Commit graph

1090 commits

Author SHA1 Message Date
shortcutme
d281f112d9
Rev2154, Fix same origin checking in proxy mode 2017-07-14 11:08:22 +02:00
shortcutme
5a42cb92cd
Rev2153 2017-07-14 10:37:19 +02:00
shortcutme
3459d35ed2
Test unsafe regex pattern recognization 2017-07-14 10:37:09 +02:00
shortcutme
699a8be721
Test unsafe patterns in dbschema 2017-07-14 10:36:41 +02:00
shortcutme
1f4a5643db
Test unsafe regex patterns on sign and verify 2017-07-14 10:36:18 +02:00
shortcutme
492408def7
Use class variable to store test site privatekey 2017-07-14 10:35:44 +02:00
shortcutme
74763465a8
Use SafeRe to match file patterns in dbschema.json 2017-07-14 10:34:57 +02:00
shortcutme
c069d4f67c
Use SafeRe to match user defined patterns in content.json 2017-07-14 10:34:18 +02:00
shortcutme
bf41c7b651
Detect potentionally unsafe regex patterns 2017-07-14 10:31:42 +02:00
shortcutme
3f5a5b4f9b
Rev2151 2017-07-13 19:33:16 +02:00
shortcutme
b60a1ec455
Test invalid filenames 2017-07-13 19:33:07 +02:00
shortcutme
13157eea1e
Move included content verification to separate function, fix root content.json file path verification 2017-07-13 19:32:54 +02:00
shortcutme
dd11f87673
Rev2148, Fix signing typo 2017-07-13 15:03:04 +02:00
shortcutme
87910a236b
Rev2147 2017-07-13 15:00:23 +02:00
shortcutme
096675c87e
Add unit to verification error 2017-07-13 15:00:04 +02:00
shortcutme
7d3beeb9e0
Enforce valid relative paths on verification 2017-07-13 14:59:17 +02:00
shortcutme
96a097e33d
Separate isValidRelativePath function 2017-07-13 14:58:52 +02:00
shortcutme
1bb3140f5b
Move file hashing to separate funcion to allow easier extension 2017-07-13 14:58:16 +02:00
shortcutme
6bf3d34c6c
Rev2145 2017-07-12 12:28:28 +02:00
shortcutme
3cd7e4e48e
Better way to strip pyc/pyd from config file path 2017-07-12 12:28:21 +02:00
shortcutme
e525ea2431
Rev2144, Fix CSP header in FilePack plugin, Allow media-src and font-src from self source 2017-07-11 23:00:33 +02:00
shortcutme
c8f37674c6
Rev2142, Fix random wrong data dir path 2017-07-11 21:03:24 +02:00
shortcutme
12ca870e38
Rev2141 2017-07-10 02:42:50 +02:00
shortcutme
f630e6c25e
Test raw access security 2017-07-10 02:42:41 +02:00
shortcutme
7c6bea6ddd
Fix raw site access without / at the site address end 2017-07-10 02:42:28 +02:00
shortcutme
efbef25c76
UserSetSettings, UserGetSettings Websocket API commands 2017-07-10 02:41:01 +02:00
shortcutme
1384da4691
Rev2137 2017-07-09 14:54:20 +02:00
shortcutme
426fe561c9
Cleanup not used wrapper opener check 2017-07-09 14:12:13 +02:00
shortcutme
5950b04c40
Add allow-origin header for media requests from same origin to fix css font support 2017-07-09 14:11:44 +02:00
shortcutme
434cfce32a
More simple same origin test for media files cross-site access 2017-07-09 14:11:06 +02:00
shortcutme
febdea6c64
Serve files without wrapper if requested using /raw/ prefix 2017-07-09 14:10:01 +02:00
shortcutme
6c0062dbc1
Rev2132 2017-07-06 00:09:47 +02:00
shortcutme
49735b7e55
Fix not internal error on request files from not seeded sites 2017-07-06 00:09:35 +02:00
