Matthew Wild 246d797f81 mod_http: Allow disabling CORS in the http_cors_override option and by default ... Fixes #1779. Due to an oversight in the logic, if the user set 'enabled' to false in an override, it would disable the item's requested CORS settings, but still apply Prosody's default CORS policy. This change ensures that 'enabled = false' will now disable CORS entirely for the requested item. Due to the new structure of the code, it was necessary to have a flag to say whether CORS is to be applied at all. Rather than hard-coding 'true' here, I chose to add a new option: 'http_default_cors_enabled'. This is a boolean that allows the operator to disable Prosody's default CORS policy entirely (the one that is used when a module or config does not override it). This makes it easier to disable CORS and then selectively enable it only on services you want it on.		2022-10-31 14:32:02 +00:00
..
adhoc	Spelling: Fix various spelling mistakes (thanks timeless)	2022-03-07 00:13:56 +01:00
mod_mam	mod_mam: Fix a comment	2021-12-11 18:01:04 +01:00
mod_pubsub	mod_pubsub: Don't attempt to use server actor as publisher (fixes #1723)	2022-03-21 12:36:20 +00:00
muc	MUC: Allow kicking users with the same affiliation as the kicker (fixes #1724)	2022-03-23 13:38:55 +00:00
mod_admin_adhoc.lua	mod_admin_adhoc: Move number coercion into util.dataforms	2021-10-25 21:43:23 +02:00
mod_admin_shell.lua	mod_admin_shell: Ensure available connection for column 'secure'	2022-10-23 16:22:12 +02:00
mod_admin_socket.lua	mod_admin_socket: Improve error reporting when socket can't be created (fixes #1719)	2022-03-19 11:38:21 +00:00
mod_admin_telnet.lua	mod_admin_telnet: Handle unavailable cipher info (fixes #1510)	2020-03-22 17:35:26 +01:00
mod_announce.lua
mod_auth_anonymous.lua	mod_auth_anonymous: Add config option to allow/disallow storage writes	2020-10-02 16:44:30 +01:00
mod_auth_insecure.lua	mod_auth_internal_*: Apply saslprep to passwords	2020-05-23 14:17:04 +02:00
mod_auth_internal_hashed.lua	util.hex: Deprecate to/from in favour of encode/decode, for consistency!	2022-03-04 15:22:45 +00:00
mod_auth_internal_plain.lua	mod_auth_internal_{plain,hashed}: Use constant-time string comparison for secrets	2021-05-10 16:50:24 +01:00
mod_auth_ldap.lua	mod_auth_ldap: Import from prosody-modules rev f52452911187	2021-10-05 17:25:01 +02:00
mod_authz_internal.lua	usermanager, mod_authz_internal: Add methods to fetch users/JIDs of given role	2021-08-26 16:35:43 +01:00
mod_blocklist.lua
mod_bookmarks.lua	mod_bookmarks: Reduce error about not having bookmarks to debug (thanks tom)	2022-07-26 23:44:33 +02:00
mod_bosh.lua	mod_http (and dependent modules): Make CORS opt-in by default (fixes #1731)	2022-03-28 14:53:24 +01:00
mod_c2s.lua	mod_c2s,mod_s2s: Fix error on shutdown (Thanks Martin)	2022-02-22 14:17:27 +01:00
mod_carbons.lua	mod_carbons: Allow plugging into decision of whether to carbon-copy	2022-02-21 11:24:58 +01:00
mod_component.lua	mod_c2s, mod_s2s, mod_component, mod_bosh, mod_websockets: Set default stanza size limits	2021-05-07 17:03:49 +01:00
mod_cron.lua	mod_cron: Fix recording last task run time #1751	2022-05-05 14:10:59 +02:00
mod_csi.lua
mod_csi_simple.lua	plugins: Update for namespace bump in XEP-0353 v0.4.0	2022-01-11 17:51:26 +01:00
mod_debug_sql.lua
mod_dialback.lua	mod_dialback: Remove d-w-d feature	2021-05-12 17:22:02 +02:00
mod_disco.lua	spelling: non-existing mistakes (thanks timeless)	2022-03-07 00:35:29 +01:00
mod_external_services.lua	mod_external_services: Move error message to correct place (fix #1725)	2022-03-23 15:29:01 +01:00
mod_groups.lua
mod_http.lua	mod_http: Allow disabling CORS in the http_cors_override option and by default	2022-10-31 14:32:02 +00:00
mod_http_errors.lua	mod_http_errors: Make it easier to override 'http-message' handler	2021-09-24 18:39:28 +02:00
mod_http_file_share.lua	mod_http (and dependent modules): Make CORS opt-in by default (fixes #1731)	2022-03-28 14:53:24 +01:00
mod_http_files.lua	mod_http_files: Log warning about legacy modules using mod_http_files	2022-07-17 17:05:28 +02:00
mod_http_openmetrics.lua	mod_http_openmetrics: Serve HTTP from global context	2021-11-25 16:57:01 +01:00
