Matthew Wild
|
76de073eea
|
Backout 88d54bec26b7 prior to release, as it certainly requires more testing
|
2016-01-08 13:01:27 +00:00 |
|
Matthew Wild
|
cb1eeb2386
|
mod_http_files: Santize the path relative to our base URL before translating it to a filesystem path, fixes a relative path traversal vulnerability
|
2016-01-07 15:37:47 +00:00 |
|
Kim Alvefur
|
8a8f379272
|
util.uuid: Use /dev/urandom
|
2016-01-06 02:46:47 +01:00 |
|
Kim Alvefur
|
58885565fe
|
net.dns: Allow a zone id in resolv.conf (eg like %eth0)
|
2016-01-04 15:46:06 +01:00 |
|
Kim Alvefur
|
e03302f412
|
util.ip: Support zone id syntax in IPv6 addresses
|
2016-01-04 17:47:40 +01:00 |
|
Florian Zeitz
|
4f709973f8
|
net.dns: Support IPv6 addresses in resolv.conf [Backported from 0.10]
|
2013-06-18 23:02:20 +02:00 |
|
Matthew Wild
|
2b64027204
|
util.ip: Fix protocol detection of IPv6 addresses beginning with : [Backported from 0.10]
|
2013-05-18 21:41:17 +01:00 |
|
Matthew Wild
|
2ab42c8dbf
|
util.ip: Automatically determine protocol of IP address if none specified. Return error if invalid. [Backported from 0.10]
|
2013-05-17 14:52:52 +01:00 |
|
Matthew Wild
|
8178f7bd88
|
tests/test.lua: Fix fake module() function to prevent _M from being _G (test.lua's environment), which caused modules to break the sandbox when they set _M.*
|
2016-01-06 00:24:06 +00:00 |
|
Kim Alvefur
|
22f1422f51
|
certs/Makefile: Run key generation with a stricter umask (fixes a race condition)
|
2015-12-23 12:07:03 +01:00 |
|
Matthew Wild
|
18b6111e74
|
mod_admin_telnet: Backport 06696882d972 from 0.10 (this command greatly helps with debugging HTTP issues)
|
2015-12-22 14:15:09 +00:00 |
|
Matthew Wild
|
54e77b9859
|
MUC: Fix incorrect nesting of status codes when room config changes (fixes #579)
|
2015-12-16 16:41:48 +00:00 |
|
Kim Alvefur
|
be4dab31a7
|
util.uuid: Remove unused import
|
2015-12-08 23:20:37 +01:00 |
|
Matthew Wild
|
1bb13d90dd
|
muc.lib: Fix pattern so that it doesn't match hashes containing null bytes, causing dropped stanzas (thanks Jitsi folk!)
|
2015-11-17 17:01:25 +00:00 |
|
Kim Alvefur
|
cbb1f06088
|
cert/openssl.cnf: Split CSR and self-signed extensions into separate sections (see d2d7ad2563f9)
|
2015-11-09 14:16:39 +01:00 |
|
Kim Alvefur
|
b3a384b2e9
|
Makefile: Use more specific globbing for core directory in Makefile (Thanks Robert Scheck) (fixes #532)
|
2015-10-14 20:55:26 +02:00 |
|
Kim Alvefur
|
99cee90a44
|
util.openssl: Separate extension sections into one for self-signed certs and one for requests
|
2015-10-11 18:49:14 +02:00 |
|
Kim Alvefur
|
60ca835146
|
mod_http_files: Translate forward slashes to local directory separators
|
2015-09-26 19:35:56 +02:00 |
|
Kim Alvefur
|
a29f12e309
|
mod_http_files: Strip trailing directory separator regardless of directionality of the slash (fixes #545)
|
2015-09-26 19:34:58 +02:00 |
|
Kim Alvefur
|
a10c1e367f
|
xep227toprosody: Pass parser to callbacks (needed since addition of stanza size limits)
|
2015-09-18 16:14:43 +02:00 |
|
Matthew Wild
|
1ec2105627
|
mod_pep: Don't store contacts' subscriptions to a user's nodes when that user is offline
|
2015-09-25 16:48:25 +01:00 |
|
Matthew Wild
|
f9dac3e9d2
|
mod_pep: Document data structures, so I don't have to spend time remembering every time I work on this module
|
2015-09-04 11:26:51 +01:00 |
|
Matthew Wild
|
df0b6a6e97
|
net.dns: Unconditionally cache records found in answers
|
2015-05-25 23:16:11 +01:00 |
|
Kim Alvefur
|
6ec3c0bee0
|
ejabberd2prosody: Support password stored as SCRAM hashes
|
2015-08-20 09:14:15 +02:00 |
|
Kim Alvefur
|
e92c2042d1
|
