colin
/
sharded-gotify
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
600 Commits 1 Branch 0 Tags 4.4 MiB
Commit Graph

16 Commits

Author SHA1 Message Date
chrispruitt 72bd8c8ba6
Add default message priority for applications 
Co-authored-by: Jannis Mattheis <contact@jmattheis.de>
 2023-07-19 18:15:01 +00:00
Jannis Mattheis 925fb7e2c9 Fix file upload XSS 
The application image file upload allowed authenticated users to upload
malious .html files. Opening such a file like

https://push.gotify.net/image/ViaxrjzNowdgL-xnEfVV-Ggv5.html

would allow the attacker to execute client side scripts.

The application image upload will now only allow the upload of files
with the following extensions: .gif, .png, .jpg and .jpeg.
 2022-12-28 20:13:35 +01:00
Jannis Mattheis 59b2ed17a6 Update linter 2022-05-29 19:45:45 +02:00
pigpig c172590b92 Add registration 
Can be enabled via the registration config flag. (disabled per default)

Fixes gotify/server#395

Co-authored-by: pigpig <pigpig@pig.pig>
Co-authored-by: Karmanyaah Malhotra <32671690+karmanyaahm@users.noreply.github.com>
Co-authored-by: Jannis Mattheis <contact@jmattheis.de>
 2021-08-04 19:39:43 +02:00
Jannis Mattheis 3454dcd602 Use golangci-lint 2020-11-01 10:47:02 +01:00
Jannis Mattheis 7b90b8a8f5 Use v2 in package path 2020-05-08 10:43:17 +02:00
Noa Amran 44f4ff31cb Fix typos 
Closes #197
 2019-06-27 19:04:48 +02:00
饺子w 67493c643e Return 500 server error on database failures (#191) 2019-05-25 08:37:24 +02:00
饺子w efcf4ad13d Use crypto/rand for token generation (#161) 2019-03-16 11:10:28 +01:00
eternal-flame-AD e5b24f4c92 Add plugin feature 
Fixed database migration
Added a plugin system based on the go plugin package
 2019-02-09 12:52:01 +01:00
Eugene Gavrilov 0ca18b817c [#71] Make title in message not necessary field 2018-11-14 20:05:24 +01:00
Jannis Mattheis 1831b6078f [#34] Add db calls for paged message api 2018-04-13 18:56:11 +02:00
Jannis Mattheis 61d5fc59a7 Add UploadApplicationImage API 2018-03-31 18:44:49 +02:00
Jannis Mattheis 496a0ba7dc Add in memory test database util 2018-03-25 19:33:29 +02:00
Jannis Mattheis d452b8b8ae Add asserts test util 
For comparing the body of a request with an instance.
 2018-03-25 19:33:29 +02:00
Jannis Mattheis 42c5cc15d8 Add auth test util 2018-03-25 19:33:29 +02:00