Superminaren/0x0
1
0
Fork 0
mirror of https://git.0x0.st/mia/0x0 synced 2026-08-21 14:36:57 +02:00
Code Issues Packages Projects Releases Wiki Activity
67 Commits 1 Branch 0 Tags
f76dbef82fbaf916c3d42b50bd89046af0f784a5
Commit Graph
63 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mia Herkt f76dbef82f Fix NSFW detection 2022-12-17 02:32:51 +01:00
Mia Herkt 57c4b6853f Prevent unreasonably long MIME types 2022-12-13 23:41:12 +01:00
Mia Herkt 77801efd21 Fix URL test issue 2022-12-13 23:18:40 +01:00
Mia Herkt d5763a9854 File: Fix 404 case with secret URLs 2022-12-13 23:17:56 +01:00
Mia Herkt aaf0e4492a Record file sizes in db 
Moderation interface is going to use this.
 2022-12-13 23:04:48 +01:00
Mia Herkt 6055a50948 File: Add is_nsfw property 2022-12-13 21:51:39 +01:00
Mia Herkt b1ed63c401 README: Add note about StreamMaxLength in clamd.conf 2022-12-12 07:40:38 +01:00
Mia Herkt a904922cbd Add support for ClamAV 2022-12-12 07:35:05 +01:00
Mia Herkt da30c8f8ff index.html: Document appending file names 2022-12-01 03:28:25 +01:00
Mia Herkt 0b80a62f80 Add support for “secret” file URLs 
Closes #47
 2022-12-01 02:49:28 +01:00
Mia Herkt ed84d3752c Fix 500 on invalid paths 2022-12-01 01:26:32 +01:00
Mia Herkt 7661216bc0 Fix handling double file name extensions 
Long names would get truncated at the end, causing problems
including unresolvable file URLs. Example with default settings:
    .package.lst → .package.

Fixes #61
 2022-12-01 01:19:05 +01:00
Mia Herkt 9214bb4832 Add X-Expires to file response headers 
Tells clients when files will expire, in milliseconds since Unix epoch.

Closes #50.
 2022-11-30 02:30:52 +01:00
Mia Herkt e168534258 Allow changing expiration date 2022-11-30 02:19:29 +01:00
Mia Herkt afe2329bf5 templates/index: Remove unnecessary escaping 2022-11-30 02:19:29 +01:00
Mia Herkt a182b6199b Allow management operations like deleting files 
This introduces the X-Token header field in the response of newly
uploaded files as a simple way for users to manage their own files.

It does not need to be particularly secure.
 2022-11-30 02:19:29 +01:00
Mia Herkt eb0b1d2f69 nsfw_detect: Use PyAV instead of ffmpegthumbnailer 2022-11-29 21:54:43 +01:00
Mia Herkt 14cfe3da58 nsfw_detect: Use pathlib, fix deprecation warning 
Also fix glog suppression
 2022-11-29 21:44:07 +01:00
Mia Herkt aa443178e1 README: Also run db upgrade after git pull! 2022-11-29 17:23:56 +01:00
Mia Herkt db9a20c94d Add example systemd unit files for prune job 2022-11-29 17:23:30 +01:00
Mia Herkt f25619b7e3 nsfw_detect: Tolerate score computation failure 2022-11-29 13:31:35 +01:00
Mia Herkt 00dba0e189 config.example.py: Clarify MIME ext mapping 2022-11-28 22:30:53 +01:00
Mia Herkt b5f0cfdf6f README: Clarify why serving file requests from the app is bad 2022-11-20 16:54:46 +01:00
Mia Herkt 4ba18146e1 README: Clarify how to change configuration 2022-11-20 13:05:17 +01:00
Mia Herkt afb5811879 README: Warn users about URL fetch network security implications 2022-08-19 22:27:29 +02:00
Mia Herkt c7a728ce84 Fix non-seekable file handles 
Closes #59
 2022-08-11 05:49:46 +02:00
Mia Herkt 5216e9ebaf Open upload blacklist in text mode 
This wasn’t working since Flask opens files in bin mode by default.
 2022-08-01 18:26:35 +02:00
miaand7415963987456321 9c4a0fd5a6 remove short_url and add in-tree URLencoder (#53) 
This PR removes the short_url dependency as per issue #41.
This implementation is pretty much the same as in short_url except I've rewritten the enbase() function to be iterative instead of recursive.
The only functions of the class are enbase() and debase() since those were the only functions being used by fhost.

