Commit Graph
100 Commits
Author SHA1 Message Date
Mystikfluu 8b2c3acb36 align settings icon right 2022-07-09 15:44:18 +02:00
Mystikfluu 57d094f74e add settings
remove settings buttons from user page
2022-07-09 15:37:34 +02:00
Mystikfluu 508e3401a0 added some function documentation 2022-07-07 14:44:08 +02:00
Mystikfluu 9fe43ae497 removed 2 arguments for reply function
this will add stronger protection against xss attacks
2022-07-05 14:27:04 +02:00
Mystikfluu 7b288d964d add call to changePW function 2022-07-04 00:47:36 +02:00
Mystikfluu 1f5fed8c98 add favicon 2022-07-04 00:15:40 +02:00
Mystikfluu ac0a2545ac add comments to root variables 2022-07-03 23:46:23 +02:00
Mystikfluu ff43510f2f change regex once again 2022-07-03 23:26:08 +02:00
Mystikfluu 9f5b3d1aca change escape pattern to regex 2022-07-03 21:49:29 +02:00
Mystikfluu 7e9849c671 remove overlapping characters in unescape charsets 2022-07-03 21:46:27 +02:00
Mystikfluu 7e309850ef add another escaping function for another characterset 2022-07-03 21:34:22 +02:00
Mystikfluu 0f49d4f023 more filtering 2022-07-03 12:16:03 +02:00
Mystikfluu c55bf8fb8c update escape regex 2022-07-03 12:12:30 +02:00
Mystikfluu ad0d9b1215 add x-xss-protection header 2022-07-03 11:16:55 +02:00
Mystikfluu f29ab9c96f add escaping for ` and \ 2022-07-03 11:13:16 +02:00
Mystikfluu c107a1a1f0 add security information 2022-07-03 11:09:45 +02:00
Mystikfluu 5f150cf118 fix typo 2022-06-24 22:25:26 +02:00
Mystikfluu ab2834010e remove @everyone, @here, check for replies 2022-06-24 22:24:57 +02:00
Mystikfluu 825ca879dd only remove old posts when new ones finished loading 2022-06-24 22:21:04 +02:00
Mystikfluu 7c9499ae31 add try catch for invalid replies 2022-06-24 22:16:56 +02:00
Mystikfluu 59f40b2983 remove old reply highlighting 2022-06-24 22:15:11 +02:00
Mystikfluu acad8694c6 add reply showcase to posts 2022-06-24 22:13:09 +02:00
Mystikfluu f256b471be update api documentation 2022-06-24 21:57:57 +02:00
Mystikfluu 30b7d0e7ad getotheruser returns public key 2022-06-24 21:46:50 +02:00
Mystikfluu 4c1aecf78e change reply text to a multiline string 2022-06-24 21:42:04 +02:00
Mystikfluu 4b22c554f3 setting the reply id when replying 2022-06-23 23:21:34 +02:00
Mystikfluu 3d81cab301 add reconstructing the original message in reply 2022-06-23 21:55:08 +02:00
Mystikfluu ad30ba5ba8 escaping even more to finally get rid of this stupid error 2022-06-23 21:52:49 +02:00
Mystikfluu 8272eb1230 harsher escaping in order to fix xss 2022-06-23 21:48:14 +02:00
Mystikfluu f37b9a5bd0 add escaping of ' 2022-06-23 21:28:21 +02:00
Mystikfluu 91a61f2e69 add filter to the reply button text argument 2022-06-23 21:25:34 +02:00
Mystikfluu 7e14d7da8d add length check to post endpoint 2022-06-23 21:11:24 +02:00
Mystikfluu 2666b0b075 add cache to getPost 2022-06-22 20:25:45 +02:00
Mystikfluu f36b98f0d6 return the single post object on getPost
insstead of an array with the one post object in it
2022-06-22 20:24:10 +02:00
Mystikfluu a2e0b69791 only send websocket update if the posted message is for everyone 2022-06-22 20:20:25 +02:00
Mystikfluu dcd1013e38 add getPost api endpoint
for getting a post by its id
2022-06-22 20:16:33 +02:00
Mystikfluu 297d7c6eb0 add auto redirect to https 2022-06-22 09:30:00 +02:00
Mystikfluu 7c38022e0b fix bug when getting avatar 2022-06-22 09:25:48 +02:00
Mystikfluu 29dbd58831 add caching header to avatars 2022-06-22 09:23:12 +02:00
Mystikfluu 35df3913da make getotheruser browser accessible (CORS) 2022-06-21 23:32:26 +02:00
Mystikfluu 285c31d58b add a config for an api endpoint
to decide if `getotheruser` should be allowed to be called without a 
cookie
2022-06-21 23:21:58 +02:00
Mystikfluu 3cf533cc0a add individual url ratelimiting 2022-06-18 18:28:29 +02:00
Mystikfluu 2db1f8ec64 add check for completely invalid reply ids 2022-06-18 12:27:38 +02:00
Mystikfluu 32ba1a24a0 fix bug where not replying would crash the server 2022-06-18 12:25:24 +02:00
Mystikfluu eda956b94c add a bit spacing and a newline to reply 2022-06-17 23:21:25 +02:00
Mystikfluu 20da099a4d removed markers 2022-06-17 23:19:05 +02:00
Mystikfluu c8bc625541 Merge branch 'master' of https://github.com/Mystikfluu/authwebsite 2022-06-17 23:18:29 +02:00
Mystikfluu 225179b0dc add id-based replies 2022-06-17 23:18:01 +02:00
