github-jwinterm/modoboa
1
0
Fork 0
mirror of https://github.com/jwinterm/modoboa.git synced 2026-10-17 05:41:25 +02:00
Code Issues Packages Projects Releases Wiki Activity
4,101 Commits 2 Branches 0 Tags
cbfac68b975b5ee156996e5b4911289ef893bab5
Commit Graph
4101 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Spitap cbfac68b97 Make throttling more strict 2023-01-27 22:03:09 +01:00
Spitap bde07163b0 Fixed default throttle class 2023-01-27 17:41:32 +01:00
Spitap 126f3a7ea5 Tried to create test 2023-01-27 17:15:42 +01:00
Spitap 2e9f43d3a7 Improved custom throttling 2023-01-27 16:55:45 +01:00
Spitap 0d2f3d05a3 Added throttling to v2 api routes 2023-01-27 16:27:52 +01:00
Spitap 955b5016fb Api throttling 2023-01-27 15:14:59 +01:00
Antoine NguyenandGitHub 003096076e Merge pull request #2763 from modoboa/fix/xss_fixes 
Avoid XSS issues while deleting account and looking at logs.
 2023-01-26 20:30:09 +01:00
Antoine Nguyen eef9ab72b5 Avoid XSS issues while deleting account and looking at logs. 2023-01-26 10:41:15 +01:00
Antoine NguyenandGitHub 718ee43707 Merge pull request #2762 from modoboa/fix/logparser_lock 
Added locking mechanism to logparser command
 2023-01-25 17:46:28 +01:00
Antoine Nguyen 5aa1886ad3 Added locking mechanism to logparser command 
see #2754
 2023-01-25 17:20:20 +01:00
Antoine NguyenandGitHub 717be47c5f Merge pull request #2761 from modoboa/feature/information_page_v2 
Added information page about components in UI v2
 2023-01-25 14:09:50 +01:00
Antoine Nguyen 2d9ae1c89b Added information page about components in UI v2 2023-01-25 13:57:44 +01:00
Antoine NguyenandGitHub 354ab68840 Merge pull request #2757 from modoboa/fix/xss_issue_domain_form 
Fixed XSS issue in domain creation form.
 2023-01-24 16:47:35 +01:00
Antoine NguyenandGitHub 883cb4c760 Merge pull request #2755 from modoboa/fix/delete_alias_method 
Ensure DELETE method for delete alias view
 2023-01-23 13:27:56 +01:00
Antoine NguyenandGitHub 1a69db16e4 Merge pull request #2758 from modoboa/fix/remove_perm_delete_method 
Force DELETE method for remove permission view.
 2023-01-23 13:26:26 +01:00
Antoine Nguyen f61c45260b Fixed unit tests 2023-01-23 12:01:34 +01:00
Antoine Nguyen df25a9f0f3 Fixed unit test 2023-01-23 11:56:27 +01:00
Antoine Nguyen 38d778cc71 Force DELETE method for remove permission view. 
Avoids CSRF issue.
 2023-01-23 11:43:13 +01:00
Antoine Nguyen 7b7b6bac27 Fixed issue while displaying confirm message before deletion. 2023-01-23 11:22:03 +01:00
Antoine Nguyen c1db80fa69 Fixed XSS issue in domain creation form. 2023-01-23 11:14:21 +01:00
Antoine NguyenandGitHub 8313dba88f Merge pull request #2750 from modoboa/dependabot/pip/dnspython-2.3.0 
Bump dnspython from 2.2.1 to 2.3.0
 2023-01-20 16:07:56 +01:00
Antoine Nguyen d4b7bddc50 Ensure DELETE method for delete alias view 2023-01-20 16:04:08 +01:00
Antoine NguyenandGitHub 66e1803050 Merge pull request #2753 from modoboa/fix/delete_account_post 
Enforce POST method for account delete view
 2023-01-19 17:55:46 +01:00
Antoine Nguyen 7f0573e917 Enforce POST method for account delete view 2023-01-19 16:00:59 +01:00
Antoine NguyenandGitHub 8e14ac9366 Merge pull request #2752 from modoboa/fix/delete_domain_post 
Enforce POST methods for delete domain view.
 2023-01-19 09:05:00 +01:00
Antoine Nguyen a6096f5a2c Fixed wrong import 2023-01-18 10:45:48 +01:00
Antoine Nguyen 23b036c2ef Enforce POST methods for delete domain view. 
Avoids CSRF vulnerability.
 2023-01-18 10:39:26 +01:00
Antoine NguyenandGitHub 30e9549c90 Update SECURITY.md 2023-01-17 10:07:57 +01:00
Antoine NguyenandGitHub 1a47e09544 Create SECURITY.md 2023-01-17 09:35:46 +01:00
dependabot[bot]andGitHub 1899f1fc17 Bump dnspython from 2.2.1 to 2.3.0 
Bumps [dnspython](https://github.com/rthalley/dnspython) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/master/doc/whatsnew.rst)
- [Commits](https://github.com/rthalley/dnspython/compare/v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: dnspython
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-16 12:01:00 +00:00
Antoine NguyenandGitHub 7a85b4bd1b Merge pull request #2743 from modoboa/dependabot/npm_and_yarn/frontend/json5-1.0.2 
Bump json5 from 1.0.1 to 1.0.2 in /frontend
 2023-01-11 13:45:36 +01:00
Antoine NguyenandGitHub eb6c9c6c40 Merge pull request #2745 from modoboa/dependabot/npm_and_yarn/frontend/luxon-1.28.1 
Bump luxon from 1.28.0 to 1.28.1 in /frontend
 2023-01-11 13:45:18 +01:00
dependabot[bot]andGitHub 6596340287 Bump json5 from 1.0.1 to 1.0.2 in /frontend 
Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-11 11:21:10 +00:00
dependabot[bot]andGitHub 7669097d91 Bump luxon from 1.28.0 to 1.28.1 in /frontend 
Bumps [luxon](https://github.com/moment/luxon) from 1.28.0 to 1.28.1.
- [Release notes](https://github.com/moment/luxon/releases)
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moment/luxon/compare/1.28.0...1.28.1)

