224066f
(HEAD -> master, minor)
Merge branch 'email' of sindre/Beelance into master by
2020-03-18 22:12:34 +0000
4acd265
(refs/pull/40/head)
Add QR image to set up authenticator by
2020-03-18 23:11:16 +0100
15384fb
Add two-factor authentication by
2020-03-18 22:40:09 +0100
ac243db
Minor restructure to improve code usability and readability by
2020-03-18 22:39:36 +0100
d5b155a
Set SMTP timeout by
2020-03-18 22:34:56 +0100
f7d3092
Properly indent email messages by
2020-03-18 21:09:02 +0100
dd27cb6
Implement password reset by
2020-03-17 21:23:59 +0100
46394af
Implement email registration by
2020-03-17 18:06:34 +0100
b0bd63d
Implement email. It almost works by
2020-03-17 18:04:08 +0100
7f62b90
Merge branch 'minor' of sindre/Beelance into master by
2020-03-17 14:02:31 +0000
cb0219d
(refs/pull/39/head)
Remove initial admin user, and change the database password by
2020-03-17 15:01:12 +0100
5fee297
Merge branch 'minor' of sindre/Beelance into master by
2020-03-17 13:41:50 +0000
442f6e1
(refs/pull/38/head)
Prevent account enumeration when creating a project by
2020-03-17 14:37:26 +0100
a4a1bd5
Add a render helper that adds required globals by
2020-03-17 14:36:28 +0100
4795a4f
Merge branch 'logging' of sindre/Beelance into master by
2020-03-16 21:23:43 +0000
6ab98ec
(refs/pull/37/head)
Add log directory to gitignore by
2020-03-16 22:22:55 +0100
f8022f3
Log user registration and invalid login attempts by
2020-03-16 22:19:36 +0100
3c3cf6e
Replace printing with logging in model files by
2020-03-16 22:19:25 +0100
a2b8932
Add setup for outputing nginx, uwsgi and python logs to files outside docker by
2020-03-16 22:18:09 +0100
608a605
Merge branch 'minor' of sindre/Beelance into master by
2020-03-16 20:11:49 +0000
593028b
(refs/pull/36/head)
Fix OS remote code execution by
2020-03-16 21:10:02 +0100
454633f
Merge branch 'minor' of sindre/Beelance into master by
2020-03-16 19:52:54 +0000
24bc79c
(refs/pull/35/head)
Implement protection from brute-force attacks by
2020-03-16 18:19:16 +0100
e103db3
Merge remote-tracking branch 'gitea/master' into minor by
2020-03-15 21:15:31 +0100
c10f496
Merge branch 'minor' of sindre/Beelance into master by
2020-03-15 20:14:53 +0000
9491cfd
(refs/pull/34/head)
Implement stricter password policy by
2020-03-15 21:12:52 +0100
9892487
Implement better password security by
2020-03-15 19:57:27 +0100
94dc16a
Optimize Docker build by
2020-03-14 19:35:31 +0100
57db086
Merge branch 'minor' of sindre/Beelance into master by
2020-03-12 15:48:16 +0000
4d562df
(refs/pull/33/head)
Minor fixes to code style in project files by
2020-03-12 16:47:12 +0100
4a2af0f
Check permissions and ownership when changing a project by
2020-03-12 16:43:40 +0100
09ef868
Upgrade pip on build by
2020-03-12 10:40:21 +0100
9738a31
Disable the debug error page by
2020-03-12 10:38:55 +0100
b124284
Add security headers by
2020-03-12 10:15:54 +0100
d89ddd6
Remove old static file by
2020-03-11 22:17:20 +0100
8fd4e00
Merge branch 'master' of gitlab.stud.idi.ntnu.no:tdt4237-2020/group32 by
2020-03-10 11:34:05 +0100
30afd41
Merge branch 'csrf' of sindre/Beelance into master by
2020-03-10 10:32:54 +0000
e9b7601
(refs/pull/32/head, csrf)
Implement CSRF protection by
2020-03-10 11:31:40 +0100
35195b9
Merge branch 'session-cookie' of sindre/Beelance into master by
2020-03-09 15:12:22 +0000
dafe82a
(refs/pull/31/head, session-cookie)
Make remember cookie HttpOnly by
2020-03-09 16:11:00 +0100
1257cad
Secure remember cookie. This doesn't enable http-only by
2020-03-09 15:47:07 +0100
56c14f1
Reduce remember cookie expiry, and enforce by storing it in the database by
2020-03-09 15:39:29 +0100
ba8b2e6
Use random string for remember cookie, replacing deserialization by
2020-03-09 14:50:29 +0100
1e29c69
