Commit graph

190 commits

Author SHA1 Message Date
shortcutme
da64785ea4
Only announce site on http request if not paused 2018-06-21 21:57:25 +02:00
shortcutme
d125551c0d
Proritize currently requested site update 2018-06-03 12:46:00 +02:00
JeremyRand
4ffd642732
Support accessing ZeroNet via a transparent proxy. 2018-06-02 12:17:10 +00:00
shortcutme
8dc465f244
Don't readd wrapper_nonce of site size error as we generate a new one on reload 2018-04-28 22:02:29 +02:00
shortcutme
8e708dc02a
Log wrapper nonce errors 2018-04-28 22:02:10 +02:00
shortcutme
d275dfea2f
Log 403 error as error 2018-03-20 21:55:45 +01:00
shortcutme
738fd1a09b
Rev3354, Fix ajax loading files from archives 2018-03-09 15:01:45 +01:00
shortcutme
7048987157
Rev3351, Fix sites with utf8 title 2018-03-07 10:23:13 +01:00
shortcutme
3e970df09b
Simple replace wrapper template variables instead of python formatting to allow use braces 2018-03-06 12:00:30 +01:00
shortcutme
b0a8c4d278
Change http headers from list to dict 2018-03-06 11:58:56 +01:00
shortcutme
6afe2dd720
New NOSANDBOX permission to remove sandboxed iframe restrictions 2018-02-21 03:12:51 +01:00
shortcutme
9f35efc31d
Revert "Version 0.6.2, Rev3310"
This reverts commit 98c6add637.
2018-02-09 11:39:36 +01:00
shortcutme
98c6add637
Version 0.6.2, Rev3310 2018-02-08 18:16:50 +01:00
shortcutme
bc09b6280b
Add index.html as default inner_path to uirequest 2018-01-30 14:29:38 +01:00
shortcutme
0c6c7d2725
Rev 3222, Use eval in bench for older pytyhon compatibility, Remove unnecessary print from chart archive 2018-01-20 11:49:17 +01:00
shortcutme
dedf6cd92f
Support initial calls for console bench function 2018-01-19 02:32:44 +01:00
shortcutme
51fdf95295
Allow ajax ranged requests 2017-12-07 15:25:32 +01:00
shortcutme
2781e31be0
Keep track of websocket connections 2017-11-05 23:40:59 +01:00
shortcutme
c3250378ee
Rev3128, Allow modals for sites 2017-10-30 15:15:40 +01:00
shortcutme
4042de460e
actionFile allows file details to be passed as parameter 2017-10-04 12:46:06 +02:00
shortcutme
0dd34403a2
Combinate isfile and filesize query to one function 2017-10-04 12:44:34 +02:00
shortcutme
edb9d3f719
Media files requested from non-seeded site not wokring anymore 2017-10-04 12:42:05 +02:00
shortcutme
1f5db0aa24
Nonce checking moved to route command 2017-10-04 12:41:14 +02:00
shortcutme
74b2408668
Move path checking to parsePath 2017-10-04 12:39:08 +02:00
shortcutme
f53612bef7
Media request should start with normal characters 2017-10-04 12:38:44 +02:00
shortcutme
4d991cda6d
Also serve htm files with wrapper 2017-10-04 12:37:56 +02:00
shortcutme
6984575901
Remove dead reload code 2017-10-04 12:37:34 +02:00
shortcutme
75b44f6980
Raise SecurityError on invalid path 2017-10-04 12:37:22 +02:00
shortcutme
3c46f60042
Show wrapper automatically if wrapper nonce is invalid 2017-10-04 12:35:15 +02:00
shortcutme
7dbc323f76
ZeroNet-internal virtual path on UiServer for internal commands 2017-10-04 12:33:43 +02:00
shortcutme
bfd3d18a10
Fix multiuser plugin compatibility 2017-09-02 14:28:01 +02:00
grez911
158f9e37e5 Added explanation of convertion actionWrapper response to list 2017-08-25 11:05:48 +03:00
grez911
905976a1b6 Added exception handling for broken user.json 2017-08-22 17:43:55 +03:00
shortcutme
1db2327b3d
Rev2180, Allow ajax requests using ajax_key http get parameter 2017-08-15 02:40:38 +02:00
shortcutme
504d7812e5
Fix exception if no path_parts returned 2017-07-19 16:46:37 +02:00
shortcutme
1f7b25b60c
Ignore http protocol in same origin comparison 2017-07-18 20:57:33 +02:00
shortcutme
a0d85d7d83
Prompt new site addition in raw mode 2017-07-15 01:32:15 +02:00
shortcutme
d281f112d9
Rev2154, Fix same origin checking in proxy mode 2017-07-14 11:08:22 +02:00
shortcutme
e525ea2431
Rev2144, Fix CSP header in FilePack plugin, Allow media-src and font-src from self source 2017-07-11 23:00:33 +02:00
