grossmj
6847e19847
Change method to prevent forbidden directory traversal. Fixes #1894
2021-05-16 14:44:38 +09:30
grossmj
2bf16f1e5f
Change method to prevent forbidden directory traversal. Ref #1894
2021-05-16 14:29:56 +09:30
grossmj
f3d81fa450
Clean files and catch file path escape. Ref #1894
2021-05-15 22:35:44 +09:30
grossmj
09ac7fd7fb
Merge branch '2.2' into 3.0
...
# Conflicts:
# gns3server/compute/base_manager.py
# gns3server/handlers/api/compute/dynamips_vm_handler.py
# gns3server/handlers/api/compute/iou_handler.py
# gns3server/handlers/api/compute/project_handler.py
# gns3server/handlers/api/compute/qemu_handler.py
# gns3server/handlers/api/controller/node_handler.py
# gns3server/handlers/api/controller/project_handler.py
# gns3server/handlers/index_handler.py
# tests/handlers/api/compute/test_project.py
# tests/handlers/api/compute/test_qemu.py
# tests/handlers/api/controller/test_node.py
# tests/handlers/api/controller/test_project.py
2021-05-15 20:46:34 +09:30
Jeremy Grossmann
3a479d7ea6
Merge pull request #1900 from GNS3/prevent-directory-traversal
...
Prevent directory traversal
2021-05-15 04:09:04 -07:00
grossmj
e86d8f96ca
Merge branch '2.2' into 3.0
...
# Conflicts:
# gns3server/version.py
2021-05-15 20:12:21 +09:30
grossmj
9a6978902d
Fix tests.
2021-05-15 19:43:36 +09:30
grossmj
6294ad9e76
Prevent directory traversal
2021-05-15 17:35:32 +09:30
grossmj
8810249d36
Add user groups support.
2021-05-15 15:10:02 +09:30
grossmj
2c938b2c19
Development on 2.2.22dev1
2021-05-10 23:44:40 +09:30
grossmj
03b7d9191b
Release v2.2.21
2021-05-10 22:42:46 +09:30
grossmj
87c87ca3cb
Sync appliance files.
2021-05-10 22:39:03 +09:30
grossmj
dfba40fee2
Merge branch 'master' into 2.2
2021-05-10 22:34:59 +09:30
grossmj
956b9056c1
Fix issues with latest version of sqlalchemy
2021-05-08 15:37:51 +09:30
grossmj
4727708c85
Upgrade dependencies
2021-05-08 14:32:26 +09:30
grossmj
0a77f0035b
Add delete cascade on foreign keys for appliance table
2021-05-06 17:25:32 +09:30
grossmj
10164e262d
Enable SQL foreign key support for SQLite
2021-05-06 17:21:45 +09:30
grossmj
a1f3f6472a
Upgrade dependencies
2021-05-06 16:56:07 +09:30
grossmj
912fb2ed29
Fix add node from template. Fixes https://github.com/GNS3/gns3-web-ui/issues/1122
2021-05-06 16:22:16 +09:30
grossmj
60701b63ac
Update README to use python virtual env
2021-05-06 15:56:26 +09:30
piotrpekala7
f576bedfaf
Release web UI 2.2.21
2021-04-30 14:01:53 +02:00
grossmj
a795e0d7c1
Add missing CORS origins.
2021-04-28 21:20:05 +09:30
grossmj
d8968cbee8
Merge remote-tracking branch 'origin/3.0' into 3.0
2021-04-28 15:57:39 +09:30
grossmj
ad7d8e2e7d
Fix tests.
2021-04-28 15:56:11 +09:30
grossmj
41ba215e32
Show topology path when check topology schema fails.
2021-04-27 22:48:55 -07:00
grossmj
b1b3338e3c
Fix bug when binding on address already in use.
2021-04-28 15:13:31 +09:30
grossmj
edb20482c7
Fix bug when no server config file is present.
2021-04-28 14:44:34 +09:30
grossmj
7b3351bba6
Upgrade dependencies.
2021-04-28 14:43:52 +09:30
grossmj
d3ace8ff17
Fix user delete endpoint.
2021-04-26 16:21:16 +09:30
grossmj
49be4146d6
Protect controlle notification endpoints. Ref #1888
...
(WebSocket endpoint is not secured, it takes an optional token).
2021-04-26 16:18:18 +09:30
grossmj
a02aede1b0
Use uuid5 to create new compute_id. Fixes #1641 #1887
2021-04-21 13:47:32 +09:30
grossmj
dff1ec9bc6
Fix /users/me endpoint.
2021-04-20 19:54:55 +09:30
grossmj
0465cb87f6
Protect the API and add alternative authentication endpoint.
2021-04-20 11:59:02 +09:30
grossmj
e28452f09a
Secure users API and handle manual password recovery.
2021-04-19 09:40:04 +09:30
grossmj
c03226e368
Add default super admin account in controller db.
2021-04-18 17:39:47 +09:30
grossmj
9404c00411
Complete type annotations for API endpoints.
2021-04-18 15:40:38 +09:30
grossmj
cefab8d362
Rename __json__() to asdict()
2021-04-17 23:34:28 +09:30
grossmj
44074ff7c9
Some cleaning.
2021-04-17 18:36:32 +09:30
grossmj
bad3ef7003
Detect the app is exiting and avoid reconnecting to computes.
2021-04-17 18:33:20 +09:30
grossmj
6b8ce8219c
Fix tests.
2021-04-15 18:30:22 +09:30
grossmj
9c850e0f2b
Move schemas between compute and controller subpackages
2021-04-15 18:12:08 +09:30
grossmj
c59fc375f2
Remove traceng code.
2021-04-13 19:03:23 +09:30
Jeremy Grossmann
fbd5e12e7b
Update GitHub Actions badge
2021-04-13 18:53:39 +09:30
grossmj
c021e21309
Use black with -l 120 param.
2021-04-13 18:46:50 +09:30
grossmj
f928738bd5
Use pyupgrade with --py36-plus param.
2021-04-13 18:37:58 +09:30
grossmj
a9eb035b7d
Move error responses to API routers.
2021-04-13 16:19:56 +09:30
grossmj
6b0d0de1bc
Wait for local compute to be started.
...
Don't reconnect to local compute when server is being stopped.
2021-04-13 15:41:59 +09:30
grossmj
71725aade6
Rename ssl and auth configuration file settings.
...
Add enable SSL config validator.
Strict configuration file validation: any error will prevent the server to start.
Core server logic moved to a Server class.
2021-04-12 23:26:42 +09:30
grossmj
1b5a5de4bc
Generate new config for each test. Fixes tests.
2021-04-12 19:37:59 +09:30
grossmj
30ebae207f
Use Pydantic to validate the server config file.
2021-04-12 17:02:23 +09:30