mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2026-06-22 22:12:52 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity
5258 commits 4 branches 380 tags 95 MiB
Commit graph

145 commits

Author SHA1 Message Date
ed fc0405c8f3 add prometheus metrics; closes #49 2023-08-20 17:58:06 +00:00
ed 2437a4e864 the CVE-2023-37474 fix was overly strict; loosen 2023-07-23 11:31:11 +00:00
ed 007d948cb9 fix GHSA-f54q-j679-p9hh: reflected-XSS in cookie-setters; 
it was possible to set cookie values which contained newlines,
thus terminating the http header and bleeding into the body.

We now disallow control-characters in queries,
but still allow them in paths, as copyparty supports
filenames containing newlines and other mojibake.

The changes in `set_k304` are not necessary in fixing the vulnerability,
but makes the behavior more correct.
 2023-07-23 10:55:08 +00:00
ed 2b2d8e4e02 tls / gencert fixes 2023-06-10 23:34:34 +00:00
ed c355f9bd91 catch common environment issues (#32): 
* error-message which explains how to run on py2 / older py3
   when trying to run from source
* check compatibility between jinja2 and cpython on startup
* verify that webdeps are present on startup
* verify that webdeps are present when building sfx
* make-sfx.sh grabs the strip-hints dependency
 2023-06-04 13:13:36 +00:00
ed a1a8a8c7b5 configurable tls-certificate location 2023-04-23 20:56:55 +00:00
ed 6acf436573 u2idx pool instead of per-socket; 
prevents running out of FDs thanks to thousands of sqlite3 sessions
and neatly sidesteps what could possibly be a race in python's
sqlite3 bindings where it sometimes forgets to close the fd
 2023-04-20 20:36:13 +00:00
ed 1a46738649 raise edgecases (broken envs on windows) 2023-02-19 22:13:33 +00:00
ed 8adfcf5950 win10-based copyparty64.exe 2023-02-14 21:50:14 +00:00
ed 741d781c18 add cors controls + improve preflight + pw header 2023-01-28 00:59:04 +00:00
ed 5bb9f56247 linux 6.1 fixed the 6.0 bugs; remove workarounds 2023-01-16 20:44:57 +00:00
ed 2cb1f50370 fix dualstack on lo 2023-01-11 16:10:07 +00:00
ed db194ab519 support location-based rproxy 2022-12-10 23:43:31 +00:00
ed f1477a1c14 block other copyparties from sniping tcp ports 2022-12-07 21:50:52 +00:00
ed 067cc23346 docs + cleanup 2022-12-03 18:58:56 +00:00
ed 99efc290df fix mdns on windows 2022-12-03 13:31:00 +00:00
ed 2fbdc0a85e misc fixes / cleanup 2022-12-02 23:42:46 +00:00
ed 7c76d08958 drop one of the slowloris detectors 2022-12-02 17:53:23 +00:00
ed f0e78a6826 add landing page with mounting instructions 2022-11-26 19:47:27 +00:00
ed 5cd9d11329 add ssdp responder 2022-11-22 21:40:12 +00:00
ed 4ad4657774 mdns: support running on macos 2022-11-17 20:18:24 +00:00
ed b3eb117e87 add mdns zeroconf announcer 2022-11-13 20:05:16 +00:00
ed c72753c5da add native ipv6 support 2022-11-06 16:48:05 +00:00
ed 89d1f52235 cursory slowloris / buggy-webdav-client detector 2022-11-01 22:18:20 +00:00
ed 3312c6f5bd autoclose connection-flooding clients 2022-10-31 22:42:47 +00:00
ed edad3246e0 make pylance happier 2022-10-29 20:40:25 +00:00
ed f3a501db30 add SMB/CIFS server 2022-10-23 23:08:00 +02:00
ed 4bcd30da6b cleaner daemon instancing 2022-10-23 12:05:44 +02:00
ed c003dfab03 unbold ansi grays 2022-10-19 15:30:17 +02:00
ed 20c6b82bec replace magic numbers with errno.* 2022-10-19 15:21:48 +02:00
ed 32e71a43b8 reinvent fail2ban 2022-09-21 22:27:20 +02:00
ed 9401b5ae13 add filetype detection for nameless uploads 2022-09-18 17:30:57 +02:00
ed add04478e5 multiprocessing: fix listening-socket config 2022-09-15 22:25:11 +02:00
ed e430b2567a add pyoxidizer (windows-only) 2022-09-10 17:33:04 +02:00
ed bc6234e032 parallel socket shutdown 2022-08-31 08:38:34 +02:00
ed 558bfa4e1e siocoutq-based shutdown 2022-08-31 01:16:09 +02:00
ed c00b80ca29 v1.3.11 2022-08-10 23:35:21 +02:00
ed 90555a4cea clean-shutdown while hashing huge files 2022-08-03 21:06:10 +02:00
ed dac2fad48e v1.3.8 2022-07-27 16:07:26 +02:00
