Commit graph

476 commits

Author SHA1 Message Date
LX1IQ 14dfdc656c
Merge pull request #261 from MW0MWZ/master
Additional security headders to improve security score
2025-11-24 10:09:14 +01:00
Andy Taylor f8fb0c6fde Additional security headders to improve security score 2025-11-22 21:24:19 +00:00
LX1IQ bf7031eabd
Merge pull request #260 from MW0MWZ/master
Allow more than one module on peer links
2025-10-21 16:23:54 +02:00
Andy Taylor 831ec59024 Allow more than one module on peer links 2025-10-21 15:18:37 +01:00
LX1IQ 2e8149c5dc
Merge pull request #259 from MW0MWZ/master
Fix missing protocols from sanity checking
2025-10-21 15:47:44 +02:00
Andy Taylor 16decd0bdb Fix missing protocols from sanity checking 2025-10-21 14:44:31 +01:00
LX1IQ 0ee16ba6b1
Add files via upload 2025-10-21 14:21:55 +02:00
LX1IQ dc7cafaf4a
Add files via upload 2025-10-21 14:20:49 +02:00
LX1IQ 5d510bc00d
Add files via upload 2025-10-21 14:19:46 +02:00
LX1IQ 7455ef8729
Add files via upload 2025-10-21 14:18:34 +02:00
LX1IQ 1bd2b85c16
Add files via upload 2025-10-21 14:17:27 +02:00
LX1IQ 37a79a95a0
Add files via upload 2025-10-21 14:15:32 +02:00
LX1IQ 7176e44386
Add files via upload 2025-10-21 14:13:41 +02:00
LX1IQ a6124be499
Delete dashboard directory 2025-10-21 14:03:57 +02:00
LX1IQ 6644f3493c
Merge pull request #258 from LX3JL/revert-254-master
Revert "More XSS and security fixes, this time for the OG Dashboard"
2025-10-21 13:52:57 +02:00
LX1IQ 57b0a10705 Revert "More XSS and security fixes, this time for the OG Dashboard" 2025-10-21 09:43:56 +02:00
LX1IQ 7356127c85
Revert "More XSS and security fixes, this time for the OG Dashboard" 2025-10-21 09:42:28 +02:00
LX1IQ b7d17ee3b3
Merge pull request #254 from MW0MWZ/master
More XSS and security fixes, this time for the OG Dashboard
2025-10-16 12:34:51 +02:00
Andy Taylor e6de34a701 Catch missing protocols in the validation 2025-10-14 15:07:13 +01:00
Andy Taylor 1c241339bf Update Dashboard permissions 2025-10-14 14:40:53 +01:00
Andy Taylor c42b927cdb XSS Vulnerability Patches and Security Enhancements for Dashboard1 - Update changes.txt to reflect reality 2025-10-14 14:38:59 +01:00
Andy Taylor e11754a4e0 XSS Vulnerability Patches and Security Enhancements for Dashboard1 - Fix parsing error 2025-10-14 14:35:59 +01:00
Andy Taylor ee3f5de1de XSS Vulnerability Patches and Security Enhancements for Dashboard1 2025-10-14 14:15:20 +01:00
LX1IQ 32c3241de0
Merge pull request #253 from MW0MWZ/master
Dashboard2 XSS / Security fixes
2025-10-14 13:43:36 +02:00
Andy Taylor 80821c25a3 Remove .DS_Store and update .gitignore 2025-10-14 12:26:32 +01:00
Andy Taylor 61204c3ed4 XSS Vulnerability Patches and Security Enhancements for Dashboard2 2025-10-14 12:25:26 +01:00
LX3JL 129f1257b4
Merge pull request #237 from narspt/patch-25
allow pass dmr/ysf to peers, without transcoding
2023-12-12 13:28:46 +01:00
LX3JL 414ed796e1
Merge pull request #216 from narspt/patch-17
fix ambed to allow use by multiple xlxd and minor improvements
2023-12-12 13:27:39 +01:00
LX3JL 136ccff0fe
Merge pull request #212 from narspt/patch-15
add embedded LC data for DMRmmdvm
2023-12-12 13:26:41 +01:00
LX3JL f0cc8dcced
Merge pull request #239 from narspt/patch-26
set eot status bit for ysf last packet
2023-12-12 13:18:44 +01:00
