nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-02-18 08:33:41 +00:00
Code Issues Packages Projects Releases Wiki Activity
FreedomBox/plinth/modules
History
Sunil Mohan Adapa 895d8cffbc
sso: Adjust URL to CAPTCHA page needed by Django security fix 
Fixes: #2170.

Starting with Django 2.2.25, re_path behavior has changed. When the regular
expression ends with a '$', a full match is performed with the regular
expression. This breaks the behavior of how we are currently matching the locked
URLs for CAPTCHA based login forms.

Tests:

- All tests are done on Debian stable with Django 2.2.25 and on Debian unstable
with Django 3.2.10.

- Go to home page, click on login link. Enter wrong password three times.
CAPTCHA page is show with URL ending with /locked. Type the correct password and
login will be successful.

- Install tt-rss. Logout. Go to /tt-rss/, redirection will happen to login page.
Enter wrong password three times. CAPTCHA page is show with URL ending with
/locked. Type the correct password and login will be successful.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
2022-01-16 10:15:32 -05:00
..
apache
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
api
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
avahi
tests: Add 'domain' mark for apps that add/remove domains
2021-12-05 11:00:41 -08:00
backups
backups: Correct spelling of encryption protocols
2022-01-10 14:29:32 -08:00
bepasty
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
bind
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
calibre
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
cockpit
cockpit: Make 'name' optional in Signal handlers
2021-12-11 17:27:11 -05:00
config
config, upgrades: Specify submit button for tests
2022-01-02 11:05:46 -05:00
coturn
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
datetime
datetime: Explicitly list systemd-timesyncd as a dependency
2021-12-24 08:30:31 -05:00
deluge
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
diagnostics
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
dynamicdns
tests: Add 'domain' mark for apps that add/remove domains
2021-12-05 11:00:41 -08:00
ejabberd
ejabberd: Make name option in Signal handlers
2021-12-11 17:27:20 -05:00
email_server
email_server: Rename dovecot TLS configuration file for consistency
2021-12-14 18:22:57 -05:00
firewall
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
first_boot
first_boot: Drop use of loaded_modules and use App.list
2021-12-04 16:38:34 -05:00
gitweb
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
help
help: Fix failing setup when manual directory is not available
2022-01-11 17:52:25 -05:00
i2p
i2p: Fix grammar in description
2022-01-10 14:29:29 -08:00
ikiwiki
ikiwiki: Initialize shortcuts during post-init setup
2022-01-11 19:07:32 -05:00
infinoted
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
jsxc
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
letsencrypt
letsencrypt: Handle cert setup when an app wants all domains
2021-12-14 18:22:41 -05:00
matrixsynapse
*: Drop module level depends declaration
2021-12-04 16:39:49 -05:00
mediawiki
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
minetest
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
minidlna
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
mldonkey
tests: functional: Skip MLDonkey app
2021-12-17 13:33:25 +05:30
mumble
mumble: Change description to include iOS client app
2022-01-10 14:29:23 -08:00
names
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
networks
networks: Fix reference to an option
2022-01-10 14:29:36 -08:00
openvpn
openvpn: Add link to IOS app
2022-01-10 14:29:20 -08:00
pagekite
tests: Add 'domain' mark for apps that add/remove domains
2021-12-05 11:00:41 -08:00
performance
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
power
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
privoxy
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
quassel
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
radicale
radicale: Update Thunderbird URLs
2022-01-10 14:29:26 -08:00
roundcube
roundcube: Allow upgrades using configuration file prompts
2021-12-14 18:02:59 -05:00
samba
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
searx
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
security
security: Drop use of loaded_modules and use App.list
2021-12-04 16:38:43 -05:00
shaarli
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
shadowsocks
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
sharing
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
snapshot
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
ssh
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
sso
sso: Adjust URL to CAPTCHA page needed by Django security fix
2022-01-16 10:15:32 -05:00
storage
storage: Skip tests if not enough disk space is available
2021-12-26 20:46:36 -05:00
syncthing
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
tor
tests: Add 'domain' mark for apps that add/remove domains
2021-12-05 11:00:41 -08:00
transmission
transmission: Fix capitalization
2022-01-10 14:29:17 -08:00
ttrss
tt-rss: Allow published articles to be publicly available
2022-01-13 11:03:14 -08:00
upgrades
config, upgrades: Specify submit button for tests
2022-01-02 11:05:46 -05:00
users
sso: Adjust URL to CAPTCHA page needed by Django security fix
2022-01-16 10:15:32 -05:00
wireguard
wireguard: Fix spelling
2022-01-10 13:11:29 -08:00
wordpress
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
zoph
*: Drop use of module level version
2021-12-04 16:38:08 -05:00
__init__.py
…