|
|
bd5ab63954
|
Change lookahead token order in two URL sanitation regular expressions
|
2024-02-28 21:45:47 +01:00 |
|
|
|
ae630a1625
|
URL sanitizer function now uses less regular expression replacements.
|
2024-02-28 21:43:43 +01:00 |
|
|
|
c3aba19ca3
|
Updated "tar" and "graceful-fs" libraries
|
2024-02-22 02:50:46 +01:00 |
|
|
|
38350597e5
|
Change SVR.JS logo file to one from https://svrjs.org/logo.png
|
2024-02-11 21:31:44 +01:00 |
|
|
|
6f362f15ac
|
Set enableIPSpoofing in config.json to false by default
|
2024-02-11 21:28:59 +01:00 |
|
|
|
b829414f4c
|
Fixed bug with URLs beginning with multiple slashes being rewritten incorrectly.
|
2024-02-11 21:26:26 +01:00 |
|
|
|
5339f4c244
|
Change default configuration file and test page.
|
2024-02-07 00:42:34 +01:00 |
|
|
|
2589eff15f
|
Added new SVR.JS mod and server-side JavaScript variable: authUser.
|
2024-02-07 00:35:00 +01:00 |
|
|
|
94320d348f
|
Remove easter egg mod
|
2024-02-02 19:55:10 +01:00 |
|
|
|
9f15a08378
|
Add some code comments
|
2024-02-02 19:49:30 +01:00 |
|
|
|
d85dedea65
|
Clean up the code.
|
2024-02-02 19:32:40 +01:00 |
|
|
|
88e923ffbc
|
Fixed SVR.JS crashes with X-SVR-JS-From-Main-Thread header and unspecified client request IPs
|
2024-02-02 19:23:45 +01:00 |
|
|
|
4d69f6f1a7
|
Add IP-based virtual hosts alongside hostname-based virtual hosts
|
2024-02-02 19:08:49 +01:00 |
|
|
|
ea228114e1
|
Head and foot inclusion is now returning 500 error in case of server error instead of server crash.
|
2024-01-24 19:48:50 +00:00 |
|
|
|
e172c2c005
|
Fix web root postfix prefix support
|
2024-01-24 19:06:00 +00:00 |
|
|
|
e29d1aa3aa
|
Fix syntax error from previous commit.
|
2024-01-24 18:53:29 +00:00 |
|
|
|
5fdbc898d0
|
Add support for web root postfix prefixes.
|
2024-01-24 18:52:05 +00:00 |
|
|
|
6abe280ee8
|
Add support for web root postfixes (for every host)
|
2024-01-23 07:00:23 +01:00 |
|
|
|
6a9afcbc26
|
Add support for useClientCertificate, rejectUnauthorizedClientCertificates, cipherSuite, ecdhCurve, tlsMinVersion, tlsMaxVersion, signatureAlgorithms and http2Settings config.json properties.
|
2024-01-22 23:21:01 +01:00 |
|
|
|
1a2019664a
|
Fixed error handling for invalid URL rewrite regexes. Also fixed bug with HTTP proxy not working.
|
2024-01-18 01:12:09 +01:00 |
|
|
|
60a84d879d
|
Clean up the code (remove trailing spaces)
|
2024-01-14 19:01:49 +01:00 |
|
|
|
db6c4faeaf
|
Mitigate log file injection vulnerability at mod file names.
|
2024-01-14 19:00:27 +01:00 |
|
|
|
e1e9338806
|
SVR.JS no longer crashes, when access to a log file is denied.
|
2024-01-14 09:00:08 +01:00 |
|
|
|
e11dd8d5b5
|
Mitigated log file injection for HTTP authentication
|
2024-01-14 08:41:11 +01:00 |
|
|
|
55dfa0ad1e
|
Fixed typo that caused 500 error with 308 code redirects
|
2024-01-13 10:25:42 +01:00 |
|
|
|
9569c7b7fd
|
Added support for 307 and 308 redirects (both in config.json and in redirect() SVR.JS API method)
|
2024-01-13 08:36:00 +01:00 |
|
|
|
fef016dd1c
|
Remove svrmodpack from node_modules
|
2024-01-13 08:27:41 +01:00 |
|
|
|
03556813ec
|
Reformatted the source code
|
2024-01-13 08:25:38 +01:00 |
|
|
|
1123f40961
|
Cleaned up the code
|
2024-01-13 08:09:32 +01:00 |
|
|
|
4179e4020c
|
Dropped support for svrmodpack; SVR.JS LTS versions will still have svrmodpack support.
|
2024-01-13 08:01:05 +01:00 |
|
|
|
7e73cb68d3
|
Added support for skipping URL rewriting, when the URL refers to a file or a directory.
|
2024-01-13 07:53:16 +01:00 |
|
|
|
d942342106
|
Changed rewriteURL method to use callbacks.
|
2024-01-13 07:34:28 +01:00 |
|
|
|
506df5ada7
|
Changed "SVR.JS authors" in custom feet to "SVR.JS".
|
2023-12-31 00:41:44 +01:00 |
|
|
|
7a6661b895
|
Fix searchHostname function
|
2023-12-30 23:43:07 +01:00 |
|
|
|
c46baf94b0
|
Replace "SVR.JS authors" with "SVR.JS"
|
2023-12-30 23:39:31 +01:00 |
|
|
|
b0ed92d8ac
|
Removed all remnants of "DorianTech" in SVR.JS
|
2023-12-24 19:17:34 +01:00 |
|
|
|
7be1c2a73b
|
Fixed host name rewriting
|
2023-12-16 08:59:49 +01:00 |
|
|
|
949e799d45
|
Improved SNI and host header processing
|
2023-12-15 23:28:06 +01:00 |
|
|
|
e68118ecbc
|
Improve on new SNI-related changes
|
2023-12-15 00:50:33 +01:00 |
|
|
|
aac6323401
|
Add Host header processing
|
2023-12-15 00:15:54 +01:00 |
|
|
|
63f8e98add
|
SVR.JS now refuses to start with misconfigured SNI in order to prevent ReDoS vulnerabilities.
|
2023-12-15 00:05:22 +01:00 |
|
|
|
179ebf6a7f
|
Changed secure context regex generation
|
2023-12-14 23:45:50 +01:00 |
|
|
|
355d20a2c1
|
Optimized some anti-XSS measures
|
2023-12-12 23:22:06 +01:00 |
|
|
|
2faf1e9c61
|
Mitigated even more XSS vulnerabilities.
|
2023-12-12 23:19:29 +01:00 |
|
|
|
8bad3f918c
|
Fixed multiple XSS vulnerabilities
|
2023-12-12 23:09:39 +01:00 |
|
|
|
5950d326fe
|
Clean up res.writeHead wraooer code
|
2023-12-12 22:37:23 +01:00 |
|
|
|
5902dd52fc
|
Added client errors, server errors, and malformed HTTP request counts to SVR.JS status page.
|
2023-12-12 22:29:27 +01:00 |
|
|
|
2fb4c52777
|
Make status page code more readable.
|
2023-12-12 22:19:51 +01:00 |
|
|
|
953c95f485
|
Fixes bug in the sizify function
|
2023-12-07 09:56:09 +01:00 |
|
|
|
ab69abf2da
|
Fixed bug with URL rewriting and trailing slash redirection
|
2023-12-03 16:18:21 +01:00 |
|
