Skip to content
  1. Aug 20, 2018
  2. Aug 17, 2018
  3. Aug 16, 2018
  4. Aug 15, 2018
  5. Aug 13, 2018
  6. Aug 10, 2018
  7. Aug 08, 2018
  8. Aug 07, 2018
  9. Aug 05, 2018
  10. Aug 04, 2018
  11. Jul 30, 2018
  12. Jul 29, 2018
  13. Jul 28, 2018
  14. Jul 27, 2018
    • Krystian Kozak's avatar
      luci-base: update Polish translation · 6dbdc2ca
      Krystian Kozak authored
      
      
      Updated Polish translations.
      
      Signed-off-by: default avatarKrystian Kozak <krystian.kozak20@gmail.com>
      6dbdc2ca
    • Jo-Philipp Wich's avatar
      treewide: rework rollback/apply workflow · e5a1ac02
      Jo-Philipp Wich authored
      
      
      Rework the apply confirmation mechanism to be session agnostic in order to
      circumvent cross domain restrictions which prevent the JS code from issuing
      apply confirm requests in some cases, e.g. when changing the LAN IP.
      
      Confirmation calls may now be done from unauthenticated pages, as long as a
      matching confirmation token is sent along with the request.
      
      The reasoning behind this is that there is little security impact in
      confirming pending apply sessions, especially since those sessions can only
      be initiated while being authenticated.
      
      After this change, LuCI will now launch a confirmation process on every
      rendered page when a rollback is pending. The confirmation will happen
      regardless of whether the user is logged in or not, or if the current page
      is a CBI form or static template.
      
      A confirmation request now also requires a random one-time token which is
      rendered along with the confirmation JavaScript code in order to succeed.
      
      This token is not meant to provide security but to ensure that the confirm
      was triggered from an interactive browser session and not some background
      HTTP requests that happened to end up in the admin ui.
      
      As a consequence, the different apply/confirm/rollback code paths in CBI
      maps and the UCI change/revert pages have been consolidated into one common
      implementation residing in the common global theme agnostic footer template.
      
      Signed-off-by: default avatarJo-Philipp Wich <jo@mein.io>
      e5a1ac02
    • Jo-Philipp Wich's avatar
    • Jo-Philipp Wich's avatar
      luci-base: utils: support multiple return values in util.ubus() · 9ead1e29
      Jo-Philipp Wich authored
      
      
      This is needed to deal with ubus methods that return multiple results,
      e.g. session/list
      
      Signed-off-by: default avatarJo-Philipp Wich <jo@mein.io>
      9ead1e29
  15. Jul 26, 2018
  16. Jul 25, 2018
  17. Jul 23, 2018
  18. Jul 22, 2018
  19. Jul 21, 2018
  20. Jul 20, 2018
  21. Jul 18, 2018