caryoscelus
ca5d573908
Fix typo
2024-02-09 15:55:21 +00:00
caryoscelus
2520024f56
Allow cross-site embedding without "cors-" prefix
...
..As long as CORS read permission is granted. This is done for
compatibility with sites that relied on lack of enforcing of cross-site
isolation in previous ZeroNet versions.
fixes #259
2024-02-09 15:55:21 +00:00
caryoscelus
25bfc0341c
Use integer rev in UiWebSocket for dashboard compatibility
2023-12-27 14:24:03 +00:00
caryoscelus
15dddc27c6
Get rid of using old-style revision everywhere
2023-12-27 13:17:59 +00:00
caryoscelus
f37ab4ee5d
Continuing previous commit: --ui_site_port
2023-12-07 09:56:01 +00:00
caryoscelus
a4cc2eeb9f
Separate http server for site content WIP
...
This resolves issue introduced by 14e8130acb
2023-12-07 07:38:14 +00:00
caryoscelus
93ed7418ab
Merge branch 'master' into always-nonce
2023-11-16 14:20:30 +00:00
caryoscelus
fc408ef985
Modern browsers all support nonce now so drop checking UA
2023-11-16 14:04:33 +00:00
caryoscelus
14e8130acb
Rewrite cross-site and cross-host requests detection
...
Make sure browsers send referrers so we can track cross-site
requests (could be used to identify which sites user hosts)
This breaks /raw because there are no referrers there
fixes #227
fixes #223
fixes #224
2023-11-14 23:11:51 +00:00
caryoscelus
c92b8bc56c
Fix UiServer.getPosted hanging in some circumstances
...
fixes #198
while it's not exactly clear what causes the difference in behaviour,
but under certain conditions UiServer.getPosted used to hang trying
to readline() POST request (e.g. from UiPassword login). using
read(CONTENT_LENGTH) seems to fix the issue
2023-11-01 22:12:14 +00:00
caryoscelus
f336cd02bd
More sophisticated detection of cross-site info leak
...
see previous commit for more info
2023-07-25 20:58:57 +00:00
caryoscelus
0811902ff6
Disable third-party access to 0net server.
...
This previously enabled clearnet sites to detect if user is running 0net instance
on their machine as well as to detect which 0net sites are downloaded.
Check online at https://riza-committee.github.io/demos/0scan.html
Intra-0net version of this is still available at
http://127.0.0.1:43110/1ScanCY9fjmjanDt7NwvyNQCL16hqWnVM/
2023-07-25 19:13:12 +00:00
caryoscelus
3330b19e31
don't fail if http_accept header is */*
...
fixes #67
2023-07-21 12:00:23 +00:00
caryoscelus
b5380f6b26
Fix /raw readdress
...
fixes #199
2022-12-11 17:48:37 +00:00
caryoscelus
091323d4e3
TODO comments
2022-12-06 15:59:52 +00:00
caryoscelus
76d96043d6
Merge pull request #168 from zeronet-conservancy/redirect_bit_domains
...
redirect bit domains
2022-11-20 16:43:10 +00:00
caryoscelus
f2884f3c7c
reduce fingerprinting information: trackers
...
refs #163
2022-11-14 14:32:13 +00:00
caryoscelus
9f8524f66d
reduce fingerprinting information in siteInfo
...
refs #163
2022-11-14 14:28:12 +00:00
caryoscelus
79ffcac22d
reduce fingerprinting information accessible to unprivileged sites
...
refs #163
2022-11-14 13:58:57 +00:00
caryoscelus
53d51e8bc8
redirect .bit domains to hash actual addresses
...
refs #23
2022-09-19 16:05:25 +00:00
caryoscelus
9a3fd95636
comments
2022-09-19 12:13:12 +00:00
caryoscelus
f7b009099a
consolidate & fix open browser behaviour
2022-09-06 16:04:58 +00:00
caryoscelus
980548080c
Merge pull request #147 from zeronet-conservancy/sidebar_favourite
...
favourite/unfavourite in the sidebar
refs #146
2022-08-17 12:28:32 +00:00
caryoscelus
46aa7b45f5
be more flexible about opening any browser
2022-08-17 12:27:05 +00:00
caryoscelus
80320105d8
favourite/unfavourite in the sidebar
...
there's still a bug that doesn't update unfavouriting in real time
2022-08-06 00:45:27 +00:00
caryoscelus
277b48d71e
skip redundant check
2022-06-29 00:04:19 +00:00
caryoscelus
f10e09633c
Better warning about ADMIN permissions
...
refs #82
2022-06-08 18:51:03 +00:00
caryoscelus
574928e625
[cleanup] remove coffee script files
2022-05-31 13:32:47 +04:00
caryoscelus
90092842a1
Merge pull request #75 from d4708/top_right_button_vision
...
Top right button new flashy cursor
2022-05-25 23:38:37 +04:00
caryoscelus
2e04c845a8
Merge pull request #78 from d4708/favicon_with_rounded_corners
...
add favicon with rounded corners
refs #50
2022-05-23 23:59:56 +04:00
caryoscelus
fba0402cd4
Merge pull request #77 from d4708/apple_touch_icon
...
add apple touch icon
fixes #63
2022-05-23 23:57:29 +04:00
d4708
894af8127e
add favicon with rounded corners
2022-05-23 18:42:03 +03:00
d4708
a802972d14
add apple touch icon #63
2022-05-23 18:27:58 +03:00
d4708
a734c4b12f
add fixbutton combinations, cleanup filesize #53
2022-05-23 18:09:44 +03:00
d4708
66981de74f
add fixbutton cursors #53
2022-05-23 18:07:24 +03:00
d4708
ff43c838e4
Delete fixbutton.png
2022-05-23 18:06:13 +03:00
d4708
e495589534
change fixbutton cursor
2022-05-23 14:42:29 +03:00
d4708
267633ee06
add fixbutton cursor
2022-05-23 14:41:11 +03:00
d4708
a5f18c22b3
fix issues relation #50 , #53
2022-05-19 13:58:41 +03:00
d4708
970dda15c7
visual updates for the top-right button #50 , #53
2022-05-19 13:57:38 +03:00
d4708
98e51e4c73
visual updates for the top-right button #50 , #58
2022-05-19 13:53:31 +03:00
caryoscelus
d5d5163a65
remove unused code
2022-05-17 02:40:22 +04:00
caryoscelus
756082b7c8
temporary top-right button image replacement
2022-05-15 16:03:48 +04:00
caryoscelus
1c24d90c70
new icon
...
refs #3
refs #50
2022-05-15 14:43:12 +04:00
caryoscelus
06727cb511
fix UiRequest.parsePath
2022-03-03 05:15:20 +00:00
caryoscelus
ba0662327b
fix uiwebsocket
...
fixes previous commit (usage of updatesite)
2022-02-02 12:26:57 +00:00
caryoscelus
855b23a84b
fix readdress loop
...
use better escaping in render
fixes #19
2022-01-26 19:28:17 +00:00
caryoscelus
6803379ad2
code improvements in UiRequest
2022-01-14 19:03:48 +00:00
Tamas Kocsis
b3c9de5e47
Don't show tracker tor bridge warning if more that 3 trackers finished
2020-12-03 20:02:48 +01:00
Tamas Kocsis
3ffa3c2f79
Use svg for top-right zero button
2020-12-03 20:02:20 +01:00
