DL6ER f1c59db0f6 Declare pihole.toml as UTF-8 document. we add a compile-time switch to use ASCII with UTF-8 escaping instead in case this is a necessity for anyone (I don't really expect this in the third millenial but we also know people are still using Windows XP on the web...) ...

Signed-off-by: DL6ER <dl6er@dl6er.de>

2023-11-03 10:12:07 +01:00

..

json

!!! BREAKING CHANGE !!! Switch to the proven memory-hard password-hashing alogorithm BALLOON. The stored password hash will be upgraded on the first successdful login. To wave the necessity to implement BALLOON with every client trying to access the API, we remove the existing challenge-response authentication in favor of allowing login straight with the password. This has been avoided in the past, however, seems now acceptable that FTL (even by default) offers secure end-to-end encryption over HTTPS.

2023-05-30 21:22:45 +02:00

libs

Declare pihole.toml as UTF-8 document. we add a compile-time switch to use ASCII with UTF-8 escaping instead in case this is a necessity for anyone (I don't really expect this in the third millenial but we also know people are still using Windows XP on the web...)

2023-11-03 10:12:07 +01:00

checkAPI.py

Change default webport to 80

2023-08-01 15:54:20 +02:00

openapi-enforcer.js

Also allow authentication by sending SID via HEADER

2021-02-03 09:08:23 +01:00

test-rate-limit.py

Add rate-limiting on password login attempts

2023-10-07 19:59:32 +02:00