openwrt-mirror/luci
1
0
Fork 0
mirror of https://github.com/openwrt/luci.git synced 2026-08-29 06:22:49 +04:00
Code Issues Packages Projects Releases Wiki Activity
7,765 Commits 17 Branches 13 Tags
9b176c8d7bd2a635cd5a3a3bdce3149247e66392
Commit Graph
7765 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jo-Philipp Wich f23f7b8751 luci-app-upnp: protect lease delete call with csrf token 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-21 00:11:28 +02:00
Jo-Philipp Wich c1278f967e luci-app-splash: protect admin status call with csrf token 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-21 00:09:55 +02:00
Jo-Philipp Wich ac34dfa0bc luci-app-radicale: protect start/stop actions with csrf token 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-21 00:03:56 +02:00
Jo-Philipp Wich ae9fb03e74 luci-app-privoxy: protect start/stop actions with csrf token 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-21 00:03:03 +02:00
Jo-Philipp Wich 0f1f5140e3 luci-app-ocserv: protect disconnect action with csrf token 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-21 00:00:55 +02:00
Jo-Philipp Wich b9ed03c5a9 luci-app-ddns: protect start/stop actions with csrf token 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-20 23:58:01 +02:00
Jo-Philipp Wich d4666757b7 luci-mod-admin-full: protect iptables counter reset and restart with token 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-20 22:27:39 +02:00
Jo-Philipp Wich 8bb749ecc3 luci-mod-admin-full: protect network post actions with csrf tokens 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-20 22:17:23 +02:00
Jo-Philipp Wich 6b3f804956 luci-base: filter invalid opkg status lines 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-20 21:04:46 +02:00
Jo-Philipp Wich b5826f1ffb luci-mod-admin-full: protect clock, flash and opkg ops with submit token 
* Use post_on() target to require csrf token verification for modifying actions
* Ensure that package and flash operation handlers guard modifying operations
  with parameter check

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-20 21:04:46 +02:00
Jo-Philipp Wich 562c47e5fd luci-base: generalize post security token handling 
* Add a generic helper function to check need for post / csrf token validation
* Remove custom token verification in cbi targets
* Support requiring post security depending on specific submit parameters,
  usable through post_on() action

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-20 21:04:46 +02:00
Hannu Nyman e8349fbfdf Merge pull request #513 from LuttyYang/master 
luci-theme-material: PR from Version 0.2.11
 2015-10-13 18:15:05 +03:00
Lutty Yang 780778e6f9 luci-theme-material: PR from Version 0.2.11 
Signed-off-by: Lutty Yang <lutty@wcan.in>
 2015-10-13 23:07:16 +08:00
Hannu Nyman 7b00a4a765 i18n: Sync translations 
Sync translations to the current strings.

Changes in luci-app-ddns, luci-app-mjpg-streamer, luci-app-qos,
luci-app-shadowsocks-libev, luci-app-statistics and luci-base

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
 2015-10-13 12:35:57 +03:00
Hannu Nyman c8392ba970 luci-base: update i18n base template 
Update i18n base template to match the current strings.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
 2015-10-13 12:25:58 +03:00
Hannu Nyman 1d37c9c25d luci.mk: correct SK language name to Slovak 
SK language code refers to Slovak, not Slovene.
Native language name is correct.

References:
https://forum.openwrt.org/viewtopic.php?id=60235
https://en.wikipedia.org/wiki/Slovak_language

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
 2015-10-13 10:13:50 +03:00
Jo-Philipp Wich d1da53512e luci-app-ddns: fix typo in previous commit 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-12 11:14:01 +02:00
Hannu Nyman 2cfd11b272 Timezone information: update to 2015g 
Changes in 2015g:
http://mm.icann.org/pipermail/tz-announce/2015-October/000034.html

     Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.

     Fiji's 2016 fall-back transition is scheduled for January 17, not 24.

     Fort Nelson, British Columbia will not fall back on 2015-11-01. It has
     effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
     New zone America/Fort_Nelson.

