tomaioo 49ab335e1b fix(security): unauthenticated api endpoint exposes domain inform ...

The access_info API view in plinth/modules/api/views.py returns a list of all registered domains and their types without requiring authentication. This exposes sensitive network configuration information to unauthenticated users.

Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com>

2026-05-05 11:06:39 -07:00

..

apache

apache: Use a Uwsgi native socket systemd unit for each app

2026-03-21 07:45:51 -07:00

api

fix(security): unauthenticated api endpoint exposes domain inform

2026-05-05 11:06:39 -07:00

avahi

…

backups

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

bepasty

apache: Use a Uwsgi native socket systemd unit for each app

2026-03-21 07:45:51 -07:00

bind

…

calibre

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

cockpit

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

config

*: Update URL base from /plinth to /freedombox

2026-03-02 20:50:30 -05:00

coturn

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

datetime

…

deluge

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

diagnostics

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

dynamicdns

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

ejabberd

html: Drop type attribute value of text/javascript

2026-03-19 19:12:14 -04:00

email

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

featherwiki

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

firewall

html: Drop trailing slash from void elements

2026-03-19 19:12:20 -04:00

first_boot

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

gitweb

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

gnome

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

help

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

homeassistant

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

ikiwiki

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

infinoted

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

janus

janus: Drop unused reference to font-awesome

2026-03-20 06:58:46 -04:00

jsxc

html: Drop trailing slash from void elements

2026-03-19 19:12:20 -04:00

kiwix

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

letsencrypt

html: Drop trailing slash from void elements

2026-03-19 19:12:20 -04:00

matrixsynapse

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

mediawiki

html: Drop type attribute value of text/javascript

2026-03-19 19:12:14 -04:00

minetest

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

minidlna

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

miniflux

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

mumble

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

names

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

networks

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

nextcloud

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

oidc

html: Drop trailing slash from void elements

2026-03-19 19:12:20 -04:00

openvpn

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

pagekite

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

performance

…

power

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

privacy

…

privoxy

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

quassel

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

radicale

radicale: tests: functional: Better checking for well-known URLs

2026-04-27 19:19:53 -04:00

roundcube

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

rssbridge

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

samba

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

searx

apache: Use a Uwsgi native socket systemd unit for each app

2026-03-21 07:45:51 -07:00

security

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

shaarli

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

shadowsocks

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

shadowsocksserver

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

sharing

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

snapshot

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

sogo

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

ssh

…

storage

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

syncthing

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

tiddlywiki

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

tor

html: Drop type attribute value of text/javascript

2026-03-19 19:12:14 -04:00

torproxy

html: Drop type attribute value of text/javascript

2026-03-19 19:12:14 -04:00

transmission

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

upgrades

action_utils: Don't restart web interface when installing an app

2026-03-21 11:10:25 -04:00

users

users: Add link to guide on passkeys

2026-04-06 18:26:36 -04:00

wireguard

ui: Rename 'plinth_extras' template tags module to 'extras'

2026-03-19 19:14:58 -04:00

wordpress

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

zoph

ui: Simplify SVG app icons for using them inline in HTML

2026-03-19 19:11:54 -04:00

__init__.py

…