Co-authored-by: 7415963987456321 <hrs70@hi.is>
Reviewed-on: https://git.0x0.st/mia/0x0/pulls/53
Co-authored-by: mia <mia@0x0.st>
Co-committed-by: mia <mia@0x0.st>
 2021-12-01 13:25:33 +01:00
Mia Herkt 47ff3a1152 Support instance templates 2021-05-23 19:13:51 +02:00
Mia Herkt b65209db7b Add tests 2021-05-23 19:13:51 +02:00
Mia Herkt 3bdbab96c1 Support client-defined names in file URL routing 
This allows requests like /j4Tf.bin/myfilename.dat to be served without
having to rewrite URLs at the frontend server.
 2021-05-23 19:13:51 +02:00
Mia Herkt 73045dc5e5 Move storage to classes, support double suffixes 2021-05-23 19:13:51 +02:00
Mia Herkt cd083a7f83 Use pathlib 2021-05-23 19:13:51 +02:00
Mia Herkt b5ce94edeb Update README 2021-05-23 19:13:51 +02:00
Mia Herkt b7c12902da Update requirements.txt 2021-05-23 19:13:51 +02:00
Mia Herkt 493119fc68 Drop Flask-Manager 2021-05-23 19:13:51 +02:00
Mia Herkt 59a0439c1a Drop dump_urls endpoint 
who cares lol
(originally added for issue #1 but they never archived 0x0)
 2021-05-23 19:13:51 +02:00
Mia Herkt d815d6855f Use template responses 2021-05-23 19:13:51 +02:00
Mia Herkt 5db62c2dbf Support instance config 2021-05-23 19:13:51 +02:00
Mia Herkt a4da58f3f3 Add mailmap 2021-05-23 19:13:51 +02:00
Mia Herkt a52127f0c3 Add text/plain exception for .log name extension 
Fixes #29
 2020-11-03 04:02:13 +01:00
Mia Herkt a4d496d42d Change license to EUPL 2020-11-03 04:01:30 +01:00
Martin Herkt f66418ad4d Update requirements.txt 2019-04-30 19:06:25 +02:00
Martin Herkt cfee463780 Disable NSFW detection by default 
See #11
 2018-12-22 19:50:32 +01:00
Martin Herkt b1c79e582b add extension override for audio/flac 2018-01-09 08:26:11 +01:00
Martin Herkt 4b8c9eb758 Add extension override for text/x-diff 2017-12-22 21:41:51 +01:00
Martin Herkt 0b288d9a94 Add command to delete all files uploaded by address 2017-11-08 11:29:02 +01:00
Martin Herkt 5608c72e03 Fix indent error in querybl 2017-11-08 11:20:46 +01:00
Martin Herkt b2d830e2aa store_url: only accept identity content encoding 
Some servers (like IPFS gateways) will use chunked transfer encoding on
anything but identity content encoding. Also, probably fix a potential
zip bomb vulnerability.
 2017-10-30 05:36:03 +01:00
Martin Herkt 04b46bd01a Tweak NSFW threshold 
Of course it’ll have a few false positives, but this seems to work well
with the 0x0.st dataset.
 2017-10-27 09:38:19 +02:00
Martin Herkt c3c29ab500 Faster query commands, add removed query filter 2017-10-27 08:53:19 +02:00
Martin Herkt ebfbc6b153 Add NSFW filter to address query commands 2017-10-27 08:36:36 +02:00
Martin Herkt 7bbeb2d144 Add NSFW detection 2017-10-27 05:28:45 +02:00
Martin Herkt def5d9802f Add querybl command to query uploads by addresses in blacklist 2017-10-27 02:21:33 +02:00
Martin Herkt 2e509a1faf Fix try/except syntax 2017-03-27 22:18:38 +02:00
Martin Herkt 462555d532 Add support for upload IP blacklists 
The format is one address per line, with # used for comments.
 2017-02-03 04:10:58 +01:00
Martin Herkt 714de58180 add more URL validation 
Turns out ShareX users and shell script authors are fucking retarded.
 2017-01-01 21:20:40 +01:00
Martin Herkt 6bc7690711 add BEACON dump with start index for urlte.am 
fixes #1
 2017-01-01 21:20:39 +01:00
Martin Herkt e974834422 do not shorten our host URLs 
Turns out ShareX users are fucking retarded.
 2017-01-01 20:26:35 +01:00
Martin Herkt 0c5d8690cc use function to format host URL 2017-01-01 20:26:09 +01:00
Martin Herkt 6de22ca8fa fix text/ MIME charset workaround for real 2016-11-23 01:03:49 +01:00
Martin Herkt 200d0a369f fix text/ MIME charset workaround 2016-11-01 21:53:10 +01:00
Martin Herkt 56f0295be2 init 2016-11-01 05:25:58 +01:00