pause/Delete, Ratelimit sidebar update, Encoded typo, Fix onion findHashId, More retry for bad files, Log file path errors, Testcase for self findhashIds, Testcase for Tor findHashId, Better Tor version parse, UiWebsocket callback on update/pause/resume/delete, Skip invalid postMessage messages 2016-03-09 00:48:57 +01:00
HelloZeroNet
2901f1e1ba Rev949, Newsfeed allows items 2min from future, Switch sidebar content.json list to input for faster opening, Promise based sidebar rendering to make it more reliable on slow connections, RateLimit sidebar globe updating, Some PEP8 formatting 2016-03-06 19:28:22 +01:00
TheNain38
d0919d8ab8 Fix checking if Ajax request 2016-03-06 15:44:55 +01:00
HelloZeroNet
2a06cec5c2 Rev948, Disable websocket logging, Change max files opened limit on startup 2016-03-06 02:17:58 +01:00
HelloZeroNet
5b59da2435 Rev912, Keep track site added time, UiRequest xss quickfix, Cleanup peerPing output 2016-03-01 23:16:31 +01:00