Michael Scherer
70c55511b1
Fix CVE-2016-5026
...
See http://www.openwall.com/lists/oss-security/2016/05/23/5 for details
on a potential convoluted attack. Basically, /tmp/onionshare is
a predictable name, which mean that a local attacker
could precreate it on a shared server and later mess with the hidden
service operations in various way.
2016-05-23 20:45:07 +02:00
Micah Lee
9bfde7dfcc
Merge branch 'master' of github.com:micahflee/onionshare
2016-04-14 12:04:44 -07:00
Micah Lee
ef7fa690f5
Add correct version number to OSX app Info.plist ( fixes #275 )
2016-04-14 12:04:05 -07:00
Micah Lee
440f9b917c
Changing stdeb config to make Launchpad's PPA server successfully build
2016-04-13 15:21:38 -07:00
Micah Lee
5b9e8d5f13
Update PPA script
2016-04-13 14:33:40 -07:00
Micah Lee
83da767acc
Reduced size of screenshots to be more reasonable
2016-04-13 12:37:44 -07:00
Micah Lee
8a216a08e7
Updated readme to reflect new slugs
2016-04-13 12:21:33 -07:00
Micah Lee
a9b74e7a86
Updated screenshots
2016-04-13 12:18:23 -07:00
Micah Lee
1693697bef
Updated security design document ( fixes #273 )
2016-04-13 10:11:55 -07:00
Micah Lee
310ec12080
Tweaking changelog
2016-04-12 22:07:56 -07:00
Micah Lee
afd359f419
Version bump to 0.9, and updated changelog
2016-04-12 18:06:00 -07:00
Micah Lee
e37ce32fcd
Updated Windows packaging scripts to work with PyInstaller
2016-04-12 17:53:33 -07:00
Micah Lee
f2c4591c1e
Deleted obsolete slug tests
2016-04-12 17:53:19 -07:00
Micah Lee
5249f5d96a
Add wordlists.txt to OSX and Windows packages #( #238 )
2016-04-12 17:13:12 -07:00
Micah Lee
db1ed7c6de
Fix issue with shutting down Flask server when not using --local-only ( #238 )
2016-04-12 17:04:19 -07:00
Micah Lee
d35b5a9acd
Added rate-limiting to GUI. After 20 404 errors, server automatically stops ( #238 )
2016-04-12 16:49:46 -07:00
Micah Lee
b47ef630d5
Replace onionshare slug with 2-words from securedrop diceware list ( #238 )
2016-04-12 16:29:11 -07:00
Micah Lee
3d07fccc11
Added securedrop worldlist to project
2016-04-12 16:21:26 -07:00
Micah Lee
c07f4e5f83
If "Stop sharing automatically" is selected, only allow one download at a time ( fixes #248 )
2016-04-12 15:59:49 -07:00
Micah Lee
0b588e543a
Fix PyInstaller to point to new resources directory, for OSX and Windows
2016-04-12 15:21:47 -07:00
Micah Lee
e81f809882
Move all resources (locale, images, html, version.txt) into central resources dir, and clean up logic to find absolute paths to resources
2016-04-12 15:14:02 -07:00
Micah Lee
7c18d77fb2
Fix issue with Debian package, because I renamed version to version.txt
2016-04-12 11:01:02 -07:00
Micah Lee
07bdbd5714
Renamed linux_scripts to scripts, since they are now used for Linux, OSX, and Windows
2016-04-12 10:46:44 -07:00
Micah Lee
e8ce6b1c54
Make helpers.get_pyinstaller_resource_path work when package is not frozen, and make tests report real platform to get accurate paths
2016-04-12 10:43:28 -07:00
Micah Lee
ef5665b050
Switched from py2app to PyInstaller for Windows. Renamed version to version.txt, to avoid Windows namespace collision with version.dll.
