IMPORTANT: due to a drive failure, as of 13-Mar-2021, the Mercurial repository had to be re-mirrored, which changed every commit SHA. The old SHAs and trees are backed up in the vault branches. Please migrate to the new branches as soon as you can.
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Matthew Wild
ea99104f0a
mod_http_file_share: Add media-src 'self' to Content-Security-Policy header ...
This allows certain media files to be loaded when navigated to directly in a
web browser.
Note that in some browsers (Chrome), the media gets transformed
internally into a HTML page with some basic styles, but these are blocked due
to our default-src policy of 'none' Although this could be unblocked with
style-src unsafe-inline, it is not our plan to fix this, because this would
have negative security implications.
The reason for our CSP is to prevent the file share service from being used to
host malicious HTML/CSS/JS. Yes, CSS can be malicious.
Our file share service is for uploading and downloading files, it is not a
substitute for website/content hosting.
8 months ago
..
adhoc
…
mod_debug_stanzas
…
mod_mam
doap: Add XEP-0333
9 months ago
mod_pubsub
mod_pubsub: Remove duplicate create_node command
12 months ago
muc
doap: Add XEP-0333
9 months ago
mod_account_activity.lua
mod_account_activity: Fix error when no duration specified in shell command
11 months ago
mod_admin_adhoc.lua
Merge 0.12->trunk
1 year ago
mod_admin_shell.lua
mod_admin_shell: Add role:list() and role:show() commands
9 months ago
mod_admin_socket.lua
mod_admin_socket: Fire event on admin client disconnect
12 months ago
mod_admin_telnet.lua
…
mod_announce.lua
mod_announce: Suppress luacheck warnings
2 years ago
mod_auth_anonymous.lua
…
mod_auth_insecure.lua
…
mod_auth_internal_hashed.lua
mod_auth_internal_{hashed,plain}: Respect flag for disabled accounts in test_password()
1 year ago
mod_auth_internal_plain.lua
mod_auth_internal_{hashed,plain}: Respect flag for disabled accounts in test_password()
1 year ago
mod_auth_ldap.lua
…
mod_authz_internal.lua
mod_authz_internal: Improve error message when invalid role specified
9 months ago
mod_blocklist.lua
Merge 0.12->trunk
2 years ago
mod_bookmarks.lua
mod_bookmarks: Clarify log messages on failure to sync to modern PEP bookmarks
1 year ago
mod_bosh.lua
mod_bosh,mod_websocket: Don't load mod_http_altconnect in global context
10 months ago
mod_c2s.lua
mod_c2s: Code formatting change
10 months ago
mod_carbons.lua
…
mod_cloud_notify.lua
mod_cloud_notify, mod_cron, mod_invites: Add 'prosody.' prefix to requires
11 months ago
mod_component.lua
mod_component: Don't return error reply for errors, fixes #1897
10 months ago
mod_cron.lua
mod_cloud_notify, mod_cron, mod_invites: Add 'prosody.' prefix to requires
11 months ago
mod_csi.lua
mod_csi: Update correct variables when counting states
1 year ago
mod_csi_simple.lua
…
mod_debug_reset.lua
…
mod_debug_sql.lua
…
mod_dialback.lua
…
mod_disco.lua
Merge 0.12->trunk
2 years ago
mod_external_services.lua
mod_external_services: Also use TURN REST credential algo for 'turns' (thanks moreroid)
10 months ago
mod_flags.lua
mod_flags: New module to view and manage flags on user accounts via shell/API
12 months ago
mod_groups.lua
…
mod_http.lua
mod_http: Log problems parsing IP addresses in X-Forwarded-For (Thanks Boris)
9 months ago
mod_http_altconnect.lua
mod_http_altconnect: Imported from prosody-modules 6d5a19bdd718 w/changes
10 months ago
mod_http_errors.lua
mod_http_errors: Simplify CSS via built-in dark mode
2 years ago
mod_http_file_share.lua
mod_http_file_share: Add media-src 'self' to Content-Security-Policy header
8 months ago
mod_http_files.lua
…
mod_http_openmetrics.lua
…
mod_invites.lua
mod_invites: Consider password reset a distinct type wrt invite page
9 months ago
mod_invites_adhoc.lua
mod_invites_adhoc: Add password reset command
1 year ago
mod_invites_register.lua
mod_invites_register: Don't restrict username for roster invites (thanks lissine)
9 months ago
mod_iq.lua
…
mod_lastactivity.lua
…
mod_legacyauth.lua
…
mod_limits.lua
…
mod_message.lua
…
mod_mimicking.lua
…
mod_motd.lua
…
mod_muc_mam.lua
…
mod_muc_unique.lua
…
mod_net_multiplex.lua
…
mod_offline.lua
…
mod_pep.lua
mod_pep: Support for node/item management commands
12 months ago
mod_pep_plus.lua
…
mod_pep_simple.lua
…
mod_ping.lua
…
mod_posix.lua
mod_posix: Move everything to util.startup
2 years ago
mod_presence.lua
mod_presence: Fix traceback if origin gets disconnected during processing
11 months ago
mod_private.lua
…
mod_proxy65.lua
…
mod_register.lua
…
mod_register_ibr.lua
…
mod_register_limits.lua
…
mod_roster.lua
mod_roster: Fix shell commands when a component is involved ( fixes #1908 )
9 months ago
mod_s2s.lua
mod_s2s: Handle single message from chain validation
9 months ago
mod_s2s_auth_certs.lua
mod_s2s_auth_certs: Handle potential string error
2 years ago
mod_s2s_auth_dane_in.lua
mod_s2s_auth_dane_in: Try single TLSA lookup per draft-ietf-dance-client-auth
2 years ago
mod_s2s_bidi.lua
mod_s2s_bidi: Include empty list of labels in metrics
1 year ago
mod_saslauth.lua
mod_saslauth: Use fully qualified import here too
1 year ago
mod_scansion_record.lua
…
mod_server_contact_info.lua
mod_server_contact_info: Sort form fields to please scansion
2 years ago
mod_server_info.lua
mod_server_info: New module to manage the serverinfo disco extension form
2 years ago
mod_smacks.lua
mod_smacks: Run session destruction code in session's async context
1 year ago
mod_stanza_debug.lua
…
mod_storage_internal.lua
mod_storage_internal: Fix queries with only start returning extra items
9 months ago
mod_storage_memory.lua
…
mod_storage_none.lua
…
mod_storage_sql.lua
mod_storage_sql: Also retrieve all SQLite3 indices
9 months ago
mod_storage_xep0227.lua
…
mod_time.lua
…
mod_tls.lua
mod_tls: Collect full certificate chain validation information
9 months ago
mod_tokenauth.lua
mod_tokenauth: Fix expiry lasting one second too much
11 months ago
mod_tombstones.lua
…
mod_turn_external.lua
…
mod_unknown.lua
…
mod_uptime.lua
…
mod_user_account_management.lua
mod_user_account_management: Clear pending deletion if account re-enabled
2 years ago
mod_vcard.lua
mod_vcard: Switch store name for MUC hosts (thanks lissine)
11 months ago
mod_vcard4.lua
…
mod_vcard_legacy.lua
…
mod_version.lua
mod_version: Fix uname result style (thanks riau)
2 years ago
mod_watchregistrations.lua
…
mod_websocket.lua
mod_websocket: Merge session close handling changes from mod_c2s (bug fixes)
10 months ago
mod_welcome.lua
…
mod_windows.lua
…
Matthew Wild