shortcutme
1d6168f457
Download, svg, xml, flash, pdf files instead of displaying to avoid js execution 2017-07-06 00:09:05 +02:00
shortcutme
2a161f4421
Never allow cross-origin file request 2017-07-06 00:08:32 +02:00
shortcutme
f30b2b6fc2
Rev2130, Use SslPatch to load openssl library, Fix Android 6 openssl loading 2017-07-04 01:12:58 +02:00
shortcutme
ebbe19131b
Rev2128, Update to OpenSSL v1.0.2l 2017-06-30 10:13:25 +02:00
shortcutme
03cabcb07c
Rev2127, Fix delete files without file_info 2017-06-27 18:08:28 +02:00
shortcutme
401d3ec1c9
Rev2125, Fix missing if line 2017-06-21 00:03:26 +02:00
shortcutme
fd1f104f4e
Rev2124 2017-06-20 20:32:59 +02:00
shortcutme
66e2192e65
Add --silent option to disable logging to terminal 2017-06-20 20:32:51 +02:00
shortcutme
0d6d19502f
Format json reply for peerCmd command line action 2017-06-20 20:29:11 +02:00
shortcutme
a7b22e2055
Fix error on exit for peers without site 2017-06-20 20:28:35 +02:00
shortcutme
71fbcee76c
Fix error on exiting when there is no stream_server started 2017-06-20 20:28:09 +02:00
shortcutme
e157894694
Rev2122 2017-06-20 11:20:48 +02:00
shortcutme
f08f354eb6
More detailed file size match error logging 2017-06-20 11:20:43 +02:00
shortcutme
23db93d20f
Fix invalid update logging 2017-06-20 11:20:30 +02:00
shortcutme
67212ee29e
Rev2121 2017-06-19 16:19:04 +02:00
shortcutme
15d8589069
Fix typo, less verbose socket logging 2017-06-19 16:18:37 +02:00
shortcutme
14cd9315c1
Don't try to send to closed socket 2017-06-19 16:18:20 +02:00
shortcutme
f1786c2ee6
Handle unknown message type 2017-06-19 16:16:43 +02:00
shortcutme
7d9cb65ba1
Catch message type errors on connection parsing 2017-06-19 16:16:13 +02:00
shortcutme
9f72fdeb41
Display sign error on command line siteSign command failure 2017-06-19 16:14:36 +02:00
shortcutme
b7106995b7
Test size errors on getFile 2017-06-19 16:14:14 +02:00
shortcutme
dca3c775d1
Test expect exact sign and verification errors 2017-06-19 16:13:58 +02:00
shortcutme
916709a7e4
Allow less peer error if for popular sites 2017-06-19 16:13:06 +02:00
shortcutme
066f54f521
Only log listModification request in verbose mode 2017-06-19 16:12:41 +02:00
shortcutme
64199c7ded
Reduce logging on tracker error 2017-06-19 16:12:24 +02:00
shortcutme
79ca1069ec
Display exact sign error to UI on failure 2017-06-19 16:11:47 +02:00
shortcutme
43c8dacd70
Catch and log exact verification errors on worker download 2017-06-19 16:10:49 +02:00
shortcutme
f773bf3336
Add file_size to request to avoid unnecessary download 2017-06-19 16:10:18 +02:00
shortcutme
9a9bd71634
Catch file verification errors on update request 2017-06-19 16:07:36 +02:00
shortcutme
25657ebdca
Log to site instead of fileserver 2017-06-19 16:04:17 +02:00
shortcutme
c7146613a1
Store inner path to variable on update request to save some complexity 2017-06-19 16:02:52 +02:00
shortcutme
c58d28861d
Raise RequestError instead of Exception of fileGet error 2017-06-19 16:01:41 +02:00
shortcutme
ff69b04216
Catch verify exceptions on manual site files verification process 2017-06-19 15:57:02 +02:00
