shellinabox/shellinabox
KLuka 4aa0eb97e4 Disable HTTP fallback via "/plain" URL (CVE-2015-8400)
* Disabled all methods of HTTP fallback when HTTPS is enabled. This
  is enforced on server side so that even modified client code (JS)
  can not redirect client from HTTPS to HTTP, like it was possible
  before (issue #355).
* Current solution unfortunately also disables automatic upgrade from
  HTTP to HTTPS (when available), since all non-SSL connections are
  droped immediately.
2015-12-03 17:47:26 +01:00
..
beep.wav First public release of the version 2.0 rewrite. This is the 2008-12-29 23:57:07 +00:00
black-on-white.css Issue #341: Fixed reverse video rendering 2015-09-03 19:01:48 +02:00
cgi-mode-example.sh Apparently, CGI mode is hard to figure out. Added an example showing how to 2009-08-17 17:14:32 +00:00
cgi_root.html Remove trailing whitespace 2015-03-11 17:56:36 +01:00
color.css Issue #341: Fixed reverse video rendering 2015-09-03 19:01:48 +02:00
enabled.gif Included example style sheets that allow switching to white-on-black or to 2009-08-12 02:32:26 +00:00
externalfile.c Remove trailing whitespace 2015-03-11 17:56:36 +01:00
externalfile.h Updated copyright notice. 2009-01-02 06:09:13 +00:00
favicon.ico First public release of the version 2.0 rewrite. This is the 2008-12-29 23:57:07 +00:00
keyboard-layout.html Set the encoding of .html files to UTF-8 2015-03-10 17:15:06 +01:00
keyboard.png Issue #173: Keyboard icon on dark background 2015-03-10 17:04:06 +01:00
launcher.c Issue #103: Child process cleanup under PAM session 2015-08-30 22:48:14 +02:00
launcher.h Real IP recognition over proxy (partial fix #54) 2015-05-17 20:05:15 +02:00
monochrome.css Issue #255: Fixed "White on Black" color theme 2015-05-20 16:50:32 +02:00
print-styles.css Remove trailing whitespace 2015-03-11 17:56:36 +01:00
privileges.c Logging and debuging 2015-08-23 19:25:36 +02:00
privileges.h Another iteration of changes intended to deal with MacOS X specific build 2010-09-29 16:46:51 +00:00
root_page.html Better handling of Ctrl-W event 2015-03-14 13:30:18 +01:00
service.c Logging and debuging 2015-08-23 19:25:36 +02:00
service.h Started working on support for WebSockets. 2010-03-29 16:40:17 +00:00
session.c Logging and debuging 2015-08-23 19:25:36 +02:00
session.h Improved code session and URL handling 2015-05-26 22:37:32 +02:00
shell_in_a_box.jspp Added Github url in context menu "About..." popup 2015-07-24 16:08:05 +02:00
shellinaboxd.c Disable HTTP fallback via "/plain" URL (CVE-2015-8400) 2015-12-03 17:47:26 +01:00
shellinaboxd.man.in Updated manuals for SSH service 2015-05-21 09:51:59 +02:00
styles.css Issue #341: Fixed reverse video rendering 2015-09-03 19:01:48 +02:00
usercss.c Logging and debuging 2015-08-23 19:25:36 +02:00
usercss.h Internet Explorer still doesn't properly support CSS. In particular, it has 2009-08-16 05:20:09 +00:00
vt100.jspp Issue #119, #312, #354: Soft keyboard icon 2015-11-17 19:43:22 +01:00
white-on-black.css Issue #341: Fixed reverse video rendering 2015-09-03 19:01:48 +02:00