60 Commits

Author SHA1 Message Date
Micah Lee
174c03e892
Remove version string from http response headers, to avoid any information disclosure about the sender's server 2017-05-22 14:58:23 -07:00
Miguel Jacq
16f4d5f3ca
use the actual OnionShare version as the Server header string 2017-05-21 10:30:37 +10:00
Miguel Jacq
38ee7fde21
Remove duplication of security headers 2017-05-21 10:03:18 +10:00
Miguel Jacq
6c52988842
Harden some response headers 2017-05-20 12:34:00 +10:00
Micah Lee
1591888863
Renamed onionshare.helpers module to onionshare.common 2017-05-16 11:05:48 -07:00
Micah Lee
bb990ff574 Removed transparent_torification from the full app, and refactored OnionShare class to get passed in an Onion, and doesn't get passed in stealth. 2017-04-17 19:12:02 -07:00
Micah Lee
6c074e4e3e
In Whonix, listen on 0.0.0.0 instead of 127.0.0.1 (#220) 2017-02-22 18:42:41 -08:00
Micah Lee
1336a1c3b4
Update comments to be more accurate 2017-02-22 15:28:06 -08:00
Micah Lee
f8005a63ea
Change GPL copyright from 2016 to 2017 2017-01-06 18:58:15 -08:00
Garrett Robinson
406fffdb39 Make render_template_string autoescape by default in Flask versions < 0.11 2016-12-30 13:04:19 -05:00
Garrett Robinson
bfbf006c57 Revert "Added a function to remove HTML from file and directory names"
This reverts commit 11c5f5b699d302edfda15a1d7bfd3ed2fec87a59.
2016-12-30 12:04:09 -05:00
Garrett Robinson
e1f9957f56 Revert "Replaced sanitize_html() function that was based on regex with python3's html.escape()"
This reverts commit cff11cd7e48fe4e94ef484ba1f1095362330452d.
2016-12-30 12:02:40 -05:00
Micah Lee
eb00a29ca7
Merge branch 'master' of https://github.com/eightnoteight/onionshare into eightnoteight-master
Conflicts:
	onionshare/web.py
	onionshare_gui/onionshare_gui.py
	resources/locale/cs.json
	resources/locale/eo.json
	resources/locale/nl.json

This merge required quite a bit of refactoring because.
2016-12-22 16:00:06 -08:00
Micah Lee
cff11cd7e4
Replaced sanitize_html() function that was based on regex with python3's html.escape() 2016-12-21 22:56:15 -08:00
Emmanuel Morales
11c5f5b699 Added a function to remove HTML from file and directory names 2016-12-18 21:07:38 -08:00
Micah Lee
76937d5cb5
Move imports to module level 2016-09-06 13:17:55 -07:00
Micah Lee
7a46336149
Enable stdout in Windows, OSX CLI versions (#305) 2016-09-06 12:09:10 -07:00
Micah Lee
e093c7298a Disable writing to stdout in Windows (fixes #304) 2016-09-06 18:44:35 -07:00
Micah Lee
7ab936cec2
Prevent canceling download from being confused with rate limit attacker 2016-09-06 10:18:50 -07:00
Srinivas Devaki
c570d7ea77 added progress bar for zipping files 2016-08-24 01:43:21 +05:30
jvoisin
17e389b800 Improve pep8 conformance 2016-04-18 01:40:17 +02:00
Micah Lee
db1ed7c6de Fix issue with shutting down Flask server when not using --local-only (#238) 2016-04-12 17:04:19 -07:00
Micah Lee
d35b5a9acd Added rate-limiting to GUI. After 20 404 errors, server automatically stops (#238) 2016-04-12 16:49:46 -07:00
Micah Lee
b47ef630d5 Replace onionshare slug with 2-words from securedrop diceware list (#238) 2016-04-12 16:29:11 -07:00
Micah Lee
c07f4e5f83 If "Stop sharing automatically" is selected, only allow one download at a time (fixes #248) 2016-04-12 15:59:49 -07:00
Micah Lee
e81f809882 Move all resources (locale, images, html, version.txt) into central resources dir, and clean up logic to find absolute paths to resources 2016-04-12 15:14:02 -07:00
Micah Lee
