Gnous/mailcow
2
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity
ea1a02bd7d
mailcow/data/web
History
El-Virus ea1a02bd7d
Fix "The operation is insecure." when trying to register fido2 device. 
navigator.credentials.create(); Doesn't accept a port in the "id" parameter. So, when trying to register a fido2 device via WebAuthn throws: "The operation is insecure." on firefox and "The relying party ID is not a registrable domain suffix of, nor equal to the current domain." on Chrome or Edge.
This commit replaces `$_SERVER['HTTP_HOST']` with `$_SERVER['SERVER_NAME']` when initializing `$WebAuthn` which excludes the port to formulate correct requests.
Now Mailcow allows the registration of fido2 devices when running in a non-standard port(eg. 443).
2021-12-26 17:11:06 +01:00
..
api [API] Updated docs for transport route 2021-11-27 12:56:44 +00:00
css [Web] Show protocol and app access in user overview 2021-10-30 20:01:26 +02:00
fonts [Web] Update Bootstrap Icons 2021-10-15 19:49:47 +02:00
img [Web] Replace country flags, improve flags for last logins, add info about last password change of a user 2021-06-08 13:16:10 +02:00
inc Fix "The operation is insecure." when trying to register fido2 device. 2021-12-26 17:11:06 +01:00
js [Web] Show last 7 days per default in sasl logs table for user 2021-10-30 16:56:04 +02:00
lang Translations update from Weblate (#4351) 2021-11-29 18:25:37 +01:00
oauth [Web] oauth authorize - added missing twig templating 2021-10-22 14:37:26 +02:00
templates [web] Fix several raw html flags in twig (#4325) 2021-11-29 00:16:46 +01:00
_rspamderror.php [Web] Use redis master where necessary, hide UI if not master, create replicate quota2 table 2020-02-05 11:04:14 +01:00
_status.502.html [Web] Improve Nginx default error page 2021-05-12 21:38:21 +02:00
admin.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
autoconfig.php [Web] Fix require_once to always include document root 2018-10-11 11:59:23 +02:00
autodiscover-json.php [Web] Fix potential XSS in autodiscover-json.php 2021-09-07 18:58:05 +02:00
autodiscover.php Removed toggle ALLOW_APP_PASSWORDS_IN_EAS 2021-10-27 09:39:34 +02:00
debug.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
edit.php [Web, Dovecot] Allow to define scope of services for app passwords 2021-10-28 21:57:19 +02:00
favicon.png [Web] Hide up time of containers that are missing 2018-02-01 13:28:17 +01:00
index.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
json_api.php [Web] Fix app password editing, fixes #4239 2021-09-01 18:11:00 +02:00
mailbox.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
mobileconfig.php added key CalDAVPassword and key CardDAVPassword 2021-12-15 16:22:16 +01:00
qhandler.php [Web] qhandler - added missing twig templating 2021-10-22 08:52:05 +02:00
quarantine.php [web] implemented twig templating system (#4264) 2021-09-22 20:47:10 +02:00
resource.php deliver CSS and JS as external request 2019-10-20 21:25:58 +02:00
robots.txt mailcow dockerized 2016-12-09 20:39:02 +01:00
sogo-auth.php [Dovecot, Web] Fix remaining issues of app password enhancements from #4296 2021-10-30 14:34:33 +02:00
user.php [Web] Auto-generated app passwords for Apple configuration profiles (#4316) 2021-11-14 20:09:39 +01:00