321db4d712
Refactored send email by make use of ajax calls instead of posting the page
...
Always use getPath instead of pathname
2 years ago
64e9b13311
Bugfix after merge
...
Bugfix generate Metadata backup
2 years ago
5c5db34a52
Merge branch 'master' into Develop
...
# Conflicts:
# test/Calibre-Web TestSummary_Linux.html
2 years ago
162ac73bee
Bugfixes from testrun
2 years ago
fc31132f4e
Merge remote-tracking branch 'pdf/master'
2 years ago
b28a2cc58c
Merge branch 'master' into Develop
...
# Conflicts:
# cps/web.py
# test/Calibre-Web TestSummary_Linux.html
2 years ago
595f01e7a3
Bugfix change erader email in /me page
2 years ago
89bc72958e
new random password generation algorithm to ensure compliance with password rules
...
bugfix opds login limit
2 years ago
8ee34bf428
Bugfixes for password policy
2 years ago
ce48e06c45
Improved limiter
2 years ago
63a3edd429
Merge remote-tracking branch 'csp/patch-2'
...
Updated testresult
2 years ago
8d0a699078
Merge branch 'master' into Develop
2 years ago
5b5146a793
Merge remote-tracking branch 'csp/patch-2'
2 years ago
fb42f6bfff
Make it possible to disable ratelimiter
...
Update APScheduler
Error message on missing flask-limiter
2 years ago
4b7a0f3662
Merge branch 'master' into Develop
...
# Conflicts:
# cps/opds.py
# cps/server.py
# cps/web.py
2 years ago
275675b48a
Search query is now also a post request (possible fix for Forward Auth Search Redirect Issue #2681 )
2 years ago
f8fbc807f1
further refactored user login
2 years ago
1c3b69c710
refactored login routines
2 years ago
3f72c3fffe
Update web.py
2 years ago
189da65fac
leave fields filled after invalid login attempt
2 years ago
f241b260d7
Updated requirements
...
Bugfix from testrun
Testresults
2 years ago
260a694834
Bugfixes after merge
2 years ago
508e2b4d0a
Merge branch 'master' into Develop
...
# Conflicts:
# cps/admin.py
# cps/config_sql.py
# cps/search.py
# cps/templates/admin.html
# cps/web.py
# setup.cfg
# test/Calibre-Web TestSummary_Linux.html
2 years ago
4913f06e0d
Updated test status
...
Fix for #2614 (Send to eReader not working for guest user)
2 years ago
d545ea9e6f
CSP invalid to display image when web.read_book
...
CSP
Before : default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data:; style-src-elem 'self' blob: 'unsafe-inline'; object-src 'none';
After : default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data: blob:; style-src-elem 'self' blob: 'unsafe-inline';object-src 'none';
2 years ago
1ad8dc102a
CSP invalid syntax
...
CSP had some "cosmetic" errors
Before : default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data: style-src-elem 'self' blob: 'unsafe-inline';object-src: 'none';
After : default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data:; style-src-elem 'self' blob: 'unsafe-inline'; object-src 'none';
2 years ago
d48d6880af
Update German translation
2 years ago
77637d81dd
Fix fro #2670 (user has no attribute eReader_mail)
2 years ago
a2bf6dfb7b
Bugfix csp header
...
Bugfix for loading metadata from google with old books (publishing date only year)
2 years ago
1cd05d614c
Merge remote-tracking branch 'csp/patch-1'
2 years ago
2be2920833
Fixed typo
2 years ago
43ee85fbb5
Removed unnecessary Unicode "u"
2 years ago
8022b1bb36
Merge remote-tracking branch 'english/master'
2 years ago
beb619c2c2
Correct CSP
...
no need blob: value for object-src
2 years ago
ed22209e6c
Content Security Policy syntax was invalid
...
According to https://csp-evaluator.withgoogle.com/ the CSP built here is NOT valid (and the blob: value is missing at img-src, so the image is not displayed when reading ebook in a browser)
Before this commit, in Chrome response header you can find
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' data:; object-src: 'none'; blob:;style-src-elem 'self' blob: 'unsafe-inline';
After :
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' data:; img-src 'self' blob: data:; object-src 'none' blob:; style-src-elem 'self' blob: 'unsafe-inline';
and image in viewer are displayed
2 years ago
b3335f6733
English Language Updates - V3
2 years ago
85a6616606
Merge remote-tracking branch 'fix_default_language/master'
2 years ago
2ddbaa2150
Add object-src to the CSP policy
2 years ago
e8c461b14f
Update web.py
...
In Admin view page, Editor UI Configuration - Default Settings for New Users - Default Language, set up the new user's default language is not effective. I changed this web.py, add a line of code in 1248 lines in register function. Creating the new user need to take the default language.
2 years ago
6598c4d259
Add rate limit for opds
2 years ago
a9b20ca136
Fix for big database not showing tags
2 years ago
bf0375d51d
Bugfix change emails
2 years ago
89d226e36b
Allow deletion of kindle email address and force e-mail address to be valid
2 years ago
ae3e3559b8
Rate limit prepared for feedback on login route
2 years ago
a72f16fd3a
Fix missing or_ import
2 years ago
c2545315e1
Fix Ratings with 0 stars are counted as None
2 years ago
7344ef353c
Rate limited login
2 years ago
c4104ddaf4
Fix typos
2 years ago
29fd4ae4a2
Bugfixes create users
...
Update Teststatus
2 years ago
4ef8c35fb7
Bugfies password validation from testrun
2 years ago
Ozzie Isaacs
_Fervor_
Petipopotam
Josh O'Brien
Ozzie Isaacs
Julien Voisin
Feige-cn
Kian-Meng Ang