Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Added tag 0.11.6 for changeset bacca65ce107 | Matthew Wild | 2020-09-09 | 0 | -0/+0 |
| | |||||
* | mod_s2s: Escape invalid XML in loggin (same way as mod_c2s) fix #15740.11.6 | Kim Alvefur | 2020-08-01 | 1 | -2/+1 |
| | |||||
* | net.http: Add request:cancel() method | Matthew Wild | 2020-08-08 | 1 | -0/+11 |
| | | | | | | | | | | This is a new API that should be used in preference to http.destroy_request() when possible, as it ensures the callback is always called (with an error of course). APIs that have edge-cases where they don't call callbacks have, from experience, shown to be difficult to work with and often lead to unintentional leaks when the callback was expected to free up certain resources. | ||||
* | net.http: Re-expose destroy_request() function | Matthew Wild | 2020-08-08 | 1 | -0/+1 |
| | | | | | This was accidentally turned private in 647adfd8f738 as part of refactoring for Lua 5.2+. | ||||
* | net.resolvers.basic: Default conn_type to 'tcp' consistently if unspecified ↵ | Matthew Wild | 2020-07-10 | 1 | -1/+2 |
| | | | | | | (thanks marc0s) Fixes a traceback when passed an IP address with no conn_type. | ||||
* | net.http: Fix traceback on invalid URL passed to request() | Matthew Wild | 2020-07-07 | 1 | -2/+3 |
| | |||||
* | net.http.server: Fix reporting of missing Host header | Kim Alvefur | 2020-06-23 | 1 | -1/+2 |
| | | | | | The "Missing or invalid 'Host' header" case was dead code previously because `host` was always at least an empty string. | ||||
* | net.http.server: Strip port from Host header in IPv6 friendly way (fix #1302) | Kim Alvefur | 2020-06-23 | 1 | -1/+1 |
| | | | | | E.g. given `[::1]:5280` it would previously result in only `[` instead of the correct `[::1]` | ||||
* | util.startup: Remove duplicated initialization of logging (fix #1527) | Kim Alvefur | 2020-06-22 | 1 | -1/+0 |
| | |||||
* | mod_muc_mam: Don't strip MUC <x> tags, fix #1567 | Kim Alvefur | 2020-06-21 | 1 | -3/+0 |
| | |||||
* | mod_auth_internal_*: Apply saslprep to passwords | Kim Alvefur | 2020-05-23 | 3 | -2/+25 |
| | | | | Related to #1560 | ||||
* | util.sasl.plain: Apply saslprep to stored password | Kim Alvefur | 2020-05-22 | 1 | -1/+1 |
| | | | | | | Fixes something like #1560 here too. The password sent by the user already had saslprep applied. | ||||
* | util.sasl.scram: Apply saslprep before hashing password, fixes #1560 | Kim Alvefur | 2020-05-22 | 1 | -0/+4 |
| | |||||
* | mod_storage_internal: Fix error in time limited queries on items without ↵ | Kim Alvefur | 2020-05-15 | 1 | -2/+4 |
| | | | | 'when' field, fixes #1557 | ||||
* | mod_muc_mam: Remove spoofed archive IDs before archiving, fix #1552 | Kim Alvefur | 2020-05-11 | 1 | -1/+1 |
| | | | | | | | | | The stanza-id added during archiving looks exactly like what should be stripped, so the stripping must happen before archiving. Getting priorities right is hard! Also no test coverage yet. | ||||
* | mod_csi_simple: Consider XEP-0353: Jingle Message Initiation important | Kim Alvefur | 2020-05-08 | 1 | -0/+3 |
| | | | | | | Improves experience with VoIP calls initiated via JMI Closes #1548 | ||||
* | mod_muc_mam: Fix missing advertising of XEP-0359, fixes #1547 | Kim Alvefur | 2020-05-08 | 1 | -0/+1 |
| | |||||
* | mod_muc_mam: Fix stanza id filter event name, fixes #1546 | Kim Alvefur | 2020-04-29 | 1 | -1/+1 |
