Commit Graph
32 Commits
Author SHA1 Message Date
Kenneth Skovhede 40dd3c6816 Updated all license mentions to MIT 2024-02-28 15:45:30 +01:00
Kenneth Hsu 457254d9e1 Remove unused local variables. 2019-04-17 20:10:53 -07:00
Kenneth Hsu df5f8e16b9 Use ordinal case-insensitive comparison instead of ToUpper. 2018-09-19 15:21:59 -07:00
Kenneth Hsu f12858e6a5 Mark fields that shouldn't be reassigned as readonly.
This makes it explicit at compile-time that these fields should not be
reassigned outside the constructor.
2018-05-25 10:04:52 -07:00
Rune Henriksen e1fc8f25aa added clarification to error to help users resolve the problem 2018-02-19 22:13:25 +01:00
Kenneth Skovhede d16c0f24ec Removed some unnecessary changes, turned out it was a simple cache issue.
This fixes #2699
This fixes #2635
2018-02-08 09:03:51 +01:00
Kenneth Skovhede 58146af6b7 Changed XSRF tokens to only use url-safe chars, as the webserver and browsers fight a bit with it. 2018-02-07 23:35:13 +01:00
Kenneth Hsu 8810e0130d Make string comparisons use ordinal (binary) sort rules.
These string comparisons should not be culture-aware.
2017-11-26 11:19:54 -08:00
Tyler Gill 83a1dcfb64 Replace all instances of InvariantCultureIgnoreCase with OrdinalIgnoreCase in string comparisons.
InvariantCulture is useful when comparing / sorting human language strings in a culturely correct way. It handles things like accented letters in a way that makes sense to humans (e.g., 'a' should be sorted next to 'á', rather than after 'z').
Ordinal looks just at the raw code points of the characters. As such, it is recommended for use in cases when comparing system strings (file paths, command line parameters, config settings, etc.). Since it doesn't need to use the culture specific sorting rules, this method can often be faster.

For more information, see https://stackoverflow.com/questions/492799/difference-between-invariantculture-and-ordinal-string-comparison (and other related questions)
2017-09-18 23:55:08 -06:00
Max 21a09a238b refactor 2017-06-28 23:45:56 +02:00
Max a9d7507597 tray icon header fixes 2017-06-17 18:46:38 +02:00
Max 32300553cd implemented custom header for trayicon 2017-06-17 16:57:39 +02:00
Max 91f4f79559 added posibility to read server password from database 2017-05-02 21:14:28 +02:00
Max 6718c93f5e fixes 2017-03-06 14:26:40 +01:00
Kenneth Skovhede 702e2ee28f Removed the CGI entry as it was only used by the greeno theme. 2017-01-25 12:01:50 +01:00
Kenneth SkovhedeandGitHub 17e2a3dab4 Feature/add delete dialog (#2008)
Added a delete page with options to delete the local database, as well as the remote files.
Added a captcha to protect against automated attacks that would attempt to delete the remote files.

This fixes #1201
2016-10-13 21:45:31 +02:00
Kenneth Skovhede 0c68daff6c Fixed all whitespace to be 4 spaces instead of tabs 2016-09-15 11:39:27 +02:00
Kenneth Skovhede 5416514d49 Merge branch 'bugfix_collection_modified_auth_handler' of https://github.com/mylemans/duplicati into mylemans-bugfix_collection_modified_auth_handler
# Conflicts:
#	Duplicati/Server/WebServer/AuthenticationHandler.cs
2016-03-30 21:37:32 +02:00
Kenneth Skovhede 01375557c7 Simplified checking for access to API functions. 2016-03-30 21:25:33 +02:00
Tim Mylemans eb9390f957 Fixed: Multiple possible "Collection was modified" exceptions by switching to ConcurrentDictionary
Changed: Switched to using ConcurrentDictionary to prevent "Collection
was modified" from occurring
Added: Simulated the 'old' race conditions so that unexpected situations
regarding unique keys not being unique act the same as they did before
Removed: Pointless ToList() calls as they do NOT prevent "Collection was
modified" exceptions from occurring in a multi threaded situation (it
just makes the 'window' smaller)
2016-03-30 16:29:59 +02:00
Kenneth Skovhede 157be2136c Removed the testing code for the XSRF suppression on the REST API 2015-11-30 21:44:55 +01:00
Kenneth Skovhede 1f35824317 Converted to REST based API, with a wrapper layer for control.cgi so the current UI still works. 2015-07-30 14:31:27 +02:00
Kenneth Skovhede 9b51072ee9 Work on a REST API for the server 2015-07-04 13:42:52 +02:00
Kenneth Skovhede 80378ae1cc Fixed expiry with XSRF token.
This fixes #1319.
2015-03-07 12:46:02 +01:00
Kenneth Skovhede 4e5f5a9b46 Bugfix, extending the cookie expiration after a request. 2015-02-27 17:31:17 +01:00
Kenneth Skovhede 7e0f9860b5 Added protection against XSRF attacks 2015-02-26 23:21:22 +01:00
Kenneth Skovhede 8d13e698eb Updated copyright notices 2015-01-20 21:44:52 +01:00
Kenneth Skovhede 00a11ebc33 Fixed the problem with logging in after a password has been applied 2014-08-13 22:44:51 +02:00
Kenneth Skovhede 65ee7d7846 Simplified the way response objects are written with the 200 - OK response 2014-07-02 15:03:56 +02:00
Kenneth Skovhede 97be4258cc Added login page to allow remote login. 2014-06-29 23:53:37 +02:00
Kenneth Skovhede 3cdfff9563 Removed some debug logging. 2014-06-28 16:30:04 +02:00
Kenneth Skovhede 6203ed849c Major refactor of the webserver
Added support for setting listening interface for the webserver
Added support for starting the webserver with a password
2014-06-27 13:23:05 +02:00