ed 6e445487b1 satisfy cloudflare DDoS protection 2022-07-03 16:04:28 +02:00
ed 438384425a add types, isort, errorhandling 2022-06-16 01:07:15 +02:00
ed 0b6f102436 fix multiprocessing ftpd 2022-06-12 16:37:56 +02:00
ed fd9d0e433d thumbnails: try FFmpeg for images too 2022-04-11 10:38:57 +02:00
ed cc4a063695 thumbnails: per-decoder filetype config 2022-04-10 22:59:45 +02:00
ed cb7674b091 make prism optional 2021-11-04 03:10:13 +01:00
ed c951b66ae0 less messy startup messages 2021-10-29 23:43:09 +02:00
ed 598d6c598c reduce wakeups in httpsrv 2021-10-27 22:20:21 +02:00
ed 0d5ca67f32 up2k-srv: add option to reuse file-handles 2021-09-26 03:44:22 +02:00
ed 9ed9b0964e nice race 2021-08-03 22:53:13 +00:00
ed 1ad7a3f378 await and monitor workers on startup 2021-07-27 15:48:00 +00:00
ed 05a1a31cab too soon 2021-07-24 22:20:02 +02:00
ed d020527c6f centralize mojibake support stuff 2021-07-24 21:56:55 +02:00
ed e9ae9782fe v0.11.39 2021-07-13 00:54:23 +02:00
ed 578a915884 stack/thread monitors in mpw + better thread names 2021-07-12 23:03:52 +02:00
ed 6c3a976222 scale max-clients to mp-workers 2021-07-09 16:48:02 +02:00
ed 80cc26bd95 fix max-client limit 2021-07-09 16:33:11 +02:00
ed 970fb84fd8 hex looks better 2021-07-09 16:11:33 +02:00
ed 20cbcf6931 logging + shutdown cleanup 2021-07-09 16:07:16 +02:00
ed 8fcde2a579 move tcp accept into mp-worker 2021-07-09 15:49:36 +02:00
ed 03513e0cb1 effectively pointless but cool 2021-07-09 03:41:44 +02:00
ed e041a2b197 fix centos7 support 2021-07-08 23:35:28 +02:00
ed 765294c263 ignore dupe-chunk warnings; handshake takes care of it 2021-07-01 20:22:12 +02:00
ed d6b5351207 add cachebuster because chrome ignores no-cache 2021-07-01 20:10:02 +02:00
ed 10362aa02e v0.11.18 2021-06-18 00:30:37 +02:00
ed 60ac68d000 single authsrv instance per process 2021-06-11 23:01:13 +02:00
ed d6bf300d80 option to store state out-of-volume (mostly untested) 2021-06-10 01:27:04 +02:00
ed 9d729d3d1a add thread names 2021-06-08 20:14:23 +02:00
ed acd8149479 dont track workloads unless multiprocessing 2021-06-08 18:01:59 +02:00
ed b77bed3324 fix terminating tls connections wow 2021-06-08 09:40:49 +02:00
ed 89e48cff24 detect recursive symlinks 2021-06-07 20:09:18 +02:00
ed 12143f2702 http/1.0, minimal dir listing, pw in url 2021-04-03 07:56:35 +02:00
ed 4ed9528d36 5x faster reply on 1st req on new conns 2021-03-25 19:29:16 +01:00
ed 49e4fb7e12 finally time to undefault this 2021-03-21 16:19:45 +01:00
ed 57d994422d logging cleanup 2021-03-06 17:38:56 +01:00
ed d29f0c066c logging 2021-02-14 01:32:16 +01:00
ed 2a90286a7c dim the socket debug msgs 2021-02-03 00:25:13 +01:00
ed 2e33c8d222 improve http206 and fuse-client 2020-05-15 00:00:49 +02:00
ed 592987a54a support smol screens 2020-05-13 00:39:29 +02:00
ed bef2e92cef markdown-editor joke stopped being a joke... 2020-04-30 00:47:28 +02:00
ed 9e3a560ea6 add brotli + improve 404 handling 2020-04-26 23:28:20 +02:00
ed 10652427bc add mkdir + keep mtime + bump max-size 2020-04-14 22:42:43 +00:00
ed 7b4871b7b8 rudimentary jython compat 2019-11-11 04:12:25 +01:00
ed 64274ca756 evict stuck/idle clients 2019-07-11 18:26:24 +00:00
ed ea7c82c5e4 print() can deadlock 👁👄👁 2019-07-03 22:25:51 +00:00
ed 0cfda684ce clean socket shutdown (fix multiprocessing) 2019-07-02 23:36:16 +00:00
ed 9da6a73044 full-duplex broker for up2k-registry 2019-07-01 02:42:29 +02:00
ed 9ef3945abf very temporary socket tracking dbg 2019-06-25 21:24:52 +00:00
ed 9fcd4823b5 add cursed TLS to enable crypto.subtle, thx webkit 2019-06-25 21:01:00 +00:00
ed 63e089a5f0 support mojibake and py3.2 2019-06-12 16:39:43 +00:00
ed fe0330f6f7 delinting 2019-06-07 08:54:41 +00:00
ed c2b270dcea add HttpConn 2019-06-06 08:18:00 +02:00
ed 5d8be84d18 login, vol.tree, refactor 2019-06-04 22:12:28 +00:00
ed 69e83e95ba acc/vol ideas 2019-05-28 20:49:58 +00:00
ed 78c99e524b clean shutdown 2019-05-28 19:36:42 +00:00
ed 5b708c45ed hello world 2019-05-26 16:30:19 +00:00