narspt a5556d689d set eot status bit for ysf last packet 2023-12-08 19:39:25 +00:00
narspt 6b7658b995
allow pass dmr/ysf to peers, without transcoding 2023-10-27 17:32:12 +01:00
LX1IQ e658e818b4
Update README.md 2023-03-12 08:30:35 +01:00
LX3JL d14dc22fbf
Merge pull request #229 from anonymouspage/cg3protocol-initialize-thread-vars
cg3protocol: fix crash/default initialize std::thread pointers
2023-03-01 18:39:31 +01:00
LX3JL 8520b0b42a
Merge pull request #230 from anonymouspage/isdigit-does-not-return-one
isdigit() may return any non-zero result for success
2023-03-01 18:35:32 +01:00
LX3JL b96002d291
Merge pull request #231 from anonymouspage/cdmriddir-virtual-destructor
CDmridDir destructor should be virtual
2023-03-01 18:30:40 +01:00
LX3JL bd3fcee288
Merge pull request #227 from narspt/patch-23
fix occasional ambed crash when device fails init
2023-03-01 18:29:42 +01:00
LX3JL 231e275572
Merge pull request #226 from narspt/patch-22
make ambed more robust to handle device errors
2023-03-01 18:27:22 +01:00
LX3JL 19b13dfc8b
Merge pull request #213 from narspt/patch-16
fix frame sequence for streams initiated on different mode
2023-03-01 18:25:32 +01:00
LX3JL 8428d1ef40
Merge pull request #222 from narspt/patch-20
fix ambed openstream timeout issue
2023-03-01 18:24:16 +01:00
LX1IQ 05de80ae86
Merge pull request #235 from narspt/patch-24
fix dashboard intermittently showing repeated callsigns on some servers
2023-02-02 06:56:23 +01:00
narspt 43369f6251
do not re-seed random generator for each random id 2023-01-31 20:41:04 +00:00
narspt 7f4f23610e
do not re-seed random generator for each random id 2023-01-31 20:33:46 +00:00
LX3JL 9ca67d1e23 version 2.5.3
Add compatibility with DR-2X firmware up to 1.4.4
2023-01-15 17:14:55 +01:00
Mark Landis (N6AZX) af7ed717b4 CDmridDir destructor should be virtual
CDmridDir is a base class for CDmridDirHttp and CDmridDirFile, so
its destructor should be marked virtual to prevent undefined behavior.
2022-12-31 08:16:35 -08:00
Mark Landis (N6AZX) 08d1ff5df0 isdigit() may return any non-zero result for success
POSIX states that the return value of isdigit(): "shall return non-zero
if c is a decimal digit; otherwise, they shall return 0."

Thus the form:

  ok &= isdigit(x)

is invalid since the runtime is not required to return 1.

This bug was observed on Debian 11 while using the clang toolchain.
In that environment, isdigit() returns 2048 for a positive match.
2022-12-27 15:04:09 -08:00
Mark Landis (N6AZX) d4c72fd623 Default initialize class thread variables
During testing in a sandbox environment, xlxd crashed in
CG3Protocol::Close(). The root cause was dereferencing
m_pPresenceThread when the object had never been initialized.
In this case an error occured during ::Init() which set ok=false,
so the initialization of the threads was skipped.

This commit does 3 things:

(1) Default initializes the thread pointers to avoid the crash.
(2) Wraps the thread allocation with try/catch since std::thread can
    throw.
(3) Does some light cleaning in ::Close, e.g., converting NULL to
    nullptr.
2022-12-17 14:58:25 -08:00
LX1IQ 6752c7b254
Update main.h 2022-12-08 07:22:27 +01:00
LX1IQ d7daeb0c52
Update main.h 2022-12-08 07:20:10 +01:00
narspt 88ab5d4571 fix occasional ambed crash when device fails init 2022-09-12 07:57:01 +01:00