7b8e9e1e6f Closing the GUI window causes any current download to stop immediately (fixes #262) 2016-04-10 17:43:37 -07:00
Micah Lee
683610e962 Update copyright year to 2016 2016-02-15 22:37:28 -08:00
Micah Lee
170811f450 Porting onionshare from python2 to python3 (#261). This commit only ports the CLI version, not the GUI. Has not been tested in Fedora, Windows, or OSX. Removed hack to make unicode filenames work because hack does not work in python3. Replaced constant_time_compare function with a new one that works in python3. Tweaked hidden service checking code because urllib is different in python3. 2016-02-12 14:34:19 -08:00
Micah Lee
b2bda8294a Create new slug each time onionshare server is started (#247). This required making removing check_slug_candidate as a decorator and calling it inside functions that needed it instead. 2016-02-12 11:56:35 -08:00
Micah Lee
d67d5010d1 Catch exception that occurs when stopping a web app that has not started (fixes #237) 2015-12-07 15:03:53 -08:00
Micah Lee
f4780813d6 Decorator is expecting argument to be named slug_candidate, not shutdown_slug_candidate (#200) 2015-12-04 13:17:45 -08:00
Micah Lee
9d1abf668a Merge branch 'slug_decorator' of https://github.com/pwplus/onionshare into pwplus-slug_decorator 2015-12-04 12:46:51 -08:00
Micah Lee
f2389cc602 Remove all language and localization from download page, to prevent leaking the sender's locale (fixes #228) 2015-12-04 12:43:12 -08:00
Will Plusnick
42d7dd4181 Add a decorator to check the slug
This commit will add a decorator to the check the slug rather than copy
and pasting the same lines of code at the begining of every route.
2015-11-16 02:09:51 -06:00
Micah Lee
dc58921187 Add docstrings to all classes and methods (fix #198) 2015-11-15 19:01:20 -08:00
Micah Lee
fd39f84bff Merge branch 'master' into ephemeral
Conflicts:
	onionshare/helpers.py
	onionshare/onionshare.py
2015-11-15 15:35:59 -08:00
Micah Lee
bbee1599c5 Updated copyright year to 2015 2015-09-07 21:48:49 -07:00
Micah Lee
5d37d9b7b2 Removed all of the Tails-specific code. If we use ephemeral hidden services, we no longer need to touch the filesystem, and hopefully no longer need root in Tails. 2015-09-07 21:44:29 -07:00
jvoisin
ac97ddf7d0 Various fixes
- more pep8
- add some forgotten deps in setup.py
2015-07-25 11:22:24 +02:00
Micah Lee
ba424fa427 suppress download progress output to stdout in OSX (fixes #203) 2015-06-16 13:03:04 -07:00
Micah Lee
ad553146c7 adding html files to Resources, loading them from the correct path, and make sure to include jinja2 extension in py2app (#151) 2015-05-15 17:43:01 -07:00
Micah Lee
669750be37 specify types in all str.format() calls (fixes #169) 2015-05-15 12:26:58 -07:00
Thomas Waldmann
5deb3f9e0f pep8: fix indentation to be a multiple of four
note: i used pycharm "reformat file", so there are other reformattings also
2014-11-18 18:03:34 +01:00
Thomas Waldmann
46492e0446 fix typos 2014-10-26 14:40:41 +01:00
Micah Lee
b035330805 fixed OSX filename-related issues 2014-09-25 11:42:29 -07:00
Micah Lee
f5ddd23b70 handles canceled downloads properly (fixes #81) 2014-09-22 20:22:30 +00:00
Micah Lee
8892126155 launch Flash in threaded mode, to support multiple concurrent connections (#117) 2014-09-22 19:30:10 +00:00
Micah Lee
8cdecbcaf4 removing unnecessary whitespace 2014-09-16 00:22:14 +00:00
Micah Lee
2c1534979e squash bug in closing Flask web server (fixes #131) 2014-09-03 00:11:25 -07:00