mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2026-04-14 16:12:37 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

Commit graph

  • 7ac0803ded update pkgs to 1.9.6 ed 2023-09-23 12:56:47 +0000
  • cae5ccea62 v1.9.6 v1.9.6 ed 2023-09-23 12:15:24 +0000
  • 3768cb4723 add chat ed 2023-09-23 11:34:32 +0000
  • 0815dce4c1 ensure indexing runs with --ign-ebind-all ed 2023-09-22 23:20:57 +0000
  • a62f744a18 prevent losing an out-of-volume index if the server is started while an external drive is not mounted, it would drop the database because all the files are missing ed 2023-09-22 23:05:07 +0000
  • 163e3fce46 improve reverse-proxy support when containerized: the x-forwarded-for header would get rejected since the reverse-proxy is not asking from 127.0.0.1 or ::1, so make this allowlist configurable ed 2023-09-22 22:39:20 +0000
  • e76a50cb9d add indexer benchmark + bump default num cores from 4 to 5 and make the mtag deps build better on fedora ed 2023-09-22 20:40:52 +0000
  • 72fc76ef48 golf / normalize window.location ed 2023-09-20 22:07:40 +0000
  • c47047c30d configurable real-ip header from reverse proxy ed 2023-09-20 21:56:39 +0000
  • 3b8f66c0d5 fix a client crash when uploading from glitchy net ed 2023-09-20 21:25:59 +0000
  • aa96a1acdc misc optimizations / cleanup: * slightly faster startup / shutdown * forgot a jinja2 golf * waste 4KiB changing prismjs back to gz since brotli is https-gated ;_; * broke support for firefox<52 (non-var functions must be toplevel or immediately within another function), now even firefox 10 / centos 6 is somewhat supported again ed 2023-09-17 13:02:18 +0000
  • 91cafc2511 faster startup on windows by asking for ffmpeg.exe explicitly rather than just "ffmpeg" which makes windows try to open each of ffmpeg.BAT,CMD,COM,EXE,JS,JSE,MSC,VBE,VBS,WSF,WSH one by one (ffmpeg.js? hello??) ed 2023-09-13 23:32:19 +0000
  • 23ca00bba8 support jython and graalpy ed 2023-09-13 23:24:56 +0000
  • a75a992951 golf the sfx-gz by ~27.6 kB; * 11 kB webdeps: brotli easymde+prism instead of zopfli * 8 kB jinja2 * 5 kB ftp * 3 kB improve uncommenter ed 2023-09-13 23:21:22 +0000
  • 4fbd6853f4 add msg-log.py initially by @clach04, closes #35 ed 2023-09-12 19:56:05 +0000
  • 71c3ad63b3 fix tests ed 2023-09-11 01:46:25 +0000
  • e1324e37a5 update pkgs to 1.9.5 ed 2023-09-09 14:15:46 +0000
  • a996a09bba v1.9.5 v1.9.5 ed 2023-09-09 13:36:56 +0000
  • 18c763ac08 smb: upgrade to impacket 0.11, full user account support, permissions are now per-account instead of coalescing ed 2023-09-09 12:46:37 +0000
  • 3d9fb753ba stuff ed 2023-09-08 21:42:05 +0000
  • 714fd1811a add option to generate pax-format tar archives and forgot to commit the nix module ed 2023-09-08 21:13:23 +0000
  • 4364581705 fix accidental 422-ban when uploading lots of dupes ed 2023-09-08 19:49:29 +0000
  • ba02c9cc12 readme fix + make hacker theme more hacker ed 2023-09-08 19:35:12 +0000
  • 11eefaf968 create / edit non-markdown textfiles (if user has delete-access) ed 2023-09-08 18:47:31 +0000
  • 5a968f9e47 add permission 'h': folders redirect to index.html; safest way to make copyparty like a general-purpose webserver where index.html is returned as expected yet directory listing is entirely disabled / unavailable ed 2023-09-07 23:30:01 +0000
  • 6420c4bd03 up to 2.6x faster download-as-zip when there's lots of files, and especially small ones and also reduces cpu load by at least 15% ed 2023-09-05 22:57:03 +0000
  • 0f9877201b support cache directives in --css-browser, --js-browser; for example --css-browser=/the.css?cache=600 (seconds) or --js-browser=/.res/the.js?cache=i (7 days) ed 2023-09-03 19:50:31 +0000
  • 9ba2dec9b2 lightbox: fix ccw rotation hotkey ed 2023-09-03 19:23:29 +0000
  • ae9cfea939 update pkgs to 1.9.4 ed 2023-09-02 00:45:57 +0000
  • cadaeeeace v1.9.4 v1.9.4 ed 2023-09-02 00:18:53 +0000
  • 767696185b add ?tar=gz, ?tar=bz2, ?tar=xz with optional level; defaults are ?tar=gz:3, ?tar=bz2:9, ?tar=xz:1 ed 2023-09-01 23:44:10 +0000
