Peter Bieringer 
							
						 
					 
					
						
						
							
						
						e05206eec3 
					 
					
						
						
							
							Merge branch 'improved-broken-vcard-handling' of github.com:pbiering/Radicale into improved-broken-vcard-handling  
						
						
						
						
					 
					
						2016-09-18 19:28:15 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						af5c1582dc 
					 
					
						
						
							
							improved detection of broken vcards  
						
						
						
						
					 
					
						2016-09-18 19:23:24 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						1ffdb03106 
					 
					
						
						
							
							simplify patch  
						
						
						
						
					 
					
						2016-09-17 18:16:27 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						ff02d17619 
					 
					
						
						
							
							remove temporary debug statements  
						
						
						
						
					 
					
						2016-09-17 17:44:33 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						1cfd3fd95b 
					 
					
						
						
							
							filter broken vcard entries before delivered, found on real life system at least 2 cards where vobject claimed about  
						
						... 
						
						
						
						vobject.base.ValidateError: 'VCARD components must contain at least 1 N' 
						
						
					 
					
						2016-09-17 16:53:24 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						18181374e1 
					 
					
						
						
							
							log exception for broken items  
						
						
						
						
					 
					
						2016-09-17 16:29:40 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						d116423458 
					 
					
						
						
							
							improved request logging  
						
						
						
						
					 
					
						2016-09-17 15:35:43 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						e6ba31937a 
					 
					
						
						
							
							3rd catch  
						
						
						
						
					 
					
						2016-09-17 15:11:02 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						a57fcad270 
					 
					
						
						
							
							catch 2nd case for broken object  
						
						
						
						
					 
					
						2016-09-17 13:56:27 +02:00 
						 
				 
			
				
					
						
							
							
								Peter Bieringer 
							
						 
					 
					
						
						
							
						
						cd97aab72c 
					 
					
						
						
							
							try/catch of objects avoiding not serving any object in case an object has no valid contents  
						
						... 
						
						
						
						also log duration of how many objects are read per folder 
						
						
					 
					
						2016-09-17 12:52:42 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						0c1dbc30bd 
					 
					
						
						
							
							Log read objects  
						
						
						
						
					 
					
						2016-09-16 14:13:53 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						ecb8a99ed1 
					 
					
						
						
							
							Merge branch 'master' of github.com:Kozea/radicale  
						
						
						
						
					 
					
						2016-09-16 14:12:36 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						2c938ea67a 
					 
					
						
						
							
							Don't log when skipping .Radicale* files  
						
						... 
						
						
						
						Patch proposed by @pbiering. 
						
						
					 
					
						2016-09-16 14:12:05 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						4f44c46be7 
					 
					
						
						
							
							Merge pull request  #515  from Unrud/patch-3  
						
						... 
						
						
						
						Fix BaseCollection.move 
						
						
					 
					
						2016-09-15 12:55:21 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						def34b1454 
					 
					
						
						
							
							Fix BaseCollection.move  
						
						... 
						
						
						
						The update method doesn't exist. 
						
						
					 
					
						2016-09-15 11:18:55 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						e95d187cbc 
					 
					
						
						
							
							Merge pull request  #509  from Unrud/patch-2  
						
						... 
						
						
						
						Set password to empty string instead of None 
						
						
					 
					
						2016-09-07 16:08:37 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						dc94a5a4b7 
					 
					
						
						
							
							Merge pull request  #510  from Unrud/log  
						
						... 
						
						
						
						Improve formatting of log messages 
						
						
					 
					
						2016-09-07 16:08:11 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						f7435814fc 
					 
					
						
						
							
							Repair hreferences in REPORT response  
						
						... 
						
						
						
						They were not extended with base_prefix. 
						
						
					 
					
						2016-09-06 16:53:20 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						eb4b513d63 
					 
					
						
						
							
							Quote hreferences  
						
						... 
						
						
						
						RFC 4918 states that they are URIs and RFC 3986 says that URIs must always be in percent-encoded form. 
						
						
					 
					
						2016-09-06 16:53:20 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						83046c80c4 
					 
					
						
						
							
							Let reverse proxies overwrite script name  
						
						... 
						
						
						
						Reverse proxies can overwrite the script name with the HTTP header field X-Script-Name. 
						
						
					 
					
						2016-09-06 16:53:14 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						90486f33a5 
					 
					
						
						
							
							Log invalid URLs in XML requests  
						
						... 
						
						
						
						Before the requests either failed or the invalid hreference was silently dropped. 
						
						
					 
					
						2016-09-04 22:28:01 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						d5b8ddd71c 
					 
					
						
						
							
							Check that name is valid in name_from_path  
						
						... 
						
						
						
						Before it was possible craft XML requests, so that the storage backend got requests with invalid hrefs. 
						
						
					 
					
						2016-09-04 22:28:01 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						139076faee 
					 
					
						
						
							
							Sanitize URLs from XML requests  
						
						
						
						
					 
					
						2016-09-04 22:27:59 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						13d652b094 
					 
					
						
						
							
							Remove unnecessary module prefix  
						
						
						
						
					 
					
						2016-09-04 22:26:46 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						664fa71278 
					 
					
						
						
							
							Don't double unquote request URL  
						
						... 
						
						
						
						"%2525" was transformed to "%" instead of "%25". 
						
						
					 
					
						2016-09-04 22:26:46 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						dbaf58dbfe 
					 
					
						
						
							
							Remove base_prefix and use SCRIPT_NAME instead  
						
						... 
						
