aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Import fdzipstreamXavier Del Campo Romero2025-10-062-0/+3
|
* page.c: Report logged user name on directory previewXavier Del Campo Romero2025-10-061-14/+39
| | | | | | Thanks to Avron for the suggestion. [1] [1]: https://codeberg.org/xavidcr/slcl/issues/2
* page.c: Add table head for directory previewXavier Del Campo Romero2025-10-061-2/+55
| | | | | | Thanks to Avron for the suggestion. [1] [1]: https://codeberg.org/xavidcr/slcl/issues/2
* Setup higher backlog countXavier Del Campo Romero2025-10-062-0/+2
| | | | | libweb now allows to set up a custom value for the backlog argument in the internal call to listen(2).
* cftw.c: Call user function at the end for directoriesXavier Del Campo Romero2025-10-061-12/+24
| | | | | | | | The older, synchronous implementation for cftw recursed as long as there were children directories and, finally, it called the user function. This commit therefore fixes the newer, asynchronous implementation to honor that behaviour. Otherwise, rmdir_r would fail because rmdir(2) would be called for non-empty directories.
* jwt.c: Do not consider decoding errors as fatalsXavier Del Campo Romero2025-10-061-1/+1
| | | | | | The base64 string is considered untrusted input and, therefore, it might cause a decoding error. Therefore, this should not cause the server to close.
* Fix missing refactors related to cftwXavier Del Campo Romero2025-10-062-71/+200
| | | | | | | | | | | | | | | | | Commit 4fa1b3e8 missed to update other calls to cftw that were still relying on the older interface, causing unexpected errors. As a side effect, user quotas are now calculated asynchronously i.e., without blocking other clients. While the same improvement was planned for the /rm endpoint, it proved too challenging to implement for a first refactor: on one hand, /rm takes one or more key-value pairs involving the top-level directories and/or files to remove. On the other hand, every directory must be traversed recursively as rmdir(2) must be used on empty directories. While certainly possible, it was considered to keep a synchronous behaviour for do_rm for the sake of simplicity.
* configure: Remove slcl executable on distcleanXavier Del Campo Romero2025-10-021-0/+1
|
* Fix wrong function names on failureXavier Del Campo Romero2025-10-022-2/+2
|
* auth.c: Remove unused argumentsXavier Del Campo Romero2025-10-021-3/+3
|
* auth.c: Fix missing username checkXavier Del Campo Romero2025-10-021-2/+5
| | | | | | | | | So far, auth_login was looking for a key that matched the expected HMAC, among all registered users, and therefore without looking up the username from the cookie key. This allowed attackers to forge a cookie with a valid key but another username, and therefore see the contents from other users.
* thumbnail/main.c: Fix memory leak on failureXavier Del Campo Romero2025-09-241-1/+1
|
* main.c: Fix invalid argumentXavier Del Campo Romero2025-09-241-1/+1
|
* cftw.c: Fix memory leakXavier Del Campo Romero2025-09-241-0/+1
|
* thumbnail/main.c: Use new cftw interfaceXavier Del Campo Romero2025-09-241-4/+21
| | | | | | | | | | | | | | | | | | | | | This was a leftover from the following commit: commit 173528aef50a4b452acdd8ec9aff13f25c3e092c Author: Xavier Del Campo Romero Date: Wed Sep 24 11:01:31 2025 +0200 Make search non-blocking Thanks to a new feature in libweb, it is now possible to generate HTTP responses asynchronously i.e., without blocking other clients if the response takes a long time to generate. This now allow users to search for files or directories without blocking other users, regardless how much time the search operation takes. This required cftw to deviate from the POSIX-like, blocking interface it had so far, and has been replaced now with a non-blocking interface, so that directories are inspected one entry at a time.
* Make search non-blockingXavier Del Campo Romero2025-09-244-95/+286
| | | | | | | | | | | | | Thanks to a new feature in libweb, it is now possible to generate HTTP responses asynchronously i.e., without blocking other clients if the response takes a long time to generate. This now allow users to search for files or directories without blocking other users, regardless how much time the search operation takes. This required cftw to deviate from the POSIX-like, blocking interface it had so far, and has been replaced now with a non-blocking interface, so that directories are inspected one entry at a time.
* README.md: Update according to thumbnail generationXavier Del Campo Romero2025-09-242-2/+97
|
* Display thumbnails, if availableXavier Del Campo Romero2025-09-243-15/+197
|
* Add thumbnail generation toolXavier Del Campo Romero2025-09-248-0/+803
| | | | | | | | | | | This new application runs separately from slcl and communicates with it via a named pipe. When files are added/removed to/from the user directory, slcl shall write to the named pipe. Then, this new tool shall process incoming entries and generate or remove thumbnails accordingly. Such thumbnails are stored into a new directory inside the database directory, namely thumbnails/, which replicates the same structure as user/.