| | | | | Nice typo | ||||
* | mod_tls: Log when certificates are (re)loaded | Kim Alvefur | 2020-04-26 | 1 | -1/+7 |
| | | | | Meant to reduce user confusion over what's reloaded and not. | ||||
* | mod_carbons: Fix handling of incoming MUC PMs #1540 | Kim Alvefur | 2020-04-26 | 1 | -1/+1 |
| | | | | | | | 27f5db07bec9 fixed this wrong. The code is supposed to check if the stanza is NOT sent to your bare JID. A MUC PM is always sent to your full JID. Hopefully nobody sends MUC invites to full JIDs, because those would be skipped by this as well. | ||||
* | mod_http_files: Avoid using inode in etag, fix #1498 | Kim Alvefur | 2020-04-25 | 1 | -1/+1 |
| | |||||
* | MUC tests: Add missing affiliation attribute | Matthew Wild | 2020-04-23 | 1 | -1/+1 |
| | |||||
* | Backed out changeset 18f2c7bc5795 (was testing against wrong branch) | Matthew Wild | 2020-04-23 | 1 | -6/+2 |
| | |||||
* | MUC tests: Add <required/> to expected form field | Matthew Wild | 2020-04-23 | 1 | -2/+6 |
| | |||||
* | MUC: Always include 'affiliation'/'role' attributes, defaulting to 'none' if nil | Matthew Wild | 2020-04-23 | 1 | -1/+1 |
| | |||||
* | core.certmanager: Move EECDH ciphers before EDH in default cipherstring ↵ | Kim Alvefur | 2019-08-25 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | (fixes #1513) Backport of 94e341dee51c The original intent of having kEDH before kEECDH was that if a `dhparam` file was specified, this would be interpreted as a preference by the admin for old and well-tested Diffie-Hellman key agreement over newer elliptic curve ones. Otherwise the faster elliptic curve ciphersuites would be preferred. This didn't really work as intended since this affects the ClientHello on outgoing s2s connections, leading to some servers using poorly configured kEDH. With Debian shipping OpenSSL settings that enforce a higher security level, this caused interoperability problems with servers that use DH params smaller than 2048 bits. E.g. jabber.org at the time of this writing has 1024 bit DH params. MattJ says > Curves have won, and OpenSSL is less weird about them now | ||||
* | util.prosodyctl: Tell prosody do daemonize via command line flag (fixes #1514) | Kim Alvefur | 2020-01-26 | 1 | -2/+2 |
| | | | | Backport of 88be11e9f9b9 | ||||
* | core.certmanager: Look for privkey.pem to go with fullchain.pem (fix #1526) | Kim Alvefur | 2020-04-10 | 1 | -6/+8 |
| | | | | | | | This makes `prosodyctl cert import example.com /path/to/example.com/fullchain.pem` work. This was never intended to, yet users commonly tried this and got problems. | ||||
* | mod_vcard4: Report correct error condition (fixes #1521) | Kim Alvefur | 2020-04-03 | 1 | -2/+2 |
| | | | | On error, the second return value is the error condition, not the third. | ||||
* | mod_register_ibr: Add FORM_TYPE as required by XEP-0077 (fixes #1511) | Emmanuel Gil Peyrot | 2019-09-29 | 1 | -0/+2 |
| | | | | Backport of f90abf142d53 from trunk | ||||
* | mod_storage_sql: Add index covering sort_id to improve performance (fixes #1505) | Kim Alvefur | 2020-03-22 | 1 | -0/+1 |
| | |||||
* | mod_admin_telnet: Handle unavailable cipher info (fixes #1510) | Kim Alvefur | 2020-03-22 | 1 | -5/+8 |
