Subject | Hash | Author | Date (UTC) |
---|---|---|---|
Just some comments | 96f8542619d772c29b9bb07e4a066b7302d6f35c | Catalin(ux) M. BOIE | 2016-03-11 17:25:29 |
TODO clean-ups | 3e34a304a204792b1a1a0b403c88e3164441066c | Catalin(ux) M. BOIE | 2016-03-09 17:27:10 |
Document web hooks and anonymous push | 449e2d788ec06a49cc93f7d058df51ec351b9244 | Catalin(ux) M. BOIE | 2016-03-09 17:26:29 |
Do not log password in logs | 4e183a15605f4b338863ea97192e46e0cf62cfe8 | Catalin(ux) M. BOIE | 2016-03-09 17:25:52 |
Do not continue to show objects if repo returned an error | cd2a6a06d7867bb5da19108c6ab575e741b8b08e | Catalin(ux) M. BOIE | 2016-03-09 03:50:28 |
Make more clearer the events error message | c76dd790a73e04318f0fc58b22d7701858e7dadf | Catalin(ux) M. BOIE | 2016-03-08 20:57:37 |
Accept 301 as a valid HTTP code | 368f187c74e54052dbeeddfe9b5a533b155a62c2 | Catalin(ux) M. BOIE | 2016-03-08 20:57:01 |
We need to copy also the tags in the namespace to not get errors when pushing tags | a6fa7c067b29f2d3ae400e6cb9117d17225ce047 | Catalin(ux) M. BOIE | 2016-03-06 21:21:07 |
Clean some items on TODO regarding mr | 2383950909474e510897f37e46c2cf7cc762ec89 | Catalin(ux) M. BOIE | 2016-03-06 21:20:37 |
Lots of fixes for pull requests | 54c410d144ae9ebdcc17ad8d11865a378e89f576 | Catalin(ux) M. BOIE | 2016-03-06 20:07:06 |
Replaced rg_bug_next_id with the more generic rg_repo_next_id | 7c3131ac2bff3afb08983a2ebd23736ced070fb1 | Catalin(ux) M. BOIE | 2016-02-17 16:07:12 |
text correction: Amazon user must also have S3 rights | 6a97f6ef92bb455b02434f35218224a3cae4cf02 | Catalin(ux) M. BOIE | 2016-02-14 12:11:29 |
for git:// access, organization field was missing | 6c4479d982ea36941dc10db6d1b74012d1a75649 | Catalin(ux) M. BOIE | 2016-02-14 12:10:16 |
TODO changes | bc6bf53c22bf2918e0fca8684406a753e4a335a3 | Catalin(ux) M. BOIE | 2016-02-14 12:09:47 |
Added login hints: about rg_change_pass | ed1c5226b5e9e44859f76ad058aed76423855e0c | Catalin(ux) M. BOIE | 2016-02-14 12:09:23 |
css: fixed admins pages | 3a8e93564ee53176ae510e131e55fa4bbef98908 | Catalin(ux) M. BOIE | 2016-02-14 12:09:00 |
Added rg_change_pass tool | cfc9e214ef3bb978e831a68ab6395c74b6604b41 | Catalin(ux) M. BOIE | 2016-02-14 11:56:10 |
CSS fixes to make the spaces the same all over the place | 6abddc6fc655a8b67537f46106467229ed687dcc | Catalin(ux) M. BOIE | 2016-02-14 11:19:07 |
minor: reorder functions | 4c02703e69e56289670e96952b49c55fadcab671 | Catalin(ux) M. BOIE | 2016-02-14 09:40:44 |
Show ssh key type before number of bits | 980da7f8b9c3380c169547c2b1f522e7d52f0398 | Catalin(ux) M. BOIE | 2016-02-12 05:20:21 |
File | Lines added | Lines deleted |
---|---|---|
inc/token.inc.php | 1 | 0 |
inc/user.inc.php | 3 | 2 |
samples/rg.conf | 1 | 1 |
File inc/token.inc.php changed (mode: 100644) (index be41c1f..2d3b4db) | |||
... | ... | function rg_token_get($db, $rg, $tag) | |
232 | 232 | if ($sign_key === FALSE) | if ($sign_key === FALSE) |
233 | 233 | break; | break; |
234 | 234 | ||
235 | // Add a random string to protect against BREACH attack | ||
235 | 236 | $rand = rg_id(16); | $rand = rg_id(16); |
236 | 237 | $data = $rand . $rg['sid'] . $rg['ua'] . $tag; | $data = $rand . $rg['sid'] . $rg['ua'] . $tag; |
237 | 238 | $sign = hash_hmac('sha512', $data, $sign_key); | $sign = hash_hmac('sha512', $data, $sign_key); |
File inc/user.inc.php changed (mode: 100644) (index 35380d3..47aedee) | |||
... | ... | function rg_user_set_session_cookie($db, $uid, $sess_time, $lock_ip) | |
839 | 839 | rg_sess_add($db, $uid, $sid, $sess_time, $lock_ip); | rg_sess_add($db, $uid, $sid, $sess_time, $lock_ip); |
840 | 840 | else | else |
841 | 841 | $sid = "X" . $sid; | $sid = "X" . $sid; |
842 | setcookie("sid", $sid, 0, "/", $_SERVER['SERVER_NAME'], | ||
843 | $secure, TRUE /* httponly */); | ||
842 | if (isset($_SERVER['SERVER_NAME'])) | ||
843 | setcookie('sid', $sid, 0, '/', $_SERVER['SERVER_NAME'], | ||
844 | $secure, TRUE /*httponly*/); | ||
844 | 845 | ||
845 | 846 | rg_log_exit(); | rg_log_exit(); |
846 | 847 | return $sid; | return $sid; |
File samples/rg.conf changed (mode: 100644) (index fce36f9..d594086) | |||
84 | 84 | # all rest | # all rest |
85 | 85 | RewriteRule (.*) /index.php?rwe=1&vv=$1 [last,qsappend] | RewriteRule (.*) /index.php?rwe=1&vv=$1 [last,qsappend] |
86 | 86 | ||
87 | # Security | ||
87 | # Security (ClickJacking) | ||
88 | 88 | <IfModule mod_headers.c> | <IfModule mod_headers.c> |
89 | 89 | Header always append X-Frame-Options DENY | Header always append X-Frame-Options DENY |
90 | 90 | # Add this for SSL | # Add this for SSL |