berthubert/trifecta issues and pull requests

#53 - feature request: Option to strip EXIF data

Issue - State: open - Opened by akhepcat 6 months ago

#52 - sign-in email should mention account name and IP address

Issue - State: open - Opened by berthubert 7 months ago

#51 - Feature request: Delete button (and functionality) in Admin screen on the right of each image at the list of images.

Issue - State: closed - Opened by roelvandermade 10 months ago

#50 - Logging to standard output is not sanitized, leading to possible forged logs or unexpected behavior

Issue - State: closed - Opened by wandernauta 10 months ago - 1 comment

#49 - Malicious requests for many overlapping byte ranges of large images risk OOM

Issue - State: closed - Opened by wandernauta 10 months ago - 4 comments

#48 - Trifecta is vulnerable to Brotli ("zip") bombs if Brotli support is enabled

Issue - State: open - Opened by wandernauta 10 months ago

#47 - Suggested nginx X-Real-IP config assumes nginx is behind another proxy

Issue - State: closed - Opened by wandernauta 10 months ago - 1 comment

#46 - ID parameters from URL are not validated before being included in Fetch requests

Issue - State: closed - Opened by wandernauta 10 months ago

#45 - Overlong Cookie header takes long time to parse, leading to potential DoS

Issue - State: closed - Opened by wandernauta 10 months ago

#44 - Flip login/get sign-in email around for better UX

Pull Request - State: closed - Opened by cyclops1982 10 months ago

#43 - Blocking-threads design is susceptible to Slowloris-style DoS attacks without nginx

Issue - State: closed - Opened by wandernauta 10 months ago - 1 comment

#42 - Invalid POSTed UTF-8 is accepted and stored, causing JSON GET endpoints to fail

Issue - State: open - Opened by wandernauta 10 months ago - 2 comments

#41 - Mersenne Twister not suitable for security tokens

Issue - State: closed - Opened by solardiz 10 months ago - 2 comments

#40 - Email address field in user panel is vulnerable to SMTP injection

Issue - State: closed - Opened by wandernauta 10 months ago - 1 comment

#39 - Current password is not required when changing email address

Issue - State: closed - Opened by wandernauta 10 months ago - 1 comment

#38 - SVG images are accepted but not sanitized

Issue - State: closed - Opened by wandernauta 10 months ago - 1 comment

#37 - Some dependency improvements

Pull Request - State: closed - Opened by edmonds 10 months ago - 1 comment

#36 - Don't load my images (and other things) when not needed

Issue - State: closed - Opened by cyclops1982 11 months ago

#35 - Move back to green

Pull Request - State: closed - Opened by cyclops1982 11 months ago

#34 - Remove admin.html, updated styling and move to user/post object

Pull Request - State: closed - Opened by cyclops1982 11 months ago

#33 - Nice error message when post is not available anymore

Issue - State: open - Opened by cyclops1982 11 months ago

#32 - Minor cleanups in terms of whitespaces and includes

Pull Request - State: closed - Opened by kamiccolo 11 months ago

#31 - need link to admin.html

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#30 - add a separate multi-stage Dockerfile, for clean building

Pull Request - State: closed - Opened by Habbie 11 months ago

#29 - feat: multi-stage docker build

Pull Request - State: closed - Opened by Lewiscowles1986 11 months ago - 1 comment

#28 - Add -pthread to CXXFLAGS

Issue - State: closed - Opened by dev-zzo 11 months ago - 4 comments

#27 - Disable user is not hooked up

Issue - State: closed - Opened by berthubert 11 months ago

#26 - Delete user does not ask if you are sure

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#25 - There is no 'delete post'

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#24 - Delete image needs an 'are you sure'

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#23 - Add a nice favicon to trifecta

Pull Request - State: closed - Opened by roelvandermade 11 months ago

#22 - Sessions should expire?

Issue - State: open - Opened by cyclops1982 11 months ago

#21 - Make TLS only mode with better cookies

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#20 - Fix up title editing and captions

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#19 - Add text pastebin

Issue - State: open - Opened by berthubert 11 months ago - 3 comments

#18 - Add drag'n'drop support

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#17 - public/public until buttons/visibility

Issue - State: closed - Opened by berthubert 11 months ago - 1 comment

#16 - Various CSS changes

Pull Request - State: closed - Opened by cyclops1982 11 months ago - 1 comment

#15 - No error message if --html-dir is not specified correctly, or no files found

Issue - State: open - Opened by cyclops1982 11 months ago

#14 - Docker image

Issue - State: closed - Opened by cyclops1982 11 months ago - 2 comments

#13 - Better display large images

Issue - State: closed - Opened by cyclops1982 11 months ago

#12 - change wording of password1 and password2

Issue - State: closed - Opened by roelvandermade 11 months ago

#11 - add UI-visible versioning to trifecta binary (and check if there's an update available?)

Issue - State: open - Opened by roelvandermade 11 months ago - 2 comments

#10 - create alert when shooting yourself in the foot (ie. killing your own admin session)

Issue - State: open - Opened by roelvandermade 11 months ago

#9 - create link to admin/home/status page

Issue - State: closed - Opened by roelvandermade 11 months ago - 2 comments

#8 - Css fixes

Pull Request - State: closed - Opened by cyclops1982 11 months ago

#7 - Css fixes

Pull Request - State: closed - Opened by cyclops1982 11 months ago

#6 - Add AuthException, throw it when it should.

Pull Request - State: open - Opened by cyclops1982 11 months ago

#5 - 500 error when loading page and not being logged in

Issue - State: closed - Opened by cyclops1982 11 months ago - 1 comment

#4 - Pasting username/password fails

Issue - State: closed - Opened by cyclops1982 11 months ago - 1 comment

#3 - Missing favicon

Issue - State: closed - Opened by cyclops1982 11 months ago - 2 comments

#2 - Stylechanges

Pull Request - State: closed - Opened by cyclops1982 12 months ago

#1 - Let's see if this is better

Pull Request - State: closed - Opened by cyclops1982 12 months ago

GitHub / berthubert/trifecta issues and pull requests