| | | | | | | | | The LuaSec :info() method gathers info using the OpenSSL function SSL_get_current_cipher(). Documentation for this function states that it may return NULL if no session has been established (yet). If so, the LuaSec functions wrapping this return nil, triggering a nil-indexing error in mod_admin_telnet. | ||||
* | MUC: Persist affiliation_data in new MUC format! | Matthew Wild | 2020-03-12 | 1 | -0/+1 |
| | |||||
* | mod_mam,mod_muc_mam: Allow other work to be performed during archive cleanup ↵ | Kim Alvefur | 2020-03-11 | 2 | -2/+10 |
| | | | | | | | | | | | (fixes #1504) This lets Prosody handle socket related work between each step in the cleanup in order to prevent the server from being completely blocked during this. An async storage backend would not need this but those are currently rare. | ||||
* | net.server_epoll: Fix indentation | Kim Alvefur | 2020-03-11 | 1 | -3/+3 |
| | | | | | | Some lines seem to have gotten the wrong indentation, possibly caused by Meld which often ignores lines with only whitespace changes and leaves their previous indentation. | ||||
* | mod_pubsub, mod_pep: Ensure correct number of children of <item/> (fixes #1496) | Kim Alvefur | 2020-02-27 | 2 | -2/+2 |
| | |||||
* | mod_muc_mam: Fix traceback saving message from non-occupant (fixes #1497) | Kim Alvefur | 2020-02-27 | 1 | -5/+8 |
| | | | | Caused by a plugin sending a message from the room itself. | ||||
* | util.datamanager: Fix iterating over "users" (thanks marc0s) | Kim Alvefur | 2020-02-24 | 1 | -1/+1 |
| | | | | | | | | | The 'store' path componend used to be unescaped until 756a2a00e7e7 added escaping to address issues with characters like '/' used in PEP, but with a special case for '_' which was already in common use in 'store' path components. Missed adding this escaping here. | ||||
* | mod_storage_sql: Move update limit check back one step, fixes traceback | Kim Alvefur | 2020-02-22 | 1 | -6/+6 |
| | | | | | 0c00274528a4 moved it one step too far, so the check was performed before connecting to the database instead of after. | ||||
* | mod_storage_sql: Fix check for deletion limits (fixes #1494) | Kim Alvefur | 2020-02-21 | 1 | -7/+7 |
| | | | | | The check was only performed if sql_manage_tables was set to true (the default) It should always be performed | ||||
* | mod_muc: Allow control over the server-admins-are-room-owners feature (see ↵ | Matthew Wild | 2020-02-13 | 1 | -1/+2 |
| | | | | #1174) | ||||
* | mod_admin_telnet: Create a DNS resolver per console session (fixes #1492) | Kim Alvefur | 2020-01-24 | 1 | -6/+19 |
| | | | | This is now the common pattern, eg see mod_s2s. | ||||
* | mod_websocket: Fire event on session creation (thanks Aaron van Meerten) | Matthew Wild | 2020-01-24 | 1 | -0/+2 |
| | |||||
* | prosodyctl: Fix some luacheck warnings | Matthew Wild | 2020-01-23 | 1 | -4/+5 |
| | |||||
* | Log warning when using prosodyctl start/stop/restart | Matthew Wild | 2020-01-23 | 1 | -0/+20 |
| | |||||
* | Merge | Kim Alvefur | 2020-01-20 | 0 | -0/+0 |
|\ | |||||
| * | Added tag 0.11.4 for changeset 10d6d0d91f4e | Kim Alvefur | 2020-01-06 | 0 | -0/+0 |
| | | |||||
* | | Added tag 0.11.5 for changeset dbd60f473164 | Matthew Wild | 2020-01-19 | 0 | -0/+0 |
| | | |||||
* | | util.startup: Ensure prosody.opts exists even when no options provided0.11.5 | Matthew Wild | 2020-01-19 | 1 | -1/+1 |
| | | |||||
* | | util.startup: Remove accidentally-committed debugging | Matthew Wild | 2020-01-19 | 1 | -1/+0 |
| | |