Commit Graph

  • e2b6bc3008 Remove old workaround Guillaume Ayoub 2016-04-08 14:41:05 +0200
  • e34d9eeaff Merge pull request #375 from untitaker/old-packages Guillaume Ayoub 2016-04-08 12:08:46 +0200
  • ecd9922445 Remove old packages Markus Unterwaditzer 2016-04-07 19:43:02 +0200
  • 54dee0c7c4 Clean tests Guillaume Ayoub 2016-04-07 19:25:10 +0200
  • 595e2329ea Don't create collections on GET requests Guillaume Ayoub 2016-04-07 19:03:27 +0200
  • 1001bcb676 Remove extra auth, rights and storage modules Guillaume Ayoub 2016-04-07 19:02:52 +0200
  • 1c4acc44a8 Merge pull request #373 from binor/patch-1 Guillaume Ayoub 2016-04-04 22:49:27 +0200
  • 725b1b41be Add ca-certs to fix problem collecting bcrypt binor 2016-04-04 21:14:26 +0200
  • fa9fd2becc Merge pull request #370 from cdpb/master Guillaume Ayoub 2016-04-02 13:27:16 +0200
  • 91a5a82c80 remove python2 support cdpb 2016-04-02 10:35:39 +0200
  • 287ef6caa2 Don't launch tests on Travis with Python 2 anymore Guillaume Ayoub 2016-03-31 19:59:52 +0200
  • 434cb533e9 Remove Python 2 support Guillaume Ayoub 2016-03-31 19:57:40 +0200
  • fa4eaef08e Merge pull request #353 from Unrud/patch-7 Guillaume Ayoub 2016-03-31 19:24:43 +0200
  • f27ed8e6ff Merge pull request #363 from igogold/readonly-collections Guillaume Ayoub 2016-03-31 19:23:47 +0200
  • 63f8b36df3 Merge pull request #368 from cdpb/master Guillaume Ayoub 2016-03-31 19:22:13 +0200
  • 5ec5b75558 move base image to alpine cdpb 2016-03-28 10:51:36 +0200
  • 2ea35a2fc3 Merge pull request #209 from vuntz/no-autocreate-multifilesystem Guillaume Ayoub 2016-03-10 18:48:29 +0100
  • aa04aa04b7 Fix privilege set for read only collection igogold 2016-03-04 11:05:13 +0500
  • bbe71c1ad1 Integrated server without threads and busy waiting Unrud 2016-01-27 07:17:38 +0100
  • 3a4184d1ab Merge pull request #351 from Unrud/patch-6 Guillaume Ayoub 2016-01-15 10:54:47 +0100
  • 060d265129 Merge branch 'master' of github.com:Kozea/radicale Guillaume Ayoub 2016-01-15 10:51:24 +0100
  • 9a2668e425 Fix the Collection._parse docstring Guillaume Ayoub 2016-01-15 10:50:36 +0100
  • a55cff8eb6 Also remove items from the collections itself Unrud 2016-01-15 01:13:18 +0100
  • 5081fcbcd1 Use component names to filter duplicates Unrud 2016-01-15 01:09:43 +0100
  • 9bc8635bdf Merge pull request #350 from Unrud/patch-5 Guillaume Ayoub 2016-01-15 00:00:33 +0100
  • 6be7dab03f Correct function name Unrud 2016-01-14 23:07:53 +0100
  • f8b068e9fe Version 1.1.1 Guillaume Ayoub 2016-01-07 23:31:19 +0100
  • 83304c1378 Stupid me, that was PEP 20 (fix 347 for Python 2 too) Guillaume Ayoub 2016-01-06 21:44:20 +0100
  • 620d9f8316 Readability counts - PEP8™ (fix #347) Guillaume Ayoub 2016-01-06 20:19:12 +0100
  • e47b50421e Version 1.1 Guillaume Ayoub 2015-12-31 12:51:23 +0100
  • e7ce00d54f Style Guillaume Ayoub 2015-12-31 12:49:41 +0100
  • 95fe2b6824 Merge pull request #345 from cdpb/master Guillaume Ayoub 2015-12-31 11:59:09 +0100
  • b484d42547 Merge pull request #335 from Kozea/permissions Guillaume Ayoub 2015-12-31 11:30:29 +0100
  • 365e35cdba add improved docker version cdpb 2015-12-28 19:17:30 +0100
  • 20960bee84 Merge pull request #339 from Unrud/patch-2 Guillaume Ayoub 2015-12-24 16:00:39 +0100
  • 18c88642fb Merge pull request #343 from Unrud/paths Guillaume Ayoub 2015-12-24 15:48:14 +0100
  • 0f9a38eba7 Test with Python 3.5 Guillaume Ayoub 2015-12-24 15:22:48 +0100
