Repository navigation

Restricting access to some HTTP API endpoints to top domain - #1073

Merged

kjetilk merged 76 commits into

release/v5.0.0from

feature/prevent-api-spoofing

Mar 15, 2019

Merged

Restricting access to some HTTP API endpoints to top domain#1073
kjetilk merged 76 commits into
release/v5.0.0from
feature/prevent-api-spoofing

Commits on Feb 7, 2019
- trustedOrigins is empty by default
  megoth
  committed
  a8b24ef
Commits on Feb 15, 2019
- fix: package.json & package-lock.json to reduce vulnerabilities
  snyk-bot
  committed
  8f5df1b
- Restricting access to API endpoints to top domain
  megoth
  committed
  92ca524
- Fixed so that capability discovery points to valid APIs
  megoth
  committed
  f02987d
- Laxing a bit on the endpoints you can visit on subdomains
  megoth
  committed
  821776f
Commits on Feb 19, 2019
- Merge pull request #1102 from solid/snyk-fix-xlobc6
  kjetilk
  authored
  3d082f1
- Removes acl files from list of files to match when mapping url to file
  megoth
  committed
  b1562ac
Commits on Feb 20, 2019
- Removing hardcoded string of .acl-suffix
  megoth
  committed
  218b36a
Commits on Feb 22, 2019
- Display server version at startup when not running from git repository
  gklyne
  committed
  acc2401
Commits on Feb 23, 2019
- Add proper-lockfile dependency.
  RubenVerborgh
  committed
  01d2a35
- Lock file during patching.
  RubenVerborgh
  committed
  90dcfe6
Commits on Feb 28, 2019
- Now excluding both .acl- and .meta-files when finding default file
  megoth
  committed
  d3e6506
Commits on Mar 2, 2019
- Add proper-lockfile dependency.
  
  RubenVerborgh
  authored and
  megoth
  committed
  9876274
- Lock file during patching.
  
  RubenVerborgh
  authored and
  megoth
  committed
  74e5464
- Making proper use of strictOrigins
  megoth
  committed
  a4aeb9e
- Fixed some faulty tests
  megoth
  committed
  c8a23a9
- Added RubenVerborgh explanation
  megoth
  committed
  01853af
- Revert "Lock file during patching."
  megoth
  committed
  f5d2816
- Did a faulty rebase, trying to revert commits
  megoth
  committed
  017ca05
- Revert "Add proper-lockfile dependency."
  megoth
  committed
  7c0d436
Commits on Mar 3, 2019
- Trying to make tests less dependent on order
  megoth
  committed
  06c5b19
- Removing the need to run tests in order
  megoth
  committed
  1998a5b
- Rename variables for consistency.
  RubenVerborgh
  committed
  7feecf9
- Add lock on readResource.
  RubenVerborgh
  committed
  4e6eb10
- Add lock on put.
  RubenVerborgh
  committed
  3193a32
- Add lock on get.
  RubenVerborgh
  committed
  fd3b2b1
- Add lock on deleteResource.
  RubenVerborgh
  committed
  e9c8db3
Commits on Mar 4, 2019
- repairs redirect due to case typo correction
  yova
  committed
  dafc228
- Extract printing debug info from ldp to config module
  dmitrizagidulin
  committed
  35839d5
- Expand SolidHost config constructor, plus tests
  dmitrizagidulin
  committed
  d7411eb
Commits on Mar 6, 2019
- Some optimizations
  megoth
  committed
  0ece321
Commits on Mar 7, 2019
- Merge pull request #1126 from solid/extract-print-debug
  kjetilk
  authored
  7df7f6f
- Merge pull request #1125 from ecobytes/fix/1124
  kjetilk
  authored
  eccaec1
- Merge pull request #1112 from gklyne/release/v5.0.0
  kjetilk
  authored
  5cbfb79
- Trying to optimize and improve readability through better abstraction
  megoth
  committed
  31f113a
- Trying to fix regex
  megoth
  committed
  08684fb
- Trying to revert authentication-oidc-test manually
  megoth
  committed
  b486abe
- Fixing alignment
  megoth
  committed
  de3b0e0
- Revert "Trying to make tests less dependent on order"
  megoth
  committed
  4fd4f90
- Making changes minimal for acl-tls-test.js
  megoth
  committed
  7b75a0b
- Reverting changes to solid-host
  megoth
  committed
  e4cf1e2
- Merge pull request #1109 from solid/fix/exclude-acl-in-url-mapping
  kjetilk
  authored
  567b042
Commits on Mar 8, 2019
- Merge pull request #1116 from solid/feature/lock-patch
  kjetilk
  authored
  6c95b56
- Merge pull request #1091 from solid/feature/no-default-trusted-origins
  kjetilk
  authored
  3dac0b2
- Auto-fix vulnerable deps
  kjetilk
  committed
  872014f
- Release version 4.4.2 of the npm package.
  kjetilk
  committed
  bbff254
- Merge master into 5.0.0 branch
  kjetilk
  committed
  0acc026
- Release version 5.0.0-beta.8 of the npm package.
  kjetilk
  committed
  70ddc02
- Always pass an object as options.
  RubenVerborgh
  committed
  6e063ea
- Only allow index.html as index file.
  RubenVerborgh
  committed
  2f9996a
- Merge pull request #1130 from solid/fix/streaming-start-end
  kjetilk
  authored
  492860a
- Merge pull request #1132 from solid/fix/only-index-html
  kjetilk
  authored
  e62fa81
- Merge pull request #1118 from solid/fix/faulty-403
  kjetilk
  authored
  eb6b62b
- Update package-lock.json.
  kjetilk
  committed
  332e7ae
- Revert "Making proper use of strictOrigins"
  kjetilk
  authored
  61d6455
- Merge pull request #1133 from solid/revert-1118-fix/faulty-403
  kjetilk
  authored
  a4f0cbb
Commits on Mar 10, 2019
- Release version 5.0.0-beta.9 of the npm package.
  kjetilk
  committed
  46b860f
Commits on Mar 12, 2019
- Redo #1118
  michielbdejong
  committed
  5980d75
Commits on Mar 15, 2019
- Merge pull request #1140 from michielbdejong/redo-1118
  kjetilk
  authored
  0339003
- Redo #1122 on top of latest release branch
  
