Commit Graph

312 Commits

Author SHA1 Message Date
zefie
e538bfb913 some fixes for pages that broke from the new VM based eval 2022-09-26 16:47:10 -04:00
zefie
b2aece5437 incomplete NNTP usenet support 2022-09-25 22:52:18 -04:00
zefie
d8da9e14c7 Rewrite script processing a bit
- Instead of using eval() we now use a proper VM Context
- As a result, any scripting errors will now give a more useful filename and line number.
- However, some things may break, if they are dependant on variables we are not allowing in the context.
2022-09-25 18:05:45 -04:00
zefie
a4a1469a79 fix previous commit 2022-09-24 23:22:05 -04:00
zefie
518cf12c99 disable multi query webtvism by default, but allow it to be enabled at the service level 2022-09-23 01:45:20 -04:00
zefie
5dff5779e9 correct a typo in a comment for clarification 2022-09-22 16:06:14 -04:00
zefie
e2e33f931d handle webtvism:
allow get/post variables to be the same name multiple times
rather than overwrite, the server will now change the variable from a string to an array.
2022-09-08 00:28:43 -04:00
zefie
d02e40d530 change "http_response" to "Response" for cleaner logging 2022-03-28 02:09:10 -04:00
zefie
ebfc081efa fix syntax error 2022-03-18 17:33:16 -04:00
zefie
a91b57764d send 'wtv-trusted: false' with http(s) responses 2022-03-18 15:07:11 -04:00
zefie
d70cb5bf36 mostly fix bad-disk detection
- may still get bad-disk screen once after fixing disk
- may only be an issue if the user reconnects before the cleanup
2022-03-17 19:24:06 -04:00
zefie
2be8c66b01 Bug fixes
- wtv-tricks:/unregister properly deletes SSID folder
- Registration properly saves account data if SSID folder doesn't exist
- do not send wtv-mail-count if SSID is not yet registered
- Registration now correctly creates the welcome message for user0
- update wtv-tricks:/unregister to only allow the primary user to unregister the account
2022-03-12 15:14:32 -05:00
zefie
0f26cdfc70 add password filter feature
- add post_data filter feature
- finally figure out how to duplicate objects
2022-03-09 17:38:16 -05:00
zefie
01c782cca9 fix issue with locally stored flashroms 2022-03-09 17:38:15 -05:00
zefie
0a00e34537 fix login, probably break 5 other things 2022-03-09 17:38:14 -05:00
zefie
2a526c0702 initial attempt to fix security issue
- likely adds new bug where users will be kicked to relogin after the
  server restarts
- TODO: figure out a way to safely check the user login when session
  data is unknown (eg restart) (hint: ticket?)
2022-03-09 17:38:14 -05:00
zefie
59ba999b5a fix null user bug, but also make a page to intentionally trigger it 2022-03-09 17:38:13 -05:00
zefie
f32c4b1926 fix DealerDemo and other stuff 2022-03-09 17:38:13 -05:00
zefie
445e28c91a implement internal shared ROMCache
- make most ROMCache URLS relative
- create wtvshared.htmlEntitize function
- update wtv-mail:/readmail to use wtvshared.htmlEntitize
2022-03-09 17:38:12 -05:00
zefie
b124cfa33c actually remove iconv-lite module 2022-03-09 17:38:12 -05:00
zefie
35471fd098 new module (iconv-lite) to attempt char encodings 2022-03-09 17:38:11 -05:00
zefie
123c8f7823 even more mail stuff 2022-03-09 17:38:09 -05:00
zefie
d14c4293aa post_data now logs as hex instead of raw WordArray 2022-03-09 17:38:08 -05:00
zefie
bf7369431e add wtv-ticket store api
- fix broken session bust crap from before
- properly resume session as user when server restarted
- api available to store other things in the wtv-ticket
2022-03-09 17:38:07 -05:00
zefie
d1c70c7ab1 disable session buster detection code for now
- breaks guest mode
- breaks registration
- really just breaks more than it fixes
- need ticket key/value system
2022-03-09 17:38:06 -05:00
zefie
433fc3db19 more patches to previous updates
- fixed getUnreadMailCount
- added unread mail count to login screen
- added session busted detection (new bug that when you restart minisrv it loses the user_id, so we send the client to relog) (todo: maybe add api to add key/value to ticket so we can retain data over server restarts)
2022-03-09 17:38:06 -05:00
zefie
c31f4cfa8c various fixes to previous commit 2022-03-09 17:38:05 -05:00
zefie
0d991d5eac user account updates
- move user accounts to subdir
- add password support
- implemented basics of multi-user support
- Can add users, edit them, and log in with them (password or not)
- Cannot delete users (with service) yet
2022-03-09 17:37:57 -05:00
zefie
622698ee66 attempt to fix: bad disk units are perpetually banned 2022-02-06 11:34:55 -05:00
zefie
16b7b91cfb update comments and formatting 2022-01-21 11:19:55 -05:00
zefie
e9ede65602 Add X-Forwarded-For for HTTP Proxy 2022-01-21 10:21:46 -05:00
zefie
efbef7e8f5 Add 'Object.getCaseInsensitiveKey()' prototype override 2022-01-15 05:29:24 -05:00
zefie
495db31ae1 add support for custom wtv-explanation-url on errors 2022-01-12 10:26:53 -05:00
zefie
b20d09d3dd Add friendlier HTTP error messages 2022-01-11 01:48:34 -05:00
zefie
b1d4c4c0bd fix issue with a certain site with invalid urls 2021-11-18 00:36:39 -05:00
zefie
ee76fd5190 more mail stuff
- todo: alot, but mainly track new/read and get local working
2021-11-15 00:51:31 -05:00
zefie
3da57455eb re-write security system to be more like WNI
- can get telly and reach stage-two
- narrow whitelist of allowed URLS in WTVClientSessionData constructor
- enough to show wtv-1800:/unauthorized with trust priv
- Times out lockeddown users really fast ;)
- untested disk error page
2021-11-12 15:35:40 -05:00
zefie
4e6b541cc9 add fancy block page 2021-11-10 12:55:10 -05:00
zefie
149adae3d5 do not trigger pc services when webtv client uses http 2021-09-10 23:43:36 -04:00
zefie
80b45e7707 remove whatever this is 2021-08-27 14:49:32 -04:00
zefie
cf10504f32 don't assume an incarnation header was sent with a ticket 2021-08-16 08:32:31 -04:00
zefie
fdd2f16f3b breaking change: doErrorPage moved to wtvshared.doErrorPage
- but I fixed flashrom error handling..
- added a passthrough for old scripts
2021-08-16 08:12:27 -04:00
zefie
1967c076a9 add protection against requesting direct service files 2021-08-15 18:51:48 -04:00
zefie
7b0200eac8 misc fixes 2021-08-15 17:54:53 -04:00
zefie
78f6adee6e allow space in url without urlencoding 2021-08-13 22:13:43 -04:00
zefie
1127f8def7 use HUFFMAN encoding for large files (seems to work) 2021-08-13 17:01:35 -04:00
zefie
c9d8cba7db no, its not 2021-08-13 16:02:27 -04:00
zefie
b99dc82ca6 switch to deflate 2021-08-13 12:31:52 -04:00
zefie
1a204c4df5 fix crash when handling denied connections 2021-08-13 11:24:52 -04:00
zefie
ce5b2eeb3d minibrowser theme thanks to MattMan
- remove TOS coz no one cares anyway
2021-08-13 03:54:19 -04:00