Jamie Cameron
4f73acc28c
Merge pull request #773 from qooob/master
...
Add support for forcing encoding using file comment '-*- coding: encoding -*-'
2018-01-16 09:18:33 -08:00
Ilia Rostovtsev
d13795190b
Harded the filter to remove any kind of spaces from string
2018-01-16 14:55:58 +03:00
Jamie Cameron
62edc3dea3
Merge pull request #761 from qooob/master
...
Fix open theme's link in new tab
2018-01-14 15:54:38 -08:00
Ilia Rostovtsev
0d7effdf5d
Open theme's link in the new tab and make sure it passes referre check
2018-01-13 14:52:46 +03:00
Jamie Cameron
d37450a650
Support newer TLS versions https://sourceforge.net/p/webadmin/bugs/5073/
2018-01-12 22:56:40 -08:00
Ilia Rostovtsev
9fe25551b9
Fix open theme's link in new tab https://github.com/webmin/webmin/pull/724
2018-01-08 11:51:07 +03:00
Jamie Cameron
f218c2bba8
Extract out function for getting the temp dir
2017-12-22 15:17:04 -08:00
yangfl
0f9fb77369
Fix typo
2017-11-08 16:43:37 +08:00
Jamie Cameron
40fa0bcf39
Don't send a zero length content header https://www.virtualmin.com/node/53776
2017-11-04 15:56:24 -07:00
Ilia Rostovtsev
68029cf0e8
Redirect function already deals with prefix
...
`$gconfig{'webprefix'}` is not needed and will result in its duplicate in case it's set.
2017-10-13 11:50:26 +03:00
Ilia Rostovtsev
536bd1660a
Check for trigger URL to simply redirect to root
...
This is required for Authentic Theme 19.00+
https://github.com/qooob/authentic-theme/issues/844
https://github.com/qooob/authentic-theme/issues/848
2017-10-11 13:11:05 +03:00
Jamie Cameron
76e1b4d24f
Allow using of quoted variables like {\$DOM}
2017-09-29 17:01:12 -07:00
Jamie Cameron
6e74b7b6d4
Fix bad indentation and lack of quoting that should never have worked
2017-09-06 18:12:02 -07:00
Jamie Cameron
0c58892732
Escape potentially malicious HTTP headers
2017-09-05 10:35:44 -07:00
Jamie Cameron
f8a6d2db67
Pass down timeout, and use formal params
2017-07-21 21:51:20 -07:00
Jamie Cameron
402caed4dd
Fix relative heights
2017-07-02 09:10:54 -07:00
Joe cooper
c43c6a4e27
Roll back amp change, as HTML5 allows it
2017-06-02 15:19:47 -05:00
Jamie Cameron
a2de217c25
Merge pull request #586 from ymulleneers/master
...
Various minor corrections
2017-06-01 15:13:40 -04:00
MUY
377bcacff8
Update web-lib-funcs.pl
...
quote_escape - usually used to concatenate to string, so the function should always return a string, even if first argument is undef. The usage of the eq operator on an undef variable cause a warning, in addition '' is evaluated to 'false' in conditions.
2017-06-01 06:43:59 +02:00
MUY
1379d2cc35
Update web-lib-funcs.pl
...
html_escape hang if first argument is not defined (ex: text('not_defined')) + usually used to concatenate to string, so the function should always returns a string.
2017-06-01 06:37:34 +02:00
Joe cooper
4f564b9e2a
Use escaped ampersand
2017-05-30 20:36:12 -05:00
Joe cooper
7e75fdfa16
More validation fixes
2017-05-30 20:08:34 -05:00
Joe cooper
086e38676e
Use quoted literals in tag style
2017-05-30 19:33:16 -05:00
Joe cooper
72a6acb7ef
HTML 4.01 transitional until we get rid of in-tag styling
2017-05-30 17:54:57 -05:00
Jamie Cameron
3ecc241b54
Also check certifate altnames https://sourceforge.net/p/webadmin/bugs/4963/
2017-05-28 12:08:45 -07:00
Jamie Cameron
133b511a75
Encourage use of utf-8 languages
2017-05-24 16:14:20 -07:00
Jamie Cameron
d53ce67174
Filter out ANY onX= tags in HTML, as the number of possible ways Javascript can be called is unbounded
2017-05-21 11:25:58 -07:00
Jamie Cameron
aafbe392ba
Filter out some more javascript
2017-05-17 22:15:01 -07:00
Jamie Cameron
f7da281d72
Allow disabling of the SSL name check
2017-05-15 16:54:07 -07:00
Jamie Cameron
5abc9b538b
Include SNI host in hostname to check
2017-05-15 16:34:13 -07:00
Jamie Cameron
49aa15c138
Use correct hostname in SNI for SSL requests https://virtualmin.com/node/51969
2017-04-29 14:59:03 -07:00
Jamie Cameron
406b3f7bdc
Add new option to keep the current shell
2017-04-23 20:20:56 -07:00
Jamie Cameron
bc0eea7a01
onError is also a JS reference
2017-04-11 16:17:30 -07:00
Jamie Cameron
f559c1a078
Handle version parts like deb8u9 and deb8u10 https://sourceforge.net/p/webadmin/bugs/4911/
2017-03-07 20:53:17 -08:00
Jamie Cameron
155f98977a
Move version comparison code up to global
2017-02-10 15:47:35 -08:00
Jamie Cameron
ee35b62079
Add core function to check if bash is being used
2017-01-22 16:16:46 -08:00
Jamie Cameron
7208412de2
let's encrypt output can be a symlink, so always de-reference it https://www.virtualmin.com/node/42419
2016-09-29 16:28:54 -07:00
Jamie Cameron
ac4d68f2ce
Close HTTP connection on failure, to avoid dangling file handles https://www.virtualmin.com/node/41967
2016-09-09 16:25:11 -07:00
Jamie Cameron
5881b223b4
inet6 constants are now in the Socket package https://www.virtualmin.com/node/40065
2016-07-24 13:12:25 -07:00
Jamie Cameron
7e72bcdbaf
Use common function for creating logged event descriptions
2016-06-25 16:45:11 -07:00
Jamie Cameron
941f110eda
github is sending the HTTP header X-Geo-Block-List: with no value, which causes webmin to stop processing headers at this point. This causes remaining headers to be included in the downloaded file
2016-06-19 12:22:50 -07:00
Jamie Cameron
025be61e1e
Completed webmin logging via email
2016-06-11 18:51:46 -07:00
Jamie Cameron
a53b6d96ca
On some systems, there is no set_tlsext_host_name function
2016-05-26 07:42:22 -07:00
Matthew Noorenberghe
b7815aa85e
Use SNI for make_http_connection connections. Fixes #355
2016-05-21 20:35:31 -07:00
Jamie Cameron
1c0e069881
Fix ordering of params to symlink 86eeb96334
2016-05-06 17:33:22 -07:00
Jamie Cameron
86eeb96334
copy_source_dest support for symlinks https://github.com/webmin/webmin/issues/322
2016-05-05 20:37:29 -07:00
Jamie Cameron
c613cdc8c9
don;'t completely crash if one module fails
2016-04-08 12:07:54 -07:00
Jamie Cameron
6ad0df49e1
Properly remove use of old API for writing files https://sourceforge.net/p/webadmin/bugs/4717/
2016-03-09 21:12:36 -08:00
Jamie Cameron
10f12a83c6
Rollback to HTTP 1.0, as switching to 1.1 seems to break some downloads
2016-03-07 10:28:39 -08:00
Jamie Cameron
7eec607f86
HTTP 1.0 is dead and buries
2016-02-29 15:34:48 -08:00