Note: the Turkey-related one-time rule change is not apparently catched by
the zoneinfo2lua script, so that change is not included in this commit.
(Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
 2015-10-12 11:09:28 +03:00
Jo-Philipp Wich 49a7c5bd03 luci-app-ddns: remove title <a> hacks 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-12 09:14:49 +02:00
Mangix a2ebf87145 resources/icons: Use gifsicle to save a few bytes. 
Signed-off by: Rosen Penev <rosenp@gmail.com>
 2015-10-09 16:00:57 -07:00
Jo-Philipp Wich 222284578b Merge pull request #505 from roger-/dump1090-latlon 
dump1090: lat/lon should be floats
 2015-10-08 02:06:08 +02:00
Roger 9eda8585d6 dump1090: lat/lon should be floats 
Signed-off-by: Roger D <rogerdammit@gmail.com>
 2015-10-07 18:16:03 -05:00
Jo-Philipp Wich bd504f552d luci-base: prevent UCI changes in CBI if form is not in submit state 
Only process submitted data if the "cbi.submit" parameter is present as the
dispatcher will verify the integrity of the CSRF token in this case.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-08 00:30:14 +02:00
Jo-Philipp Wich 281d2f6178 Globally replace luci.dispatcher.build_url(...) with url(...) invocations 
Also concat multiple string arguments into one while we're at it.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-07 19:07:36 +02:00
Jo-Philipp Wich 49a2cb5ad1 luci-base: expose luci.dispatcher.build_url() as url() in templates 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-07 13:03:42 +02:00
Jo-Philipp Wich 3f29078fb9 luci-base: protect simpleforms with CSRF tokens 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-07 12:24:58 +02:00
Jo-Philipp Wich 38a9993bd1 luci-mod-admin-full: switch to POST action for reboot 
Also rework the reboot tmeplate a little bit.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-07 01:54:56 +02:00
Jo-Philipp Wich ada4a0ea98 luci-base: switch to POST action for service reload 
Switches the service reload calls to CSRF token protected POST action.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-06 22:37:27 +02:00
Jo-Philipp Wich e440144d56 luci-mod-admin-full: switch to POST actions for UCI changes 
Switches UCI apply/revert/save to CSRF token protected POST actions.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-06 22:29:07 +02:00
Jo-Philipp Wich 9b75d8ec36 luci-theme-bootstrap: add redir parameter to uci change menu 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-06 22:21:48 +02:00
Jo-Philipp Wich 36f133f946 luci-theme-material: add redir parameter to uci change menu 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-06 22:21:36 +02:00
Jo-Philipp Wich 8d46c20327 luci-base: protect CBI forms with CSRF tokens 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-06 18:54:35 +02:00
Jo-Philipp Wich 5a6382171d luci-base: add support for POST-only actions with CSRF token check 
Add the dispatcher infrastructure to restrict certain routes to POST
requests only in conjunction with verification of CSRF tokens.

This is the first step to get rid of the CSRF token in the url in favor
to tokens embedded in forms.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-06 15:56:35 +02:00
Hannu Nyman d0f15d9804 Merge pull request #503 from LuttyYang/master 
luci-theme-material: fix some style bug in LUCI newest version
 2015-10-06 15:18:41 +03:00
Lutty Yang 7567f2d01f luci-theme-material: fix some style bug in LUCI newest version 
Signed-off-by: Lutty Yang <lutty@wcan.in>
 2015-10-06 20:14:27 +08:00
Jo-Philipp Wich 5e9da8240f Globally convert headline anchors into name attributes. 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-06 13:30:33 +02:00
Jo-Philipp Wich 8023fb9c43 Merge pull request #501 from LuttyYang/master 
luci-theme-material: PR from version 0.2.6
 2015-10-05 20:29:41 +02:00
Jo-Philipp Wich 78c61d6de0 luci-app-statistics: reorder interface, netlink and openvpn datasources 
This aligns the order and grouping of RX and TX network datasources.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-05 19:11:51 +02:00
Jo-Philipp Wich c8c4a343c2 luci-app-statistics: add support for sorting RRD data sources 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-05 19:11:13 +02:00
Jo-Philipp Wich 3289e13495 luci-app-statistics: add initial support for collectd-mod-openvpn 
This changeset covers compression and traffic stats, not every combination has
been tested yet.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-05 18:55:28 +02:00
Lutty Yang a5ae384c8f luci-theme-material: PR from version 0.2.6 
PR from version 0.2.6

Signed-off-by: Lutty Yang <lutty@wcan.in>
 2015-10-05 22:01:42 +08:00
Jo-Philipp Wich cff2b99b4f luci-app-statistics: add initial support for collect-mod-sensors 
Due to a lack of a test environment this support only covers thermal graphs
so far. Please send the output of "rrdtool info /tmp/rrd/*/sensors-*/*.rrd"
if your system happens to support voltage, power or fanspeed sensors.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-05 15:13:44 +02:00
Hannu Nyman 56deb7b2cf Merge pull request #488 from hnyman/black-flash 
luci-base: change index.html to be more like current themes
 2015-10-04 18:57:59 +03:00
Hannu Nyman 527ad73866 Merge pull request #489 from hnyman/remove-bno-theme 
themes: remove freifunk-bno theme
 2015-10-04 18:57:45 +03:00
Jo-Philipp Wich 03a90f161a luci-mod-admin-full: status: survive broken DSL status output 
Only attempt to call "dsl_func" if the dsl_control lucistat output could be
successfully evaluated.

Works around https://dev.openwrt.org/ticket/20607

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-03 16:11:14 +02:00
Jo-Philipp Wich c10a7380bf luci-app-statistics: improve diagram generation, add missing title 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-03 15:30:59 +02:00
Jo-Philipp Wich 96b031bbad luci-app-statistics: rework graph label handling 
Remove leftover unused translation code and properly escape colons in line
labels.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-03 15:29:28 +02:00
Jo-Philipp Wich 59d2f60a42 luci-app-statistics: only render index view for more than one instance 
If a plugin produces only one instance, e.g. netlink with just one interface
configured, then the controller will register no detail views which would
normally show all graphs but the index pacage of a given plugin will still
display the collapsed view without any possibility to reach the full listing.

Fix the problem by only rendering a linked index view when more than one
instance is present.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
 2015-10-03 11:40:12 +02:00
Steven Barth ecd460f79f proto_map: fix ealen range 
Signed-off-by: Steven Barth <steven@midlink.org>
 2015-10-02 11:34:12 +02:00
Hannu Nyman 8030cc6f4b Merge pull request #496 from neheb/master 
Use ZopfliPNG to save 5.4 KB
 2015-09-29 21:10:43 +03:00