shortcutme
7653cba247
SiteVerify command line action display verify error 2017-06-19 15:49:39 +02:00
shortcutme
b0ee0dae93
Remove old testing code 2017-06-19 15:48:50 +02:00
shortcutme
0224863b1f
Only use positive sizes to calculate size sum of content.json 2017-06-19 15:48:33 +02:00
shortcutme
94c7ce9f42
Sign raise error instead of return False 2017-06-19 15:47:47 +02:00
shortcutme
2a3b8a7692
Verify raise exception instead of return False 2017-06-19 15:47:03 +02:00
shortcutme
fec3ff7d8e
Remove bad files that has no info 2017-06-19 15:40:13 +02:00
shortcutme
4b346243eb
On clone sign content.json after all other files copied 2017-06-19 15:39:14 +02:00
shortcutme
c2b177434d
Drop error if want to publish non existent file 2017-06-19 15:38:05 +02:00
shortcutme
c5d90ddd19
Start new workers if lots of tasks left 2017-06-19 15:36:07 +02:00
shortcutme
db8c85d249
Version 0.5.6, Changelog 2017-06-15 22:23:00 +02:00
shortcutme
a89f66e8b5
Rev2109 2017-06-15 19:50:11 +02:00
shortcutme
e9ce137e14
Display invalid hosts 2017-06-15 19:49:51 +02:00
shortcutme
2f7bfa95b2
Fix multi value argument command line parsing 2017-06-15 19:49:00 +02:00
shortcutme
c84fcf2034
Support manual ui_host command line parameter 2017-06-15 19:48:01 +02:00
shortcutme
0d3fa43f00
Remove unnecessary ui ip replace 2017-06-15 19:43:23 +02:00
shortcutme
2e04ba1880
Bind ui server to ipv4 address 2017-06-15 19:42:38 +02:00
ZeroNet
85b2a81568 Merge pull request #869 from MRoci/master
Root content.json "signers"  field as a list
2017-06-15 15:24:00 +02:00
shortcutme
0725464388
Fix database loading 2017-06-15 13:33:51 +02:00
shortcutme
f506ac9701
Faster getPath 2017-06-15 13:30:36 +02:00
shortcutme
97b3563e6b
Rev2105, Fix database updating when path contains special characters 2017-06-15 13:30:06 +02:00
MRoci
9ac5746e3c Changed this assignment to have the "signers" field in root's
content.json as a list and not a dictionary to mantain uniformity with
"includes" "signers" field and for not having a dict with empty values
2017-06-13 18:20:39 +02:00
shortcutme
1f1cbf01d7
Rev2103 2017-06-13 14:21:07 +02:00
shortcutme
eefe7e1b5a
Don't add obsolete old signature format 2017-06-13 14:20:58 +02:00
shortcutme
42874038e2
Only allow UI requests from safe hosts 2017-06-13 14:19:23 +02:00
shortcutme
d55fbd1728
Remove obsolete auth_key_sha512 2017-06-13 14:18:17 +02:00
shortcutme
aa402ebaf3
Fix typo 2017-06-13 14:13:09 +02:00
shortcutme
ae21f056d5
Error if no peer connection found 2017-06-13 14:12:48 +02:00
shortcutme
a4a23f3ea0
Fix site lock violation logging 2017-06-13 14:12:13 +02:00
Ivanq
67395b5e47 Allow fileRules for root content.json 2017-06-13 11:36:38 +03:00
shortcutme
742c2fe684
Rev2099, Keep tor client running until update finished 2017-06-06 00:05:43 +02:00
shortcutme
5801863b76
Rev2098 2017-06-05 01:09:17 +02:00
shortcutme
653219d1de
Rev2096 2017-06-03 00:54:26 +02:00
shortcutme
6167dda01d
Compact json list output 2017-06-03 00:53:59 +02:00
shortcutme
0b7d1ad90d
Add callback for certSelect 2017-06-03 00:53:40 +02:00