|
0df5d5bd72
|
KASM-6773 Escape JSON filenames in WebSocket file list responses
|
2025-03-18 16:58:25 +05:00 |
|
|
4973781a8f
|
KASM-6773 Use snprintf instead of sprintf for safer path handling
|
2025-03-18 16:58:25 +05:00 |
|
|
4620601891
|
KASM-6773 Define WS_MAX_BUF_SIZE for buffer size standardization
|
2025-03-18 16:58:25 +05:00 |
|
|
73e28f7d62
|
Add size to downloads json
|
2024-09-24 17:48:19 +03:00 |
|
|
17ec8c2e35
|
Tune perm printing format
|
2024-09-24 17:45:30 +03:00 |
|
|
0cc4a4f128
|
Warning fix
|
2024-09-24 15:04:24 +03:00 |
|
|
7659765116
|
Implement /api/downloads
|
2024-09-24 15:03:54 +03:00 |
|
|
a6bc1e4b76
|
Set the mimetype of everything under Downloads/ to binary
|
2024-07-30 13:51:10 +03:00 |
|
|
6a2c2c82a1
|
32-bit changes for rpi, from lgultgithub
|
2024-07-01 14:35:17 +03:00 |
|
|
4d4516f727
|
Merge branch 'bugfix/large-headers' into 'master'
Bugfix/large headers
See merge request kasm-technologies/internal/KasmVNC!137
|
2024-06-18 19:43:41 +00:00 |
|
|
79ca2ee054
|
Increase the request buffer to 16k
|
2024-06-14 12:19:39 +03:00 |
|
|
ba6226e308
|
Send a 400 bad request for too large requests
|
2024-06-14 12:15:16 +03:00 |
|
|
4b18320984
|
Fix dir traversal by percent-encoding dots
|
2024-06-14 11:58:06 +03:00 |
|
|
fb7570709a
|
Extend username limit to 128-1
|
2023-11-06 15:22:23 +02:00 |
|
|
73c3bda8cd
|
Fix off-by-one in username length check
|
2023-11-06 13:59:37 +02:00 |
|
|
66f3013998
|
Add clear_clipboard API
|
2023-01-09 13:32:30 +02:00 |
|
|
17947d5f44
|
Add support for custom response headers
|
2022-11-08 18:16:16 +02:00 |
|
|
d9cf46f83e
|
Merge branch 'feature/KASM-2797_force_full_frame' into 'master'
Add /api/send_full_frame
Closes KASM-2797
See merge request kasm-technologies/internal/KasmVNC!50
|
2022-08-14 16:13:32 +00:00 |
|
|
3b40a92548
|
Udp
|
2022-07-26 10:38:14 +00:00 |
|
|
4e134b578c
|
Resolve KASM-2798 "Bugfix/ memory leak"
|
2022-06-24 17:27:33 +00:00 |
|
|
8b71ea3cd9
|
Add /api/send_full_frame
|
2022-06-23 18:53:27 +03:00 |
|
|
87e39f896c
|
Detailed log errors for the /websockify path
|
2022-06-06 17:36:00 +03:00 |
|
|
bf2bf679b6
|
New logging setup
|
2022-05-25 18:04:33 +00:00 |
|
|
661e9ef329
|
Return 403 for too large Auth headers (attack)
|
2022-05-24 14:55:05 +00:00 |
|
|
a6842bb46a
|
Add support for X-Forwarded-For
|
2022-05-24 11:04:58 +00:00 |
|
|
d581eb798d
|
Use 64-bit var for the served file size
|
2022-04-11 18:53:45 +03:00 |
|
|
e3afc937e5
|
Bulk update_user and remove_user should check for all users' existence
|
2022-01-31 12:41:37 +02:00 |
|
|
42d7ff015d
|
Resolve KASM-2238 "Feature/ freeze session"
|
2022-01-28 12:24:38 +00:00 |
|
|
99680f23ff
|
Resolve KASM-2194 "Feature/ bulk user mgmt"
|
2022-01-24 16:42:29 +00:00 |
|
|
03729ca66e
|
Update user
|
2022-01-17 17:10:24 +00:00 |
|
|
bb364badd3
|
Apply blacklist options to httpd basicauth
|
2021-12-06 12:07:32 +02:00 |
|
|
d3add8150c
|
Bugfix/kasm 2004 download spaces (#70)
* Handle spaces in download files, dirlisting
* Disallow / in percent urls
Co-authored-by: Lauri Kasanen <cand@gmx.com>
|
2021-10-18 07:38:57 -04:00 |
|
|
e6d1b8c3c8
|
Fix a nonexistent username + empty password passing through (#68)
Co-authored-by: Lauri Kasanen <cand@gmx.com>
|
2021-10-14 13:57:59 -04:00 |
|
|
d80eb39686
|
Fix DigitalOcean load balancer websocket connection (they too used wrong case in a header)
|
2021-08-17 13:30:33 +03:00 |
|
|
fb9dd56703
|
Initial /api/get_frame_stats
|
2021-07-27 15:33:48 +03:00 |
|
|
32e8d40472
|
Implement /api/get_bottleneck_stats
|
2021-07-26 18:58:29 +03:00 |
|
|
811e7cde3a
|
Use case-insensitive search for the websocket headers
|
2021-07-12 15:44:24 +03:00 |
|
|
14e08a2067
|
Add trailing slash in dir listing
|
2021-04-22 11:33:05 +03:00 |
|
|
1632f4888d
|
Enable basicauth by default, remove the option to supply it on the command line
|
2021-03-25 11:25:30 +02:00 |
|
|
fed991d697
|
Return 401 unauth for non-owner trying /api/
|
2021-03-04 13:59:29 +02:00 |
|
|
980eedd33b
|
Add HTTP GET APIs for creating, removing users and giving control
|
2021-03-03 14:55:14 +02:00 |
|
|
3f6524ee30
|
Add support for owner screenshot HTTP GET API
|
2021-03-02 15:23:32 +02:00 |
|
|
101695970b
|
Reapply "Use crypt_r in threaded code"
|
2021-02-28 22:53:06 +13:00 |
|
|
9084409a20
|
Merge branch 'users' into packages_and_multiuser_passwd
|
2021-02-25 22:10:40 +13:00 |
|
|
fbe05cee86
|
Fix random 401 Forbidden on Ubuntu 20 and other newer releases
|
2021-02-25 21:23:21 +13:00 |
|
|
0d47d4890a
|
Enable TLS 1.1 and 1.2
|
2021-01-20 22:49:32 +13:00 |
|
|
a27744bca6
|
Enable TLS 1.1 and 1.2
|
2020-10-14 14:39:33 +03:00 |
|
|
263d05a296
|
Apply read-only perms upon connecting
|
2020-10-12 15:11:49 +03:00 |
|
|
9a5afc5a62
|
Handle the new, multi-user kasmpasswd format auth
|
2020-10-12 14:58:11 +03:00 |
|
|
1db77ee6bd
|
Add some basicauth logging (most debug/verbose only)
|
2020-10-02 14:43:19 +03:00 |
|