  megoth
  authored and
  michielbdejong
  committed
  a8b917c
- My changes on top of #1122
  michielbdejong
  committed
  c328a3e
- Update CHANGELOG for v5 release
  michielbdejong
  committed
  4927b97
- Use mashlib 0.7.18 and acl-check 0.2.0
  michielbdejong
  committed
  6982ec1
- fix commented-out requires in test
  michielbdejong
  committed
  ef9e8c9
- Update package-lock.json.
  kjetilk
  committed
  526dea6
- Release version 5.0.0-beta.9 of the npm package.
  kjetilk
  committed
  f02094e
- Release version 5.0.0-beta.10 of the npm package.
  kjetilk
  committed
  dca8d65
- package-lock.json
  michielbdejong
  committed
  c8efa90
- refer to https://github.com/solid/acl-check/issues/23
  michielbdejong
  committed
  a5d3ad5
- Merge pull request #1144 from solid/redo-1122
  kjetilk
  authored
  3d9b2bc
- Merge pull request #1127 from solid/expand-server-host
  kjetilk
  authored
  21ebe47
- Release version 5.0.0-beta.11 of the npm package.
  kjetilk
  committed
  bafa5f6
- Restricting access to API endpoints to top domain
  
  megoth
  authored and
  kjetilk
  committed
  63d2b81
- Fixed so that capability discovery points to valid APIs
  
  megoth
  authored and
  kjetilk
  committed
  1bc05b1
- Laxing a bit on the endpoints you can visit on subdomains
  
  megoth
  authored and
  kjetilk
  committed
  b16b137
- Merge branch 'feature/prevent-api-spoofing' of github.com:solid/node-solid-server into feature/prevent-api-spoofing
  kjetilk
  committed
  927acf6

Commits

Commits on Feb 7, 2019

Commits on Feb 15, 2019

Commits on Feb 19, 2019

Commits on Feb 20, 2019

Commits on Feb 22, 2019

Commits on Feb 23, 2019

Commits on Feb 28, 2019

Commits on Mar 2, 2019

Commits on Mar 3, 2019

Commits on Mar 4, 2019

Commits on Mar 6, 2019

Commits on Mar 7, 2019

Commits on Mar 8, 2019

Commits on Mar 10, 2019

Commits on Mar 12, 2019

Commits on Mar 15, 2019