Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								e6b763026e 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge branch 'master' into icon-security  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								c182583e09 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #644  from BlackDex/issue-565  
							
							 
							
							 
							
							
								
 
							
							
							Fixed issue #565  
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								d821389c2e 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #639  from vverst/cors-update  
							
							 
							
							 
							
							
								
 
							
							
							Change CORS headers 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								BlackDex
							
						 
						
							
							
							
								
							
								be2916333b 
								
							
								 
							
						 
						
							
							
								
								Fixed issue  #565  
							
							 
							
							 
							
							
								
 
							
							
							Issue fixed by omitting the cookie header when cookie_str is empty 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								BlackDex
							
						 
						
							
							
							
								
							
								9124d8a3fb 
								
							
								 
							
						 
						
							
							
								
								Updated icon blacklisting.  
							
							 
							
							 
							
							
								
 
							
							
							- Blacklisting was not effective for redirects and rel href
- Able to blacklist non global IP's like RFC1918, multicast etc... 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								7b1da527a6 
								
							
								 
							
						 
						
							
							
								
								Change CORS headers  
							
							 
							
							 
							
							
								
 
							
							
							Only add Allow-Origin to all requests and move the others to preflight OPTIONS request.
If Origin is `file://` change it to the wildcard. 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								e7b8602e1f 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #638  from mprasil/add_sqlite_binary  
							
							 
							
							 
							
							
								
 
							
							
							Add sqlite binary into the docker images 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Miro Prasil
							
						 
						
							
							
							
								
							
								d6e9af909b 
								
							
								 
							
						 
						
							
							
								
								Remove the unnecessary check for sqlite  
							
							 
							
							 
							
							
								
 
							
							
							The binary we use is called `sqlite3` so no need to check for other
name variants as we won't use those anyways. 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Miro Prasil
							
						 
						
							
							
							
								
							
								acdd42935b 
								
							
								 
							
						 
						
							
							
								
								Add sqlite binary into the docker images  
							
							 
							
							 
							
							
								
 
							
							
							This is done to enable backup functionality in the admin interface while
we're waiting for the libsqlite-sys 0.17 to bubble up in the upstream
dependencies. Then we can start using `VACUUM INTO`
This also extends the check for the sqlite binary to also try `sqlite3`
as this is the name of the binary in baseimage distributions we use. 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								8367d1d715 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #631  from vverst/cors-put  
							
							 
							
							 
							
							
								
 
							
							
							Use Access-Control-Allow-Method 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								56f12dc982 
								
							
								 
							
						 
						
							
							
								
								Use Access-Control-Allow-Method  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								4c07f05b3a 
								
									
								
							
								 
							
						 
						
							
							
								
								Remove Result<T, E: Debug> in preparation of deprecation as Rocket responder.  
							
							 
							
							 
							
							
								
 
							
							
							Removed unnecessary returns 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								b73ff886c3 
								
									
								
							
								 
							
						 
						
							
							
								
								Use upstream rmp  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								2e7bd62353 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #624  from swedishborgie/postgresql  
							
							 
							
							 
							
							
								
 
							
							
							Fix issue with downloading attachments and PostgreSQL backend. 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Michael Powers
							
						 
						
							
							
								
								
							
							
								
							
								1264eb640a 
								
									
								
							
								 
							
						 
						
							
							
								
								Added a migration that  fixes   #1  which caused attachments to be broken  
							
							 
							
							 
							
							
								
 
							
							
							for the PostgreSQL backend. Also converts any CHAR types to VARCHAR to prevent the same issue from causing problems down the line. 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								3a90364b32 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #621  from swedishborgie/postgresql  
							
							 
							
							 
							
							
								
 
							
							
							Adds support for PostgreSQL which adds #87  and is mentioned in #246 . 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Michael Powers
							
						 
						
							
							
								
								
							
							
								
							
								f5f9861a78 
								
									
								
							
								 
							
						 
						
							
							
								
								Adds support for PostgreSQL which  resolves   #87  and is mentioned in  #246 .  
							
							 
							
							 
							
							
								
 
							
							
							This includes migrations as well as Dockerfile's for amd64.
The biggest change is that replace_into isn't supported by Diesel for the
PostgreSQL backend, instead requiring the use of on_conflict. This
unfortunately requires a branch for save() on all of the models currently
using replace_into. 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								f9408a00c6 
								
									
								
							
								 
							
						 
						
							
							
								
								Allow self signed certs and increase a bit the timings  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								ae8bf954c1 
								
									
								
							
								 
							
						 
						
							
							
								
								Updated web vault to 2.12  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								c656f2f694 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #604  from mprasil/fix-healthcheck  
							
							 
							
							 
							
							
								
 
							
							
							Fix  #603  and  remove mysql from sqlite image 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Miro Prasil
							
