Commit Graph

5707 Commits (b7ed261e7dfd367f3bc5a8bef654b91ba74feb97)
 

Author SHA1 Message Date
Matthew Wild b7ed261e7d mod_http_files: Santize the path relative to our base URL before translating it to a filesystem path, fixes a relative path traversal vulnerability 10 years ago
Kim Alvefur 79ad494b8e util.uuid: Use /dev/urandom 10 years ago
Kim Alvefur d4223ff4d9 net.dns: Allow a zone id in resolv.conf (eg like %eth0) 10 years ago
Kim Alvefur fe0303fe45 util.ip: Support zone id syntax in IPv6 addresses 10 years ago
Florian Zeitz 8a6298f134 net.dns: Support IPv6 addresses in resolv.conf [Backported from 0.10] 13 years ago
Matthew Wild b985f77de3 util.ip: Fix protocol detection of IPv6 addresses beginning with : [Backported from 0.10] 13 years ago
Matthew Wild 5b21f4242a util.ip: Automatically determine protocol of IP address if none specified. Return error if invalid. [Backported from 0.10] 13 years ago
Matthew Wild 689f522c33 tests/test.lua: Fix fake module() function to prevent _M from being _G (test.lua's environment), which caused modules to break the sandbox when they set _M.* 10 years ago
Kim Alvefur f1ea08ed42 certs/Makefile: Run key generation with a stricter umask (fixes a race condition) 10 years ago
Matthew Wild c10f3e22dd mod_admin_telnet: Backport 06696882d972 from 0.10 (this command greatly helps with debugging HTTP issues) 10 years ago
Matthew Wild 1580f84bd4 MUC: Fix incorrect nesting of status codes when room config changes (fixes #579) 10 years ago
Kim Alvefur 5b2e7edf84 util.uuid: Remove unused import 10 years ago
Matthew Wild 5560527af8 muc.lib: Fix pattern so that it doesn't match hashes containing null bytes, causing dropped stanzas (thanks Jitsi folk!) 10 years ago
Kim Alvefur a0619f9361 cert/openssl.cnf: Split CSR and self-signed extensions into separate sections (see d2d7ad2563f9) 10 years ago
Kim Alvefur b5541c402f Makefile: Use more specific globbing for core directory in Makefile (Thanks Robert Scheck) (fixes #532) 10 years ago
Kim Alvefur 0dfbace556 util.openssl: Separate extension sections into one for self-signed certs and one for requests 10 years ago
Kim Alvefur b7b28af321 mod_http_files: Translate forward slashes to local directory separators 10 years ago
Kim Alvefur 38b909e686 mod_http_files: Strip trailing directory separator regardless of directionality of the slash (fixes #545) 10 years ago
Kim Alvefur 7a845c8961 xep227toprosody: Pass parser to callbacks (needed since addition of stanza size limits) 10 years ago
Matthew Wild 28d21c104a mod_pep: Don't store contacts' subscriptions to a user's nodes when that user is offline 10 years ago
Matthew Wild 9b76a57d58 mod_pep: Document data structures, so I don't have to spend time remembering every time I work on this module 10 years ago
Matthew Wild 08654345bc net.dns: Unconditionally cache records found in answers 11 years ago
Kim Alvefur 37438ca56e ejabberd2prosody: Support password stored as SCRAM hashes 11 years ago
Kim Alvefur 5243ae5fee mod_component: Fire an event on successful component authentication (For Goffi) 11 years ago
Kim Alvefur 48c1abdc57 MUC: Prevent admins from being given affiliatons other than owner 11 years ago
Kim Alvefur 3c7887b6fb Backed out changeset bea3862b6bde in favor of a different approach 11 years ago
Kim Alvefur e5b985792d MUC: Remove half of monkeypatch that was supposed to make admins always be room owners, fixes #458 11 years ago
Kim Alvefur baf8af6d14 s2smanager: Make sure destroyed sessions have a sends2s method 11 years ago
Kim Alvefur bbdd807af4 mod_s2s: Mark stream as opened directly after opening stream, prevents session.close opening it again 11 years ago
Kim Alvefur edfc34c0fb mod_s2s: Don't cache session.sends2s (or do it later), prevents sending data after session was closed 11 years ago
Kim Alvefur 8057766c7f mod_s2s/s2sout: Use the local address assigned to UDP sockets instead of util.net to enumerate possible source addresses 11 years ago
Kim Alvefur 3c56b42545 util.datamanager: Fix traceback from trying to purge when storage is empty or otherwise unaccessible (fixes #496) 11 years ago
Kim Alvefur 250115f542 mod_s2s/s2sout: Remove now unused config option dns_max_depth 11 years ago
Kim Alvefur 08118a3d91 net.dns: Make sure argument to math.randomseed does not overflow a 32 bit *signed* int (blame Lua). Closes #439 11 years ago
Kim Alvefur 646f9e84bc util.datamanager: Fix traceback due to %s in log message 11 years ago
Kim Alvefur f458d7b46d net.dns, mod_s2s: Add chasing of CNAMEs to net.dns and remove it from mod_s2s 11 years ago
Matthew Wild 382cb50f51 Tagging 0.9.8 11 years ago
Matthew Wild c8cfb78d7e mod_s2s: to/from attributes are required on s2s stream headers. Set them to '' when not available. Fixes #468. 11 years ago
Matthew Wild 7a26bcac2e sessionmanager: Return 'not-allowed' error instead of the non-existent 'already-bound' error when client tries to bind a resource twice on the same stream (thanks Flow) fixes issue #484. 11 years ago
Kim Alvefur 54b9ab1ce4 mod_http: Return a static string from module:http_url() when no ports are enabled and log a warning 11 years ago
Kim Alvefur e1988edd2e mod_http: Log a debug message when adding new http apps and warn if no http ports are enabled 11 years ago
Kim Alvefur 833a34dd65 Backout 7726b627c3ea 11 years ago
Matthew Wild 7773242442 utf8_sequences.txt: Oops 11 years ago
Matthew Wild dcdfeb96d7 tests: Add UTF-8 validity tests 11 years ago
Matthew Wild e718a80a5b Merge with Zash 11 years ago
Kim Alvefur 7c8cc6aa13 util.encodings: Expose UTF-8 validation and length checking functions 11 years ago
Kim Alvefur b21d24e5cb util.encodings: Perform validation of UTF-8 strings before passing to libidn (Based on code from the utf8 library in Lua 5.3) 11 years ago
Matthew Wild 9f9a4c8e6c mod_http: Log event name when adding a HTTP app's hooks 11 years ago
Matthew Wild f25f49c34d net.http.server: Log event name when firing a request event 11 years ago
Matthew Wild 0ecfb4e79a configure: Fix for commit cd0088c73daf - update LIBDIR if --prefix is set and --libdir isn't (thanks Medics) 11 years ago