shortcutme
7c6bea6ddd
Fix raw site access without / at the site address end 2017-07-10 02:42:28 +02:00
shortcutme
5950b04c40
Add allow-origin header for media requests from same origin to fix css font support 2017-07-09 14:11:44 +02:00
shortcutme
434cfce32a
More simple same origin test for media files cross-site access 2017-07-09 14:11:06 +02:00
shortcutme
febdea6c64
Serve files without wrapper if requested using /raw/ prefix 2017-07-09 14:10:01 +02:00
shortcutme
49735b7e55
Fix not internal error on request files from not seeded sites 2017-07-06 00:09:35 +02:00
shortcutme
1d6168f457
Download, svg, xml, flash, pdf files instead of displaying to avoid js execution 2017-07-06 00:09:05 +02:00
shortcutme
2a161f4421
Never allow cross-origin file request 2017-07-06 00:08:32 +02:00
shortcutme
e9ce137e14
Display invalid hosts 2017-06-15 19:49:51 +02:00
shortcutme
c84fcf2034
Support manual ui_host command line parameter 2017-06-15 19:48:01 +02:00
shortcutme
42874038e2
Only allow UI requests from safe hosts 2017-06-13 14:19:23 +02:00
shortcutme
d467aabd4c
Rev2067, Fix inner_path stripping 2017-05-11 18:18:12 +02:00
shortcutme
5908d2ca53
RenderWrapper showloadingscreen parameter 2017-05-11 18:01:16 +02:00
shortcutme
27a582634f
Don't check referrer for html files 2017-05-11 18:00:57 +02:00
shortcutme
47245f485a
ActionFile security check 2017-05-11 17:59:46 +02:00
shortcutme
545459be88
RenderWrapper with parameters 2017-05-11 17:59:12 +02:00
shortcutme
b5d3995874
GetSiteUrl based on if it's proxy request 2017-05-11 17:57:29 +02:00
shortcutme
487f5cb8c2
Fix unicode url redirects 2017-05-11 17:56:01 +02:00
shortcutme
f67cb7b145
Rev2059, Fix download test, boost priority on request by 15, Adjust default priorities 2017-05-07 21:21:26 +02:00
shortcutme
f3edd8013d
Rev2034, Fix leaking users.json via webui 2017-04-09 16:54:28 +02:00
shortcutme
871588aa9f
Move invalid path test upper level 2017-02-27 11:21:22 +01:00
shortcutme
97cec2ba46
Benchmark helper for console 2017-02-27 00:13:41 +01:00
shortcutme
c95637eee1
Rev1941, Use utf-8 encoding on text files 2017-02-24 14:39:20 +01:00
shortcutme
45e2b350a9
Raise exception on invalid path 2017-02-19 00:51:47 +01:00
shortcutme
f74e9397db
Rev1861, Fix favicon for zero url access type 2017-02-05 22:55:24 +01:00
shortcutme
a08114b1b0
Rev1855, Fix content type detection, Formatting 2017-02-02 12:51:41 +01:00
shortcutme
d65c7d05a4
Remove /media access 2017-01-27 13:05:49 +01:00
shortcutme
d3fc1cf897
Rev1816, Fix exe distribution forbidden error 2017-01-14 12:43:05 +01:00
MuxZeroNet
6b0ef500ed Fix extension detection 2017-01-12 05:22:26 +00:00
MuxZeroNet
4a6dc7971e #752 2017-01-09 05:01:49 +00:00
shortcutme
1a5bfd973e Only download media if site is already added 2017-01-08 17:31:03 +01:00
shortcutme
6c68f8dd6c Fix content type detection for options request 2017-01-08 17:27:57 +01:00
shortcutme
2447279191 Rename websocket detection 2017-01-08 17:26:59 +01:00
MuxZeroNet
0a1eecee20 WebSocket requests not allowed 2017-01-08 06:56:42 +00:00
MuxZeroNet
da7821a3a9 X-Frame-Options 2017-01-06 01:44:22 +00:00
shortcutme
5c2b90c20f Rev1799, Force correct css content type 2017-01-05 02:33:33 +01:00
shortcutme
86b0046f28 Don't allow load load wrapper frames as prefetch or as image 2016-12-27 11:37:35 +01:00
shortcutme
b25bf97cad Add language to UI js as paramter to avoid cache 2016-11-18 20:07:58 +01:00
shortcutme
6c74f6c527 Possible to disable length header on sitemeda 2016-11-16 11:19:35 +01:00
shortcutme
c076f605aa Rev1703, Allow custom favicon 2016-11-10 23:14:30 +01:00
shortcutme
ccb35f1353 Send content size header for normal files 2016-11-07 22:49:13 +01:00
shortcutme
fbdc9e2b40 Comment typo 2016-10-02 14:24:48 +02:00
Durand D'souza
13837971a7 Update UiRequest.py
Fixed a bug where a lack of a trailing slash in every url caused zeronet to fail to load the page, even if it existed.
