Commit Graph

5376 Commits

Author SHA1 Message Date
DL6ER de3e9bf0a5 Fix logo path to use the embedded SVG icon
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-13 20:03:31 +02:00
DL6ER ea40474635 Add OpenAPI Authentication and Authorization details for the API. Every endpoint except GET,POST /api/auth needs authentication
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-13 20:00:11 +02:00
yubiuser bc847ac727 Merge pull request #1585 from pi-hole/tweak/debug_4865165
Remove left-over debug output
2023-07-11 07:16:00 +02:00
DL6ER 628d9d5ebb Merge pull request #1582 from pi-hole/tweak/chown-config
Chown config file after writing (if root)
2023-07-08 14:55:32 +02:00
DL6ER 1369d2161a Merge pull request #1581 from pi-hole/fix/adlist_sql
Fix SQL used to update existing adlists via the API
2023-07-08 14:39:55 +02:00
DL6ER 43e85f4609 Merge pull request #1583 from pi-hole/tweak/secp384r1
Change generated elliptic curve from secp521r1 to secp384r1
2023-07-08 14:39:42 +02:00
DL6ER 2dbfc2b481 Fix SQL used to update existing adlists via the API
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-08 13:26:30 +02:00
DL6ER 85c2159b1b Chown config file after writing to avoid file ownership/permission conflicts
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-08 13:25:22 +02:00
DL6ER 206b8f0d5c Change generated elliptic curve from secp521r1 to secp384r1 because the former is not supported any longer by current Google Chrome (and, presumably, Chromium-based browsers like Edge). The reason for the removal is that NSA Suite B does not *mention* P-521 in the document, leading to Chrome removing support (even though Firefox keeps support for it). Furthermore, FIPS 140-2 also focuses on P-256 and P-384. There is nothing wrong about this curve but with the removal of it, it doesn't make sense to still keep it for automatic certificate generation in Pi-hole. There are debates on the web if P-256 wouldn't be enough as it is somewhat more efficient, but - at the end of the day - the difference is small and it still worth mentioning that even the largest standardized EC at this point is faster than any standardized and trusted non-EC cryptography used today. If you dislike ECC, Pi-hole offers the generation of a 4096 bit RSA key, instead.
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-07 04:55:23 +02:00
DL6ER 45b2c65e68 Merge pull request #1578 from pi-hole/new/mg.request_info.is_authenticated
Add mg.request_info.is_authenticated to check if a user is authenticated
2023-07-05 22:44:57 +02:00
DL6ER 6474c37e44 Add mg.request_info.is_authenticated to check if a user is authenticated
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-05 21:11:58 +02:00
Adam Warner 6edb6773c1 Merge pull request #1577 from pi-hole/fix/parseList_argument
The new checkOnly argument should be `false` when parsing lists
2023-07-04 09:41:57 +01:00
RD WebDesign 41556de516 The new checkOnly argument should be false when parsing lists
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2023-07-03 20:05:36 -03:00
DL6ER d71e174c46 Fix config output on CLI and add tests for it
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-18 08:11:36 +02:00
DL6ER 85c797ae3a Also backup and restore IPv6 ports
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-17 14:01:35 +02:00
DL6ER 3dcbaf7d9f Add support for IPv6-only nameserver system configurations
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-17 13:54:03 +02:00
DL6ER 61931f948b Add enum values for high-cotnrast theme family
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-17 10:54:53 +02:00
DL6ER 73f9ad02a0 Allow defining lines to inject into the generated dnsmasq configuration (misc.dnsmasq_lines)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 17:53:21 +02:00
DL6ER b2ad7af693 Add pihole-fTL gravity checkList <file> option
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 11:36:34 +02:00
DL6ER 3e10f67a65 There is a certain level of arbitrariness in how spell-check works ... and behaves different when running locally (act -j spell-check) and online (GHA)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 10:56:34 +02:00
DL6ER 16d43a5329 Spell-check fixes (RFC 6891 uses requestor with o so I assume this is a valid word)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 10:52:04 +02:00
DL6ER 9f808b94ad Pass new abp_entries number to API
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 10:00:43 +02:00
DL6ER 07f1f7df44 Save number of ABP-style entries in adlist table's new column abp_entries
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 09:38:37 +02:00
DL6ER 0002399916 Add high-contrast themes to list of available themes)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-14 15:16:48 +02:00
DL6ER 5e8525ee30 Rename default theme to auto theme
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-14 15:13:48 +02:00
DL6ER a7f47a5e1f The number of entries on a list should be the sum of domains and ABP-style entries
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-12 21:44:24 +02:00
DL6ER 1644ef0866 Merge branch 'development' into new/http 2023-06-12 21:41:21 +02:00
DL6ER c54a9e2860 Verify generated Tleporter ZIP files after creation
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-08 14:18:31 +02:00
DL6ER ba507ef7ef Merge branch 'special/CI_development' into new/http 2023-06-08 12:13:02 +02:00
DL6ER b976be26e0 Update default HTTP headers
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-08 12:12:57 +02:00
DL6ER 57ab940036 Remove left-over debug output
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-31 21:13:27 +02:00
DL6ER cd5ff54e3b Add minimum GLIBC version check
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-31 21:13:27 +02:00
DL6ER d9c09b66f0 Use pi-hole/ftl-build:ftl-build-buildx containers
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-04 18:46:17 +02:00
DL6ER af4ce5cbba Add more recent commit to Civetweb patch series
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 20:52:59 +02:00
DL6ER 4890e1c258 Register CSRF token in conn->request_info
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 20:52:02 +02:00
DL6ER f5f0354b3c Generate and store CSRF token in the session
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 20:51:13 +02:00
DL6ER 6975a17c7c Allow fractional delay for blocking mode changes and fix a few smaller memory leaks
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 13:26:58 +02:00
DL6ER 7cacf66f1c Fix "Invalid write/read of size 1" possibly leading to a crash in webserver.c
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 13:10:45 +02:00
DL6ER 8468e342ce Fix off-by-one mistake in query type counters
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 13:00:13 +02:00
DL6ER 7ad68b785b Fix favicon for API documentation (in the same way we did for the web interface a few minutes ago)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 12:50:15 +02:00
DL6ER d3fac0fe8a Merge pull request #1571 from pi-hole/fix/spelling_v6
Fix spelling in v6
2023-06-02 15:40:12 +02:00
DL6ER 2baa91b572 Enforece cookie auth only for API endpoints
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-31 21:13:27 +02:00
DL6ER 8176254fb0 Merge branch 'new/http-buildx' into new/http 2023-06-04 19:29:58 +02:00
DL6ER 813509841b Accept cookie authentication only when CSRF header is provided (and correct)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-04 19:29:54 +02:00
DL6ER 59463db321 Modify arch-tests, refine how we detect an already running pihole-FTL process and how we get other processes names from proc (the existing method didn't work on alpine:arm) and remove the obsolete struct size checking
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-31 21:13:27 +02:00
DL6ER a3466e4db6 sizeof(time_t) is 8 on both 32 and 64 bit with musl
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-31 02:57:41 +02:00
DL6ER a4c2e3e624 Use new buildx-provided containers
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-31 02:57:41 +02:00
DL6ER 44e7007378 Fix warnings shown when compiling with musl-gcc for 32bit targets
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-31 02:01:15 +02:00
Christian König 40e325de3a Fix getrandom() for glibc <2.25
Signed-off-by: Christian König <ckoenig@posteo.de>
2023-05-30 23:04:17 +02:00
Christian König 62cfc25b95 Fix spelling in v6
Signed-off-by: Christian König <ckoenig@posteo.de>
2023-05-30 22:42:13 +02:00