Merge branch 'sql-injection' of sindre/Beelance into master by
2020-03-09 11:56:46 +0000
a21b567
(refs/pull/30/head, sql-injection)
Use bound variables instead of concatenation in SQL queries by
2020-03-09 12:53:16 +0100
7629423
Update mysql-connector dependency by
2020-03-09 12:26:06 +0100
48c6151
Merge branch 'https' of sindre/Beelance into master by
2020-03-09 11:15:35 +0000
f31d593
(refs/pull/29/head, https)
Add HTTPS support with a self signed certificate by
2020-03-09 12:06:27 +0100
6f6084a
Update README by
2020-02-20 15:08:07 +0100
15072a6
Update README.md, to include local host as possible IP for the application. by
2020-02-20 14:55:37 +0100
8d1ef7f
Set example email config by
2020-02-19 22:40:04 +0100
e3d0289
config for mailserver by
2020-02-19 21:37:36 +0100
b1bab74
Change permissions to grant usergroup access. This change does not add or remove any vulnerablities. But makes it possibe for different administrators to manage the repository. by
2020-02-17 16:33:13 +0100
4b7ebfc
Update README by
2020-01-30 17:03:23 +0100
b10c8b4
Fix errorhandler bug by
2020-01-30 16:58:37 +0100
f55a9e5
Merge branch 'master' of https://gitlab.stud.idi.ntnu.no/tdt4237-2020/larepo by
2020-01-30 16:19:10 +0100
2ef59fd
Bug in exceptionhandler by
2020-01-30 16:18:32 +0100
978b6a7
Update readme by
2020-01-30 16:18:29 +0100
9388eda
typo by
2020-01-30 16:10:32 +0100
f5fdc21
Bugfix by
2020-01-28 14:24:22 +0100
25b92d3
bugfix by
2020-01-28 13:50:51 +0100
016d5a6
Error handling to prevent database from crashing on too easy on sql injections by
2020-01-28 13:44:23 +0100
7652595
Merge branch 'smtp' by
2020-01-25 19:16:18 +0100
b6ed4e5
Remove smtp stuff by
2020-01-25 19:13:02 +0100
dfc0928
Database exception handling by
2020-01-25 19:06:37 +0100
b95312c
Global Change by
2020-01-22 18:56:39 +0100
a696c31
Add smtp server by
2020-01-22 17:37:23 +0100
212d0a9
Accept zeros aswell by
2020-01-22 14:43:52 +0100
2cd20c5
Uwsgi init file by
2020-01-22 10:07:49 +0100
96215ad
NGINX skeleton for https by
2020-01-21 13:15:10 +0100
01ce461
update by
2020-01-20 17:27:08 +0100
1c0e326
Update README.md by
2020-01-13 19:39:27 +0100
8590226
Update README.md by
2020-01-13 19:38:31 +0100
337a4e6
Update README.md by
2020-01-13 19:37:50 +0100
bbee424
more readme by
2019-12-31 14:17:37 +0100
919d3c6
Update subnet for bridge and readme description by
2019-12-31 13:46:40 +0100
3bb08a9
Correctly use env variable to connect to database after image is running by
2019-12-23 17:17:52 +0100
8cedf0d
Set ip and ports from groupid environment variable by
2019-12-23 16:02:48 +0100
6f0754c
clean by
2019-12-23 14:17:13 +0100
cbe5cc7
generate docs by
2019-12-23 13:29:25 +0100
4d85f51
refactor by
2019-12-23 13:29:16 +0100
fa71483
polish by
2019-12-23 12:47:35 +0100
5e01105
Connect database on every query, might prevent the database timeout by
2019-12-13 13:39:46 +0100
5a2eb9b
Remove localhost access to database (only need container access for docker) by
2019-12-03 12:35:28 +0100
d44735a
polish by
2019-12-03 12:13:27 +0100
617513e
finish by
2019-12-02 16:20:30 +0100
5977e82
polish by
2019-12-02 12:23:44 +0100
f23e31d
polish by
2019-12-02 11:46:34 +0100
357e086
buff docs by
2019-11-29 18:04:00 +0100
5b3a26a
clean by
2019-11-29 17:46:48 +0100
041a4f3
stuff by
2019-11-29 17:12:28 +0100
e4501c0
bugfix by
2019-11-29 17:08:29 +0100
5273fd2
buff css by
2019-11-29 16:58:14 +0100
fac332d
buff css by
2019-11-29 16:43:21 +0100
39438bc
checkpoint apply edit by
2019-11-29 16:14:20 +0100
df19ae3
checkpoint apply edit by
2019-11-29 16:08:58 +0100
4c45229
checkpoint apply edit by
2019-11-29 15:39:20 +0100
cb0996b
checkpoint apply edit by
2019-11-29 15:36:48 +0100
0a3c91b
checkpoint apply edit by
2019-11-29 15:36:34 +0100
e433f3d
checkpoint apply edit by
2019-11-29 15:35:39 +0100