  • c1efd227b7 fix inconsistent use of symlink mtimes in database; ed 2023-09-01 20:29:55 +0000
  • a50d0563c3 instantly perform search when URL contains a raw query ed 2023-09-01 20:16:19 +0000
  • e5641ddd16 update pkgs to 1.9.3 ed 2023-08-31 23:08:32 +0000
  • 700111ffeb v1.9.3 v1.9.3 ed 2023-08-31 22:11:31 +0000
  • b8adeb824a misc http correctness; some of this looks shady af but appears to have been harmless (decent amount of testing came out ok) ed 2023-08-31 21:51:58 +0000
  • 30cc9defcb cosmetics: * in case someone gets a confusing access-related error message, include more context in serverlogs (exact path) * fix js console spam in search results * same markdown line-height in viewer and browser ed 2023-08-31 21:27:14 +0000
  • 61875bd773 slightly reduce flickering during page load on chrome ed 2023-08-31 20:02:33 +0000
  • 30905c6f5d add convenient debugs in case the fight is not over ed 2023-08-31 20:00:14 +0000
  • 9986136dfb apple/ios/iphone: maybe fix background album playback ed 2023-08-31 19:57:05 +0000
  • 1c0d978979 ios/iphone: autoreplace smart-quotes with sane quotes, as the iphone keyboard is not able to produce ' or " ed 2023-08-31 19:29:37 +0000
  • 0a0364e9f8 FTPd: fix py3.12 support; workaround until next release: run sfx twice with PYTHONPATH=/tmp/pe-copyparty.$(id -u)/copyparty/vend ed 2023-08-28 00:25:33 +0000
  • 3376fbde1a update pkgs to 1.9.2 ed 2023-08-26 22:09:43 +0000
  • ac21fa7782 v1.9.2 v1.9.2 ed 2023-08-26 21:16:30 +0000
  • c1c8dc5e82 ok lets try that again ed 2023-08-26 19:07:23 +0000
  • 5a38311481 mark offline volumes in directory tree sidebar ed 2023-08-26 19:00:46 +0000
  • 9f8edb7f32 make markdown slightly safer without the nohtml volflag by running dompurify after marked.parse if plugins are not enabled; adds no protection against the more practical approach of just putting a malicious <script> in an html file and uploading that, but one footgun less is one less footgun ed 2023-08-26 17:37:02 +0000
  • c5a6ac8417 persist dotfile preference as cookie for initial listing ed 2023-08-26 15:50:57 +0000
  • 50e01d6904 add more autoban triggers: * --ban-url: URLs which 404 and also match --sus-urls (bot-scan) * --ban-403: trying to access volumes that dont exist or require auth * --ban-422: invalid POST messages, fuzzing and such * --nonsus-urls: regex of 404s which shouldn't trigger --ban-404 ed 2023-08-26 13:52:24 +0000
  • 9b46291a20 add option to force-disable turbo, making it safer to enable --ban-404 (u2c can still get banned inadvertently) ed 2023-08-26 13:19:38 +0000
  • 14497b2425 docs: * mention cloudflare-specific nginx config ed 2023-08-25 21:57:26 +0000
  • f7ceae5a5f add filetable range-select with shift-pgup/pgdn, and retain file selection cursor when lazyloading more files ed 2023-08-25 19:34:37 +0000
  • c9492d16ba fix textfile navigation hotkeys (broke in 5d13ebb4) ed 2023-08-25 18:41:45 +0000
  • 9fb9ada3aa dont whine about inaccessible root on rootless configs, and make it easier for on403 to invoke the homepage-redirect ed 2023-08-25 18:33:15 +0000
  • db0abbfdda typo ed 2023-08-21 00:05:39 +0000
  • e7f0009e57 update pkgs to 1.9.1 ed 2023-08-20 23:53:58 +0000
  • 4444f0f6ff v1.9.1 v1.9.1 ed 2023-08-20 23:38:42 +0000
  • 418842d2d3 update pkgs to 1.9.0 ed 2023-08-20 23:11:44 +0000
  • cafe53c055 v1.9.0 v1.9.0 ed 2023-08-20 22:02:40 +0000
  • 7673beef72 actually impl --mc-hop (and improve --zm-spam) ed 2023-08-20 21:27:28 +0000
  • b28bfe64c0 explain apple bullshit ed 2023-08-20 22:09:00 +0200
  • 135ece3fbd immediately allow uploading an interrupted and deleted incomplete upload to another location ed 2023-08-20 19:16:35 +0000
  • bd3640d256 change to openmetrics ed 2023-08-20 18:50:14 +0000
  • fc0405c8f3 add prometheus metrics; closes #49 ed 2023-08-20 17:58:06 +0000
  • 7df890d964 wget: only allow http/https/ftp/ftps (#50): these are all the protocols that are currently supported by wget, so this has no practical effect aside from making sure we won't suddenly get file:// support or something (which would be bad) ed 2023-08-20 09:47:50 +0000