  • eed37792ae Convert filesystem paths safely to paths This only becomes a problem if the OS/filesystem allows / in filenames or . respectively .. as filenames. Unrud 2015-12-24 14:25:34 +0100
  • bcaf452e51 Convert component names safely to filenames Component names are controlled by the user and without this checks access to arbitrary files is possible if the multifilesystem backend is used. Unrud 2015-12-24 13:32:30 +0100
  • b4b3d51f33 Convert paths safely to file system paths With the old implementation on Windows a path like "/c:/file/ignore" got converted to "c:\file" and allowed access to files outside of FOLDER Unrud 2015-12-24 12:37:11 +0100
  • 6b7e79a368 Use sanitize_path instead of normpath See a7b47f075499a1e1b40539bc1fa872a3ab77a204 The check for "." is now needless because the sane path is always absolute. ``path.replace(os.sep, "/")`` is only relevant for the (multi)filesystem backend and should be there. Unrud 2015-12-24 10:07:04 +0100
  • 1ad994cadf Move sanitize_path into pathutils.py Unrud 2015-12-24 09:41:10 +0100
  • ed44830447 Error message if path not starting with prefix Before the program crashed implicitly Unrud 2015-12-24 08:24:55 +0100
  • 780cecc0f2 Always sanitize request URI Do no rely on the HTTP server Unrud 2015-12-24 08:19:12 +0100
  • ee095a463d Improve URI sanitation The old implementation failed to sanitize URIs like ".", "..", "../.." or "//" Unrud 2015-12-24 07:48:14 +0100
  • c217e5d2ff Merge pull request #342 from Unrud/handler Guillaume Ayoub 2015-12-24 10:21:13 +0100
  • 592537e37c Introduce naming scheme for request handlers The do_ prefix and upper case name allows easy distinction between methods that handle requests and other methods. Without this distinction an attacker could call arbitrary methods. Currently there is no method that matches the argument count, but that's easy to miss when new methods are added. Unrud 2015-12-24 05:57:33 +0100
  • 1109973a92 Merge pull request #341 from Unrud/patch-4 Guillaume Ayoub 2015-12-23 12:09:00 +0100
  • 4bfe7c9f79 Prevent "regex injection" Unrud 2015-12-23 07:05:20 +0100
  • c7fe4777b1 Merge pull request #340 from Unrud/patch-3 Guillaume Ayoub 2015-12-22 15:01:21 +0100
  • 7cb31fe22b Improve regex for Well-Known URIs Unrud 2015-12-22 12:44:19 +0100
  • 367ca6fcbf Replace standard file descriptors of daemon Unrud 2015-12-22 07:03:51 +0100
  • ecb8ad747e Decouple the daemon from its parent environment Unrud 2015-12-22 06:58:58 +0100
  • 3a9238f670 Check and create PID file in a race-free manner Unrud 2015-12-22 06:55:17 +0100
  • 0a09804821 Close PID file Unrud 2015-12-22 06:49:33 +0100
  • 53c3113b44 Merge pull request #337 from Unrud/patch-1 Guillaume Ayoub 2015-12-10 11:05:59 +0100
  • 80ecae40cb Assign new items to correct key Unrud 2015-12-10 09:46:38 +0100
  • e807c3d35b Use the first matching section for getting rights Guillaume Ayoub 2015-12-03 15:22:12 +0100
  • 9875db9a6c Add md5 and bcrypt as available encryptions methods for htpasswd in config file Guillaume Ayoub 2015-10-21 02:09:11 +0200
  • 7b82121c12 Encode message and committer for git commits (fix #313) Guillaume Ayoub 2015-09-22 11:01:33 +0200
  • 6babebd315 Version 1.0.1 Guillaume Ayoub 2015-09-21 12:14:51 +0200
  • 231cdec476 Update development status Guillaume Ayoub 2015-09-14 11:55:49 +0200
  • 377762e23c Version 1.0 Guillaume Ayoub 2015-09-14 11:49:34 +0200
  • f112a9b390 Merge pull request #305 from untitaker/database-props Guillaume Ayoub 2015-08-28 11:26:10 +0200
