fatchan/jschan - jschan - TurnKey Gitea

Author	SHA1	Message	Date
Thomas Lynch	60cc35b389	block bypass assistance for users with SzPD	3 years ago
Thomas Lynch	6c7e850379	mongo driver change ops no longer available. we only used as boolean nayways so just set to true	3 years ago
Thomas Lynch	1c5f14e419	This did not go as planned	4 years ago
Thomas Lynch	d75fb8cb0f	rename some tor-specific stuff to "anonymizer" to be more general since i added lokinet to my site, will make easier to add others e.g. i2p in futuure	4 years ago
Thomas Lynch	6fa18c10ed	change bypasses not persisting on .onion, needs testing	4 years ago
Thomas Lynch	22055b6088	Make forceOnion for blockbypass, to enable it for .onion users even if disabled for clearnet. Effectively allows blockbypass for all, none, or .onion users only.	4 years ago
Thomas Lynch	a482000c1a	reference #279 , needs testing but this might be all it takes	4 years ago
Thomas Lynch	a8ede39f80	secureCookies only try to set secure:true when x-forwarded-proto is https closes #223	4 years ago
Thomas Lynch	28fdb8af81	small refactor, make captcha check separate. should be eaasier to add different captchas now fix conditions for when to render bypass vs message page on failed captchas use crypto timingsafeequal for comparing input to answer	4 years ago
Thomas Lynch	78f68f8baa	clear tempfiles in the pre bypass check because it might be after handlePostFilesEarlyTor	4 years ago
Thomas Lynch	786f5a2ffa	Bugfix for repeated getting new bypass when tor user didnt need one. not necessarily a big problem but it means they would keep getting new ids. this could actually be leveraged for a scuffed auto-refresh system in future	4 years ago
Thomas Lynch	b0797f0418	Beta testing .onion support *DO NOT USE* This still has some issues and needs testing. - needs updated nginx configs added, expects "TOR" in the x-country-code header under a separate vhost - need to make sure bans work properly still - need to implement system to prevent captcha ddos, since i cant just to IP ratelimit now - im 99% sure post history of tor users is broken if viewed by non-global staff - manual input ban form will also be broken for non-global staff - could still use some improvement on the middleware having a little more complicated flor for tor users But for the most part it works. Basically it will use the bypass id of a tor user as their "ip".	4 years ago