						
						
						This conforms with the WSGI reference (PEP 333) 
						
						
					 
					
						2016-09-04 22:26:40 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						03fbb1e68e 
					 
					
						
						
							
							Don't strip {} in get method  
						
						... 
						
						
						
						If someone uploads a file that starts or ends with the chars {}, all REPORT requests on that collection will fail and it's impossible to delete the file. 
						
						
					 
					
						2016-09-04 13:35:44 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						6df54bf88a 
					 
					
						
						
							
							Log name of faulty component  
						
						... 
						
						
						
						If vobject can't parse a component it raises an exception, but the filename of that component is missing in the logs. 
						
						
					 
					
						2016-09-04 13:23:01 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						5ccfe16372 
					 
					
						
						
							
							Remove Collection.has  
						
						... 
						
						
						
						It's the same as BaseCollection.has 
						
						
					 
					
						2016-09-04 13:21:57 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						de09f6689a 
					 
					
						
						
							
							Only relevant files for last_modified calculation  
						
						... 
						
						
						
						Leftovers from failed transactions etc. should not change that property. 
						
						
					 
					
						2016-09-04 13:16:42 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						cd9f789294 
					 
					
						
						
							
							Name variables for files f  
						
						... 
						
						
						
						fd sounds more like file descriptions.
prop doesn't sound like a file at all. 
						
						
					 
					
						2016-09-04 13:14:51 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						f5650df5f7 
					 
					
						
						
							
							Remove checks for existence of collection  
						
						... 
						
						
						
						They are unnecessary since the discover methods stopped returning collections that actually don't exist. 
						
						
					 
					
						2016-09-04 13:13:35 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						e7d8b4816c 
					 
					
						
						
							
							Duplicate code: Use list and get methods  
						
						
						
						
					 
					
						2016-09-04 13:12:55 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						5dbf9df876 
					 
					
						
						
							
							Add missing checks for safe fileystem components  
						
						... 
						
						
						
						Currently it's not possible to exploit these. 
						
						
					 
					
						2016-09-04 13:09:10 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						dc501d5dc5 
					 
					
						
						
							
							Refactor/Duplicate code: Extract _fsync method  
						
						
						
						
					 
					
						2016-09-04 13:08:12 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						77e9ca1252 
					 
					
						
						
							
							Remove EtagMismatchError  
						
						... 
						
						
						
						Etags are not checked in storage anymore and this is unused. 
						
						
					 
					
						2016-09-04 13:06:09 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						a12ef69129 
					 
					
						
						
							
							Secure is_safe_filesystem_path_component  
						
						... 
						
						
						
						On Windows 1/2 would be a safe filesystem path component, but it's not safe to pass it to path_to_filesystem.
Currently only the get method can be called with a href like that and it checked for that.
This just moves the check into the is_safe_filesystem_path_component function. 
						
						
					 
					
						2016-09-04 12:55:28 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						a4a6a62643 
					 
					
						
						
							
							Duplicate code: Use is_safe_path_component  
						
						
						
						
					 
					
						2016-09-04 12:53:07 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						8d5f2ded42 
					 
					
						
						
							
							Describe encoding of Etag  
						
						
						
						
					 
					
						2016-09-04 12:52:29 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						d371179487 
					 
					
						
						
							
							thread and level in simple log formatter  
						
						... 
						
						
						
						The log messages are a mess without any allocation to threads. 
						
						
					 
					
						2016-09-04 11:47:27 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						26e58cee56 
					 
					
						
						
							
							Use hexadecimal for thread  
						
						... 
						
						
						
						Old: ... - 139891659843328 - INFO: Starting Radicale
New: ... - [7f3b10b12700] INFO: Starting Radicale 
						
						
					 
					
						2016-09-04 11:43:35 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						fe5daf801a 
					 
					
						
						
							
							Set password to empty string instead of None  
						
						... 
						
						
						
						Prevent exception in auth module. 
						
						
					 
					
						2016-09-03 10:01:52 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						b85fc5bed6 
					 
					
						
						
							
							Merge pull request  #507  from Unrud/auth  
						
						... 
						
						
						
						Repair and test authentication 
						
						
					 
					
						2016-09-02 18:36:31 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						ae2c447dca 
					 
					
						
						
							
							Merge pull request  #508  from Unrud/testheader  
						
						... 
						
						
						
						Test custom header 
						
						
					 
					
						2016-09-02 16:05:55 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						9e27d4e2a8 
					 
					
						
						
							
							Emulate fullmatch with match  
						
						... 
						
						
						
						re.fullmatch was introduced in Python 3.4 
						
						
					 
					
						2016-09-02 15:06:32 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						b25a601e28 
					 
					
						
						
							
							Test custom header  
						
						
						
						
					 
					
						2016-09-02 14:52:45 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						11df2f1184 
					 
					
						
						
							
							Test authentication  
						
						... 
						
						
						
						Test for 2a9f37defb 
						
						
					 
					
						2016-09-02 14:42:22 +02:00 
						 
				 
			
				
					
						
							
							
								Unrud 
							
						 
					 
					
						
						
							
						
						2a9f37defb 
					 
					
						
						
							
							Repair authentication  
						
						
						
						
					 
					
						2016-09-02 14:41:31 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						88d558f9fa 
					 
					
						
						
							
							Remove useless nested tuples  
						
						
						
						
					 
					
						2016-09-02 11:05:35 +02:00 
						 
				 
			
				
					
						
							
							
								Guillaume Ayoub 
							
						 
					 
					
						
						
							
						
						68e1e9dfb2 
					 
					
						
						
							
							Don't use mutables in constants or parameters  
						
						
						
						
					 
					
						2016-09-02 11:04:29 +02:00