  • 57b1ccdea5 Fix crash on empty values Markus Unterwaditzer 2015-08-21 20:11:44 +0200
  • 213cb40480 Don't discard PROPPATCH on empty collections. Markus Unterwaditzer 2015-08-21 20:08:56 +0200
  • 90f4b48f98 Merge pull request #236 from untitaker/multifilesystem_fixes Guillaume Ayoub 2015-08-21 16:58:26 +0200
  • d300949fe8 Improve errorhandling in multifilesystem Markus Unterwaditzer 2014-11-30 13:49:11 +0100
  • ce9fd74d98 Merge pull request #260 from deronnax/not_found_instead_of_gone Guillaume Ayoub 2015-08-21 15:34:59 +0200
  • 634c3c6e3e Merge pull request #304 from singpolyma/pam-service Guillaume Ayoub 2015-08-12 10:27:55 +0200
  • 2de4f53fc3 Use PAM service Stephen Paul Weber 2015-08-11 16:46:46 -0500
  • b4438d25f7 Cosmetics in htpasswd Guillaume Ayoub 2015-07-29 14:00:49 +0200
  • 3b520a966b Merge pull request #297 from jgehrcke/feature/md5apr1bcrypt Guillaume Ayoub 2015-07-29 13:52:57 +0200
  • 3abbdcf671 htpasswd.py: add optional MD5-APR1 and BCRYPT support via passlib. Jan-Philip Gehrcke 2015-07-29 13:12:18 +0200
  • 1c39c75c6b Remove Pypy from travis Guillaume Ayoub 2015-07-24 16:28:43 +0200
  • 3f3d0e8945 Remove Pypy from tox Guillaume Ayoub 2015-07-24 16:25:01 +0200
  • 22a356bd06 Merge branch 'master' of github.com:Kozea/radicale Guillaume Ayoub 2015-07-24 16:01:38 +0200
  • 8604593512 Fix many tests and database storage Guillaume Ayoub 2015-07-24 16:01:03 +0200
  • 459b02c9a4 Fix some tests Guillaume Ayoub 2015-07-24 14:23:11 +0200
  • 79e5403cac Remove coveralls from .travis.yml Guillaume Ayoub 2015-07-17 18:11:22 +0200
  • 765aa2e142 Add dulwich in .travis.yml Guillaume Ayoub 2015-07-17 18:05:35 +0200
  • 48a7d5d9c3 Create .travis.yml Guillaume Ayoub 2015-07-17 17:56:06 +0200
  • a06e4ef075 PROPFIND: correctly handle 'propall' and 'propnames' Giel van Schijndel 2014-08-09 22:44:36 +0200
  • 54d71355d1 Change xmlutils propfind to return readonly calendars Hadley Rich 2015-06-04 11:23:01 +1200
  • 519a40d714 Merge pull request #288 from l1am9111/tag_typo Guillaume Ayoub 2015-05-15 16:14:50 +0200
  • ba5d38d09b Fix typo Liam 2015-05-15 13:47:44 +0100
  • b1ce0fcfd3 Fix Daniel's name in NEWS Guillaume Ayoub 2015-05-06 15:00:58 +0200
  • 18b3a7540d Merge pull request #284 from mmonaco/master Guillaume Ayoub 2015-05-05 08:27:37 +0200
  • bf96d4a1fa Use path for git commit message Matthew Monaco 2015-05-04 13:25:38 -0600
  • ced7e76ba0 Small style fixes Guillaume Ayoub 2015-05-01 10:31:25 +0200
  • 675f9d1f87 Merge pull request #255 from jspricke/fix_FutureWarning Guillaume Ayoub 2015-05-01 10:22:38 +0200
  • c3df08277b Merge pull request #223 from cloudfleet/dockerfile Guillaume Ayoub 2015-04-29 19:36:21 +0200
  • ba514d7bc2 Merge pull request #249 from jspricke/setuptools Guillaume Ayoub 2015-04-29 19:35:24 +0200
  • 4cbabd2840 Merge pull request #259 from untitaker/issue258 Guillaume Ayoub 2015-04-29 19:13:25 +0200
  • c249e080af Merge pull request #273 from untitaker/issue117 Guillaume Ayoub 2015-04-29 19:09:38 +0200
  • a0fc07a894 Allow content-types with ';' in charset, fix #279 Guillaume Ayoub 2015-04-29 19:07:17 +0200
  • e69bec1272 Don't rely on case-sensitive imports, fix #282 Guillaume Ayoub 2015-04-29 18:55:56 +0200
  • 85826fcb74 Merge pull request #281 from untitaker/pam Guillaume Ayoub 2015-04-25 15:11:58 +0200
  • baa958c81f Fix compatibility for PAM auth Markus Unterwaditzer 2015-04-25 11:14:04 +0200
  • ab77f62bf4 Merge pull request #280 from fatlotus/patch-1 Guillaume Ayoub 2015-04-20 10:27:16 +0200