DL6ER 992fac4bde Use SameSite=Strict as defense against some classes of cross-site request forgery (CSRF) attacks. This ensures the session cookie will only be sent in a first-party (i.e., Pi-hole) context and NOT be sent along with requests initiated by third party websites. ...

Signed-off-by: DL6ER <dl6er@dl6er.de>

2021-01-16 12:35:05 +01:00

..

api

Use SameSite=Strict as defense against some classes of cross-site request forgery (CSRF) attacks. This ensures the session cookie will only be sent in a first-party (i.e., Pi-hole) context and NOT be sent along with requests initiated by third party websites.

2021-01-16 12:35:05 +01:00

civetweb

Ensure every auth object has the session object

2021-01-15 19:18:08 +01:00

cJSON

Update cJSON from 1.7.13 to 1.7.14 (released 3 September 2020). The structure of linkedlist has been changed to improve the efficiency of adding items to arrays/objects.

2020-09-03 21:51:44 +02:00

database

Merge branch 'development' into new/http

2021-01-15 19:34:07 +01:00

dnsmasq

Merge branch 'development' into new/http

2021-01-15 19:34:07 +01:00

lua

Add drop-in replacement support for luac as well

2020-12-09 22:50:56 +01:00

ph7

Improve cmake system.

2020-06-16 19:09:25 +02:00

syscalls

Merge branch 'development' into new/http

2021-01-15 19:34:07 +01:00

tre-regex

Improve regex engine. This adds new features such as in-code comments, approximate matching (fuzzy matching)

2020-08-10 23:19:04 +02:00

webserver

Get memory details directly from the kernel as we cannot rely on the information provided by sysinfo() [there sin't anything we need to compute the proper amount of used = unclaimable memory]

2021-01-16 12:22:13 +01:00

args.c

Log date/time of FTL in header just as SQLite3 does as well

2020-12-27 17:35:02 +01:00

args.h

Do not re-open gravity database when not forking for TCP workers (debug mode) and simplify network table routines (remove code duplication and prevent possible dead-locks when trying to resolve host names)

2020-08-18 23:28:57 +02:00

capabilities.c

Rename memory.c -> syscalls.c

2020-12-09 20:21:03 +01:00

capabilities.h

…

CMakeLists.txt

Merge branch 'development' into new/http

2021-01-15 19:34:07 +01:00

config.c

Request challange over /api/auth/login

2021-01-15 19:18:07 +01:00

config.h

Merge branch 'development' into new/http

2020-12-08 22:23:05 +01:00

daemon.c

Rename memory.c -> syscalls.c

2020-12-09 20:21:03 +01:00

daemon.h

Merge branch 'release/v5.2' into new/mac_clients

2020-07-29 12:21:12 +02:00

datastructure.c

Merge branch 'development' into new/http

2021-01-15 19:34:07 +01:00

datastructure.h

Merge branch 'development' into new/http

2021-01-15 19:34:07 +01:00

dhcp-discover.c

Show BOOTP server and file strings used by TFTP

2020-12-07 23:33:05 +01:00

dhcp-discover.h

Add new dhcp-discover command

2020-09-04 13:11:34 +02:00

dnsmasq_interface.c

Merge branch 'development' into new/http

2021-01-15 19:34:07 +01:00

dnsmasq_interface.h

Merge branch 'development' into new/http

2021-01-02 11:36:59 +01:00

edns0.c

Ignore ECS loopback addresses to avoid rewriting the client IP to a (useless because distant) localhost

2020-10-23 16:36:06 +02:00

edns0.h

Make EDNS MAC available for FTL_new_query()

2020-08-10 23:09:59 +02:00

enums.h

Add /api/adlist endpoint to read/add/modify/delete adlists

2021-01-15 19:18:08 +01:00

events.c

Don't iterate over all clients every minute trying to find new ones but only do this when the RESOLVE_NEW_HOSTNAMES event is set

2020-12-23 14:38:06 +01:00

events.h

Add explicit event queue to avoid possible race collisions when many signals arrive at the same time (or very very close to each other)

2020-09-03 20:45:59 +02:00

fifo.c

Simplify request variable extraction

2020-06-17 20:07:31 +02:00

fifo.h

Simplify request variable extraction

2020-06-17 20:07:31 +02:00

files.c

Merge branch 'development' into new/http

2021-01-02 11:36:59 +01:00

files.h

Improve database statistics endpoint

2020-06-17 20:07:31 +02:00

FTL.h

Implement challenge-response authentication

2021-01-11 19:47:26 +01:00

gc.c

Merge branch 'development' into new/http

2021-01-02 11:36:59 +01:00

gc.h

…

gen_version.cmake

Finish transition to cmake on the new/http branch.

2020-05-28 20:23:51 +02:00

log.c

Improve log file locking

2021-01-15 19:18:05 +01:00

log.h

Improve log file locking

2021-01-15 19:18:05 +01:00

main.c

Improve log file locking

2021-01-15 19:18:05 +01:00

main.h

…

overTime.c

Merge pull request #969 from pi-hole/tweak/interruptsafe_systemcalls

2020-12-21 10:05:03 +01:00

overTime.h

Add support for additional query types: "A", "AAAA", "ANY", "SRV", "SOA", "PTR", "TXT", "NAPTR", "MX", "DS", "RRSIG", "DNSKEY" and "OTHER" (summing up all other possible DNS types)

2020-06-28 19:58:15 +02:00

regex_r.h

Detect and handle interface changes of clients with the same IP

2020-12-24 10:43:23 +01:00

regex.c

Merge pull request #999 from pi-hole/new/iface_change_same_IP

2021-01-14 20:55:30 +01:00

resolve.c

Don't iterate over all clients every minute trying to find new ones but only do this when the RESOLVE_NEW_HOSTNAMES event is set

2020-12-23 14:38:06 +01:00

resolve.h

Respect settings RESOLVE_IPV4 and RESOLVE_IPv6 also when trying to resolve host names from the database (network table)

2020-11-30 19:27:08 +01:00

setupVars.c

Request challange over /api/auth/login

2021-01-15 19:18:07 +01:00

setupVars.h

Request challange over /api/auth/login

2021-01-15 19:18:07 +01:00

shmem.c

On 2017-08-27 (after v3.3, before v3.4), nettle changed the type of destination from uint_8t* to char* in all base64 and base16 functions (armor-signedness branch). This is a breaking change as this is a change in signedness causing issues when compiling FTL against older versions of nettle.

2021-01-16 11:30:25 +01:00

shmem.h

Improve log file locking

2021-01-15 19:18:05 +01:00

signals.c

Merge pull request #985 from pi-hole/new/REFRESH_HOSTNAMES_NULL

2020-12-23 14:01:57 +01:00

signals.h

Rename super-clients ---> alias-clients

2020-11-15 19:09:48 +01:00

timers.c

Merge branch 'development' into new/http

2021-01-02 11:36:59 +01:00

timers.h

Merge branch 'development' into new/http-ph7

2020-10-26 12:38:55 +01:00

vector.c

…

vector.h

…

version.h.in

Add cmake build

2020-05-25 10:45:13 -07:00