BlackDex a6da728cca

Validate YUBICO_SERVER string (#3003) ...

If the `YUBICO_SERVER` is defined to an empty string, the whole yubikey
implementation doesn't work anymore.

This PR adds a check for this variable that it at least starts with `https://`.

Resolves #3003

2023-01-09 18:25:17 +01:00

..

api

Removed unsafe-inline JS from CSP and other fixes

2023-01-09 18:25:17 +01:00

db

Disable groups by default and Some optimizations

2022-12-18 20:32:06 +01:00

static

Removed unsafe-inline JS from CSP and other fixes

2023-01-09 18:25:17 +01:00

auth.rs

Fix recover-2fa not working.

2022-12-18 20:32:06 +01:00

config.rs

Validate YUBICO_SERVER string (#3003)

2023-01-09 18:25:17 +01:00

crypto.rs

Remove get_random_64()

2022-11-13 10:03:06 +01:00

error.rs

Cleanups and Fixes for Emergency Access

2022-12-04 23:17:48 +01:00

mail.rs

Cleanups and Fixes for Emergency Access

2022-12-04 23:17:48 +01:00

main.rs

Remove ctrlc crate and some updates

2022-12-12 22:56:10 +01:00

ratelimit.rs

Basic ratelimit for user login (including 2FA) and admin login

2021-12-22 21:48:49 +01:00

util.rs

Removed unsafe-inline JS from CSP and other fixes

2023-01-09 18:25:17 +01:00