909 Commits (9466f0269607098304c03f87e2ed116b93a2c01d)

 

All Branches   

Search

Author	SHA1	Message	Date
BlackDex	9466f02696	Recoded TOTP time drift validation	5 years ago
BlackDex	d989a19f76	Merge branch 'master' of https://github.com/dani-garcia/bitwarden_rs into totp-timedrift	5 years ago
Daniel García	d292269ea0	Make the blacklist logic be cached	5 years ago
BlackDex	ebf40099f2	Updated authenticator TOTP ... - Added security check for previouse used codes - Allow TOTP codes with 1 step back and forward when there is a time drift. This means in total 3 codes could be valid. But only newer codes then the previouse used codes are excepted after that.	5 years ago
Daniel García	0586c00285	Merge pull request #653 from stevesbrain/master ... Simple grammar update	5 years ago
Steve Divskinsy	bb9ddd5680	Merge pull request #1 from stevesbrain/stevesbrain-patch-1 ... Very simple grammar updates	5 years ago
Steve Divskinsy	cb1663fc12	Very simple grammar updates ... Just some basic grammar updates in the "get in touch" section.	5 years ago
Daniel García	45d9d8db94	Merge pull request #652 from BlackDex/hibp-changes ... Some modification when no HIBP API Key is set	5 years ago
BlackDex	edc482c8ea	Changed HIBP Error message. ... - Moved the manual link to the check to the top. - Clearified that hibp is a payed service. - Changed error logo to hibp logo.	5 years ago
BlackDex	6e5c03cc78	Some modification when no HIBP API Key is set ... - Added an URL with the useraccount for manual check. - Added support for HTTP(S)_PROXY for hibp.	5 years ago
Daniel García	881c1978eb	Error when the URL scheme doesn't match the database type	5 years ago
Daniel García	662bc27523	Updated dependencies and fixed disable_admin_token description	5 years ago
Daniel García	b4b62c22a4	Merge pull request #648 from BlackDex/icon-security ... Added missing .env configuration option.	5 years ago
BlackDex	05569147af	Added missing .env configuration option.	5 years ago
Daniel García	99a635d327	Merge pull request #643 from BlackDex/icon-security ... Updated icon blacklisting.	5 years ago
Daniel García	e6b763026e	Merge branch 'master' into icon-security	5 years ago
Daniel García	c182583e09	Merge pull request #644 from BlackDex/issue-565 ... Fixed issue #565	5 years ago
Daniel García	d821389c2e	Merge pull request #639 from vverst/cors-update ... Change CORS headers	5 years ago
BlackDex	be2916333b	Fixed issue #565 ... Issue fixed by omitting the cookie header when cookie_str is empty	5 years ago
BlackDex	9124d8a3fb	Updated icon blacklisting. ... - Blacklisting was not effective for redirects and rel href - Able to blacklist non global IP's like RFC1918, multicast etc...	5 years ago
vpl	7b1da527a6	Change CORS headers ... Only add Allow-Origin to all requests and move the others to preflight OPTIONS request. If Origin is `file://` change it to the wildcard.	5 years ago
Daniel García	e7b8602e1f	Merge pull request #638 from mprasil/add_sqlite_binary ... Add sqlite binary into the docker images	5 years ago
Miro Prasil	d6e9af909b	Remove the unnecessary check for sqlite ... The binary we use is called `sqlite3` so no need to check for other name variants as we won't use those anyways.	5 years ago
Miro Prasil	acdd42935b	Add sqlite binary into the docker images ... This is done to enable backup functionality in the admin interface while we're waiting for the libsqlite-sys 0.17 to bubble up in the upstream dependencies. Then we can start using `VACUUM INTO` This also extends the check for the sqlite binary to also try `sqlite3` as this is the name of the binary in baseimage distributions we use.	5 years ago
Daniel García	8367d1d715	Merge pull request #631 from vverst/cors-put ... Use Access-Control-Allow-Method	5 years ago
vpl	56f12dc982	Use Access-Control-Allow-Method	5 years ago
Daniel García	4c07f05b3a	Remove Result<T, E: Debug> in preparation of deprecation as Rocket responder. ... Removed unnecessary returns	5 years ago
Daniel García	b73ff886c3	Use upstream rmp	5 years ago
Daniel García	2e7bd62353	Merge pull request #624 from swedishborgie/postgresql ... Fix issue with downloading attachments and PostgreSQL backend.	5 years ago
Michael Powers	1264eb640a	Added a migration that fixes #1 which caused attachments to be broken ... for the PostgreSQL backend. Also converts any CHAR types to VARCHAR to prevent the same issue from causing problems down the line.	5 years ago
Daniel García	3a90364b32	Merge pull request #621 from swedishborgie/postgresql ... Adds support for PostgreSQL which adds #87 and is mentioned in #246.	5 years ago
Michael Powers	f5f9861a78	Adds support for PostgreSQL which resolves #87 and is mentioned in #246. ... This includes migrations as well as Dockerfile's for amd64. The biggest change is that replace_into isn't supported by Diesel for the PostgreSQL backend, instead requiring the use of on_conflict. This unfortunately requires a branch for save() on all of the models currently using replace_into.	5 years ago
Daniel García	f9408a00c6	Allow self signed certs and increase a bit the timings	5 years ago
Daniel García	ae8bf954c1	Updated web vault to 2.12	5 years ago
Daniel García	c656f2f694	Merge pull request #604 from mprasil/fix-healthcheck ... Fix #603 and remove mysql from sqlite image	5 years ago
Miro Prasil	eea3f13bb3	Fix #603 and remove mysql from sqlite image ... This changes the healthcheck to use `sh` instead of bash, that is absent from some image versions. (like alpine) It also removes `*mariadb*` packages from runtime image of sqlite images as these shouldn't be required.	5 years ago
Daniel García	df8114f8be	Updated client kdf iterations to 100000 and fixed some lints	5 years ago
Daniel García	dda244edd8	Merge pull request #589 from H3npi/H3npi-patch-1 ... Adds Healthcheck for default docker container	5 years ago
H3npi	cce3ce816c	Adds environment port to curl healthcheck	5 years ago
Daniel García	65c0d1064b	Merge pull request #599 from vverst/cors ... Add Cors headers	5 years ago
vpl	5a2f968d7a	Set correct response headers, status code	5 years ago
vpl	16d88402cb	Initial version of CORS support	5 years ago
Daniel García	7dcf18151d	Fix onsubmit	5 years ago
Daniel García	e3404dd322	Use the local scripts instead of cloudflare, remove jquery and update config so disabling a master toggle doesn't remove the values	5 years ago
Daniel García	bfc517ee80	Remove unused warning	5 years ago
Daniel García	4a7d2a1e28	Rename static files endpoint	5 years ago
H3npi	66a68f6d22	Adds Healthcheck for all docker container	5 years ago
Daniel García	469318bcbd	Updated dependencies and web vault version	5 years ago
Daniel García	c07c9995ea	Merge pull request #555 from vverst/email-codes ... Add Email 2FA login	5 years ago
Daniel García	2c2276c5bb	Merge pull request #585 from ViViDboarder/mail-auth-over-insecure ... Allow explicitly defined smtp auth mechansim	5 years ago