Commit Graph

6630 Commits

Author SHA1 Message Date
si458 3eede1bf43 update package-lock.json
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-27 07:05:04 +01:00
Simon Smith 9f8ea3a6b5
Update package.json 2024-09-27 06:54:26 +01:00
Ylian Saint-Hilaire 23679d119b Dependency fix 2024-09-26 21:20:43 -07:00
Ylian Saint-Hilaire a3fd6008a0 Version 1.1.31 2024-09-26 21:19:11 -07:00
Ylian Saint-Hilaire d0014b3f8b Removed cleanReqQuery() 2024-09-26 21:13:55 -07:00
Josiah Baldwin 04c96eb2ff
Fix/xss (#6403)
* Fixed filenames not being escaped when editing files

This allowed a possible XSS by naming a file in a particular way on your device.

* Fixed HTML generation in webserver not escaping most things from req.query

This would allow XSS through a very simple phishing attack

* Added HtmlEscape to Mobile default as well

* Added sanitization to SAML redirect and Twitter/Azure
2024-09-26 21:09:34 -07:00
Simon Smith df64c750cc add runCommands to server peering #6404
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-26 22:56:13 +01:00
si458 b90b2ac0bf add RDP to device context menu #6401
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-26 19:51:06 +01:00
si458 39a1755b3d fix 404 on public files with /login url #6406
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-26 19:21:25 +01:00
si458 61fb6898c0 add ctrl+c ctrl+x and esc to mobile terminal ui
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 20:00:32 +01:00
si458 bc34f140c8 upgrade express-handlebars #6357
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 19:17:08 +01:00
si458 0bee2be3cf generate manifest.json from domain and add pwalogo
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 19:09:14 +01:00
si458 1d67172dd3 fix RDP canvas size #4701
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-24 13:29:57 +01:00
si458 b99a97eb48 add restart agent service to agent action
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-23 13:20:05 +01:00
si458 a1899a719f add freebsd install/uinstall/start/stop/restart commands #6040
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-19 22:33:24 +01:00
si458 5fcfa8f369 fix storage volumes on arch/busybox
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-16 11:00:33 +01:00
si458 7172d1f701 always show operating system section and LastBootUpTime fix
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-15 23:02:23 +01:00
si458 8bc760855e add raspberry pi arm/gpu memory
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-15 19:39:41 +01:00
si458 5fc3683ebb update archiver
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-15 18:34:42 +01:00
Ylian Saint-Hilaire 626416a202 Version 1.1.30 2024-09-15 10:07:28 -07:00
Ylian Saint-Hilaire d84afb939a More dependency updates. 2024-09-15 10:02:51 -07:00
Ylian Saint-Hilaire 3cd875d6ee Dependency update. 2024-09-15 09:56:07 -07:00
Ylian Saint-Hilaire f5e63b7cbd Updated dependencies. 2024-09-15 09:52:32 -07:00
wdlut 8b20f44dd5
Update meshuser.js (#6210)
Added a hook "uiCustomEvent" to start plug-ins from custom dialog boxes.
In the config.json:
````
     "CustomUI": {
        "deviceButtons": {
          "custom_dialog": {
            "name": "Show custom dialog",
            "action": "dialog:customDialog"
          }
        },
        "dialogs": {
          "customDialog": {
...
````

In the plug-in: ````
obj.uiCustomEvent = function(command, parent) {
    switch(command.element) {
            case 'customDialog':
                onCustomDialog(command, obj, parent.ws);
                break;
            default:
                console.log("Element "+command.element+ " not supported.");
        }
    };
````
2024-09-15 09:43:37 -07:00
Dmitry Kostenkov 59a3a22ea5
fix orphanagentuser toLowerCase() (#6317)
https://github.com/Ylianst/MeshCentral/issues/2095#issuecomment-2276360509
2024-09-15 09:42:15 -07:00
Ylian Saint-Hilaire 2f34b7e83b Improved debug documentation. 2024-09-15 09:40:36 -07:00
silversword411 4d5ec6cac1
Docs: Adding meshcentral server debug command (#6369) 2024-09-15 09:21:37 -07:00
Ylian Saint-Hilaire 7635109f6d
fix: package.json & package-lock.json to reduce vulnerabilities (#6378)
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BODYPARSER-7926860
- https://snyk.io/vuln/SNYK-JS-EXPRESS-7926867
- https://snyk.io/vuln/SNYK-JS-SEND-7926862
- https://snyk.io/vuln/SNYK-JS-SERVESTATIC-7926865

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
2024-09-15 09:18:08 -07:00
si458 de60b7f952 update meshcentralrouter with fixes
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-12 19:15:45 +01:00
petervanv 405261a67e
Dutch language update 1.1.29 (#6379)
cleaned up some unused text
2024-09-12 19:09:21 +01:00
si458 4bcec73e07 forgot new lines in backupconfig
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 22:01:44 +01:00
si458 d81c00c0b0 add extra info to backupconfig
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 21:54:44 +01:00
si458 d2e4f12ea3 fix left mousebutton click with event.button #6351
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 21:06:16 +01:00
si458 f7c79166da fix dockerfile translate
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 20:14:08 +01:00
si458 2b5337329a remove minify-js use html-minifier instead #6357
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 20:01:10 +01:00
si458 21206b670c refix #6240 as switching devices keep session open by mistake
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 13:31:15 +01:00
si458 1d04a13a64 add oldStyle to consentMessages as workaround for win-userconsent crashing #6290
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-10 11:01:23 +01:00
si458 9e309584db update package-lock 1.1.29
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-09 11:47:43 +01:00
Ylian Saint-Hilaire 0d56504d96 Version 1.1.29 2024-09-08 15:07:05 -07:00
Ylian Saint-Hilaire d17918936d express-ws update. 2024-09-08 14:59:35 -07:00
Ylian Saint-Hilaire 0a64b80654 Updated express-ws. 2024-09-08 14:48:19 -07:00
Ylian Saint-Hilaire 35e38a71c0 Re-translated & minified. 2024-09-08 14:27:10 -07:00
si458 6fe30b7730 add new line break feature to file edit #6365
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-08 20:11:06 +01:00
Simon Smith 516a14b4ca
Update readme.md 2024-09-07 23:31:03 +01:00
si458 390991123a fix pluginhandler http protocol #6362
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-06 11:00:41 +01:00
si458 d367b2ed87 few fixes and doc updates
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-05 19:19:52 +01:00
Simon Smith 5a410ccd5b properly fix peering #5714
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-05 18:31:37 +01:00
Simon Smith ad1d82152a fix clonesafenode in dbNodeChange #5591
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-05 15:39:45 +01:00
Simon Smith 7c79dbcda1 fix peering traffic #5714
Signed-off-by: Simon Smith <simonsmith5521@gmail.com>
2024-09-05 12:57:29 +01:00
si458 cf23a3df81 fix volumes not closing powershell
Signed-off-by: si458 <simonsmith5521@gmail.com>
2024-09-03 20:03:05 +01:00