2016-04-11 23:25:40 -07:00
Micah Lee
229603eb7d
Localize quit confirm button text ( #264 )
2016-04-11 10:08:24 -07:00
Micah Lee
cb3d39fb4f
Confirm when user tries to close the GUI window ( fixes #264 )
2016-04-10 19:28:22 -07:00
Micah Lee
7b8e9e1e6f
Closing the GUI window causes any current download to stop immediately ( fixes #262 )
2016-04-10 17:43:37 -07:00
Micah Lee
f5496ba20c
Remove reference to OSX CLI version in readme ( #201 )
2016-04-10 15:24:21 -07:00
Micah Lee
08c5e720ae
Updated OSX codesigning code for PyInstaller
2016-04-10 15:13:52 -07:00
Micah Lee
55b653d3d2
Renamed OSX binary from onionshare_gui to onionshare-gui
2016-04-10 15:13:38 -07:00
Micah Lee
00d1e29333
Switch from py2app to PyInstaller
2016-04-10 14:20:18 -07:00
Micah Lee
3b638cfd99
Made URL label no longer word-wrap
2016-04-10 13:33:16 -07:00
Micah Lee
3ed1f964cb
Choose ports in range 17600-17650, so Tails can whitelist them ( #220 )
2016-02-27 18:03:42 +01:00
Micah Lee
738c05a5f8
Updated .travis.yml
2016-02-15 23:09:09 -08:00
Micah Lee
683610e962
Update copyright year to 2016
2016-02-15 22:37:28 -08:00
Micah Lee
b5d45e90be
Merge branch 'master' of github.com:micahflee/onionshare
2016-02-15 22:33:13 -08:00
Micah Lee
ad51d9221f
Made the uninstaller delete uninstall.exe
2016-02-15 22:32:33 -08:00
Micah Lee
d438e25b9b
Successfully builds a .exe with Python3/Qt5. Switched from pyinstaller to py2exe. ( #261 )
2016-02-15 22:16:09 -08:00
Micah Lee
d1c36fa04f
Got python3/Qt5 port working in Windows, but still need to finish packaging ( #261 )
2016-02-15 13:06:12 -08:00
Micah Lee
a11cbe4f82
Updated .travis.yml to work with python3 tests ( #261 )
2016-02-15 11:18:31 -08:00
Micah Lee
f864e85ee3
Ported tests to python3 ( #261 )
2016-02-15 11:00:41 -08:00
Micah Lee
a8c8b56fa1
Starting to document the Python3/Qt5 development environment for Windows ( #261 )
2016-02-13 18:18:10 -08:00
Micah Lee
fdca383d31
Updated build instructions and script for RPM based distros
2016-02-13 17:36:18 -08:00
Micah Lee
42696cde91
Modify stdeb settings so that .deb that gets built will run in Ubuntu 14.04
2016-02-13 17:10:43 -08:00
Micah Lee
2f2e020ed4
Remove reference to working in Tails
2016-02-12 15:49:19 -08:00
Micah Lee
deac54db92
Made sure switch to python3 and Qt5 works in OSX ( #261 ). Updated OSX instructions in BUILD.md.
2016-02-12 15:45:26 -08:00
Micah Lee
62c69c4c0b
Porting onionshare GUI from python2 to python3, and also from PyQt4 to PyQt5 ( #261 ). This commit ports onionshare_gui.
2016-02-12 15:12:27 -08:00
Micah Lee
170811f450
Porting onionshare from python2 to python3 ( #261 ). This commit only ports the CLI version, not the GUI. Has not been tested in Fedora, Windows, or OSX. Removed hack to make unicode filenames work because hack does not work in python3. Replaced constant_time_compare function with a new one that works in python3. Tweaked hidden service checking code because urllib is different in python3.
2016-02-12 14:34:19 -08:00
Micah Lee
b2bda8294a
Create new slug each time onionshare server is started ( #247 ). This required making removing check_slug_candidate as a decorator and calling it inside functions that needed it instead.
2016-02-12 11:56:35 -08:00
