Dane Everitt
|
2c1b211280
|
Add base idea for denying write access to certain files; ref pterodactyl/panel#569
|
2021-01-10 16:33:39 -08:00 |
|
Dane Everitt
|
96256ac63e
|
[security] fix vulnerability when handling remote file redirects
Also adds the ability for an admin to just completely disable this service if it is not needed on the node.
|
2021-01-09 17:52:27 -08:00 |
|
Jakob Schrettenbrunner
|
648072436f
|
organize imports with gopls format
|
2021-01-10 01:22:39 +00:00 |
|
Dane Everitt
|
b82f5f9a32
|
[security] deny downloading files from internal locations
|
2021-01-06 21:34:18 -08:00 |
|
Jakob
|
3f6eb7e41a
|
no need for additional decode (#81)
file paths used to be url-encoded twice, which is no longer the case.
|
2021-01-03 17:20:16 -08:00 |
|
Matthew Penner
|
d3ddf8cf39
|
Mark server as not transferring after archive failure
|
2021-01-02 10:11:25 -07:00 |
|
Dane Everitt
|
7549eb13a0
|
Merge branch 'develop' of https://github.com/pterodactyl/wings into develop
|
2020-12-27 16:17:17 -08:00 |
|
Dane Everitt
|
902f9f5944
|
Include more (and customizable) context with backup logs
|
2020-12-27 16:16:40 -08:00 |
|
Matthew Penner
|
3a7c4822f8
|
Improve logged stacktraces
|
2020-12-27 13:55:58 -07:00 |
|
Matthew Penner
|
de4d2f4724
|
Make logs follow a more consistent format
|
2020-12-27 13:01:34 -07:00 |
|
Matthew Penner
|
a4c8b8714b
|
Bump all dependencies
|
2020-12-27 11:49:08 -07:00 |
|
Matthew Penner
|
5be6e20b03
|
Send archive status request before sending the transfer status event
|
2020-12-26 11:42:44 -07:00 |
|
Dane Everitt
|
3842f054a5
|
These need spaces?
|
2020-12-25 15:14:21 -08:00 |
|
Dane Everitt
|
510d46289b
|
security: don't reveal wings version in remote API calls
|
2020-12-25 15:06:17 -08:00 |
|
Dane Everitt
|
6e5b14c466
|
Prevent malicious code from causing a server UUID to be used that is not valid
|
2020-12-25 15:01:43 -08:00 |
|
Dane Everitt
|
b3922864f2
|
Simplify origin checking
|
2020-12-25 14:40:28 -08:00 |
|
Dane Everitt
|
bb132243ed
|
Merge branch 'develop' of https://github.com/pterodactyl/wings into develop
|
2020-12-25 13:57:33 -08:00 |
|
Dane Everitt
|
d96115325a
|
Add file helper
|
2020-12-25 13:57:26 -08:00 |
|
Matthew Penner
|
a450abc080
|
Don't read directories either, add completion log for transfers
|
2020-12-25 14:46:33 -07:00 |
|
Matthew Penner
|
0a45ea44a4
|
Return a user-friendly error for an invalid file mode
|
2020-12-25 14:41:38 -07:00 |
|
Matthew Penner
|
5c78cb9ab3
|
Add transfer logging output (#77)
Co-authored-by: Dane Everitt <dane@daneeveritt.com>
|
2020-12-25 13:32:41 -08:00 |
|
Dane Everitt
|
c0523df696
|
Add a server context that gets canceled when a server is deleted
|
2020-12-25 11:21:09 -08:00 |
|
Dane Everitt
|
f7f5623c71
|
Set UA and limit simultaneous downloads
|
2020-12-24 09:01:00 -08:00 |
|
Dane Everitt
|
184013b652
|
Include endpoints for getting active downloads for a server
|
