Matthew Wild
|
05b70955fa
|
Backout 88d54bec26b7 prior to release, as it certainly requires more testing
|
2016-01-08 13:01:27 +00:00 |
|
Matthew Wild
|
78d296cfe9
|
mod_http_files: Santize the path relative to our base URL before translating it to a filesystem path, fixes a relative path traversal vulnerability
|
2016-01-07 15:37:47 +00:00 |
|
Kim Alvefur
|
25e96d1935
|
util.uuid: Use /dev/urandom
|
2016-01-06 02:46:47 +01:00 |
|
Kim Alvefur
|
26afa1e585
|
net.dns: Allow a zone id in resolv.conf (eg like %eth0)
|
2016-01-04 15:46:06 +01:00 |
|
Kim Alvefur
|
5e3000f44c
|
util.ip: Support zone id syntax in IPv6 addresses
|
2016-01-04 17:47:40 +01:00 |
|
Florian Zeitz
|
0f126b9952
|
net.dns: Support IPv6 addresses in resolv.conf [Backported from 0.10]
|
2013-06-18 23:02:20 +02:00 |
|
Matthew Wild
|
63b5f55537
|
util.ip: Fix protocol detection of IPv6 addresses beginning with : [Backported from 0.10]
|
2013-05-18 21:41:17 +01:00 |
|
Matthew Wild
|
88d3ddd8e0
|
util.ip: Automatically determine protocol of IP address if none specified. Return error if invalid. [Backported from 0.10]
|
2013-05-17 14:52:52 +01:00 |
|
Matthew Wild
|
0c0039271c
|
tests/test.lua: Fix fake module() function to prevent _M from being _G (test.lua's environment), which caused modules to break the sandbox when they set _M.*
|
2016-01-06 00:24:06 +00:00 |
|
Kim Alvefur
|
f6cd82f1b5
|
certs/Makefile: Run key generation with a stricter umask (fixes a race condition)
|
2015-12-23 12:07:03 +01:00 |
|
Matthew Wild
|
03af283f59
|
mod_admin_telnet: Backport 06696882d972 from 0.10 (this command greatly helps with debugging HTTP issues)
|
2015-12-22 14:15:09 +00:00 |
|
Matthew Wild
|
6ca624cf7f
|
MUC: Fix incorrect nesting of status codes when room config changes (fixes #579)
|
2015-12-16 16:41:48 +00:00 |
|
Kim Alvefur
|
3b12de1122
|
util.uuid: Remove unused import
|
2015-12-08 23:20:37 +01:00 |
|
Matthew Wild
|
6c57db9f1c
|
muc.lib: Fix pattern so that it doesn't match hashes containing null bytes, causing dropped stanzas (thanks Jitsi folk!)
|
2015-11-17 17:01:25 +00:00 |
|
Kim Alvefur
|
804359f606
|
cert/openssl.cnf: Split CSR and self-signed extensions into separate sections (see d2d7ad2563f9)
|
2015-11-09 14:16:39 +01:00 |
|
Kim Alvefur
|
7b773fd7d8
|
Makefile: Use more specific globbing for core directory in Makefile (Thanks Robert Scheck) (fixes #532)
|
2015-10-14 20:55:26 +02:00 |
|
Kim Alvefur
|
b46b9dc13f
|
util.openssl: Separate extension sections into one for self-signed certs and one for requests
|
2015-10-11 18:49:14 +02:00 |
|
Kim Alvefur
|
8caf3cf412
|
mod_http_files: Translate forward slashes to local directory separators
|
2015-09-26 19:35:56 +02:00 |
|
Kim Alvefur
|
c6d0454e0f
|
mod_http_files: Strip trailing directory separator regardless of directionality of the slash (fixes #545)
|
2015-09-26 19:34:58 +02:00 |
|
Kim Alvefur
|
971ea4fc06
|
xep227toprosody: Pass parser to callbacks (needed since addition of stanza size limits)
|
2015-09-18 16:14:43 +02:00 |
|
Matthew Wild
|
853f18a9cb
|
mod_pep: Don't store contacts' subscriptions to a user's nodes when that user is offline
|
2015-09-25 16:48:25 +01:00 |
|
Matthew Wild
|
f2f24a13e0
|
mod_pep: Document data structures, so I don't have to spend time remembering every time I work on this module
|
2015-09-04 11:26:51 +01:00 |
|
Matthew Wild
|
3d5ee7cea9
|
net.dns: Unconditionally cache records found in answers
|
2015-05-25 23:16:11 +01:00 |
|
Kim Alvefur
|
6ddc9bd28b
|
ejabberd2prosody: Support password stored as SCRAM hashes
|
2015-08-20 09:14:15 +02:00 |
|
Kim Alvefur
|
051811cd38
|
