| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Track if we are accessed via HTTP or HTTPS, and the server name.
Track cookies.
HEAD method.
Various security clean ups.
Force HTTPS for account.html.
Poor mans Bobby Tables protection.
Security token.
Validate inputs. Looking up the DNS records for email domain name.
Don't allow creation of accounts with god names, leave that for the
console. Check if created user name exists already. Double check the
passwords and emails.
Error messages on dynamic pages.
Various clean ups.
TODO++
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
First and last names merged into one name.
Is name two words check, a suprisingly effective spam blocker.
Poor mans Bobby Tables protection.
Various other input checking.
Added account creation confirmation page.
Some text and length tweaks.
|
| | |
|
| |
|
|
|
|
|
|
|
| |
Sanatize the path.
Add support for Last-Modified, If-Modified-Since, and Cache-Control:
no-cache.
Teach the base server about more binary content types.
|
| |
|
|
| |
Just a name change.
|
| | |
|
| |
|
|
|
|
|
|
| |
Select with more parameters.
Tables, with member accounts.
Print the query values.
|
| | |
|
| |
|
|
| |
Smaller, simpler, works better.
|
| |
|
|
| |
Just some simple dynamic pages that don't actually do anything.
|
| | |
|
| |
|
|
| |
Except HGers, still trying to sort that one out.
|
| | |
|
| |
|
|
|
|
| |
basic pages.
And update everyone to suit.
|
| |
|
|
| |
Are you a local? Asking for a friend.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |\
| |
| |
| |
| | |
Conflicts:
OpenSim/Server/Base/ServicesServerBase.cs
|
| | |
| |
| |
| | |
Request) HTTP status rather than simply dropping the request.
|
| | |
| |
| |
| | |
Adds new OpenSim.Server.Handlers.Tests.dll to test suite
|
| | | |
|
| | |
| |
| |
| |
| |
| | |
This allows a closed grid to delete asset types other than maptile remotely.
Only operational if AllowRemoteDelete = true also.
Defaults to false - do not enable if anybody other than you can make asset service requests.
|
| | |
| |
| |
| |
| |
| |
| |
| | |
from AssetService.
This allows us to use a common check for both AssetService and XAssetService.
It also allows future console commands to delete an asset.
As before, deletion of maptile assets is not allowed remotely unless this is explicitly configured.
|
| | |
| |
| |
| |
| |
| | |
filename to save already exists, rather than exception throwing.
Also changes ConsoleUtil.CheckFileExists to CheckFileDoesNotExist() since this is more meaningful in the context, even though it does result in double negatives.
|
| | |
| |
| |
| | |
Move PluginManager out to OpenSimFramework for general use
|
| | |
| |
| |
| | |
This is working - more testing to follow, then soem documentation
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We can provide modular ini for connectors...
look for our configuration in the following places...
1) in the default ini/-inifile
2) in the named file (ConfigName) located in the configured directory
(see Robust[.HG].ini [Start] section for ConfigDirectory)
3) in the repository named in the connector (ConfigURL)
In this case, the file will be written into the configured
directory with the specified
See example connector/service @ https://github.com/BlueWall/SlipStream
for testing.
|
| |
|
|
|
|
| |
(present as column PrincipalID) parameters in the Avatars table.
These are used to invoke avatar service calls but are not in themselves persistable avatar data.
|
| |
|
|
|
|
| |
the BOM, use a single Util.UTF8NoBomEncoding.
This class is thread-safe (as evidenced by the provision of the system-wide Encoding.UTF8 which does not suppress BOM on output).
|
| |
|
|
|
| |
It appears this was never actually used since attachments were rezzed in other code.
This was never available on remote simulator comms, only local.
|
| |
|
|
|
|
|
|
|
|
| |
of always true no matter what the callee actually returned.
This was due to two things
1) SimulationServiceConnector.QueryAccess was always looking to the outer result["success"].
But if a "_Result" map is returned (which is certainly the case right now), then the true success is _Result["success"], result["success"] is always true no matter what
2) If QueryAccess was false at the destination, then AgentHandlers.DoQueryAccess() was never putting this in the result.
The default action of SerializeJsonString() is not to put false booleans in the JSON!!!, so this has to be explicitly set.
|
| |
|
|
| |
lookup rather than the region handle.
|
| |
|
|
|
|
| |
requests, as this appeared to be some kind of numbered error code.
This brings these messages into line with similar messages that did not do this.
|
| |
|
|
|
|
| |
can relate a slow request to what the handler actually does and the agent it serves, if applicable.
This is most useful for capabilities where the url is not self-describing.
|
| |
|
|
| |
because they were being uploaded before the region was registered with the grid
|
| | |
|
| | |
|
| | |
|
| |
|
|
| |
grids like it.
|
| | |
|
| |
|
|
| |
(XInventory and Assets).
|
| | |
|
| |
|
|
| |
owned by the same user.
|
| |
|
|
| |
that they can scale better. They were previously being handled by the UAS; that is still there, but it's now obsolete and will be removed in a future release.
|
