Commit Graph

52 Commits

Author SHA1 Message Date
El
0df5d5bd72 KASM-6773 Escape JSON filenames in WebSocket file list responses 2025-03-18 16:58:25 +05:00
El
4973781a8f KASM-6773 Use snprintf instead of sprintf for safer path handling 2025-03-18 16:58:25 +05:00
El
4620601891 KASM-6773 Define WS_MAX_BUF_SIZE for buffer size standardization 2025-03-18 16:58:25 +05:00
73e28f7d62 Add size to downloads json 2024-09-24 17:48:19 +03:00
17ec8c2e35 Tune perm printing format 2024-09-24 17:45:30 +03:00
0cc4a4f128 Warning fix 2024-09-24 15:04:24 +03:00
7659765116 Implement /api/downloads 2024-09-24 15:03:54 +03:00
a6bc1e4b76 Set the mimetype of everything under Downloads/ to binary 2024-07-30 13:51:10 +03:00
6a2c2c82a1 32-bit changes for rpi, from lgultgithub 2024-07-01 14:35:17 +03:00
4d4516f727 Merge branch 'bugfix/large-headers' into 'master'
Bugfix/large headers

See merge request kasm-technologies/internal/KasmVNC!137
2024-06-18 19:43:41 +00:00
79ca2ee054 Increase the request buffer to 16k 2024-06-14 12:19:39 +03:00
ba6226e308 Send a 400 bad request for too large requests 2024-06-14 12:15:16 +03:00
4b18320984 Fix dir traversal by percent-encoding dots 2024-06-14 11:58:06 +03:00
fb7570709a Extend username limit to 128-1 2023-11-06 15:22:23 +02:00
73c3bda8cd Fix off-by-one in username length check 2023-11-06 13:59:37 +02:00
66f3013998 Add clear_clipboard API 2023-01-09 13:32:30 +02:00
17947d5f44 Add support for custom response headers 2022-11-08 18:16:16 +02:00
d9cf46f83e Merge branch 'feature/KASM-2797_force_full_frame' into 'master'
Add /api/send_full_frame

Closes KASM-2797

See merge request kasm-technologies/internal/KasmVNC!50
2022-08-14 16:13:32 +00:00
3b40a92548 Udp 2022-07-26 10:38:14 +00:00
4e134b578c Resolve KASM-2798 "Bugfix/ memory leak" 2022-06-24 17:27:33 +00:00
8b71ea3cd9 Add /api/send_full_frame 2022-06-23 18:53:27 +03:00
87e39f896c Detailed log errors for the /websockify path 2022-06-06 17:36:00 +03:00
bf2bf679b6 New logging setup 2022-05-25 18:04:33 +00:00
661e9ef329 Return 403 for too large Auth headers (attack) 2022-05-24 14:55:05 +00:00
a6842bb46a Add support for X-Forwarded-For 2022-05-24 11:04:58 +00:00
d581eb798d Use 64-bit var for the served file size 2022-04-11 18:53:45 +03:00
e3afc937e5 Bulk update_user and remove_user should check for all users' existence 2022-01-31 12:41:37 +02:00
42d7ff015d Resolve KASM-2238 "Feature/ freeze session" 2022-01-28 12:24:38 +00:00
99680f23ff Resolve KASM-2194 "Feature/ bulk user mgmt" 2022-01-24 16:42:29 +00:00
03729ca66e Update user 2022-01-17 17:10:24 +00:00
bb364badd3 Apply blacklist options to httpd basicauth 2021-12-06 12:07:32 +02:00
d3add8150c Bugfix/kasm 2004 download spaces (#70)
* Handle spaces in download files, dirlisting

* Disallow / in percent urls

Co-authored-by: Lauri Kasanen <cand@gmx.com>
2021-10-18 07:38:57 -04:00
e6d1b8c3c8 Fix a nonexistent username + empty password passing through (#68)
Co-authored-by: Lauri Kasanen <cand@gmx.com>
2021-10-14 13:57:59 -04:00
d80eb39686 Fix DigitalOcean load balancer websocket connection (they too used wrong case in a header) 2021-08-17 13:30:33 +03:00
fb9dd56703 Initial /api/get_frame_stats 2021-07-27 15:33:48 +03:00
32e8d40472 Implement /api/get_bottleneck_stats 2021-07-26 18:58:29 +03:00
811e7cde3a Use case-insensitive search for the websocket headers 2021-07-12 15:44:24 +03:00
14e08a2067 Add trailing slash in dir listing 2021-04-22 11:33:05 +03:00
1632f4888d Enable basicauth by default, remove the option to supply it on the command line 2021-03-25 11:25:30 +02:00
fed991d697 Return 401 unauth for non-owner trying /api/ 2021-03-04 13:59:29 +02:00
980eedd33b Add HTTP GET APIs for creating, removing users and giving control 2021-03-03 14:55:14 +02:00
3f6524ee30 Add support for owner screenshot HTTP GET API 2021-03-02 15:23:32 +02:00
101695970b Reapply "Use crypt_r in threaded code" 2021-02-28 22:53:06 +13:00
9084409a20 Merge branch 'users' into packages_and_multiuser_passwd 2021-02-25 22:10:40 +13:00
fbe05cee86 Fix random 401 Forbidden on Ubuntu 20 and other newer releases 2021-02-25 21:23:21 +13:00
0d47d4890a Enable TLS 1.1 and 1.2 2021-01-20 22:49:32 +13:00
a27744bca6 Enable TLS 1.1 and 1.2 2020-10-14 14:39:33 +03:00
263d05a296 Apply read-only perms upon connecting 2020-10-12 15:11:49 +03:00
9a5afc5a62 Handle the new, multi-user kasmpasswd format auth 2020-10-12 14:58:11 +03:00
1db77ee6bd Add some basicauth logging (most debug/verbose only) 2020-10-02 14:43:19 +03:00