mod_component: Fire an event on successful component authentication (For Goffi)
|
2015-08-10 22:13:02 +02:00 |
|
Kim Alvefur
|
b351da9b5f
|
MUC: Prevent admins from being given affiliatons other than owner
|
2015-06-25 17:58:24 +02:00 |
|
Kim Alvefur
|
b06954c655
|
Backed out changeset bea3862b6bde in favor of a different approach
|
2015-06-25 17:54:19 +02:00 |
|
Kim Alvefur
|
455a5c8540
|
MUC: Remove half of monkeypatch that was supposed to make admins always be room owners, fixes #458
|
2015-06-16 15:13:47 +02:00 |
|
Kim Alvefur
|
a1856627f5
|
s2smanager: Make sure destroyed sessions have a sends2s method
|
2015-05-14 00:22:13 +02:00 |
|
Kim Alvefur
|
ecb35aa0e9
|
mod_s2s: Mark stream as opened directly after opening stream, prevents session.close opening it again
|
2015-05-13 21:56:22 +02:00 |
|
Kim Alvefur
|
5298b58b13
|
mod_s2s: Don't cache session.sends2s (or do it later), prevents sending data after session was closed
|
2015-05-13 21:55:08 +02:00 |
|
Kim Alvefur
|
7643d6dc8f
|
mod_s2s/s2sout: Use the local address assigned to UDP sockets instead of util.net to enumerate possible source addresses
|
2015-05-13 21:47:39 +02:00 |
|
Kim Alvefur
|
4beb76ca0d
|
util.datamanager: Fix traceback from trying to purge when storage is empty or otherwise unaccessible (fixes #496)
|
2015-05-13 21:44:13 +02:00 |
|
Kim Alvefur
|
9906fca5ac
|
mod_s2s/s2sout: Remove now unused config option dns_max_depth
|
2015-05-13 21:43:05 +02:00 |
|
Kim Alvefur
|
38a580bfeb
|
net.dns: Make sure argument to math.randomseed does not overflow a 32 bit *signed* int (blame Lua). Closes #439
|
2015-04-26 19:50:24 +02:00 |
|
Kim Alvefur
|
2064173f3b
|
util.datamanager: Fix traceback due to %s in log message
|
2015-04-03 12:10:30 +02:00 |
|
Kim Alvefur
|
7dff400ed5
|
net.dns, mod_s2s: Add chasing of CNAMEs to net.dns and remove it from mod_s2s
|
2015-04-24 14:14:01 +02:00 |
|
Matthew Wild
|
51bef3673c
|
Tagging 0.9.8
|
2015-03-24 19:12:04 +00:00 |
|
Matthew Wild
|
bfbcd081de
|
mod_s2s: to/from attributes are required on s2s stream headers. Set them to '' when not available. Fixes #468.
|
2015-03-24 16:03:37 +00:00 |
|
Matthew Wild
|
63789fc738
|
sessionmanager: Return 'not-allowed' error instead of the non-existent 'already-bound' error when client tries to bind a resource twice on the same stream (thanks Flow) fixes issue #484.
|
2015-03-24 15:57:46 +00:00 |
|
Kim Alvefur
|
5efd433b8a
|
mod_http: Return a static string from module:http_url() when no ports are enabled and log a warning
|
2015-03-23 18:45:02 +01:00 |
|
Kim Alvefur
|
3550cf7e8e
|
mod_http: Log a debug message when adding new http apps and warn if no http ports are enabled
|
2015-03-23 18:44:12 +01:00 |
|
Kim Alvefur
|
272f0cf5e5
|
Backout 7726b627c3ea
|
2015-03-23 18:40:12 +01:00 |
|
Matthew Wild
|
29f9bdc56e
|
utf8_sequences.txt: Oops
|
2015-03-23 17:23:11 +00:00 |
|
Matthew Wild
|
fa4ef8d7ff
|
tests: Add UTF-8 validity tests
|
2015-03-23 17:16:54 +00:00 |
|
Matthew Wild
|
9168d7b089
|
Merge with Zash
|
2015-03-23 14:05:55 +00:00 |
|
Kim Alvefur
|
b9f798f83a
|
util.encodings: Expose UTF-8 validation and length checking functions
|
2015-03-23 14:27:30 +01:00 |
|
Kim Alvefur
|
7bf2c14e9f
|
util.encodings: Perform validation of UTF-8 strings before passing to libidn (Based on code from the utf8 library in Lua 5.3)
|
2015-03-23 14:26:34 +01:00 |
|
Matthew Wild
|
45016aef35
|
mod_http: Log event name when adding a HTTP app's hooks
|
2015-03-14 22:39:23 +00:00 |
|
Matthew Wild
|
5c1d94de1b
|
net.http.server: Log event name when firing a request event
|
2015-03-14 22:39:03 +00:00 |
|