ed128ebb48
Fix naming
2022-08-01 18:34:37 +03:00
fdc595693c
Sync with LDAP
2022-08-01 18:28:37 +03:00
2cbbd4dc9c
Warning instead of error when base prefix ends with '/'
...
Workaround for #1210
2022-01-26 22:06:09 +01:00
e4cc73098a
Redirect …/.well-known/{caldav,carddav} to /
...
Closes #1200
2022-01-22 18:23:03 +01:00
17a5e5b6e0
Verify that base_prefix starts with '/'
2022-01-22 00:34:38 +01:00
3763ed46c4
Error if SCRIPT_NAME ends with '/'
2022-01-21 19:56:57 +01:00
0b7e9d73c9
Improve log message
2022-01-21 19:56:56 +01:00
c96e5b6667
Drop body for HEAD requests last
2022-01-19 19:58:05 +01:00
555e4ccc51
Clarify handling of HEAD request
2022-01-18 18:20:16 +01:00
4ed77cabc6
Only redirect to sanitized path under /web
2022-01-18 18:20:15 +01:00
d1532aa466
Extract httputils.redirect
2022-01-18 18:20:15 +01:00
1336c02079
Re-use variable
2022-01-18 18:20:14 +01:00
75df1093be
Workaround for broken contact PHOTO from InfCloud
...
See issue #1205
2022-01-15 23:44:00 +01:00
4a0bcde7a3
Set Content-Length for HEAD requests
2022-01-15 22:33:55 +01:00
b93842b10c
Redirect GET and HEAD requests to sanitized path
2022-01-15 22:33:55 +01:00
6dee974b74
Don't sanitize WSGI script name
2022-01-15 22:33:55 +01:00
bbaf0ebd8c
Change name in file header
2021-12-09 16:55:46 +01:00
f921e48648
Remove unused variable
2021-09-27 17:22:37 +02:00
cecb17df03
More type hints
2021-09-26 22:24:45 +02:00
73e42f8101
Enable static type checking
2021-09-26 22:24:45 +02:00
b4c76c94ad
Cancel mkcalendar request on error
2020-10-11 19:20:20 +02:00
b14889e170
Workaround: defusedxml messes up subsequent imports of ElementTree
...
See https://github.com/tiran/defusedxml/issues/54
2020-10-04 10:15:16 +02:00
0b3e4204a5
Cosmetics
2020-10-04 10:14:57 +02:00
d48bacc8e3
Improve log messages
...
Log failed login attempts with remote host as warning (closes #1104 )
Add component UID to log message about invalid recurrence rules (reference #602 )
Use "forwarded for" instead of "forwarded by" for remote host
2020-09-26 22:08:23 +02:00
10dafde32d
Allow multiple <D:set> and <D:remove> elements and consider order
2020-09-26 22:08:22 +02:00
1fe011020b
Single <D:propstat> element in PROPPATCH response
...
Instead of multiple elements with the same status
2020-09-26 22:08:21 +02:00
7642d72919
Improve variable names
2020-09-26 22:08:21 +02:00
0ce90d6b34
Extract read*_request_body methods
2020-09-14 21:19:48 +02:00
42ad18bc84
Rename _write_xml_content to _xml_response
2020-09-14 21:17:18 +02:00
80e8750c8a
Add more tests
2020-09-14 18:54:02 +02:00
d3bb19800c
Web: add support for the POST HTTP method. ( #1097 )
...
* Web: add support for the POST HTTP method.
This patch adds support for POST in addition to the already supported GET.
This is needed for implementing more complex web modules that also
support configuration modifications and advanced queries.
* Base web: return METHOD_NOT_ALLOWED when method isn't implemenetd.
Co-authored-by: Unrud <Unrud@users.noreply.github.com>
2020-09-14 18:17:45 +02:00
6091bd46a3
Respond 405 for unsupported methods instead of server error
2020-09-12 20:23:45 +02:00
7ed5122636
Use 403 response for supported-report and valid-sync-token errors
...
Some clients don't handle 409
2020-05-24 13:32:24 +02:00
e63a6e0c85
Cosmetics
2020-05-24 13:31:14 +02:00
b9bb017edf
Test current-user-principal prop authentication workaround
2020-05-24 13:19:29 +02:00
8740357eb2
Remove useless constant
2020-05-19 17:04:40 +02:00
d26ee9e7ed
Revert "Use secure RNG for auth delay"
...
This reverts commit 7b79c00ae2
2020-05-17 01:43:52 +02:00
7b79c00ae2
Use secure RNG for auth delay
2020-05-15 21:54:09 +02:00
7f2d5cea62
New right "i": Only allowing HTTP method GET
2020-04-22 19:20:42 +02:00
aef58bd55c
Minimize accesses to rights backend
2020-04-22 19:20:07 +02:00
f6a3a19680
Simplify Rights plugin interface
2020-04-09 22:02:03 +02:00
180e96b332
Move internal options to other sections
2020-02-19 09:50:36 +01:00
5371be2b39
Mark internal configuration options and sections with underscore
2020-02-19 09:50:27 +01:00
d3776e55fb
Rework XML helpers functions
...
- Merge make_tag, tag_from_clark and tag_from_human into make_clark and make_human
- Don't use RegEx for parsing
2020-01-19 21:07:54 +01:00
262d76cc87
Don't return empty PROPSTAT elements in PROPFIND responses
...
This should not have any impact on clients.
2020-01-19 21:07:54 +01:00
e11661ff3e
Protect against XML DOS attacks
...
Only XML content from authenticated users is parsed.
2020-01-19 21:07:54 +01:00
e07df9fd1d
Prefix internal attributes with underscore
2020-01-19 21:07:54 +01:00
0fb02cd026
Cosmetic changes (pylint)
2020-01-17 12:59:14 +01:00
7aca052859
Remove unused variable
2020-01-17 05:00:31 +01:00
b4230c4249
Extract method prepare
2020-01-17 05:00:31 +01:00
Mikhail Yasnov
Unrud
Tom Hacohen