aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* net.server_event: Prevent resuming connections without readcallback, eg ↵Kim Alvefur2016-03-021-1/+1
| | | | closed connections (fixes #590)
* mod_c2s: Remove connection object from session object when connection ↵Kim Alvefur2016-03-021-0/+1
| | | | disconnected to prevent accidental use (see #590)
* util.datamanager: Unreference file handle after closing it to prevent trying ↵Kim Alvefur2016-02-251-0/+1
| | | | to close it again (fixes #632)
* Added tag 0.9.10 for changeset 352270bc0439Matthew Wild2016-01-270-0/+0
|
* MergeKim Alvefur2016-01-271-1/+2
|\
| * mod_dialback: Follow XEP-0185 and use HMACKim Alvefur2016-01-191-1/+2
| |
| * core: Increase default read size to "all of it", in practice 8K (size of ↵Kim Alvefur2016-01-101-1/+1
| | | | | | | | LuaSockets buffer)
| * util.uuid: Open /dev/urandom read-only, make seed() a noopKim Alvefur2016-01-101-4/+2
| |
| * Added tag 0.9.9 for changeset 7ec52755622fMatthew Wild2016-01-080-0/+0
| |
| * Backout 88d54bec26b7 prior to release, as it certainly requires more testingvault/0.9.9Matthew Wild2016-01-081-1/+3
| |
| * mod_http_files: Santize the path relative to our base URL before translating ↵Matthew Wild2016-01-071-1/+33
| | | | | | | | it to a filesystem path, fixes a relative path traversal vulnerability
| * util.uuid: Use /dev/urandomKim Alvefur2016-01-061-27/+16
| |
| * net.dns: Allow a zone id in resolv.conf (eg like %eth0)Kim Alvefur2016-01-041-1/+1
| |
| * util.ip: Support zone id syntax in IPv6 addressesKim Alvefur2016-01-041-1/+5
| |
| * net.dns: Support IPv6 addresses in resolv.conf [Backported from 0.10]Florian Zeitz2013-06-181-6/+13
| |
| * util.ip: Fix protocol detection of IPv6 addresses beginning with : ↵Matthew Wild2013-05-181-2/+4
| | | | | | | | [Backported from 0.10]
| * util.ip: Automatically determine protocol of IP address if none specified. ↵Matthew Wild2013-05-171-1/+9
| | | | | | | | Return error if invalid. [Backported from 0.10]
| * tests/test.lua: Fix fake module() function to prevent _M from being _G ↵Matthew Wild2016-01-061-1/+4
| | | | | | | | (test.lua's environment), which caused modules to break the sandbox when they set _M.*
| * certs/Makefile: Run key generation with a stricter umask (fixes a race ↵Kim Alvefur2015-12-231-2/+2
| | | | | | | | condition)
| * mod_admin_telnet: Backport 06696882d972 from 0.10 (this command greatly ↵Matthew Wild2015-12-221-0/+27
| | | | | | | | helps with debugging HTTP issues)
| * MUC: Fix incorrect nesting of status codes when room config changes (fixes #579)Matthew Wild2015-12-161-1/+2
| |
| * util.uuid: Remove unused importKim Alvefur2015-12-081-1/+0
| |
| * muc.lib: Fix pattern so that it doesn't match hashes containing null bytes, ↵Matthew Wild2015-11-171-1/+1
| | | | | | | | causing dropped stanzas (thanks Jitsi folk!)
| * cert/openssl.cnf: Split CSR and self-signed extensions into separate ↵Kim Alvefur2015-11-091-4/+10
| | | | | | | | sections (see d2d7ad2563f9)
| * Makefile: Use more specific globbing for core directory in Makefile (Thanks ↵Kim Alvefur2015-10-141-1/+1
| | | | | | | | Robert Scheck) (fixes #532)
| * util.openssl: Separate extension sections into one for self-signed certs and ↵Kim Alvefur2015-10-111-3/+7
| | | | | | | | one for requests
| * mod_http_files: Translate forward slashes to local directory separatorsKim Alvefur2015-09-261-1/+1
| |
| * mod_http_files: Strip trailing directory separator regardless of ↵Kim Alvefur2015-09-261-1/+1
| | | | | | | | directionality of the slash (fixes #545)
| * xep227toprosody: Pass parser to callbacks (needed since addition of stanza ↵Kim Alvefur2015-09-181-3/+3
| | | | | | | | size limits)
| * mod_pep: Don't store contacts' subscriptions to a user's nodes when that ↵Matthew Wild2015-09-251-0/+12
| | | | | | | | user is offline
| * mod_pep: Document data structures, so I don't have to spend time remembering ↵Matthew Wild2015-09-041-0/+4
| | | | | | | | every time I work on this module
| * net.dns: Unconditionally cache records found in answersMatthew Wild2015-05-251-3/+1
| |
| * ejabberd2prosody: Support password stored as SCRAM hashesKim Alvefur2015-08-201-1/+16
| |
| * mod_component: Fire an event on successful component authentication (For Goffi)Kim Alvefur2015-08-101-0/+1
| |
| * MUC: Prevent admins from being given affiliatons other than ownerKim Alvefur2015-06-251-1/+1
| |
| * Backed out changeset bea3862b6bde in favor of a different approachKim Alvefur2015-06-251-0/+5
| |
| * MUC: Remove half of monkeypatch that was supposed to make admins always be ↵Kim Alvefur2015-06-161-5/+0
| | | | | | | | room owners, fixes #458
| * s2smanager: Make sure destroyed sessions have a sends2s methodKim Alvefur2015-05-141-0/+1
| |
| * mod_s2s: Mark stream as opened directly after opening stream, prevents ↵Kim Alvefur2015-05-131-1/+1
| | | | | | | | session.close opening it again
| * mod_s2s: Don't cache session.sends2s (or do it later), prevents sending data ↵Kim Alvefur2015-05-131-4/+3
| | | | | | | | after session was closed
| * mod_s2s/s2sout: Use the local address assigned to UDP sockets instead of ↵Kim Alvefur2015-05-131-22/+24
| | | | | | | | util.net to enumerate possible source addresses
| * util.datamanager: Fix traceback from trying to purge when storage is empty ↵Kim Alvefur2015-05-131-1/+5
| | | | | | | | or otherwise unaccessible (fixes #496)
| * mod_s2s/s2sout: Remove now unused config option dns_max_depthKim Alvefur2015-05-131-1/+0
| |
| * net.dns: Make sure argument to math.randomseed does not overflow a 32 bit ↵Kim Alvefur2015-04-261-1/+1
| | | | | | | | *signed* int (blame Lua). Closes #439
| * util.datamanager: Fix traceback due to %s in log messageKim Alvefur2015-04-031-1/+1
| |
| * net.dns, mod_s2s: Add chasing of CNAMEs to net.dns and remove it from mod_s2sKim Alvefur2015-04-242-15/+8
| |
| * Tagging 0.9.8Matthew Wild2015-03-240-0/+0
| |
| * mod_s2s: to/from attributes are required on s2s stream headers. Set them to ↵vault/0.9.8Matthew Wild2015-03-241-1/+1
| | | | | | | | '' when not available. Fixes #468.
| * sessionmanager: Return 'not-allowed' error instead of the non-existent ↵Matthew Wild2015-03-241-1/+1
| | | | | | | | 'already-bound' error when client tries to bind a resource twice on the same stream (thanks Flow) fixes issue #484.
| * mod_http: Return a static string from module:http_url() when no ports are ↵Kim Alvefur2015-03-231-0/+2
| | | | | | | | enabled and log a warning