ed
2437a4e864
the CVE-2023-37474 fix was overly strict; loosen
2023-07-23 11:31:11 +00:00
ed
007d948cb9
fix GHSA-f54q-j679-p9hh: reflected-XSS in cookie-setters;
...
it was possible to set cookie values which contained newlines,
thus terminating the http header and bleeding into the body.
We now disallow control-characters in queries,
but still allow them in paths, as copyparty supports
filenames containing newlines and other mojibake.
The changes in `set_k304` are not necessary in fixing the vulnerability,
but makes the behavior more correct.
2023-07-23 10:55:08 +00:00
ed
2b2d8e4e02
tls / gencert fixes
2023-06-10 23:34:34 +00:00
ed
c355f9bd91
catch common environment issues ( #32 ):
...
* error-message which explains how to run on py2 / older py3
when trying to run from source
* check compatibility between jinja2 and cpython on startup
* verify that webdeps are present on startup
* verify that webdeps are present when building sfx
* make-sfx.sh grabs the strip-hints dependency
2023-06-04 13:13:36 +00:00
ed
a1a8a8c7b5
configurable tls-certificate location
2023-04-23 20:56:55 +00:00
ed
6acf436573
u2idx pool instead of per-socket;
...
prevents running out of FDs thanks to thousands of sqlite3 sessions
and neatly sidesteps what could possibly be a race in python's
sqlite3 bindings where it sometimes forgets to close the fd
2023-04-20 20:36:13 +00:00
ed
1a46738649
raise edgecases (broken envs on windows)
2023-02-19 22:13:33 +00:00
ed
8adfcf5950
win10-based copyparty64.exe
2023-02-14 21:50:14 +00:00
ed
741d781c18
add cors controls + improve preflight + pw header
2023-01-28 00:59:04 +00:00
ed
5bb9f56247
linux 6.1 fixed the 6.0 bugs; remove workarounds
2023-01-16 20:44:57 +00:00
ed
2cb1f50370
fix dualstack on lo
2023-01-11 16:10:07 +00:00
ed
db194ab519
support location-based rproxy
2022-12-10 23:43:31 +00:00
ed
f1477a1c14
block other copyparties from sniping tcp ports
2022-12-07 21:50:52 +00:00
ed
067cc23346
docs + cleanup
2022-12-03 18:58:56 +00:00
ed
99efc290df
fix mdns on windows
2022-12-03 13:31:00 +00:00
ed
2fbdc0a85e
misc fixes / cleanup
2022-12-02 23:42:46 +00:00
ed
7c76d08958
drop one of the slowloris detectors
2022-12-02 17:53:23 +00:00
ed
f0e78a6826
add landing page with mounting instructions
2022-11-26 19:47:27 +00:00
ed
5cd9d11329
add ssdp responder
2022-11-22 21:40:12 +00:00
ed
4ad4657774
mdns: support running on macos
2022-11-17 20:18:24 +00:00
ed
b3eb117e87
add mdns zeroconf announcer
2022-11-13 20:05:16 +00:00
ed
c72753c5da
add native ipv6 support
2022-11-06 16:48:05 +00:00
ed
89d1f52235
cursory slowloris / buggy-webdav-client detector
2022-11-01 22:18:20 +00:00
ed
3312c6f5bd
autoclose connection-flooding clients
2022-10-31 22:42:47 +00:00
ed
edad3246e0
make pylance happier
2022-10-29 20:40:25 +00:00
ed
f3a501db30
add SMB/CIFS server
2022-10-23 23:08:00 +02:00
ed
4bcd30da6b
cleaner daemon instancing
2022-10-23 12:05:44 +02:00
ed
c003dfab03
unbold ansi grays
2022-10-19 15:30:17 +02:00
ed
20c6b82bec
replace magic numbers with errno.*
2022-10-19 15:21:48 +02:00
ed
32e71a43b8
reinvent fail2ban
2022-09-21 22:27:20 +02:00
ed
9401b5ae13
add filetype detection for nameless uploads
2022-09-18 17:30:57 +02:00
ed
add04478e5
multiprocessing: fix listening-socket config
2022-09-15 22:25:11 +02:00
ed
e430b2567a
add pyoxidizer (windows-only)
2022-09-10 17:33:04 +02:00
ed
bc6234e032
parallel socket shutdown
2022-08-31 08:38:34 +02:00
ed
558bfa4e1e
siocoutq-based shutdown
2022-08-31 01:16:09 +02:00
ed
c00b80ca29
v1.3.11
2022-08-10 23:35:21 +02:00
ed
90555a4cea
clean-shutdown while hashing huge files
2022-08-03 21:06:10 +02:00
ed
dac2fad48e
v1.3.8
2022-07-27 16:07:26 +02:00
ed
6e445487b1
satisfy cloudflare DDoS protection
2022-07-03 16:04:28 +02:00
ed
438384425a
add types, isort, errorhandling
2022-06-16 01:07:15 +02:00
ed
0b6f102436
fix multiprocessing ftpd
2022-06-12 16:37:56 +02:00
ed
fd9d0e433d
thumbnails: try FFmpeg for images too
2022-04-11 10:38:57 +02:00
ed
cc4a063695
thumbnails: per-decoder filetype config
2022-04-10 22:59:45 +02:00
ed
cb7674b091
make prism optional
2021-11-04 03:10:13 +01:00
ed
c951b66ae0
less messy startup messages
2021-10-29 23:43:09 +02:00
ed
598d6c598c
reduce wakeups in httpsrv
2021-10-27 22:20:21 +02:00
ed
0d5ca67f32
up2k-srv: add option to reuse file-handles
2021-09-26 03:44:22 +02:00
ed
9ed9b0964e
nice race
2021-08-03 22:53:13 +00:00
ed
1ad7a3f378
await and monitor workers on startup
2021-07-27 15:48:00 +00:00
ed
05a1a31cab
too soon
2021-07-24 22:20:02 +02:00