  • 8341041857 mdns: option to ignore spec to avoid issues on networks where clients have multiple IPs of which some are subnets that the copyparty server is not ed 2023-08-19 21:45:26 +0000
  • 1b7634932d tar/zip-download: add opus transcoding filter ed 2023-08-19 19:40:46 +0000
  • 48a3898aa6 suggest enabling the database on startup ed 2023-08-16 19:57:19 +0000
  • 5d13ebb4ac avoid firefox-android quirk(?): when repeatedly tapping the next-folder button, occasionally it will reload the entire page instead of ajax'ing the directory contents. ed 2023-08-16 19:56:47 +0000
  • 015b87ee99 performance / cosmetic: * js: use .call instead of .bind when possible * when running without e2d, the message on startup regarding unfinished uploads didn't show the correct filesystem path ed 2023-08-16 19:32:43 +0000
  • 0a48acf6be limit each column of the files table to screen width ed 2023-08-16 03:55:53 +0000
  • 2b6a3afd38 fix iOS randomly increasing fontsize of some things: * links which are wider than the display width * probably input fields too ed 2023-08-16 03:47:19 +0000
  • 18aa82fb2f make browser resizing smoother / less expensive ed 2023-08-15 16:55:19 +0000
  • f5407b2997 docker: persist autogenerated seeds, disable certgen, and mention how to run the containers with selinux enabled * assumes that a /cfg docker volume is provided ed 2023-08-15 15:07:33 +0000
  • 474d5a155b android's got hella strict filename rules ed 2023-08-15 06:46:57 +0200
  • afcd98b794 mention some gotchas (thx noktuas) ed 2023-08-15 03:38:51 +0200
  • 4f80e44ff7 option to exactly specify browser title prefix ed 2023-08-15 03:17:01 +0200
  • 406e413594 hint at additional context in exceptions ed 2023-08-15 01:42:13 +0200
  • 033b50ae1b u2c: exclude files by regex ed 2023-08-15 00:45:12 +0200
  • bee26e853b show server hostname in html titles: * --doctitle defines most titles, prefixed with "--name: " by default * the file browser is only prefixed with the --name itself * --nth ("no-title-hostname") removes it * also removed by --nih ("no-info-hostname") ed 2023-08-14 23:50:13 +0200
  • 04a1f7040e adjustable timestamp resolution in log messages ed 2023-08-14 17:22:22 +0200
  • 81d3c9bc11
         Update wget.py to prevent shell injection mvsite 2023-08-09 13:29:59 -0700
  • f9d5bb3b29 support upload by dragdrop from other browser windows, hello from LO484 https://ocv.me/stuff/aircode.jpg ed 2023-07-28 21:43:40 +0200
  • ca0cd04085 update pkgs to 1.8.8 ed 2023-07-25 16:25:27 +0000
  • 999ee2e7bc v1.8.8 v1.8.8 ed 2023-07-25 15:50:48 +0000
  • 1ff7f968e8 fix tls-cert regeneration on windows ed 2023-07-25 15:27:27 +0000
  • 3966266207 remember ?edit and trailing-slash during login redirect ed 2023-07-25 15:14:47 +0000
  • d03e96a392 html5 strips the first leading LF in textareas; stop it ed 2023-07-25 14:16:54 +0000
  • 4c843c6df9 fix md-editor lastmod cmp when browsercache is belligerent ed 2023-07-25 14:06:53 +0000
  • 0896c5295c range-select fixes: * dont crash when shiftclicking between folders * remember origin when lazyloading more files ed 2023-07-25 14:06:31 +0200
  • cc0c9839eb update pkgs to 1.8.7 ed 2023-07-23 16:16:49 +0000
  • d0aa20e17c v1.8.7 v1.8.7 ed 2023-07-23 15:43:38 +0000
  • 1a658dedb7 fix infinite playback spin on servers with one single file ed 2023-07-23 14:52:42 +0000
  • 8d376b854c this is the wrong way around ed 2023-07-23 14:10:23 +0000
  • 490c16b01d be even stricter with ?hc ed 2023-07-23 13:23:52 +0000
  • 2437a4e864 the CVE-2023-37474 fix was overly strict; loosen ed 2023-07-23 11:31:11 +0000
  • 007d948cb9 fix GHSA-f54q-j679-p9hh: reflected-XSS in cookie-setters; it was possible to set cookie values which contained newlines, thus terminating the http header and bleeding into the body. ed 2023-07-23 10:55:08 +0000
  • 335fcc8535 update pkgs to 1.8.6 ed 2023-07-21 01:12:55 +0000
  • 9eaa9904e0 v1.8.6 v1.8.6 ed 2023-07-21 00:36:37 +0000
  • 0778da6c4d fix GHSA-cw7j-v52w-fp5r: reflected-XSS through /?hc ed 2023-07-21 00:35:43 +0000