lichenblankie/tinyweb
2
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity Actions
No description
15 commits 2 branches 0 tags 10 MiB
Find a file
lichenblankie 7c9b07c092 fix SSRF bypass, tighten error handling 
- SSRF: disable automatic redirects, manually follow up to 5 hops with
  IP re-validation at each step to prevent redirect-to-localhost bypass
- Identity file: enforce 0600 permissions on tinyweb_identity at load
  and creation to prevent other users from reading the private key
- Error messages: replace raw exception strings with generic messages
  to avoid leaking internal paths/hostnames to the UI
- DB connections: wrap all get_db() usage in try/finally to guarantee
  close() even when handlers throw mid-operation
2026-06-05 05:26:51 +00:00
themes themes folder + kodama template 2026-06-05 05:26:51 +00:00
.gitignore themes folder + kodama template 2026-06-05 05:26:51 +00:00
app.py fix SSRF bypass, tighten error handling 2026-06-05 05:26:51 +00:00
db.py fix SSRF bypass, tighten error handling 2026-06-05 05:26:51 +00:00
gateway.py bookmark auth, CSP, per-session CSRF 2026-06-05 05:26:51 +00:00
handlers.py fix SSRF bypass, tighten error handling 2026-06-05 05:26:51 +00:00
README.md first commit 2026-06-05 05:22:37 +00:00
requirements.txt port to Reticulum mesh 2026-06-05 05:26:51 +00:00
rns_client.py mesh subscriptions + search 2026-06-05 05:26:51 +00:00
templates.py custom template editor, UI cleanup 2026-06-05 05:26:51 +00:00

README.md