* main.c: Add -m command line option to open a named pipeXavier Del Campo Romero2025-09-241-47/+288
| | | | | | | | | | | | | | | | | | | | | | | This write-only named pipe is meant to inform other processes about files that have been added/removed to/from the user/ directory. The syntax is line-oriented and is described below. For added files: +<space ...><path><LF> For removed files: -<space ...><path><LF> Paths shall always be absolute. Examples: + /home/test/db/user/alice/a picture.jpg - /home/test/db/user/bob/essay.txt As reported above, this feature has been made completely optional so as not to introduce breaking changes. A new command line option, namely -m, is required to enable this feature.
* auth.c: Make use of crealpathXavier Del Campo Romero2025-09-241-44/+4
| | | | | crealpath already provides a mechanism to determine the current working directory from getcwd(3).
* Introduce crealpathXavier Del Campo Romero2025-09-244-0/+184
| | | | | | | | | | | | | | | | | | crealpath (for "custom realpath") is a custom implementation of realpath(3) that aims to work similarly to GNU's realpath(1). This implementation is provided due to the following reasons: - Future commits will require extracting an absolute path from a relative path, and/or process relative components from a path, such as ".." or ".". - realpath(3) is defined by POSIX.1-2008 as a XSI extension, and extensions are generally avoided in this repository whenever possible. - Additionally, realpath(3) requires the file or directory pointed to by the path to exist, which might not always be the case for slcl. - auth.c uses its own implementation to extract a dynamically allocated string by repeatedly calling getcwd(3). Future commits will also require this future, so it makes sense to keep it on a separate component.
* Bump libwebXavier Del Campo Romero2025-09-231-0/+0
| | | | | | | | | | | | | commit f7864cb7d49a8ca5bddf8d1f68b71ecd5ed85adc Author: Xavier Del Campo Romero <xavi92@disroot.org> Date: Tue Sep 23 16:28:44 2025 +0200 http.c: Always set SameSite=Strict to cookies This cookie attribute allows to mitigate CSRF attacks, while not requiring the server to store additional data. [1] [1]: https://owasp.org/www-community/SameSite
* CMakeLists.txt: Lower required OpenSSL versionXavier Del Campo Romero2025-02-241-1/+1
| | | | | | | Even if OpenSSL 1.0 is no longer supported [1], slcl still builds and works fine with it, so there is no reason to require a higher version. [1]: https://openssl-library.org/policies/releasestrat/index.html
* .gitignore: Fix path for Makefilev0.3.1Xavier Del Campo Romero2025-01-231-1/+1
|
* main.c: Require paths with leading '/' on sharingXavier Del Campo Romero2025-01-231-1/+1
| | | | | When sharing, paths must be expressed as an absolute path e.g.: /path/to/file .
* main.c: Forbid sharing non-existing filesXavier Del Campo Romero2025-01-233-13/+31
| | | | | | | | | | | So far, slcl would allow to share literally any directory or file, even if they did not exist, as long as valid credentials were given. Now, directories cannot be shared, since this is already restricted by the web interface. This is now considered an invalid request. On the other hand, attempting to share non-existing files shall now return a 404 Not Found response to the user.
* libweb: Add byte servingXavier Del Campo Romero2024-11-111-0/+0
| | | | | | | | | libweb started to support HTTP/1.1 Range Requests [1] so that large files can be partially retrieved. In the context of slcl, this is interesting in order to preview large media files, such as videos, PDFs or audio files. [1]: https://httpwg.org/specs/rfc7233.html
* Implement directory pagingXavier Del Campo Romero2024-08-282-24/+304
| | | | | This allows directories with many files and directories inside them to be split into pages, in order to limit resource usage.
* Bump libweb to v0.4.1Xavier Del Campo Romero2024-08-281-0/+0
|
* Bump to libweb 0.4.0v0.3.0Xavier Del Campo Romero2024-08-222-6/+66
| | | | | | | Now, libweb (rightfully) forces applications to handle signals and introduces handler_notify_close(3) to achieve the desired behaviour. Additionally, libweb 0.4.0 introduces several bugfixes.
* main.c: Fix missing O_TRUNCXavier Del Campo Romero2024-08-221-1/+1
| | | | | Otherwise, uploaded files meant to overwrite an existing file would not be updated accordingly if their newer size was smaller.
* auth.c: Replace sprintf(3) with snprintf(3)Xavier Del Campo Romero2024-08-211-1/+12
| | | | | | Even if this specific use of sprintf(3) was safe because sizeof sha256_str > (sizeof sha256 * 2), some implementations would consider sprintf(3) unsafe anyway.