2020-12-20 13:14:07 -08:00 |
|
Dane Everitt
|
c8d297a056
|
Support canceling an in-progress download
|
2020-12-20 12:53:40 -08:00 |
|
Dane Everitt
|
c718da20e3
|
Check disk space before trying a write from the downloader; don't make empty directories if we can't even write the file
|
2020-12-20 11:17:53 -08:00 |
|
Dane Everitt
|
9c53436470
|
Check disk before even trying to run the download
|
2020-12-20 11:08:01 -08:00 |
|
Dane Everitt
|
17daa2071f
|
Update base logic for handling server file downloads
|
2020-12-20 10:59:07 -08:00 |
|
Dane Everitt
|
3495fb1c76
|
Less racey logic for resource usage
|
2020-12-16 22:03:35 -08:00 |
|
Dane Everitt
|
0c93e5ed02
|
Properly handle decoding paths
|
2020-12-16 21:38:56 -08:00 |
|
Dane Everitt
|
59a111de39
|
Invite our lord and savior emperror back to the table
|
2020-12-15 21:56:53 -08:00 |
|
Dane Everitt
|
c0a641247b
|
Different handling of errors on routes; push towards using middleware
|
2020-12-15 21:53:34 -08:00 |
|
Dane Everitt
|
057cdbd927
|
Use the underlying error
|
2020-12-15 21:14:20 -08:00 |
|
Dane Everitt
|
0ecc166dcd
|
Update error reporting middleware
|
2020-12-15 21:08:00 -08:00 |
|
Dane Everitt
|
3a26a5d39d
|
Convert all filesystem error types into the same Error struct
|
2020-12-15 20:51:13 -08:00 |
|
Dane Everitt
|
9ae75a399b
|
Update middleware.go
|
2020-12-15 20:20:47 -08:00 |
|
Dane Everitt
|
01b766dacc
|
Remove dupe
|
2020-12-15 20:20:22 -08:00 |
|
Dane Everitt
|
904e0a574d
|
Merge branch 'develop' of https://github.com/pterodactyl/wings into develop
|
2020-12-15 20:20:16 -08:00 |
|
Dane Everitt
|
acd6dc62d0
|
Update middleware logic
|
2020-12-15 20:19:09 -08:00 |
|
Caleb
|
8f26c31df6
|
Support downloading remote files to a server via the API
Co-authored-by: Dane Everitt <dane@daneeveritt.com>
|
2020-12-15 19:59:18 -08:00 |
|
Matthew Penner
|
e936f22419
|
Tweaks to server transfer logging
|
2020-12-11 17:24:35 -07:00 |
|
Dane Everitt
|
73f1399e47
|
Don't expect double-encoded values here
|
2020-12-08 21:24:31 -08:00 |
|
Dane Everitt
|
bcf0c72e47
|
Correctly report errors to admin users over the websocket; closes pterodactyl/panel#2709
|
2020-12-06 15:10:08 -08:00 |
|
Matthew Penner
|
169e8b8f8b
|
Fix chmod endpoint mode value
|
2020-11-29 13:48:15 -07:00 |
|
Matthew Penner
|
c6e2889075
|
Fix chmod endpoint
|
2020-11-29 13:44:28 -07:00 |
|
Matthew Penner
|
f62f714863
|
Add chmod endpoint to server files
|
2020-11-29 13:07:45 -07:00 |
|
Dane Everitt
|
97345123ce
|
Merge branch 'develop' of https://github.com/pterodactyl/wings into develop
|
2020-11-29 11:48:03 -08:00 |
|
Dane Everitt
|
8aa9105ed3
|
Make paths lowercase for cert serving; closes pterodactyl/panel#2745
|
2020-11-29 11:47:52 -08:00 |
|
Matthew Penner
|
e8088f85d0
|
Lets not try to log the server ID twice
|
2020-11-29 12:35:02 -07:00 |
|
Matthew Penner
|
0c8476c79b
|
Cleanup router/router_transfer.go
|
2020-11-29 12:33:44 -07:00 |
|