tomaioo 49ab335e1b fix(security): unauthenticated api endpoint exposes domain inform ...

The access_info API view in plinth/modules/api/views.py returns a list of all registered domains and their types without requiring authentication. This exposes sensitive network configuration information to unauthenticated users.

Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com>

2026-05-05 11:06:39 -07:00

..

db

db: Create a utility to get credentials from dbconfig

2026-03-02 12:55:54 -08:00

locale

Translated using Weblate (German)

2026-05-05 19:11:34 +02:00

migrations

users: Add support registering, editing, and deleting passkeys

2026-03-31 07:48:50 -04:00

modules

fix(security): unauthenticated api endpoint exposes domain inform

2026-05-05 11:06:39 -07:00

privileged

…

templates

users: Add support registering, editing, and deleting passkeys

2026-03-31 07:48:50 -04:00

templatetags

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

tests

radicale, bepasty: Fix issue with failed diagnostic test

2026-04-27 19:13:14 -04:00

__init__.py

Release v26.7.1 to unstable

2026-04-28 18:26:58 -04:00

__main__.py

…

action_utils.py

radicale, bepasty: Fix issue with failed diagnostic test

2026-04-27 19:13:14 -04:00

actions.py

actions, privileged_daemon: Drop some unused global statements

2026-02-05 22:33:17 -08:00

app.py

app: Fix build issue with Django 5.x

2026-03-20 23:44:38 +05:30

cfg.py

*: Update URL base from /plinth to /freedombox

2026-03-02 20:50:30 -05:00

clients.py

clients: Fix show empty clients in Desktop section

2026-03-09 15:26:17 -07:00

config.py

…

conftest.py

cfg: Drop unused actions_dir option

2026-03-02 20:50:11 -05:00

container.py

…

context_processors.py

…

daemon.py

…

dbus.py

…

develop.config

cfg: Drop unused actions_dir option

2026-03-02 20:50:11 -05:00

diagnostic_check.py

…

errors.py

…

forms.py

…

frontpage.py

…

glib.py

…

hashers.py

…

kvstore.py

…

log.py

service: Capture stdout/stderr when running as systemd unit

2026-03-31 07:48:38 -04:00

menu.py

ui: Drop fonts-fork-awesome as dependency

2026-03-19 19:14:55 -04:00

middleware.py

ui: Use inline SVG images for app icons for dark mode adaptation

2026-03-19 19:12:04 -04:00

models.py

users: Add support registering, editing, and deleting passkeys

2026-03-31 07:48:50 -04:00

module_loader.py

…

network.py

wireguard: Accept/use netmask with IP address for server connection

2026-03-02 15:22:36 -05:00

notification.py

…

operation.py

…

package.py

…

privileged_daemon.py

actions, privileged_daemon: Drop some unused global statements

2026-02-05 22:33:17 -08:00

settings.py

oidc: New app to implement OpenID Connect Provider

2026-03-02 20:50:46 -05:00

setup.py

…

signals.py

…

translation.py

…

urls.py

oidc: New app to implement OpenID Connect Provider

2026-03-02 20:50:46 -05:00

utils.py

…

version.py

…

views.py

views: Add a decorator to handle exceptions in JSON views

2026-03-31 07:48:43 -04:00

web_framework.py

web_framework: Allow FreedomBox apps to override templates

2026-03-02 20:50:38 -05:00

web_server.py

web_server: Fix locating SVG icons on production setup

2026-03-26 18:17:27 -04:00