Mystikfluu 631eff5d1d add id-based replies 2022-06-17 23:16:03 +02:00
Mystikfluu 4a4a8416c5 fix bug where it wouldn't reload the posts 2022-06-17 22:58:04 +02:00
Mystikfluu 983cd54c2d added limit to getPosts 2022-06-17 22:53:58 +02:00
Mystikfluu dc1149675b add wss_server value to reduce duplicated code 2022-06-17 22:13:50 +02:00
Mystikfluu 579ea0dd54 add ports to server config 2022-06-17 20:08:03 +02:00
Mystikfluu 03a5803786 add ssl privatekey/certificate to config 2022-06-17 20:00:50 +02:00
Mystikfluu 1e64231556 fix bug where it would log messages multiple times 2022-06-16 18:13:13 +02:00
Mystikfluu 1b0a8fddfc add warning message to not paste in dev console 2022-06-16 16:15:46 +02:00
Mystikfluu 58734901b1 remove unneeded debug log 2022-06-16 16:15:08 +02:00
Mystikfluu b41d420ce1 add logout button to user page 2022-06-16 16:03:26 +02:00
Mystikfluu 824eb99851 add bot identifier to posts 2022-06-16 13:51:03 +02:00
Mystikfluu ae538b33af added CORS headers to post endpoint
added messages to websockets
2022-06-15 23:26:18 +02:00
Mystikfluu f93487b7fa change colors to root variables 2022-06-15 22:29:53 +02:00
Mystikfluu d0f9928936 fix bug where the style changing errored 2022-06-15 22:29:02 +02:00
Mystikfluu 4583793131 change the greens 2022-06-15 17:47:48 +02:00
Mystikfluu 3fe83455a3 add key pairs for encryption, as well as better styling for posts page 2022-06-15 00:16:16 +02:00
Mystikfluu 286fe9d74b added limit to search 2022-06-11 19:48:53 +02:00
Mystikfluu cb9cf85d7f Added ToS and PrivacyPolicy 2022-06-11 19:46:45 +02:00
Mystikfluu 026ad8bca4 fixed crash when trying to set long bio 2022-06-11 19:37:03 +02:00
Mystikfluu 4fee310dbe added avatars to posts 2022-06-11 19:14:19 +02:00
Mystikfluu 1c5b146827 now unlinks temp files 2022-06-11 15:40:59 +02:00
Mystikfluu 6c239f0e9a added user avatars 2022-06-11 15:36:50 +02:00
Mystikfluu 5a6499cd48 added link to username changing page 2022-06-11 12:09:14 +02:00
Mystikfluu 68a76068b9 added simple Username change website 2022-06-11 12:08:38 +02:00
Mystikfluu 2a1f82b374 added changeUsername api endpoint 2022-06-11 12:08:20 +02:00
Mystikfluu acf89d59f0 updated api documentation 2022-06-11 08:32:21 +02:00
Mystikfluu 32ef07f655 simplified gitignore 2022-06-11 00:04:54 +02:00
Mystikfluu 8f619fc793 allowing api calls with user+pass instead of cookie 2022-06-10 22:18:45 +02:00
Mystikfluu 0fc8eed5a7 removed unneeded comments 2022-06-10 22:08:22 +02:00
Mystikfluu bf733806b9 added blocking self-revealing proxies
enabled by default in the config
2022-06-10 20:06:41 +02:00
Mystikfluu 07e36cd2d3 added account-based ratelimiting 2022-06-09 18:58:14 +02:00
Mystikfluu a01db193dc better loading and error screen 2022-06-09 16:36:43 +02:00
Mystikfluu 5ad3b322b9 fixed search not decoding bio 2022-06-09 16:24:02 +02:00
Mystikfluu f473f2acc7 now shows new bio again 2022-06-09 16:13:32 +02:00
Mystikfluu b63246dd78 moved github link to IPost description 2022-06-09 16:06:40 +02:00
none 30a6dc64f4 loading screen now disappears after messages are loaded 2022-06-09 10:44:22 +02:00
Mystikfluu e5614a0e01 fixed error 2022-06-09 10:34:27 +02:00
none d5187c7332 added new views
added loading information
added no account information
2022-06-09 10:32:08 +02:00
none b41d97985d made logging level optional 2022-06-09 10:05:49 +02:00
none 98845c4454 fixed logging issue 2022-06-09 10:04:58 +02:00
Mystikfluu 03bb0a0c93 updated link regex 2022-06-07 15:28:35 +02:00
Mystikfluu 08ccf94056 added message option 2022-06-07 15:27:50 +02:00
Mystikfluu e6617fecc5 added search page 2022-06-07 09:16:17 +02:00
Mystikfluu 2632d8c133 moved navbar to js for easier editing 2022-06-04 17:00:26 +02:00
Mystikfluu 3d36086134 even more input validation 2022-06-04 14:09:53 +02:00
Mystikfluu 6b86ab0223 better input validation for post endpoint 2022-06-04 13:58:30 +02:00
Mystikfluu 7f408cd87c updated api documentation 2022-06-04 13:34:02 +02:00
Mystikfluu 0e7be58c41 added search api endpoint 2022-06-04 13:19:26 +02:00
Mystikfluu 92d62685fc you know what
un-base64's your website
2022-06-04 13:17:35 +02:00
Mystikfluu ce379e944e made it look better 2022-06-04 11:55:14 +02:00
Mystikfluu 45ee4acfdc moved JS code to JS file 2022-06-03 08:49:20 +02:00
Mystikfluu cfbf54410c fixed redirection bug 2022-06-03 08:48:13 +02:00