						 
						
							
							
							
								
							
								eea3f13bb3 
								
							
								 
							
						 
						
							
							
								
								Fix   #603  and  remove mysql from sqlite image  
							
							 
							
							 
							
							
								
 
							
							
							This changes the healthcheck to use `sh` instead of bash, that is absent
from some image versions. (like alpine)
It also removes `*mariadb*` packages from runtime image of sqlite images
as these shouldn't be required. 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								df8114f8be 
								
									
								
							
								 
							
						 
						
							
							
								
								Updated client kdf iterations to 100000 and fixed some lints  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								dda244edd8 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #589  from H3npi/H3npi-patch-1  
							
							 
							
							 
							
							
								
 
							
							
							Adds Healthcheck for default docker container 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								H3npi
							
						 
						
							
							
							
								
							
								cce3ce816c 
								
							
								 
							
						 
						
							
							
								
								Adds environment port to curl healthcheck  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								65c0d1064b 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #599  from vverst/cors  
							
							 
							
							 
							
							
								
 
							
							
							Add Cors headers 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								5a2f968d7a 
								
							
								 
							
						 
						
							
							
								
								Set correct response headers, status code  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								16d88402cb 
								
							
								 
							
						 
						
							
							
								
								Initial version of CORS support  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								7dcf18151d 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix onsubmit  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								e3404dd322 
								
									
								
							
								 
							
						 
						
							
							
								
								Use the local scripts instead of cloudflare, remove jquery and update config so disabling a master toggle doesn't remove the values  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								bfc517ee80 
								
									
								
							
								 
							
						 
						
							
							
								
								Remove unused warning  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								4a7d2a1e28 
								
									
								
							
								 
							
						 
						
							
							
								
								Rename static files endpoint  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								H3npi
							
						 
						
							
							
							
								
							
								66a68f6d22 
								
							
								 
							
						 
						
							
							
								
								Adds Healthcheck for all docker container  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								469318bcbd 
								
									
								
							
								 
							
						 
						
							
							
								
								Updated dependencies and web vault version  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								c07c9995ea 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #555  from vverst/email-codes  
							
							 
							
							 
							
							
								
 
							
							
							Add Email 2FA login 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								2c2276c5bb 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #585  from ViViDboarder/mail-auth-over-insecure  
							
							 
							
							 
							
							
								
 
							
							
							Allow explicitly defined smtp auth mechansim 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								ViViDboarder
							
						 
						
							
							
							
								
							
								672a245548 
								
							
								 
							
						 
						
							
							
								
								Remove unecessary clone  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								5d50b1ee3c 
								
							
								 
							
						 
						
							
							
								
								Merge remote-tracking branch 'upstream/master' into email-codes  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								c99df1c310 
								
							
								 
							
						 
						
							
							
								
								Compare token using crypto::ct_eq  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								591ae10144 
								
							
								 
							
						 
						
							
							
								
								Get token from single u64  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								ViViDboarder
							
						 
						
							
							
							
								
							
								2d2745195e 
								
							
								 
							
						 
						
							
							
								
								Allow explicitly defined smtp auth mechansim  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								026f9da035 
								
									
								
							
								 
							
						 
						
							
							
								
								Allow removing users two factors  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								d23d4f2c1d 
								
									
								
							
								 
							
						 
						
							
							
								
								Allow editing HIBP key in the admin panel  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								515b87755a 
								
									
								
							
								 
							
						 
						
							
							
								
								Update HIBP to v3, requires paid API key,  fixes   #583  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								d8ea3d2bfe 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #582  from vverst/require-device-email-config  
							
							 
							
							 
							
							
								
 
							
							
							Add config option to require new device emails 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								ee7837d022 
								
							
								 
							
						 
						
							
							
								
								Add option to require new device emails  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								07743e490b 
								
									
								
							
								 
							
						 
						
							
							
								
								Ignore error sending device email  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								9101d6e48f 
								
									
								
							
								 
							
						 
						
							
							
								
								Update dependencies  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								Daniel García
							
						 
						
							
							
								
								
							
							
								
							
								27c23b60b8 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #571  from BlackDex/icon-proxy-support  
							
							 
							
							 
							
							
								
 
							
							
							Added reqwest proxy support 
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								BlackDex
							
						 
						
							
							
							
								
							
								e7b6238f43 
								
							
								 
							
						 
						
							
							
								
								Added reqwest proxy support  
							
							 
							
							
								
 
							
							
						 
						6 years ago  
					 
				
					
						
							
							
								 
								vpl
							
						 
						
							
							
							
								
							
								ad2225b6e5 
								
							
								 
							
						 
						
							
							
								
								Add configuration options for Email 2FA  
							
							 
							
							
								
 
							
							
						 
						6 years ago