---
updated-dependencies:
- dependency-name: luxon
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-11 11:20:55 +00:00
Antoine NguyenandGitHub 3714c002c9 Merge pull request #2746 from modoboa/dependabot/pip/django-phonenumber-field-phonenumbers--7.0.2 
Bump django-phonenumber-field[phonenumbers] from 7.0.1 to 7.0.2
 2023-01-11 12:20:01 +01:00
Antoine NguyenandGitHub 0006f4a821 Merge pull request #2706 from modoboa/password-recovery-new-admin 
Password recovery on new-admin
 2023-01-11 12:18:57 +01:00
Antoine Nguyen c545489726 Fixed unit test 2023-01-11 11:41:44 +01:00
Antoine Nguyen b8bb5f35ff Remove useless test 2023-01-11 11:03:36 +01:00
Antoine Nguyen f91edc84b0 Few updates 2023-01-11 10:55:06 +01:00
Antoine NguyenandGitHub 1307ec41e2 Merge pull request #2717 from nicosqc/docs-migration-patch 
docs: run bash explicitly for migration
 2023-01-10 16:22:30 +01:00
dependabot[bot]andGitHub 05a975e10e Bump django-phonenumber-field[phonenumbers] from 7.0.1 to 7.0.2 
Bumps [django-phonenumber-field[phonenumbers]](https://github.com/stefanfoulis/django-phonenumber-field) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/stefanfoulis/django-phonenumber-field/releases)
- [Changelog](https://github.com/stefanfoulis/django-phonenumber-field/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/stefanfoulis/django-phonenumber-field/compare/7.0.1...7.0.2)

---
updated-dependencies:
- dependency-name: django-phonenumber-field[phonenumbers]
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-10 12:00:51 +00:00
Nico (sqc) 21bf16317c docs: run bash explicitly with sudo -i 
Since the default shell is set to /bin/sh, running 'source' to load the virtualenv won't work right away as described in the docs. You need to start bash (or a compatible shell) since sh does not feature the 'source' builtin. This addresses modoboa/modoboa-installer#463
 2023-01-03 12:27:06 +01:00
Spitap 391180090d Improved UI 2022-12-29 19:03:28 +01:00
Spitap cc89b23d2e Increase coverage 2022-12-29 12:38:20 +01:00
Spitap c216dd4283 Merge branch 'master' into password-recovery-new-admin 2022-12-28 18:53:26 +01:00
Spitap 0146175153 Refactoring, better tests 2022-12-28 18:42:58 +01:00
Antoine NguyenandGitHub 572e32f868 Merge pull request #2707 from modoboa/dependabot/pip/django-phonenumber-field-phonenumbers--7.0.1 
Bump django-phonenumber-field[phonenumbers] from 7.0.0 to 7.0.1
 2022-12-07 15:13:44 +01:00
Antoine NguyenandGitHub 6025bef69e Merge pull request #2705 from modoboa/dependabot/pip/testfixtures-7.0.4 
Bump testfixtures from 7.0.3 to 7.0.4
 2022-12-07 15:13:21 +01:00
dependabot[bot]andGitHub 91e779b4e0 Bump django-phonenumber-field[phonenumbers] from 7.0.0 to 7.0.1 
Bumps [django-phonenumber-field[phonenumbers]](https://github.com/stefanfoulis/django-phonenumber-field) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/stefanfoulis/django-phonenumber-field/releases)
- [Changelog](https://github.com/stefanfoulis/django-phonenumber-field/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/stefanfoulis/django-phonenumber-field/compare/7.0.0...7.0.1)

---
updated-dependencies:
- dependency-name: django-phonenumber-field[phonenumbers]
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-06 12:00:36 +00:00
Spitap 9ad9bf9ce4 fix spelling 2022-12-05 17:41:41 +01:00