Commit Graph

6628 Commits

Author SHA1 Message Date
Ylian Saint-Hilaire
23679d119b Dependency fix 2024-09-26 21:20:43 -07:00
Ylian Saint-Hilaire
a3fd6008a0 Version 1.1.31 2024-09-26 21:19:11 -07:00
Ylian Saint-Hilaire
d0014b3f8b Removed cleanReqQuery() 2024-09-26 21:13:55 -07:00
Josiah Baldwin
04c96eb2ff
Fix/xss (#6403)
* Fixed filenames not being escaped when editing files

This allowed a possible XSS by naming a file in a particular way on your device.

* Fixed HTML generation in webserver not escaping most things from req.query

This would allow XSS through a very simple phishing attack

* Added HtmlEscape to Mobile default as well

* Added sanitization to SAML redirect and Twitter/Azure
2024-09-26 21:09:34 -07:00
Simon Smith
df64c750cc add runCommands to server peering #6404
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-26 22:56:13 +01:00
si458
b90b2ac0bf add RDP to device context menu #6401
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-26 19:51:06 +01:00
si458
39a1755b3d fix 404 on public files with /login url #6406
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-26 19:21:25 +01:00
si458
61fb6898c0 add ctrl+c ctrl+x and esc to mobile terminal ui
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 20:00:32 +01:00
si458
bc34f140c8 upgrade express-handlebars #6357
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 19:17:08 +01:00
si458
0bee2be3cf generate manifest.json from domain and add pwalogo
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 19:09:14 +01:00
si458
1d67172dd3 fix RDP canvas size #4701
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 13:29:57 +01:00
si458
b99a97eb48 add restart agent service to agent action
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-23 13:20:05 +01:00
si458
a1899a719f add freebsd install/uinstall/start/stop/restart commands #6040
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-19 22:33:24 +01:00
si458
5fcfa8f369 fix storage volumes on arch/busybox
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-16 11:00:33 +01:00
si458
7172d1f701 always show operating system section and LastBootUpTime fix
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-15 23:02:23 +01:00
si458
8bc760855e add raspberry pi arm/gpu memory
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-15 19:39:41 +01:00
si458
5fc3683ebb update archiver
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-15 18:34:42 +01:00
Ylian Saint-Hilaire
626416a202 Version 1.1.30 2024-09-15 10:07:28 -07:00
Ylian Saint-Hilaire
d84afb939a More dependency updates. 2024-09-15 10:02:51 -07:00
Ylian Saint-Hilaire
3cd875d6ee Dependency update. 2024-09-15 09:56:07 -07:00
Ylian Saint-Hilaire
f5e63b7cbd Updated dependencies. 2024-09-15 09:52:32 -07:00
wdlut
8b20f44dd5
Update meshuser.js (#6210)
Added a hook "uiCustomEvent" to start plug-ins from custom dialog boxes.
In the config.json:
````
     "CustomUI": {
        "deviceButtons": {
          "custom_dialog": {
            "name": "Show custom dialog",
            "action": "dialog:customDialog"
          }
        },
        "dialogs": {
          "customDialog": {
...
````

In the plug-in: ````
obj.uiCustomEvent = function(command, parent) {
    switch(command.element) {
            case 'customDialog':
                onCustomDialog(command, obj, parent.ws);
                break;
            default:
                console.log("Element "+command.element+ " not supported.");
        }
    };
````
2024-09-15 09:43:37 -07:00
Dmitry Kostenkov
59a3a22ea5
fix orphanagentuser toLowerCase() (#6317)
https://github.com/Ylianst/MeshCentral/issues/2095#issuecomment-2276360509
2024-09-15 09:42:15 -07:00
Ylian Saint-Hilaire
2f34b7e83b Improved debug documentation. 2024-09-15 09:40:36 -07:00
silversword411
4d5ec6cac1
Docs: Adding meshcentral server debug command (#6369) 2024-09-15 09:21:37 -07:00
Ylian Saint-Hilaire
7635109f6d
fix: package.json & package-lock.json to reduce vulnerabilities (#6378)
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860
- https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867
- https://snyk.io/vuln/SNYK-JS-SEND-7926862
- https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
2024-09-15 09:18:08 -07:00
si458
de60b7f952 update meshcentralrouter with fixes
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-12 19:15:45 +01:00
petervanv
405261a67e
Dutch language update 1.1.29 (#6379)
cleaned up some unused text
2024-09-12 19:09:21 +01:00
si458
4bcec73e07 forgot new lines in backupconfig
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 22:01:44 +01:00
si458
d81c00c0b0 add extra info to backupconfig
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 21:54:44 +01:00
si458
d2e4f12ea3 fix left mousebutton click with event.button #6351
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 21:06:16 +01:00
si458
f7c79166da fix dockerfile translate
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 20:14:08 +01:00
si458
2b5337329a remove minify-js use html-minifier instead #6357
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 20:01:10 +01:00
si458
21206b670c refix #6240 as switching devices keep session open by mistake
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 13:31:15 +01:00
si458
1d04a13a64 add oldStyle to consentMessages as workaround for win-userconsent crashing #6290
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 11:01:23 +01:00
si458
9e309584db update package-lock 1.1.29
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-09 11:47:43 +01:00
Ylian Saint-Hilaire
0d56504d96 Version 1.1.29 2024-09-08 15:07:05 -07:00
Ylian Saint-Hilaire
d17918936d express-ws update. 2024-09-08 14:59:35 -07:00
Ylian Saint-Hilaire
0a64b80654 Updated express-ws. 2024-09-08 14:48:19 -07:00
Ylian Saint-Hilaire
35e38a71c0 Re-translated & minified. 2024-09-08 14:27:10 -07:00
si458
6fe30b7730 add new line break feature to file edit #6365
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-08 20:11:06 +01:00
Simon Smith
516a14b4ca
Update readme.md 2024-09-07 23:31:03 +01:00
si458
390991123a fix pluginhandler http protocol #6362
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-06 11:00:41 +01:00
si458
d367b2ed87 few fixes and doc updates
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-05 19:19:52 +01:00
Simon Smith
5a410ccd5b properly fix peering #5714
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-05 18:31:37 +01:00
Simon Smith
ad1d82152a fix clonesafenode in dbNodeChange #5591
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-05 15:39:45 +01:00
Simon Smith
7c79dbcda1 fix peering traffic #5714
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-05 12:57:29 +01:00
si458
cf23a3df81 fix volumes not closing powershell
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-03 20:03:05 +01:00
si458
e8cbebaffe fix webrtc file upload maybe #6309
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-03 14:46:25 +01:00
si458
ac0d805378 fix webrtcconfig and allow stun servers #6309
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-03 13:42:06 +01:00