mod_component: Fire an event on successful component authentication (For Goffi)
|
2015-08-10 22:13:02 +02:00 |
|
Kim Alvefur
|
d3ff677ce8
|
MUC: Prevent admins from being given affiliatons other than owner
|
2015-06-25 17:58:24 +02:00 |
|
Kim Alvefur
|
ff6a3b3ade
|
Backed out changeset bea3862b6bde in favor of a different approach
|
2015-06-25 17:54:19 +02:00 |
|
Kim Alvefur
|
e1fae3ac4a
|
MUC: Remove half of monkeypatch that was supposed to make admins always be room owners, fixes #458
|
2015-06-16 15:13:47 +02:00 |
|
Kim Alvefur
|
fd5adf33d0
|
s2smanager: Make sure destroyed sessions have a sends2s method
|
2015-05-14 00:22:13 +02:00 |
|
Kim Alvefur
|
ddc9a47072
|
mod_s2s: Mark stream as opened directly after opening stream, prevents session.close opening it again
|
2015-05-13 21:56:22 +02:00 |
|
Kim Alvefur
|
cb22f32f7f
|
mod_s2s: Don't cache session.sends2s (or do it later), prevents sending data after session was closed
|
2015-05-13 21:55:08 +02:00 |
|
Kim Alvefur
|
3391b86719
|
mod_s2s/s2sout: Use the local address assigned to UDP sockets instead of util.net to enumerate possible source addresses
|
2015-05-13 21:47:39 +02:00 |
|
Kim Alvefur
|
8389ecb795
|
util.datamanager: Fix traceback from trying to purge when storage is empty or otherwise unaccessible (fixes #496)
|
2015-05-13 21:44:13 +02:00 |
|
Kim Alvefur
|
c22dec3f1c
|
mod_s2s/s2sout: Remove now unused config option dns_max_depth
|
2015-05-13 21:43:05 +02:00 |
|
Kim Alvefur
|
8b049732c7
|
net.dns: Make sure argument to math.randomseed does not overflow a 32 bit *signed* int (blame Lua). Closes #439
|
2015-04-26 19:50:24 +02:00 |
|
Kim Alvefur
|
265eb86837
|
util.datamanager: Fix traceback due to %s in log message
|
2015-04-03 12:10:30 +02:00 |
|
Kim Alvefur
|
1626e0537b
|
net.dns, mod_s2s: Add chasing of CNAMEs to net.dns and remove it from mod_s2s
|
2015-04-24 14:14:01 +02:00 |
|
Matthew Wild
|
707bec51fe
|
Tagging 0.9.8
|
2015-03-24 19:12:04 +00:00 |
|
Matthew Wild
|
85221efee2
|
mod_s2s: to/from attributes are required on s2s stream headers. Set them to '' when not available. Fixes #468.
|
2015-03-24 16:03:37 +00:00 |
|
Matthew Wild
|
0f2c310125
|
sessionmanager: Return 'not-allowed' error instead of the non-existent 'already-bound' error when client tries to bind a resource twice on the same stream (thanks Flow) fixes issue #484.
|
2015-03-24 15:57:46 +00:00 |
|
Kim Alvefur
|
e9801c774d
|
mod_http: Return a static string from module:http_url() when no ports are enabled and log a warning
|
2015-03-23 18:45:02 +01:00 |
|
Kim Alvefur
|
72f36b4768
|
mod_http: Log a debug message when adding new http apps and warn if no http ports are enabled
|
2015-03-23 18:44:12 +01:00 |
|
Kim Alvefur
|
a676aa5e45
|
Backout 7726b627c3ea
|
2015-03-23 18:40:12 +01:00 |
|
Matthew Wild
|
ebea1abf08
|
utf8_sequences.txt: Oops
|
2015-03-23 17:23:11 +00:00 |
|
Matthew Wild
|
f70ce48360
|
tests: Add UTF-8 validity tests
|
2015-03-23 17:16:54 +00:00 |
|
Matthew Wild
|
dd0acd25ec
|
Merge with Zash
|
2015-03-23 14:05:55 +00:00 |
|
Kim Alvefur
|
f36dbc165c
|
util.encodings: Expose UTF-8 validation and length checking functions
|
2015-03-23 14:27:30 +01:00 |
|
Kim Alvefur
|
db215b810d
|
util.encodings: Perform validation of UTF-8 strings before passing to libidn (Based on code from the utf8 library in Lua 5.3)
|
2015-03-23 14:26:34 +01:00 |
|
Matthew Wild
|
553a587fe3
|
mod_http: Log event name when adding a HTTP app's hooks
|
2015-03-14 22:39:23 +00:00 |
|
Matthew Wild
|
74895d955a
|
net.http.server: Log event name when firing a request event
|
2015-03-14 22:39:03 +00:00 |
|