mod_invites.lua	mod_invites: Comment on module loading for HTTP invite URLs	2022-01-05 22:37:42 +01:00
mod_invites_adhoc.lua	mod_invites_adhoc: Fall back to generic allow_user_invites for role-less users	2022-05-06 17:08:49 +01:00
mod_invites_register.lua	mod_invites_register: Push invitee contact entry to inviter	2022-03-15 21:59:51 +01:00
mod_iq.lua
mod_lastactivity.lua	mod_lastactivity: Encode seconds as decimal, not float	2020-04-22 23:36:25 +02:00
mod_legacyauth.lua	mod_legacyauth: Default to require encryption	2022-02-10 15:48:34 +00:00
mod_limits.lua	mod_limits: Use default limits if none configured	2021-05-11 14:22:59 +01:00
mod_message.lua	mod_message: Fire event for groupchat messages sent to bare JID	2021-09-22 13:31:13 +01:00
mod_mimicking.lua	mod_mimicking: Correctly hook the *global* user-deleted event	2021-10-12 17:55:53 +02:00
mod_motd.lua
mod_muc_mam.lua	mod_muc_mam: Switch to mod_cron for message expiry	2021-11-22 14:49:05 +01:00
mod_muc_unique.lua
mod_net_multiplex.lua	mod_net_multiplex: Set read size/mode to that of the target listener	2020-08-02 00:24:54 +02:00
mod_offline.lua
mod_pep.lua	mod_pep: Fix typo in comment [codespell]	2022-02-04 16:40:23 +01:00
mod_pep_plus.lua
mod_pep_simple.lua
mod_ping.lua	mod_ping: Fix double response to internal ping	2020-02-21 23:30:47 +01:00
mod_posix.lua	mod_posix: Run signal handlers in the startup thread	2021-10-06 14:50:47 +02:00
mod_presence.lua	mod_presence: Send unavailable presence in current thread run	2020-05-09 00:28:10 +02:00
mod_private.lua
mod_proxy65.lua	mod_proxy65: Restrict access to local c2s connections by default	2021-05-12 13:59:49 +01:00
mod_register.lua	mod_register: Add a dependency on mod_watchregistrations	2020-06-29 21:03:13 +02:00
mod_register_ibr.lua	various: Require encryption by default for real	2021-12-25 16:23:40 +01:00
mod_register_limits.lua	mod_register_limits: Reword some options	2021-09-19 15:52:07 +02:00
mod_roster.lua	mod_roster: Improve readability of bare-JID check	2021-12-22 18:07:44 +01:00
mod_s2s.lua	mod_s2s: Fix firing buffer drain events	2022-08-26 18:53:00 +02:00
mod_s2s_auth_certs.lua	mod_s2s_auth_certs: Collect stats on validation results (for #975)	2021-10-05 16:30:41 +02:00
mod_s2s_bidi.lua	various: Require encryption by default for real	2021-12-25 16:23:40 +01:00
mod_saslauth.lua	usermanager, mod_saslauth: Default to internal_hashed if no auth module specified	2022-02-10 19:54:14 +00:00
mod_scansion_record.lua	util.id: Adjust entropy levels, with rationales	2021-12-02 01:14:55 +01:00
mod_server_contact_info.lua	mod_server_contact_info: Generate properly escaped URIs from 'admins'	2020-09-11 18:34:36 +02:00
mod_smacks.lua	mod_smacks: Fix #1761 by setting a flag earlier	2022-06-12 01:50:33 +02:00
mod_stanza_debug.lua
mod_storage_internal.lua	mod_storage_internal: Stop storing XEP-0091 timestamp	2021-09-04 14:39:31 +02:00
mod_storage_memory.lua	mod_storage_memory: Support query for set of IDs	2021-01-12 18:06:33 +01:00
mod_storage_none.lua
mod_storage_sql.lua	mod_storage_sql: Fix summary API with Postgres (fixes #1766)	2022-07-22 19:09:50 +02:00
mod_storage_xep0227.lua	mod_storage_xep0227: Fix mapping of nodes without explicit configuration	2022-04-08 23:35:31 +02:00
mod_time.lua
mod_tls.lua	various: Require encryption by default for real	2021-12-25 16:23:40 +01:00
mod_tokenauth.lua	mod_tokenauth: Track creation time of tokens	2020-02-28 21:55:40 +00:00
mod_tombstones.lua	mod_tombstones: Add caching to improve performance on busy servers (fixes #1728)	2022-03-28 11:08:18 +01:00
mod_turn_external.lua	mod_turn_external: Update status and friendlier handling of missing secret option (fixes #1727)	2022-03-28 10:47:21 +01:00
mod_unknown.lua
mod_uptime.lua	mod_uptime: Encode uptime as decimal, fix #1536 (thanks Martin)	2020-04-22 21:46:56 +02:00
mod_user_account_management.lua
mod_vcard.lua
mod_vcard4.lua	mod_vcard4: Report correct error condition (fixes #1521)	2020-04-03 22:35:47 +02:00
mod_vcard_legacy.lua	mod_vcard_legacy: Also respect avatar:metadata access restrictions	2021-11-25 18:13:43 +01:00
mod_version.lua
mod_watchregistrations.lua
mod_websocket.lua	mod_http (and dependent modules): Make CORS opt-in by default (fixes #1731)	2022-03-28 14:53:24 +01:00
mod_welcome.lua
mod_windows.lua