* auth.c: Reject empty filesXavier Del Campo Romero2024-06-131-0/+5
| | | | | | It makes no sense to attempt to fopen(3) an empty file and malloc(3) zero bytes so as to dump it, as dump_db is still meant to fail on empty files.
* usergen: Fix error on empty $QUOTAXavier Del Campo Romero2024-06-121-1/+1
| | | | | | | When no quota is entered, printf(1) could fail because '%d' would expect at least one argument. Whereas some printf(1) implementations, such as the one by GNU coreutils, are somewhat tolerant, stricter implementations such as Busybox would (correctly) refuse this.
* README.md: Fix CMake build instructionsXavier Del Campo Romero2024-05-051-3/+2
| | | | | | The previous instructions were simply wrong because `cmake ..` would attempt to configure the project from the parent directory, instead of the build directory.
* page.c: Do not get filename on previewsXavier Del Campo Romero2024-03-011-9/+9
| | | | | | This change should provide the same behaviour, but would avoid unnecessary calls to dynstr_append and basename(3) when a preview is to be served.
* README.md: Update dependencies listXavier Del Campo Romero2024-02-241-2/+2
| | | | | | - jq is required by usergen. - Despite being part of a POSIX.1-2008 environment, m4 is not provided by Debian or Ubuntu by default.
* usergen: Do not abort on existing directoryv0.2.1Xavier Del Campo Romero2024-02-201-1/+1
| | | | | Otherwise, it would not be possible to replace user credentials if the directory already exists.
* main.c: Improve relative path detectionv0.2.1-rc4Xavier Del Campo Romero2024-02-201-6/+12
| | | | | | | | | Otherwise, the following resources would be considered valid: - /user/../test - /user/./test - /user/a/. - /user/a/./test
* main.c: Reject invalid /public/ requestsv0.2.1-rc3Xavier Del Campo Romero2024-02-201-1/+9
| | | | | | | | | | | | Otherwise: - slcl would accept /public/ (i.e., without a file name) as a valid resource. This would incorrectly map the public/ directory on the database, making slcl to return -1 because public/ is not a regular file. - slcl would accept directory names (e.g.: /public/dir/), which is never expected since slcl stores all public files into a single directory.
* main.c: Force valid cookie on check_lengthv0.2.1-rc2Xavier Del Campo Romero2024-02-201-1/+10
| | | | | Otherwise, a malicious user could send multipart/form-data requests without a valid cookie.
* page.c: Use open(2) fdopen(3) and fstat(2)v0.2.1-rc1Xavier Del Campo Romero2024-02-191-25/+79
| | | | | Now, the same file descriptor can be reused for all of the operations above, instead of calling stat(2) and fopen(3) separately.
* page.c: URL-encode hrefXavier Del Campo Romero2024-02-191-3/+25
| | | | | Otherwise, files with special characters, such as '%', could not be downloaded or previewed.
* main.c: const-qualify name and dirXavier Del Campo Romero2024-02-191-1/+1
| | | | | There was no reason why these should not be const-qualified. It was probably missed during the implementation.
* main.c: URL-encode created directoriesXavier Del Campo Romero2024-02-191-1/+8
| | | | | Otherwise, directories with special characters, such as "%", would not be accessible when performing the redirection.
* main.c: Use fstat(2) on move_fileXavier Del Campo Romero2024-02-191-24/+30
| | | | | This allows to reuse the same file descriptor to both open(2) and fstat(2) the file.
* Bump libweb to 0.3.0Xavier Del Campo Romero2024-02-193-2/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | The following commits fix a couple of security issues on libweb. Because of afe0681c0b26bb64bad55d7e86770f346cfa043e, slcl had to be updated to set up its struct http_cfg_post. commit afe0681c0b26bb64bad55d7e86770f346cfa043e Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com> Date: Mon Feb 19 23:00:56 2024 +0100 Limit maximum multipart/form-data pairs and files A malicious user could inject an infinite number of empty files or key/value pairs into a request in order to exhaust the device's resources. commit 9d9e0c2979f43297b2ebbf84f14f064f3f9ced0e Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com> Date: Mon Feb 19 22:49:09 2024 +0100 html.c: Avoid half-init objects on html_node_add_attr The previous implementation would leave half-initialised objects if one of the calls to strdup(3) failed. Now, n->attrs is only modified when all previous memory allocations were successful.
* main.c: Add missing relative path checkXavier Del Campo Romero2024-02-191-1/+5
|
* CMakeLists.txt: Bump version to 0.2.0v0.2.0Xavier Del Campo Romero2024-02-121-1/+1
|
generated by cgit v1.2.3 (git 2.39.1) at 2026-09-09 00:08:57 +0000