Commit Graph

1014 Commits (ce48e06c45764eaecbd638e8086f20b2dc804fc2)

Author SHA1 Message Date
Ozzie Isaacs ce48e06c45 Improved limiter 1 year ago
Ozzie Isaacs 8d0a699078 Merge branch 'master' into Develop 1 year ago
Ozzie Isaacs 5b5146a793 Merge remote-tracking branch 'csp/patch-2' 1 year ago
Ozzie Isaacs fb42f6bfff Make it possible to disable ratelimiter
Update APScheduler
Error message on missing flask-limiter
1 year ago
Ozzie Isaacs 4b7a0f3662 Merge branch 'master' into Develop
# Conflicts:
#	cps/opds.py
#	cps/server.py
#	cps/web.py
1 year ago
Ozzie Isaacs 275675b48a Search query is now also a post request (possible fix for Forward Auth Search Redirect Issue #2681) 1 year ago
Ozzie Isaacs f8fbc807f1 further refactored user login 1 year ago
Ozzie Isaacs 1c3b69c710 refactored login routines 1 year ago
Ozzie Isaacs 189da65fac leave fields filled after invalid login attempt 1 year ago
Ozzie Isaacs f241b260d7 Updated requirements
Bugfix from testrun
Testresults
1 year ago
Ozzie Isaacs 260a694834 Bugfixes after merge 1 year ago
Ozzie Isaacs 508e2b4d0a Merge branch 'master' into Develop
# Conflicts:
#	cps/admin.py
#	cps/config_sql.py
#	cps/search.py
#	cps/templates/admin.html
#	cps/web.py
#	setup.cfg
#	test/Calibre-Web TestSummary_Linux.html
1 year ago
Ozzie Isaacs 4913f06e0d Updated test status
Fix for #2614 (Send to eReader not working for guest user)
1 year ago
Petipopotam d545ea9e6f
CSP invalid to display image when web.read_book
CSP 
Before : default-src 'self'  'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data:; style-src-elem 'self' blob: 'unsafe-inline'; object-src 'none';
After :    default-src 'self'  'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data: blob:; style-src-elem 'self' blob: 'unsafe-inline';object-src 'none';
1 year ago
Petipopotam 1ad8dc102a
CSP invalid syntax
CSP had some "cosmetic" errors

Before : default-src 'self'  'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data: style-src-elem 'self' blob: 'unsafe-inline';object-src: 'none';
After :    default-src 'self'  'unsafe-inline' 'unsafe-eval'; font-src 'self' data:;  img-src 'self' data:; style-src-elem 'self' blob: 'unsafe-inline'; object-src 'none';
1 year ago
Ozzie Isaacs d48d6880af Update German translation 1 year ago
Ozzie Isaacs 77637d81dd Fix fro #2670 (user has no attribute eReader_mail) 1 year ago
Ozzie Isaacs a2bf6dfb7b Bugfix csp header
Bugfix for loading metadata from google with old books (publishing date only year)
1 year ago
Ozzie Isaacs 1cd05d614c Merge remote-tracking branch 'csp/patch-1' 1 year ago
Ozzie Isaacs 2be2920833 Fixed typo 1 year ago
Ozzie Isaacs 43ee85fbb5 Removed unnecessary Unicode "u" 1 year ago
Ozzie Isaacs 8022b1bb36 Merge remote-tracking branch 'english/master' 1 year ago
Petipopotam beb619c2c2
Correct CSP
no need blob: value for object-src
1 year ago
Petipopotam ed22209e6c
Content Security Policy syntax was invalid
According to https://csp-evaluator.withgoogle.com/ the CSP built here is NOT valid (and the blob: value is missing at img-src, so the image is not displayed when reading ebook in a browser)

Before this commit, in Chrome response header you can find 

Content-Security-Policy: default-src 'self'  'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self'  data:; object-src: 'none'; blob:;style-src-elem 'self' blob: 'unsafe-inline';

After :

Content-Security-Policy: default-src 'self'  'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' blob: data:; object-src 'none'  blob:; style-src-elem 'self' blob: 'unsafe-inline';

and image in viewer are displayed
1 year ago
Josh O'Brien b3335f6733 English Language Updates - V3 1 year ago
Ozzie Isaacs 85a6616606 Merge remote-tracking branch 'fix_default_language/master' 1 year ago
Julien Voisin 2ddbaa2150
Add object-src to the CSP policy 1 year ago
Feige-cn e8c461b14f
Update web.py
In Admin view page, Editor UI Configuration - Default Settings for New Users - Default Language, set up the new user's default language is not effective. I changed this web.py, add a line of code in 1248 lines in register function. Creating the new user need to take the default language.
2 years ago
Ozzieisaacs 6598c4d259 Add rate limit for opds 2 years ago
Ozzie Isaacs a9b20ca136 Fix for big database not showing tags 2 years ago
Ozzie Isaacs bf0375d51d Bugfix change emails 2 years ago
Ozzie Isaacs 89d226e36b Allow deletion of kindle email address and force e-mail address to be valid 2 years ago
Ozzie Isaacs ae3e3559b8 Rate limit prepared for feedback on login route 2 years ago
Ozzie Isaacs a72f16fd3a Fix missing or_ import 2 years ago
Ozzie Isaacs c2545315e1 Fix Ratings with 0 stars are counted as None 2 years ago
Ozzie Isaacs 7344ef353c Rate limited login 2 years ago
Kian-Meng Ang c4104ddaf4 Fix typos 2 years ago
Ozzie Isaacs 29fd4ae4a2 Bugfixes create users
Update Teststatus
2 years ago
Ozzieisaacs 4ef8c35fb7 Bugfies password validation from testrun 2 years ago
Ozzieisaacs 04326af2da password validation working 2 years ago
Ozzieisaacs d6a31e5db8 config verify password working 2 years ago
Ozzie Isaacs 91df265d40 Fix for #2437 (advanced search for read status crashes calibre-web) 2 years ago
Ozzie Isaacs fbac3e38ac Eenabled send epubs to E-Reader devices 2 years ago
Ozzie Isaacs aaa749933d Further migration to flask_babel
Bugfix sort order
Bugfix tasklist
2 years ago
Ozzie Isaacs 2e007a160e reenable startup logging
Bugfixes from refactoring and merge
2 years ago
Ozzie Isaacs e7464f2694 Refactored web.py to shrink size of file 2 years ago
Ozzie Isaacs 47414ada69 Merge branch 'master' into Develop 2 years ago
Ozzie Isaacs 5c342d4e7c use get for dicts 2 years ago
Ozzie Isaacs 3c98cd1b9a Merge branch 'master' into cover_thumbnail
# Conflicts:
#	test/Calibre-Web TestSummary_Linux.html
2 years ago
Ozzie Isaacs a8680a45ca Bugfixes from Testrun
Update teststatus
2 years ago