berthubert trifecta issues

berthubert / trifecta

educational image sharing website built on a combination of modern C++, web and database technologies

MIT License

149 stars 9 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

feature request: Option to strip EXIF data

#53 akhepcat opened 5 months ago
0
sign-in email should mention account name and IP address

#52 berthubert opened 6 months ago
0
Feature request: Delete button (and functionality) in Admin screen on the right of each image at the list of images.

#51 roelvandermade closed 9 months ago
0
Logging to standard output is not sanitized, leading to possible forged logs or unexpected behavior

#50 wandernauta closed 9 months ago
1
Malicious requests for many overlapping byte ranges of large images risk OOM

#49 wandernauta closed 9 months ago
4
Trifecta is vulnerable to Brotli ("zip") bombs if Brotli support is enabled

#48 wandernauta opened 9 months ago
0
Suggested nginx X-Real-IP config assumes nginx is behind another proxy

#47 wandernauta closed 9 months ago
1
ID parameters from URL are not validated before being included in Fetch requests

#46 wandernauta closed 9 months ago
0
Overlong Cookie header takes long time to parse, leading to potential DoS

#45 wandernauta closed 9 months ago
0
Flip login/get sign-in email around for better UX

#44 cyclops1982 closed 9 months ago
0
Blocking-threads design is susceptible to Slowloris-style DoS attacks without nginx

#43 wandernauta closed 9 months ago
1
Invalid POSTed UTF-8 is accepted and stored, causing JSON GET endpoints to fail

#42 wandernauta opened 9 months ago
2
Mersenne Twister not suitable for security tokens

#41 solardiz closed 9 months ago
2
Email address field in user panel is vulnerable to SMTP injection

#40 wandernauta closed 9 months ago
1
Current password is not required when changing email address

#39 wandernauta closed 9 months ago
1
SVG images are accepted but not sanitized

#38 wandernauta closed 9 months ago
1
Some dependency improvements

#37 edmonds closed 9 months ago
1
Don't load my images (and other things) when not needed

#36 cyclops1982 closed 9 months ago
0
Move back to green

#35 cyclops1982 closed 10 months ago
0
Remove admin.html, updated styling and move to user/post object

#34 cyclops1982 closed 10 months ago
0
Nice error message when post is not available anymore

#33 cyclops1982 opened 10 months ago
0
Minor cleanups in terms of whitespaces and includes

#32 kamiccolo closed 10 months ago
0
need link to admin.html

#31 berthubert closed 10 months ago
1
add a separate multi-stage Dockerfile, for clean building

#30 Habbie closed 10 months ago
0
feat: multi-stage docker build

#29 Lewiscowles1986 closed 10 months ago
1
Add -pthread to CXXFLAGS

#28 dev-zzo closed 10 months ago
4
Disable user is not hooked up

#27 berthubert closed 9 months ago
0
Delete user does not ask if you are sure

#26 berthubert closed 10 months ago
1
There is no 'delete post'

#25 berthubert closed 10 months ago
1
Delete image needs an 'are you sure'

#24 berthubert closed 10 months ago
1
Add a nice favicon to trifecta

#23 roelvandermade closed 10 months ago
0
Sessions should expire?

#22 cyclops1982 opened 10 months ago
0
Make TLS only mode with better cookies

#21 berthubert closed 9 months ago
1
Fix up title editing and captions

#20 berthubert closed 10 months ago
1
Add text pastebin

#19 berthubert opened 10 months ago
3
Add drag'n'drop support

#18 berthubert closed 10 months ago
1
public/public until buttons/visibility

#17 berthubert closed 10 months ago
1
Various CSS changes

#16 cyclops1982 closed 10 months ago
1
No error message if --html-dir is not specified correctly, or no files found

#15 cyclops1982 opened 10 months ago
0
Docker image

#14 cyclops1982 closed 10 months ago
2
Better display large images

#13 cyclops1982 closed 10 months ago
0
change wording of password1 and password2

#12 roelvandermade closed 10 months ago
0
add UI-visible versioning to trifecta binary (and check if there's an update available?)

#11 roelvandermade opened 10 months ago
2
create alert when shooting yourself in the foot (ie. killing your own admin session)

#10 roelvandermade opened 10 months ago
0
create link to admin/home/status page

#9 roelvandermade closed 10 months ago
2
Css fixes

#8 cyclops1982 closed 10 months ago
0
Css fixes

#7 cyclops1982 closed 10 months ago
0
Add AuthException, throw it when it should.

#6 cyclops1982 opened 10 months ago
0
500 error when loading page and not being logged in

#5 cyclops1982 closed 10 months ago
1
Pasting username/password fails

#4 cyclops1982 closed 10 months ago
1