2016-09-20 05:23:34 +01:00
ZeroNet
835381fbb1 Filter media referrer by original request address 2016-08-10 12:24:47 +02:00
ZeroNet
04bed98a97 Store original request address 2016-08-10 12:24:09 +02:00
HelloZeroNet
d2b9555508 Fix data dir detection 2016-04-18 00:47:26 +02:00
HelloZeroNet
145d4dbd69 Move path parsing to separate function 2016-03-16 00:33:05 +01:00
HelloZeroNet
2901f1e1ba Rev949, Newsfeed allows items 2min from future, Switch sidebar content.json list to input for faster opening, Promise based sidebar rendering to make it more reliable on slow connections, RateLimit sidebar globe updating, Some PEP8 formatting 2016-03-06 19:28:22 +01:00
TheNain38
d0919d8ab8 Fix checking if Ajax request 2016-03-06 15:44:55 +01:00
HelloZeroNet
5b59da2435 Rev912, Keep track site added time, UiRequest xss quickfix, Cleanup peerPing output 2016-03-01 23:16:31 +01:00
HelloZeroNet
ac0dc3bf11 Rev906, Escape file path, Only allow to modify tor in configuration 2016-02-20 11:19:28 +01:00
HelloZeroNet
2f25204be9 Rev905, Escape title and query string 2016-02-18 19:44:52 +01:00
HelloZeroNet
1dbc33445f Rev903, FeedQuery command only available for ADMIN sites, Show bad files in sidebar, Log unknown messages, Add and check inner_path and site address on sign/verify, Better peer cleanup limit, Log site load times, Testcase for address and inner_path verification, Re-sign testsite with new fields, Fix unnecessary loading screen display when browsing sub-folder with index.html, Fix safari notification width 2016-02-18 11:22:21 +01:00
HelloZeroNet
61cfb8aa2f Rev900, Sidebar filestats bar width round fix, Sidebar WebGL not supported error, Sidebar optimalizations, Trayicon gray shadow, Trim end of line whitespace from json files, Fix testweb testcase, Implement experimental postMessage nonce security, Return None when testing external ip, Window opener security check and message, Increase timeout for large files 2016-02-10 02:30:04 +01:00
HelloZeroNet
687a848292 Version 0.3.6, Rev879, Fix sidebar error on description missing, New trayicon, New favicon, Disable some functions on MultiUser proxies, New homepage, Replace only the last ? in SQL queries, Alwaays grant ADMIN permission to homepage site, Announce before publish if no peers, configSet, serverShutdown, ADMIN WebsocketAPI command, Stop Tor client before updating, Ignore peer ip packing error, Ignore db files from git, Fix safari ajax error when UiPassword enabled 2016-02-02 11:40:45 +01:00
HelloZeroNet
f7eaf7b222 Rev860, Re-enable ajax on non-html items 2016-02-02 00:49:43 +01:00
HelloZeroNet
6427709dec Rev841, Allow ajax access only on json data, Better json request detect for wrapper 2016-01-12 21:52:24 +01:00
HelloZeroNet
e9d2cdfd37 Version 0.3.5, Rev830, Full Tor mode support with hidden services, Onion stats in Sidebar, GeoDB download fix using Tor, Gray out disabled sites in Stats page, Tor hidden service status in stat page, Benchmark sha256, Skyts tracker out expodie in, 2 new tracker using ZeroNet protocol, Keep SSL cert option between restarts, SSL Certificate pinning support for connections, Site lock support for connections, Certificate pinned connections using implicit SSL, Flood protection whitelist support, Foreign keys support for DB layer, Not support for SQL query helper, 0 length file get bugfix, Pex onion address support, Faster port testing, Faster uPnP port opening, Need connections more often on owned sites, Delay ZeroHello startup message if port check or Tor manager not ready yet, Use lockfiles to avoid double start, Save original socket on proxy monkey patching to get ability to connect localhost directly, Handle atomic write errors, Broken gevent https workaround helper, Rsa crypt functions, Plugin to Bootstrap using ZeroNet protocol 2016-01-05 00:20:52 +01:00
HelloZeroNet
3587777ea8 Rev571, Optional file sizes to sidebar, Download all optional files option in sidebar, Optional file number in peer stats, Delete removed or changed optional files, Auto download optional files if autodownloadoptional checked, SiteReload command, Peer use global file server if no site defined, Allow browser cache video files, Allow more keepalive connections, Gevent 1.1 ranged request bugfix, Dont sent optional files details on websocket, Remove files from workermanager tasks if no longer in bad_files, Notify local client about changes on external siteSign 2015-11-09 00:44:03 +01:00
HelloZeroNet
8e710beab1 Rev536, Fix stats page, Support ranged http requests for better video browser compatibility, setHashfield command, One by one send hashfield to connected peers if changed, Keep count hashfield changetime, PeerHashfield optimalizations, Wait for peers on checkmodification, Give more time to query trackers, Do not count udp trackers as error if udp disabled, Test hashfield push 2015-10-30 02:08:02 +01:00
HelloZeroNet
713baeab63 Rev493, Fix trayicon autostart detect, Dont leak details on ui_restrict 2015-10-25 23:08:25 +01:00
HelloZeroNet
4b403da056 Rev448, Better file download priority method, Some potential programming error fix, Renamed utils to helper, Moved pack and unpackaddress to helper package, Test new privatekey creation, Test site file download order, Spy test helper to log called parameters, Remove unnecessary fat arrows 2015-09-27 02:08:53 +02:00